$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ca3079d-831f-3002-9e2c-87c2c65a6570.roa File: 5ca3079d-831f-3002-9e2c-87c2c65a6570.roa (raw, json) Hash identifier: 4MtAJ5eQfFZL8fyukrvDo+QtlkjKAn3UUYwh7ph6yJg= Subject key identifier: F4:3D:86:4F:63:07:CB:BC:C2:36:F2:27:A7:24:A1:78:31:77:FF:33 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DD35B1CE5C1AF57D2FBAC8040 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ca3079d-831f-3002-9e2c-87c2c65a6570.roa Signing time: Thu 14 May 2026 01:00:25 +0000 ROA not before: Thu 14 May 2026 01:00:25 +0000 ROA not after: Wed 12 Aug 2026 01:00:25 +0000 asID: 7029 IP address blocks: 71.28.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:5b:1c:e5:c1:af:57:d2:fb:ac:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 14 01:00:25 2026 GMT Not After : Aug 12 01:00:25 2026 GMT Subject: CN=d4ce8b8f-eb76-494b-a240-92b363aa54da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:0a:46:8c:b2:d8:b5:ab:02:b6:1a:be:11: d9:d3:14:c2:50:26:72:59:5d:8e:96:9a:e6:81:ad: 13:0b:82:b7:0c:c1:f6:8e:26:a1:fd:1e:9e:70:82: 41:3d:c2:1b:be:75:7e:7d:8e:e0:3a:f1:68:7e:3f: ce:2e:63:7d:61:15:da:fe:e7:27:ac:7b:8e:f7:33: 15:2a:6f:76:b8:f4:2f:96:39:e5:10:91:84:08:b9: ef:18:1f:87:b7:a5:18:32:cc:db:20:03:f8:f3:d3: e1:46:40:32:a1:36:4f:12:01:c3:3d:00:00:f8:7a: f0:a7:ea:91:53:a9:6c:1f:fb:3d:e3:56:ec:65:ed: 71:20:86:75:e0:76:4b:15:0c:2b:95:06:e1:dd:e0: 5c:0f:d0:5d:87:01:c1:d2:2b:e4:cf:2a:c7:66:bd: 8d:e2:21:18:35:7f:c8:74:13:46:2c:ba:6c:37:20: 43:ad:8d:bc:e1:7c:a4:4f:b7:11:30:b2:a9:db:f4: 52:22:a9:f6:11:15:54:5a:6e:4d:b8:85:ca:e0:c6: 00:c1:b4:69:89:f9:df:74:f0:9f:ab:ca:66:e3:ac: a5:37:65:9a:a3:83:93:25:e3:82:aa:1d:48:78:e0: 11:6e:1b:2a:42:22:62:32:b3:9c:5b:83:e6:06:4a: 88:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3D:86:4F:63:07:CB:BC:C2:36:F2:27:A7:24:A1:78:31:77:FF:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ca3079d-831f-3002-9e2c-87c2c65a6570.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:30:18:90:ea:da:6f:4f:7d:11:73:0b:8f:fa:de:96:d7:e4: 97:66:1e:a6:c4:f9:49:b1:35:13:3e:47:93:a1:6e:f5:6a:91: 2e:b4:75:90:4b:36:38:41:d5:6a:f4:f4:d8:8f:37:4c:2e:1b: c0:8e:68:4e:c4:61:c7:a9:8c:55:37:0c:3b:16:b6:7d:4a:45: d6:8f:b2:d4:be:c7:9c:8d:7f:22:04:4b:00:22:9b:f7:34:61: 1b:1a:e9:02:d3:bc:06:36:ed:d2:3b:0a:62:49:93:8f:09:67: 37:96:bb:7d:d6:11:2b:ee:83:fc:ef:20:03:7c:40:d3:98:4b: 1b:44:7a:36:f5:f1:d4:25:85:88:79:8a:25:9d:eb:05:16:e3: 97:33:e7:bc:40:bd:b9:6d:8f:23:0c:43:9e:b6:0b:aa:c0:da: b5:80:a1:17:da:65:93:2f:d8:5f:2d:53:2d:95:64:dd:31:91: 57:69:0d:35:82:b9:58:13:76:a2:3e:25:b1:53:a9:58:0e:e9: 60:3e:4e:40:41:f2:4b:c6:3e:db:f6:23:81:07:5d:9b:24:32: 66:1e:73:90:69:08:52:61:a9:de:c4:9c:e2:a2:f4:8b:fc:a4: e7:b8:e2:1d:9a:23:74:78:df:89:28:c3:3d:4c:9e:52:7f:5d: c6:1f:f2:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3TWxzlwa9X0vusgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk ZDRjZThiOGYtZWI3Ni00OTRiLWEyNDAtOTJiMzYzYWE1NGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlkKRoyy2LWrArYavhHZ0xTCUCZyWV2Olprm ga0TC4K3DMH2jiah/R6ecIJBPcIbvnV+fY7gOvFofj/OLmN9YRXa/ucnrHuO9zMV Km92uPQvljnlEJGECLnvGB+Ht6UYMszbIAP489PhRkAyoTZPEgHDPQAA+Hrwp+qR U6lsH/s941bsZe1xIIZ14HZLFQwrlQbh3eBcD9BdhwHB0ivkzyrHZr2N4iEYNX/I dBNGLLpsNyBDrY284XykT7cRMLKp2/RSIqn2ERVUWm5NuIXK4MYAwbRpifnfdPCf q8pm46ylN2Wao4OTJeOCqh1IeOARbhsqQiJiMrOcW4PmBkqIBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQ9hk9jB8u8wjbyJ6ckoXgxd/8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWNhMzA3OWQtODMxZi0z MDAyLTllMmMtODdjMmM2NWE2NTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxxuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGswGJDq2m9PfRFzC4/63pbX5JdmHqbE+UmxNRM+R5OhbvVqkS60dZBL NjhB1Wr09NiPN0wuG8COaE7EYcepjFU3DDsWtn1KRdaPstS+x5yNfyIESwAim/c0 YRsa6QLTvAY27dI7CmJJk48JZzeWu33WESvug/zvIAN8QNOYSxtEejb18dQlhYh5 iiWd6wUW45cz57xAvbltjyMMQ562C6rA2rWAoRfaZZMv2F8tUy2VZN0xkVdpDTWC uVgTdqI+JbFTqVgO6WA+TkBB8kvGPtv2I4EHXZskMmYec5BpCFJhqd7EnOKi9Iv8 pOe44h2aI3R434kowz1MnlJ/XcYf8iU= -----END CERTIFICATE-----Generated at Thu May 28 17:47:15 2026 by rpki-client