$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64b768fa-4325-324b-9c0e-4df1bbbb2738.roa File: 64b768fa-4325-324b-9c0e-4df1bbbb2738.roa (raw, json) Hash identifier: Kqn5Ed60qeXXj4tmXiGtpCMJ1K977jzWlms1jqs2JEY= Subject key identifier: DB:99:46:A5:BA:F7:22:93:B1:CF:C2:95:34:8A:F8:46:F1:98:E1:72 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D5243BE97DE2A5A98EE0544A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64b768fa-4325-324b-9c0e-4df1bbbb2738.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7029 IP address blocks: 71.28.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:be:97:de:2a:5a:98:ee:05:44:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=1638a500-5bf1-4cb5-a3f5-53c2c11fb6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b7:99:b7:7c:45:12:63:e4:17:71:75:f4:5c: 1d:ad:85:5f:a6:ca:43:73:2b:d6:d6:b7:d6:07:21: 5b:ae:aa:f1:f7:28:66:b7:fe:56:f6:84:8f:e2:0e: c3:a4:cc:08:30:3e:60:4f:3b:0a:fa:bf:be:ea:d9: cd:7f:57:23:78:f8:50:dd:ef:24:e7:34:de:bd:37: ef:2a:46:ac:5e:cf:08:c7:f2:c4:f7:e3:15:5d:3c: 14:78:91:44:27:7b:ca:2c:d6:20:db:07:ac:5f:e1: a4:39:55:07:e5:e2:54:be:19:0b:fc:3c:23:39:3a: f6:06:9d:8e:d4:d1:67:b7:2f:35:6c:15:ef:44:42: 40:9e:14:2a:b2:c8:68:13:f7:d7:6f:23:65:4e:87: 10:f9:0d:d5:0a:f6:90:b4:23:0d:f7:b0:65:7a:cb: bb:39:49:16:15:0c:42:fd:2b:38:27:3b:45:28:df: be:4b:31:d1:2a:e6:4f:b5:88:63:04:e0:e8:91:8e: 84:32:b3:c1:1a:d5:ba:21:b9:4f:45:62:e9:f6:fe: 42:d8:2b:5e:7d:31:70:08:1f:4a:d5:9f:d2:23:ac: e4:4e:cf:6d:69:43:af:99:42:29:b3:a8:e9:87:37: 27:82:82:af:54:3e:c1:b3:b0:56:5d:fe:45:cb:17: d5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:99:46:A5:BA:F7:22:93:B1:CF:C2:95:34:8A:F8:46:F1:98:E1:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64b768fa-4325-324b-9c0e-4df1bbbb2738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:07:6d:25:f2:eb:e3:e4:61:0f:7a:00:47:6c:3f:ad:ff:a4: f0:df:f2:76:a0:38:ca:88:00:b1:91:6f:e6:34:58:aa:7e:94: 24:81:32:88:eb:f0:0d:26:6a:3a:35:f4:da:a3:be:c4:65:89: 6d:a7:7d:ac:9c:27:b4:3d:5d:48:b4:e1:81:5e:05:fd:13:25: b7:9d:8c:78:8e:b0:09:9b:27:f4:45:52:1c:39:ac:fe:76:2c: b4:5a:41:1f:8b:18:f2:84:fe:c8:5e:48:e4:cd:05:a9:10:04: bd:42:40:3f:3f:ee:88:ea:b1:93:4e:a9:5d:89:6e:9f:83:99: 69:62:e4:2d:55:f8:96:41:ee:dc:3d:72:6e:17:2a:fd:5c:24: c1:28:ca:a6:9d:69:c6:a3:43:69:23:92:74:d6:7a:c3:52:94: cd:0d:fa:1c:b3:ba:ba:d5:18:2e:e0:3a:c1:a3:7c:85:38:46: 25:cf:6a:09:e3:cd:40:8c:a9:75:d6:e5:5b:65:b7:6a:08:23: 67:6c:b4:b7:43:62:67:7b:67:ef:b8:ef:d9:e5:f4:cd:ca:09: fc:4f:b9:e7:ed:3c:00:d0:47:af:21:f6:ea:a8:89:53:66:c6: f0:b3:4f:0a:9e:a2:fb:5c:a9:82:23:75:4d:e8:52:e5:7a:87: 0c:64:f2:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ76X3ipamO4FRKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk MTYzOGE1MDAtNWJmMS00Y2I1LWEzZjUtNTNjMmMxMWZiNmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17eZt3xFEmPkF3F19FwdrYVfpspDcyvW1rfW ByFbrqrx9yhmt/5W9oSP4g7DpMwIMD5gTzsK+r++6tnNf1cjePhQ3e8k5zTevTfv KkasXs8Ix/LE9+MVXTwUeJFEJ3vKLNYg2wesX+GkOVUH5eJUvhkL/DwjOTr2Bp2O 1NFnty81bBXvREJAnhQqsshoE/fXbyNlTocQ+Q3VCvaQtCMN97Blesu7OUkWFQxC /Ss4JztFKN++SzHRKuZPtYhjBODokY6EMrPBGtW6IblPRWLp9v5C2CtefTFwCB9K 1Z/SI6zkTs9taUOvmUIps6jphzcngoKvVD7Bs7BWXf5FyxfVeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuZRqW69yKTsc/ClTSK+EbxmOFyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjRiNzY4ZmEtNDMyNS0z MjRiLTljMGUtNGRmMWJiYmIyNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRxwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4HbSXy6+PkYQ96AEdsP63/pPDf8nagOMqIALGRb+Y0WKp+lCSBMojr 8A0majo19NqjvsRliW2nfaycJ7Q9XUi04YFeBf0TJbedjHiOsAmbJ/RFUhw5rP52 LLRaQR+LGPKE/sheSOTNBakQBL1CQD8/7ojqsZNOqV2Jbp+DmWli5C1V+JZB7tw9 cm4XKv1cJMEoyqadacajQ2kjknTWesNSlM0N+hyzurrVGC7gOsGjfIU4RiXPagnj zUCMqXXW5Vtlt2oII2dstLdDYmd7Z++479nl9M3KCfxPueftPADQR68h9uqoiVNm xvCzTwqeovtcqYIjdU3oUuV6hwxk8gE= -----END CERTIFICATE-----Generated at Mon Apr 13 11:44:20 2026 by rpki-client