$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ea406c7-cfc3-325a-8f42-ea4aa7998e9e.roa File: 1ea406c7-cfc3-325a-8f42-ea4aa7998e9e.roa (raw, json) Hash identifier: PFgK2AWbvn54k0sL490Bp8s6XRKVfsVE853bVjHaflI= Subject key identifier: 1C:B0:84:59:3A:F4:B8:13:D4:23:A1:6D:CB:8E:A3:A5:BC:76:D2:EB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BCB4FEE63DFA129A792400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ea406c7-cfc3-325a-8f42-ea4aa7998e9e.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 71.28.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:b4:fe:e6:3d:fa:12:9a:79:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=d994f371-4605-42c8-9207-28e92ce0ad82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:53:99:88:dd:b1:89:6f:77:8f:0a:4d:f2:fa: a7:9e:ef:aa:b5:a5:55:67:87:cf:4a:bf:56:ae:bd: a5:2b:7d:d0:f2:b0:d0:ed:45:12:63:0b:ee:d4:34: cf:50:3b:88:b6:6b:fb:9e:e4:95:1e:9d:b0:b2:d3: 6b:14:7c:fe:07:cc:4e:dd:dc:f4:56:7c:7c:af:88: 2d:67:44:7a:b7:29:fb:f1:b3:c3:2a:d5:ff:e3:4c: bc:21:db:6a:a9:36:e4:38:ce:40:e5:10:12:c5:5b: 89:a4:c0:ed:15:a4:7c:90:ef:19:67:44:b6:20:86: 78:82:e3:cd:ac:0c:bc:e8:08:9e:5d:69:9b:1d:bc: 8a:a3:2f:0b:23:5c:76:0d:52:d5:f1:78:25:25:7f: 15:10:92:3e:f2:5a:3f:83:db:2c:7c:f0:3a:a1:f3: a4:bc:8e:7b:55:2d:12:68:ae:2e:11:c1:0f:40:ff: 08:65:c0:71:f6:0d:5f:a3:ab:7d:02:83:7e:cf:4f: 84:00:3d:68:09:6f:ee:fa:22:be:d5:68:d5:9b:dc: a9:b3:d7:89:6c:cf:ab:5a:1e:f6:a2:b6:6d:34:34: d9:14:17:4a:21:01:ba:44:69:1c:e5:8c:95:bb:78: 54:5f:28:57:b1:70:13:c8:e9:0c:0f:74:03:c3:77: 1c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B0:84:59:3A:F4:B8:13:D4:23:A1:6D:CB:8E:A3:A5:BC:76:D2:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ea406c7-cfc3-325a-8f42-ea4aa7998e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:cb:f5:67:59:f8:fa:fc:28:3c:38:9c:e1:e3:1b:a2:bc:48: 96:9c:ca:0c:cf:5f:aa:69:7f:44:9a:24:96:46:a3:98:fc:74: 93:8c:28:20:0e:fd:3f:ce:52:0a:e4:cb:c3:75:bf:90:57:64: c9:58:d2:ab:62:bb:11:ee:88:d4:67:79:52:0e:17:e3:bf:ac: 6d:68:3c:fe:03:06:b0:64:5a:fa:34:e9:25:07:67:7f:6d:34: 7a:25:be:86:0d:48:b8:dd:66:1f:5f:bb:11:6c:62:39:60:38: f6:d8:ec:56:53:0b:22:f0:7b:da:8a:a7:00:bd:21:69:8a:5f: 86:07:e8:57:3a:e0:91:3d:72:1c:e2:0f:ca:4e:38:3f:95:0a: be:01:ce:14:82:7c:1e:8a:6c:17:25:fa:c8:d7:e9:02:70:d4: ca:f6:29:49:24:c0:7d:f6:12:85:14:81:81:af:9c:3e:17:76: 03:db:ca:7c:cf:4f:7f:04:c5:77:48:c4:5a:73:31:70:05:2d: 25:53:e2:ec:97:58:bb:7a:79:cd:0b:90:30:7c:28:8a:03:3b: cb:82:5e:be:07:3f:fb:bb:e8:a6:47:41:84:03:38:ad:c2:b8: f0:1e:b2:16:d8:cf:77:cc:24:48:c4:d6:66:1c:64:cd:f3:22: 3e:74:ad:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLT+5j36Epp5JAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZDk5NGYzNzEtNDYwNS00MmM4LTkyMDctMjhlOTJjZTBhZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFOZiN2xiW93jwpN8vqnnu+qtaVVZ4fPSr9W rr2lK33Q8rDQ7UUSYwvu1DTPUDuItmv7nuSVHp2wstNrFHz+B8xO3dz0Vnx8r4gt Z0R6tyn78bPDKtX/40y8IdtqqTbkOM5A5RASxVuJpMDtFaR8kO8ZZ0S2IIZ4guPN rAy86AieXWmbHbyKoy8LI1x2DVLV8XglJX8VEJI+8lo/g9ssfPA6ofOkvI57VS0S aK4uEcEPQP8IZcBx9g1fo6t9AoN+z0+EAD1oCW/u+iK+1WjVm9yps9eJbM+rWh72 orZtNDTZFBdKIQG6RGkc5YyVu3hUXyhXsXATyOkMD3QDw3ccpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBywhFk69LgT1COhbcuOo6W8dtLrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWVhNDA2YzctY2ZjMy0z MjVhLThmNDItZWE0YWE3OTk4ZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERxzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3L9WdZ+Pr8KDw4nOHjG6K8SJacygzPX6ppf0SaJJZGo5j8dJOMKCAO /T/OUgrky8N1v5BXZMlY0qtiuxHuiNRneVIOF+O/rG1oPP4DBrBkWvo06SUHZ39t NHolvoYNSLjdZh9fuxFsYjlgOPbY7FZTCyLwe9qKpwC9IWmKX4YH6Fc64JE9chzi D8pOOD+VCr4BzhSCfB6KbBcl+sjX6QJw1Mr2KUkkwH32EoUUgYGvnD4XdgPbynzP T38ExXdIxFpzMXAFLSVT4uyXWLt6ec0LkDB8KIoDO8uCXr4HP/u76KZHQYQDOK3C uPAeshbYz3fMJEjE1mYcZM3zIj50rSk= -----END CERTIFICATE-----Generated at Mon Apr 13 11:40:10 2026 by rpki-client