$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/117d9148-2e55-3ee9-a63c-5cbbf35dfd0d.roa File: 117d9148-2e55-3ee9-a63c-5cbbf35dfd0d.roa (raw, json) Hash identifier: DK1zg9VQOcsFZhF6IT+6grkdZ4Z70ssXuDem9p/dmwY= Subject key identifier: EC:6F:94:C9:CE:91:33:95:83:77:C6:FA:95:CF:AD:20:4F:5E:D1:DE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D60E502182EA01436938D3380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/117d9148-2e55-3ee9-a63c-5cbbf35dfd0d.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 71.28.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:02:18:2e:a0:14:36:93:8d:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=959975d0-129a-4d8a-a5ae-6ddc5e7315cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:75:0e:81:ce:9a:97:58:77:b0:ea:cc:62:72: ee:2d:df:94:7a:b0:a3:0a:40:8b:fd:01:03:83:0d: 55:b5:a7:03:e4:91:a3:9d:cc:38:4d:fc:1d:c3:50: c0:5d:70:26:63:d2:e1:86:72:32:52:62:f2:06:2b: 87:07:08:38:99:77:80:5c:be:73:74:33:7d:76:65: 30:0c:0d:dc:ab:dc:41:e3:57:7e:5a:49:c2:e6:24: 20:c5:44:99:1c:05:7d:f3:41:f3:6c:d0:f5:98:20: d2:7c:9c:69:2c:b8:44:26:e3:0c:d9:a4:ff:28:9c: 27:8d:2c:e4:04:49:81:a3:86:e6:9c:12:d6:9f:ac: c9:aa:d9:1c:0a:04:d8:0f:31:2e:f6:78:61:7e:7b: 8a:8e:a2:61:d1:df:cb:bd:c0:b1:9b:7c:f2:46:17: bb:6a:31:b8:c5:d0:bc:b7:fe:02:e3:7f:4c:29:32: 71:69:39:c9:8c:a3:7f:79:d4:75:33:ab:59:72:47: 09:df:39:f5:e4:13:3c:af:03:1f:f5:0e:43:aa:2b: 8b:ea:60:b3:0f:00:cd:dc:12:b6:54:e7:4c:36:f2: 61:42:b3:5e:8d:86:1d:66:4e:cd:6f:bf:55:6b:82: ea:ac:c6:65:54:44:c3:82:70:dc:05:a8:c4:b6:79: 1c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6F:94:C9:CE:91:33:95:83:77:C6:FA:95:CF:AD:20:4F:5E:D1:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/117d9148-2e55-3ee9-a63c-5cbbf35dfd0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:38:23:22:c2:15:b6:18:43:7b:d3:f4:54:1a:3f:04:a4:bb: 0e:e0:27:49:75:0a:68:9c:93:02:38:09:1d:58:4f:35:1b:1b: 78:d7:44:5c:1c:25:0a:a0:c4:51:6a:69:52:93:d7:51:9b:d1: ef:e1:b4:fa:0b:46:6f:48:aa:dd:7a:23:57:cb:22:0c:55:ec: 70:93:d6:1f:0f:58:92:11:fa:b0:ac:47:36:d0:a1:17:60:ca: 68:f2:d5:4c:31:be:1c:31:f3:ab:29:fb:84:9e:42:47:1b:1b: 90:ff:9f:5e:8d:6b:45:20:87:c5:20:d3:ef:76:9c:3e:80:10: 1d:1d:57:f5:17:7d:82:bb:0e:33:7a:7b:5e:03:0b:c6:1a:7f: 84:8b:10:b7:dc:ff:dc:6d:eb:4c:fc:85:70:86:54:26:76:a2: 9b:ef:37:e8:22:b2:52:d5:2e:96:ff:de:90:d6:3d:0d:9f:e9: 0e:00:0b:d5:e7:59:7b:39:e1:be:c6:ac:53:aa:3c:60:2c:5a: e5:c3:bf:0a:91:bf:76:e2:6d:bb:50:f9:e6:28:81:30:eb:a5: 30:87:b9:ca:01:16:55:52:cf:17:cd:31:92:1d:98:42:5f:4e: 02:35:d7:88:4e:3b:d0:32:b1:f8:a4:c8:ac:d3:33:e6:43:ff: f0:94:45:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5QIYLqAUNpONM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk OTU5OTc1ZDAtMTI5YS00ZDhhLWE1YWUtNmRkYzVlNzMxNWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHUOgc6al1h3sOrMYnLuLd+UerCjCkCL/QED gw1VtacD5JGjncw4Tfwdw1DAXXAmY9LhhnIyUmLyBiuHBwg4mXeAXL5zdDN9dmUw DA3cq9xB41d+WknC5iQgxUSZHAV980HzbND1mCDSfJxpLLhEJuMM2aT/KJwnjSzk BEmBo4bmnBLWn6zJqtkcCgTYDzEu9nhhfnuKjqJh0d/LvcCxm3zyRhe7ajG4xdC8 t/4C439MKTJxaTnJjKN/edR1M6tZckcJ3zn15BM8rwMf9Q5DqiuL6mCzDwDN3BK2 VOdMNvJhQrNejYYdZk7Nb79Va4LqrMZlVETDgnDcBajEtnkctwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxvlMnOkTOVg3fG+pXPrSBPXtHeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTE3ZDkxNDgtMmU1NS0z ZWU5LWE2M2MtNWNiYmYzNWRmZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxznMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACU4IyLCFbYYQ3vT9FQaPwSkuw7gJ0l1CmickwI4CR1YTzUbG3jXRFwc JQqgxFFqaVKT11Gb0e/htPoLRm9Iqt16I1fLIgxV7HCT1h8PWJIR+rCsRzbQoRdg ymjy1Uwxvhwx86sp+4SeQkcbG5D/n16Na0Ugh8Ug0+92nD6AEB0dV/UXfYK7DjN6 e14DC8Yaf4SLELfc/9xt60z8hXCGVCZ2opvvN+gislLVLpb/3pDWPQ2f6Q4AC9Xn WXs54b7GrFOqPGAsWuXDvwqRv3bibbtQ+eYogTDrpTCHucoBFlVSzxfNMZIdmEJf TgI114hOO9AysfikyKzTM+ZD//CURRM= -----END CERTIFICATE-----Generated at Mon Apr 13 11:38:44 2026 by rpki-client