$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d313f68-163c-307a-a84d-e9a01b347c96.roa File: 6d313f68-163c-307a-a84d-e9a01b347c96.roa (raw, json) Hash identifier: kcZx5sNNr64gnhzRqZrDHI5FiJo7rmcftaU8YfKRNW4= Subject key identifier: E1:D1:89:45:28:EB:F8:75:AD:8D:32:F6:62:6E:30:3D:D6:2F:8F:6A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D52438B21BDB0CBD2E52C8D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d313f68-163c-307a-a84d-e9a01b347c96.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7029 IP address blocks: 71.29.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:8b:21:bd:b0:cb:d2:e5:2c:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=545a9661-f117-4ff9-83ac-fef80e4cf7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:06:d9:3e:62:33:3b:25:5a:eb:22:38:40:52: d7:b7:af:aa:e7:0d:07:c8:3d:3a:54:e9:5c:1f:15: 5f:a8:06:cc:4e:3e:73:02:88:0b:cc:b5:9e:bb:04: 13:5c:82:af:0d:e4:aa:d9:58:5c:d8:eb:04:87:2f: 15:6a:d2:5d:a7:4f:25:48:02:54:ec:2b:81:c6:af: 00:7a:2d:be:ff:b6:31:6b:02:9e:ba:df:45:e8:23: e9:30:18:1a:87:3c:44:17:6f:9f:e7:57:80:2a:9d: e7:c8:86:b0:6a:3b:8e:e1:6a:8b:3e:d6:a3:81:63: 02:14:11:e7:a7:0e:c2:ce:10:71:8a:9e:e9:f0:06: 41:89:3a:18:b9:68:56:5a:82:f1:dd:fb:17:73:de: 36:10:a5:cf:b2:4e:ee:ee:2e:40:22:f8:06:4f:10: 0d:5c:d7:70:91:c8:bd:cb:3e:c3:b0:09:01:08:ff: ae:c5:6a:07:00:30:fa:df:03:2a:e2:0a:55:6f:06: 26:51:65:ca:bd:02:3e:b2:f7:33:04:c3:31:26:b1: 63:dd:c9:f6:06:ea:07:36:fd:25:a0:a1:62:4f:0b: b8:b2:7a:91:cc:39:5e:6a:ae:1b:5f:3b:ef:95:13: 58:2f:3f:a6:33:bd:4e:43:f3:0f:46:dc:9c:36:7d: 0e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D1:89:45:28:EB:F8:75:AD:8D:32:F6:62:6E:30:3D:D6:2F:8F:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d313f68-163c-307a-a84d-e9a01b347c96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:29:d9:1b:2a:f9:97:aa:71:07:c5:e3:84:58:c5:4e:bc:f3: de:3e:6f:6a:a2:22:5e:5d:ac:86:c0:37:6e:cd:f6:d8:d8:ae: 38:84:70:6a:8e:ec:af:a7:ae:97:67:97:48:f4:72:1d:ca:3e: 6d:d8:4a:a6:01:14:ba:0d:8d:31:61:28:98:3b:47:b9:89:c2: dc:a7:72:e0:cb:37:ec:63:de:d3:e5:73:94:0b:fe:9b:38:b5: 7e:43:b8:ad:99:fa:7e:8b:c1:71:2b:2b:30:01:12:74:36:e2: d0:d6:ca:4a:bc:5b:9d:4c:63:7a:3d:c4:7c:dd:fa:e3:09:95: b4:e0:63:5e:ca:bf:e1:39:ec:ec:2a:b2:2c:71:e2:9e:d5:1b: 76:64:d7:90:3d:88:90:de:96:bc:15:fa:19:c8:02:d1:1d:55: 26:d5:65:e0:5a:02:11:94:71:f0:4f:f7:13:64:83:e1:19:5e: c1:50:a4:db:de:d1:35:7d:96:b1:dd:b6:9c:7a:bc:73:8f:0a: 66:83:26:03:0d:6f:5d:1b:9f:d1:17:67:7b:36:97:3d:68:57: 4b:e2:a7:6d:77:60:3a:51:e0:dc:b0:5f:36:42:3c:e7:63:aa: 8f:ad:a1:34:50:58:c2:d0:89:53:e9:85:28:19:94:5a:5b:69: 42:3f:5c:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ4shvbDL0uUsjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NTQ1YTk2NjEtZjExNy00ZmY5LTgzYWMtZmVmODBlNGNmN2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwbZPmIzOyVa6yI4QFLXt6+q5w0HyD06VOlc HxVfqAbMTj5zAogLzLWeuwQTXIKvDeSq2Vhc2OsEhy8VatJdp08lSAJU7CuBxq8A ei2+/7YxawKeut9F6CPpMBgahzxEF2+f51eAKp3nyIawajuO4WqLPtajgWMCFBHn pw7CzhBxip7p8AZBiToYuWhWWoLx3fsXc942EKXPsk7u7i5AIvgGTxANXNdwkci9 yz7DsAkBCP+uxWoHADD63wMq4gpVbwYmUWXKvQI+svczBMMxJrFj3cn2BuoHNv0l oKFiTwu4snqRzDleaq4bXzvvlRNYLz+mM71OQ/MPRtycNn0OUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHRiUUo6/h1rY0y9mJuMD3WL49qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmQzMTNmNjgtMTYzYy0z MDdhLWE4NGQtZTlhMDFiMzQ3Yzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx1SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEp2Rsq+ZeqcQfF44RYxU68894+b2qiIl5drIbAN27N9tjYrjiEcGqO 7K+nrpdnl0j0ch3KPm3YSqYBFLoNjTFhKJg7R7mJwtyncuDLN+xj3tPlc5QL/ps4 tX5DuK2Z+n6LwXErKzABEnQ24tDWykq8W51MY3o9xHzd+uMJlbTgY17Kv+E57Owq sixx4p7VG3Zk15A9iJDelrwV+hnIAtEdVSbVZeBaAhGUcfBP9xNkg+EZXsFQpNve 0TV9lrHdtpx6vHOPCmaDJgMNb10bn9EXZ3s2lz1oV0vip213YDpR4NywXzZCPOdj qo+toTRQWMLQiVPphSgZlFpbaUI/XIo= -----END CERTIFICATE-----Generated at Mon Apr 13 11:39:33 2026 by rpki-client