$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/faae1e40-a647-3084-af88-2c61b4f7baa7.roa File: faae1e40-a647-3084-af88-2c61b4f7baa7.roa (raw, json) Hash identifier: 7ht77hVZr99NvCM8UOAIi0fuGmbtDqnJvGwIae6PxOM= Subject key identifier: 2C:CD:21:6D:CA:3E:5B:97:85:D3:C0:F7:D3:66:83:95:79:9B:C0:17 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A9CFA59DB13004FCD5980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/faae1e40-a647-3084-af88-2c61b4f7baa7.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 207.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:9c:fa:59:db:13:00:4f:cd:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=e7bc1dc6-ad0c-465b-ac3d-06dd049443be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d8:7e:56:0b:7f:2a:94:b2:d6:3e:20:30:79: 62:1a:6f:46:65:47:ba:a7:93:a3:a8:5d:4f:1f:cd: 9b:f2:45:d1:35:f8:f3:66:16:11:28:d2:cf:8a:bf: 1f:f6:a5:f9:12:ae:d0:1a:e1:fe:8f:cd:41:5e:f5: eb:3f:66:6e:31:a6:d3:73:10:32:87:db:c8:7a:9c: ac:16:0f:8e:6e:b1:86:ec:5c:c3:34:a7:17:a4:3c: 42:1a:c4:f0:cd:c5:07:15:ef:91:47:f2:16:2f:46: 79:c1:a2:56:e6:f1:b6:50:f2:4d:6d:ff:98:27:46: ab:5d:17:13:d6:a8:cb:6d:f7:6d:9b:d2:ef:37:bf: c2:a4:1e:54:e2:37:0e:a8:e3:ce:ae:a0:24:a8:43: bc:80:27:af:f6:9c:f9:1e:6d:bd:ab:e0:ef:4e:9d: 6d:ab:0e:97:85:bb:6b:88:37:87:83:2c:77:4c:d5: 9c:0b:1f:fe:05:93:3d:44:56:6d:ab:9a:6f:1e:d3: 55:8c:3d:1f:a4:cf:fe:57:4d:08:ae:2b:a1:3b:c4: c4:65:d0:c8:2a:42:d3:e9:54:a2:91:9b:57:60:21: 76:51:21:f4:f4:91:3e:87:9c:6d:73:f6:36:e6:64: 54:c0:c5:12:52:73:de:65:45:44:05:fe:23:6d:c5: 1a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CD:21:6D:CA:3E:5B:97:85:D3:C0:F7:D3:66:83:95:79:9B:C0:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/faae1e40-a647-3084-af88-2c61b4f7baa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:3d:f4:60:a1:85:c2:04:48:4f:13:e9:48:f3:04:2d:bf:94: 39:9e:1a:40:08:0b:d3:43:1e:0f:50:54:87:ce:48:72:ea:ec: 66:67:65:1f:bf:58:75:2b:5e:42:56:2b:5c:75:bd:52:15:a9: 92:1b:ee:7d:44:12:ca:62:28:e3:f6:85:75:dc:b4:44:84:35: f2:a9:42:c4:7e:bf:0c:67:1a:81:9d:b3:50:b4:ee:16:a5:e0: 61:ce:84:80:ed:0e:23:be:e0:50:07:7f:c0:e5:52:73:55:7c: 59:51:88:b7:d4:2b:9f:c3:d3:09:0b:82:9b:a4:e2:3c:ba:9f: 3e:87:3f:16:de:b5:2e:45:48:c8:bf:81:81:f6:78:f7:d8:98: b1:9f:91:c9:b9:d7:1e:87:3a:bb:9e:8c:44:f2:a7:4d:27:fe: 26:55:ea:54:6b:49:40:68:cd:81:01:7e:18:09:00:25:6c:bd: ae:af:ae:54:d0:d3:e3:d5:7f:39:58:27:38:42:d3:2e:40:2b: d6:86:aa:77:7e:09:55:0c:2f:60:a4:f5:69:fc:1d:ab:0d:d1: 55:d5:62:5b:6d:e9:c5:93:e6:ac:50:bf:fb:ed:28:40:2b:fb: 81:ca:c8:9a:a3:5c:0b:6e:4e:63:30:91:cf:6c:08:bb:e4:c0: 5a:1a:14:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCpz6WdsTAE/NWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTdiYzFkYzYtYWQwYy00NjViLWFjM2QtMDZkZDA0OTQ0M2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9h+Vgt/KpSy1j4gMHliGm9GZUe6p5OjqF1P H82b8kXRNfjzZhYRKNLPir8f9qX5Eq7QGuH+j81BXvXrP2ZuMabTcxAyh9vIepys Fg+ObrGG7FzDNKcXpDxCGsTwzcUHFe+RR/IWL0Z5waJW5vG2UPJNbf+YJ0arXRcT 1qjLbfdtm9LvN7/CpB5U4jcOqOPOrqAkqEO8gCev9pz5Hm29q+DvTp1tqw6Xhbtr iDeHgyx3TNWcCx/+BZM9RFZtq5pvHtNVjD0fpM/+V00IriuhO8TEZdDIKkLT6VSi kZtXYCF2USH09JE+h5xtc/Y25mRUwMUSUnPeZUVEBf4jbcUaRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzNIW3KPluXhdPA99Nmg5V5m8AXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmFhZTFlNDAtYTY0Ny0z MDg0LWFmODgtMmM2MWI0ZjdiYWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY99GChhcIESE8T6UjzBC2/lDmeGkAIC9NDHg9QVIfOSHLq7GZnZR+/ WHUrXkJWK1x1vVIVqZIb7n1EEspiKOP2hXXctESENfKpQsR+vwxnGoGds1C07hal 4GHOhIDtDiO+4FAHf8DlUnNVfFlRiLfUK5/D0wkLgpuk4jy6nz6HPxbetS5FSMi/ gYH2ePfYmLGfkcm51x6HOruejETyp00n/iZV6lRrSUBozYEBfhgJACVsva6vrlTQ 0+PVfzlYJzhC0y5AK9aGqnd+CVUML2Ck9Wn8HasN0VXVYltt6cWT5qxQv/vtKEAr +4HKyJqjXAtuTmMwkc9sCLvkwFoaFH4= -----END CERTIFICATE-----Generated at Thu Mar 26 09:23:43 2026 by rpki-client