$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20d434e1-7216-3e3d-a330-e64435b1fc68.roa File: 20d434e1-7216-3e3d-a330-e64435b1fc68.roa (raw, json) Hash identifier: hhd81l9d7W2k5j8zQ7/lGWLCV00hbtBzlMX0jH8yYhk= Subject key identifier: 7B:2C:CD:76:9B:E1:E9:45:0D:E1:C2:A3:F2:B3:E4:FD:17:E7:21:A6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D52438AF4C22514214082EE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20d434e1-7216-3e3d-a330-e64435b1fc68.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7029 IP address blocks: 71.28.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:8a:f4:c2:25:14:21:40:82:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=25837bba-3200-4364-884a-310764272120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:86:58:9b:21:5f:eb:16:41:6c:51:81:82:8a: 5c:62:89:af:b8:ee:4b:59:00:c2:ee:6b:59:cc:12: e9:95:2e:bc:7b:db:12:0e:07:73:f0:61:1f:b6:51: fb:c2:de:f4:f3:ac:b1:68:19:6a:74:3a:44:ed:3c: 3d:d2:01:f8:07:7f:f8:86:00:56:ad:74:dc:be:62: 64:fc:10:80:11:e7:ad:21:95:d9:96:80:77:63:7a: b2:81:cc:43:e1:d5:16:45:dd:ad:73:03:f8:5e:b0: 1e:12:fa:36:2a:cd:4c:61:00:20:77:1f:d3:66:fa: 4d:b2:4d:1a:63:44:da:23:a3:fa:de:90:b8:3e:09: 54:2d:35:61:7c:e2:bc:f4:fc:a0:78:76:12:1d:28: 01:be:f3:f3:f9:a8:0f:7c:99:e5:22:8d:b8:c2:ec: 61:21:0f:45:7e:99:14:f2:b0:7c:7d:31:97:75:c1: da:c8:1a:f8:8d:7d:62:86:8a:cc:20:4a:7c:db:d6: 8e:24:f1:dc:be:d4:2e:59:82:9a:6e:5f:b0:f4:db: ce:57:60:97:50:d2:18:1d:b8:77:31:f6:e6:a3:cf: 8f:ac:49:3b:c4:96:cb:9b:94:12:54:bb:84:c8:15: 5f:a0:34:a3:82:c2:2e:ca:6c:b8:f5:1a:e5:0d:61: cb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2C:CD:76:9B:E1:E9:45:0D:E1:C2:A3:F2:B3:E4:FD:17:E7:21:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20d434e1-7216-3e3d-a330-e64435b1fc68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:7f:1c:46:5e:9c:c4:fb:7f:7a:73:de:31:e8:ef:9c:39:55: 09:3a:35:51:a6:8f:e2:28:b5:e1:0b:35:dc:51:96:f8:2b:56: ed:64:8e:44:41:ce:45:34:da:f6:49:6b:2c:16:be:1f:47:66: f4:a6:57:3b:84:2f:16:c0:69:95:cd:0b:84:04:fc:3e:a0:eb: d5:93:a3:07:43:f4:05:4d:71:fc:c0:9f:19:00:b7:8a:1b:2c: cf:5a:09:9a:a5:d4:41:83:25:b6:39:a0:7f:2a:dc:ce:b9:71: 4f:69:df:a0:a2:5a:2a:8c:c9:b8:41:79:20:8e:2f:8f:a1:04: b7:59:e7:b1:82:e8:5e:a7:4c:03:4c:88:b4:db:89:fc:8a:f2: 99:8c:62:f4:b5:e7:02:a4:7e:29:cf:36:67:c9:8d:17:46:bd: b5:39:17:d3:56:c3:d2:48:01:58:b7:a1:e7:14:50:11:65:9c: 28:51:5d:ab:63:66:b2:8f:2c:6c:85:1b:d9:e2:4d:e9:8e:7a: ea:71:8f:f7:14:ec:2b:d9:f0:44:2a:75:d5:6d:0a:d2:02:78: 21:8a:48:ef:f8:9d:bd:cc:46:e6:ed:e8:8e:f8:a2:dd:de:da: 13:a2:f4:b1:e0:5c:7b:a8:b4:78:c4:14:80:c4:6f:cd:00:c2: d6:9a:28:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ4r0wiUUIUCC7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk MjU4MzdiYmEtMzIwMC00MzY0LTg4NGEtMzEwNzY0MjcyMTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYZYmyFf6xZBbFGBgopcYomvuO5LWQDC7mtZ zBLplS68e9sSDgdz8GEftlH7wt7086yxaBlqdDpE7Tw90gH4B3/4hgBWrXTcvmJk /BCAEeetIZXZloB3Y3qygcxD4dUWRd2tcwP4XrAeEvo2Ks1MYQAgdx/TZvpNsk0a Y0TaI6P63pC4PglULTVhfOK89PygeHYSHSgBvvPz+agPfJnlIo24wuxhIQ9FfpkU 8rB8fTGXdcHayBr4jX1ihorMIEp829aOJPHcvtQuWYKabl+w9NvOV2CXUNIYHbh3 Mfbmo8+PrEk7xJbLm5QSVLuEyBVfoDSjgsIuymy49RrlDWHLCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsszXab4elFDeHCo/Kz5P0X5yGmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjBkNDM0ZTEtNzIxNi0z ZTNkLWEzMzAtZTY0NDM1YjFmYzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxxaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFt/HEZenMT7f3pz3jHo75w5VQk6NVGmj+IoteELNdxRlvgrVu1kjkRB zkU02vZJaywWvh9HZvSmVzuELxbAaZXNC4QE/D6g69WTowdD9AVNcfzAnxkAt4ob LM9aCZql1EGDJbY5oH8q3M65cU9p36CiWiqMybhBeSCOL4+hBLdZ57GC6F6nTANM iLTbifyK8pmMYvS15wKkfinPNmfJjRdGvbU5F9NWw9JIAVi3oecUUBFlnChRXatj ZrKPLGyFG9niTemOeupxj/cU7CvZ8EQqddVtCtICeCGKSO/4nb3MRubt6I74ot3e 2hOi9LHgXHuotHjEFIDEb80AwtaaKAk= -----END CERTIFICATE-----Generated at Mon Apr 13 11:39:34 2026 by rpki-client