$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f46ad136-b4bb-3f6f-b5d2-e004896b2384.roa File: f46ad136-b4bb-3f6f-b5d2-e004896b2384.roa (raw, json) Hash identifier: vF90hLHDklJafckFU5Z/m5SzgX4pZSmeGuSuh1+8VZI= Subject key identifier: 9E:04:67:9D:D8:0C:4F:BE:A7:E2:C0:5F:6E:A2:17:BB:E0:10:D8:2E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D386A5C2F46E178657BD57700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f46ad136-b4bb-3f6f-b5d2-e004896b2384.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 71.28.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:5c:2f:46:e1:78:65:7b:d5:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=309ef10f-5fa0-4663-ad8c-40a46d0362e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0d:44:c1:70:a5:f0:bf:d2:ff:72:7b:30:52: de:34:ae:ac:f2:a1:32:0c:4a:61:df:69:d4:b1:af: d3:2c:3e:ac:e8:f5:90:e9:42:d6:97:1f:cb:ce:35: 1b:6d:9b:69:d5:08:52:78:06:4e:d7:20:ae:54:03: 94:5f:bc:54:e3:5e:12:73:9b:6c:db:91:cb:fa:7c: 5d:8b:50:64:34:03:cb:e7:40:6b:df:17:3d:a5:cd: e6:ba:df:b6:57:a4:47:b5:f4:1f:ef:ad:9b:a4:10: 37:4b:cf:6f:41:f5:17:6b:8f:2c:41:41:51:27:bb: 26:3c:cb:43:dc:ae:53:2c:47:19:21:71:43:3b:18: 0f:89:ef:60:13:dd:dc:1f:4d:1e:e0:b5:a6:01:5b: ae:7b:a7:40:01:fb:1b:61:ed:f0:30:98:63:18:08: f0:91:cb:11:61:27:cb:14:68:35:e0:e7:62:f8:6e: 6a:1b:c3:98:b5:f2:8b:c2:4f:82:e4:e0:1d:17:18: 89:3e:dd:a4:e6:20:2a:93:58:88:ec:83:63:5a:e0: 4a:31:19:84:27:31:6f:55:b0:13:68:f8:fa:6c:79: dc:3c:e6:f7:f7:14:25:fc:6f:3d:99:12:69:8f:a4: a7:8d:c6:be:c9:f9:b0:f7:23:22:4e:a1:d9:fb:74: f1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:04:67:9D:D8:0C:4F:BE:A7:E2:C0:5F:6E:A2:17:BB:E0:10:D8:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f46ad136-b4bb-3f6f-b5d2-e004896b2384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:17:e1:21:60:6d:2d:02:17:36:7a:a9:8d:12:aa:4d:7c:81: b3:98:37:89:cb:3a:a2:a0:55:d6:1e:13:de:45:81:1c:31:82: a7:79:43:dc:06:92:a3:f5:eb:11:0b:99:36:9f:a1:a0:e7:9d: 1b:ac:a4:f3:fc:93:e3:b7:60:63:75:ef:51:cc:00:ba:97:a2: 6f:09:b1:1e:91:de:5c:19:0b:39:3f:b2:54:73:ad:83:1c:f5: 21:35:70:96:e1:cc:ed:b2:23:17:95:37:3c:63:d3:c0:55:78: 82:48:74:82:cb:71:6b:6f:44:08:3f:86:7c:fa:fe:b5:26:d8: 77:fa:b5:c6:2a:5f:de:26:7a:6c:43:c5:8c:12:ba:48:84:bf: 5a:8f:9d:30:04:ba:74:4b:1e:d6:cf:56:69:df:89:88:4f:79: b5:88:0f:d3:c8:a5:c5:5a:f2:65:1e:b3:be:72:d4:56:e1:2b: d1:39:42:31:f4:32:31:25:54:5e:04:ca:6f:26:ba:d2:f0:b3: 59:b1:46:0f:b0:2b:4b:e0:63:6a:9e:f6:f0:b6:6f:70:84:f7: aa:bd:62:7c:23:59:9b:25:85:45:09:15:f9:f4:07:f5:41:2a: b3:a6:12:66:63:10:a2:17:60:54:41:62:01:4f:a3:ec:98:c9: 6b:5a:c8:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alwvRuF4ZXvVdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk MzA5ZWYxMGYtNWZhMC00NjYzLWFkOGMtNDBhNDZkMDM2MmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3g1EwXCl8L/S/3J7MFLeNK6s8qEyDEph32nU sa/TLD6s6PWQ6ULWlx/LzjUbbZtp1QhSeAZO1yCuVAOUX7xU414Sc5ts25HL+nxd i1BkNAPL50Br3xc9pc3mut+2V6RHtfQf762bpBA3S89vQfUXa48sQUFRJ7smPMtD 3K5TLEcZIXFDOxgPie9gE93cH00e4LWmAVuue6dAAfsbYe3wMJhjGAjwkcsRYSfL FGg14Odi+G5qG8OYtfKLwk+C5OAdFxiJPt2k5iAqk1iI7INjWuBKMRmEJzFvVbAT aPj6bHncPOb39xQl/G89mRJpj6Snjca+yfmw9yMiTqHZ+3TxawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4EZ53YDE++p+LAX26iF7vgENguMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjQ2YWQxMzYtYjRiYi0z ZjZmLWI1ZDItZTAwNDg5NmIyMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxzkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIX4SFgbS0CFzZ6qY0Sqk18gbOYN4nLOqKgVdYeE95FgRwxgqd5Q9wG kqP16xELmTafoaDnnRuspPP8k+O3YGN171HMALqXom8JsR6R3lwZCzk/slRzrYMc 9SE1cJbhzO2yIxeVNzxj08BVeIJIdILLcWtvRAg/hnz6/rUm2Hf6tcYqX94memxD xYwSukiEv1qPnTAEunRLHtbPVmnfiYhPebWID9PIpcVa8mUes75y1FbhK9E5QjH0 MjElVF4Eym8mutLws1mxRg+wK0vgY2qe9vC2b3CE96q9YnwjWZslhUUJFfn0B/VB KrOmEmZjEKIXYFRBYgFPo+yYyWtayIM= -----END CERTIFICATE-----Generated at Thu Mar 26 13:05:29 2026 by rpki-client