$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f74f3cd1-67a8-3614-90b3-1b61b19231bf.roa File: f74f3cd1-67a8-3614-90b3-1b61b19231bf.roa (raw, json) Hash identifier: axXR7CrovJp5HPtEwbn5kvHoKtlZjnQNthSUoUygVSU= Subject key identifier: 5C:D8:35:04:73:2C:0D:A7:62:B9:E5:6B:65:BF:22:31:01:05:0D:45 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2BDA3640F5E070F69F0F7400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f74f3cd1-67a8-3614-90b3-1b61b19231bf.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 71.30.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:36:40:f5:e0:70:f6:9f:0f:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=664156c2-1743-413b-8c8a-15f793965117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:df:0f:14:62:01:d1:d5:77:bc:70:fc:e4:2f: 2b:21:8b:82:79:c6:6a:ae:e1:3e:ef:54:b8:95:24: 54:73:88:fa:ee:4d:40:3a:ec:b0:36:08:0d:8c:29: 2b:90:90:cc:fb:8d:ac:58:f3:0e:dc:ee:9e:5e:f8: 42:7a:8f:e4:8d:09:70:81:e5:eb:b1:1f:ea:4c:7c: 65:dc:3b:e1:17:d5:94:a4:fe:7b:d4:f8:4b:96:63: e0:c6:10:13:02:9d:6f:04:bc:83:26:87:29:ff:67: 38:91:d7:e8:56:d6:fb:ab:7b:7e:37:53:45:85:d7: c7:0e:59:34:4f:58:6b:5c:d8:ff:e3:05:9c:4c:74: a5:53:3c:de:33:6e:55:d5:89:66:5b:96:48:11:94: 76:e8:51:13:61:37:45:94:74:95:83:6e:84:5e:4e: 25:bd:ed:98:a2:e9:6e:4e:20:50:0f:cc:37:d8:63: 93:c8:ed:5a:1f:e8:36:9e:30:f2:b1:8d:26:b3:08: a1:57:0d:0a:ad:11:bf:18:4d:e7:cb:b4:2d:bc:4f: b9:73:fc:2a:e4:b8:5e:7a:56:d0:cd:56:d0:24:c1: 8e:62:ea:f5:f8:1a:66:81:a0:76:e7:ae:df:07:02: ec:e7:7b:8f:d4:b7:55:3b:d2:f9:dc:6f:33:16:a4: 19:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D8:35:04:73:2C:0D:A7:62:B9:E5:6B:65:BF:22:31:01:05:0D:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f74f3cd1-67a8-3614-90b3-1b61b19231bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:96:a6:16:d2:4e:06:ee:8a:ad:e2:7e:7e:1f:d4:f8:33:27: 7d:6d:f7:57:d8:3d:01:b3:4b:78:7c:c7:c4:f7:e0:8f:48:b6: 66:56:a3:f9:8a:a3:50:1c:8e:05:04:35:e4:f8:74:c0:f3:a5: 4d:84:3b:14:61:35:c3:4e:b4:f6:71:23:dc:93:9b:ae:2c:ae: 02:aa:bc:0c:89:50:19:4a:1a:9f:be:77:04:5e:8c:5e:5f:00: fd:03:d7:b5:46:fd:d7:0f:01:9e:d0:b4:fe:5d:0f:ee:6b:95: e2:89:29:15:fe:4f:a0:25:fc:ad:fd:5b:1d:8b:03:b9:cb:d5: 42:50:95:97:49:76:fa:f4:67:a8:c0:13:77:7c:ab:b3:8e:59: f7:70:c6:14:56:08:ce:0e:f6:f0:81:c0:84:fc:cb:6c:79:56: 63:c8:03:80:5f:1b:cb:f2:1b:34:d4:8a:23:f6:90:78:1b:5d: 03:52:5e:81:5f:e2:49:68:36:2e:b6:24:64:72:3c:38:55:4c: 80:a5:51:89:04:69:e0:df:11:2f:87:f2:37:78:29:5d:2f:48: 28:47:2b:e4:b3:98:87:a3:74:6d:b7:d9:98:b6:e0:27:f8:99: 32:85:a3:d3:77:ce:bc:2d:8d:b4:34:9c:f5:8c:4c:4d:6d:84: 28:ff:02:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jZA9eBw9p8PdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NjY0MTU2YzItMTc0My00MTNiLThjOGEtMTVmNzkzOTY1MTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi98PFGIB0dV3vHD85C8rIYuCecZqruE+71S4 lSRUc4j67k1AOuywNggNjCkrkJDM+42sWPMO3O6eXvhCeo/kjQlwgeXrsR/qTHxl 3DvhF9WUpP571PhLlmPgxhATAp1vBLyDJocp/2c4kdfoVtb7q3t+N1NFhdfHDlk0 T1hrXNj/4wWcTHSlUzzeM25V1YlmW5ZIEZR26FETYTdFlHSVg26EXk4lve2Youlu TiBQD8w32GOTyO1aH+g2njDysY0mswihVw0KrRG/GE3ny7QtvE+5c/wq5LheelbQ zVbQJMGOYur1+BpmgaB2567fBwLs53uP1LdVO9L53G8zFqQZkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzYNQRzLA2nYrnla2W/IjEBBQ1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjc0ZjNjZDEtNjdhOC0z NjE0LTkwYjMtMWI2MWIxOTIzMWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx5YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWWphbSTgbuiq3ifn4f1PgzJ31t91fYPQGzS3h8x8T34I9ItmZWo/mK o1AcjgUENeT4dMDzpU2EOxRhNcNOtPZxI9yTm64srgKqvAyJUBlKGp++dwRejF5f AP0D17VG/dcPAZ7QtP5dD+5rleKJKRX+T6Al/K39Wx2LA7nL1UJQlZdJdvr0Z6jA E3d8q7OOWfdwxhRWCM4O9vCBwIT8y2x5VmPIA4BfG8vyGzTUiiP2kHgbXQNSXoFf 4kloNi62JGRyPDhVTIClUYkEaeDfES+H8jd4KV0vSChHK+SzmIejdG232Zi24Cf4 mTKFo9N3zrwtjbQ0nPWMTE1thCj/Aqc= -----END CERTIFICATE-----Generated at Thu Mar 26 13:08:28 2026 by rpki-client