$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96213a24-96de-36e3-bc89-e54aaa229011.roa File: 96213a24-96de-36e3-bc89-e54aaa229011.roa (raw, json) Hash identifier: uFvLzRphLqMgHUIn69ifms9sroQN7NO10K9dn5drAIA= Subject key identifier: 85:14:19:5B:5C:7B:94:D4:A8:5A:F7:AC:85:E6:3F:58:1D:14:82:36 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E31CF4A4B72C101019AEDB200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96213a24-96de-36e3-bc89-e54aaa229011.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 71.30.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:4a:4b:72:c1:01:01:9a:ed:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=8e3bd771-5137-46fe-adac-957f84e4df02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:dd:b3:d8:55:de:ec:54:d5:38:68:a5:4d:5e: 98:ec:fa:95:f4:be:54:0c:27:2b:a3:c5:43:73:2e: d6:41:d1:46:b4:4d:dc:94:a4:79:d8:a7:e3:7f:9c: 35:6a:32:2d:7a:dc:97:17:ce:98:48:6b:d2:b3:27: c1:29:a6:56:25:85:2e:8c:45:a1:1c:b9:38:3a:32: 99:d0:49:1d:bd:74:68:ad:0a:12:62:8e:3e:a8:7e: 68:4d:8f:26:b5:44:b2:70:ca:02:61:51:82:78:4f: 1e:89:b7:fb:53:c0:7c:ed:e6:75:d3:6e:db:40:af: fb:1e:3f:de:9a:7a:f6:e3:c9:53:46:f3:a9:eb:2c: 08:65:52:1f:b4:2e:77:6f:db:9e:3f:d9:23:44:03: 28:43:e3:73:ec:64:a4:f3:00:cb:82:2f:50:a9:7f: f0:ed:7f:60:61:e2:5a:41:de:d2:75:1f:81:86:ee: a0:d9:68:6b:67:64:19:68:34:3b:54:d8:b3:86:03: c3:17:b1:f8:59:ad:bc:ec:2d:47:ae:fa:64:c8:87: 94:89:cf:2d:ae:7b:c5:03:d7:d9:d2:de:98:17:75: c5:94:fc:fb:9f:bf:38:5a:72:57:66:1c:52:be:09: af:4e:25:6a:41:78:ca:1c:92:48:72:89:0d:99:de: 32:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:14:19:5B:5C:7B:94:D4:A8:5A:F7:AC:85:E6:3F:58:1D:14:82:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96213a24-96de-36e3-bc89-e54aaa229011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:e1:be:90:75:9b:ad:77:33:b6:57:d6:7c:9a:99:0e:c2:b0: 73:4d:f9:c9:98:04:75:19:d5:b5:04:39:5c:22:84:ee:fd:1f: b4:df:b8:86:c4:da:1c:9b:87:e4:d5:b1:c4:47:ab:c1:a0:55: 36:32:07:3d:a9:f0:a4:e0:7a:95:cf:1c:92:bf:c1:9d:dd:9a: 8f:41:6d:76:c0:c7:3c:05:31:8a:f7:21:ed:02:2c:d2:7b:16: 81:1c:6a:1e:f4:0e:25:1a:4a:d4:5b:b8:b0:37:63:84:81:08: 99:4c:c5:ef:0d:ec:27:0e:3f:36:63:67:2e:83:5e:8a:b6:50: 81:78:d5:5f:8a:b9:cb:89:16:a2:21:cf:47:93:76:d1:0b:a8: d7:1b:e0:3c:f0:fc:dd:9e:ce:c8:e0:00:05:10:b7:62:ac:87: cc:f4:bf:3c:a3:71:55:73:93:91:c9:9c:d6:4e:13:13:9e:8d: 27:bd:a6:40:31:85:6c:6e:ce:9a:e2:2a:82:38:5f:8b:2f:a0: 5e:3b:60:c0:26:81:ad:73:1f:a3:d0:0e:0c:51:e9:bd:cf:a5: b5:0e:c8:39:ad:27:c9:bf:f0:01:82:47:a7:87:34:02:dd:0c: 09:8c:ee:60:db:69:95:82:a7:db:c9:04:2b:da:5b:bd:71:42: 27:0c:fa:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xz0pLcsEBAZrtsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk OGUzYmQ3NzEtNTEzNy00NmZlLWFkYWMtOTU3Zjg0ZTRkZjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy92z2FXe7FTVOGilTV6Y7PqV9L5UDCcro8VD cy7WQdFGtE3clKR52Kfjf5w1ajItetyXF86YSGvSsyfBKaZWJYUujEWhHLk4OjKZ 0EkdvXRorQoSYo4+qH5oTY8mtUSycMoCYVGCeE8eibf7U8B87eZ1027bQK/7Hj/e mnr248lTRvOp6ywIZVIftC53b9ueP9kjRAMoQ+Nz7GSk8wDLgi9QqX/w7X9gYeJa Qd7SdR+Bhu6g2WhrZ2QZaDQ7VNizhgPDF7H4Wa287C1HrvpkyIeUic8trnvFA9fZ 0t6YF3XFlPz7n784WnJXZhxSvgmvTiVqQXjKHJJIcokNmd4yZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUUGVtce5TUqFr3rIXmP1gdFII2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTYyMTNhMjQtOTZkZS0z NmUzLWJjODktZTU0YWFhMjI5MDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx5FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7hvpB1m613M7ZX1nyamQ7CsHNN+cmYBHUZ1bUEOVwihO79H7TfuIbE 2hybh+TVscRHq8GgVTYyBz2p8KTgepXPHJK/wZ3dmo9BbXbAxzwFMYr3Ie0CLNJ7 FoEcah70DiUaStRbuLA3Y4SBCJlMxe8N7CcOPzZjZy6DXoq2UIF41V+KucuJFqIh z0eTdtELqNcb4Dzw/N2ezsjgAAUQt2Ksh8z0vzyjcVVzk5HJnNZOExOejSe9pkAx hWxuzpriKoI4X4svoF47YMAmga1zH6PQDgxR6b3PpbUOyDmtJ8m/8AGCR6eHNALd DAmM7mDbaZWCp9vJBCvaW71xQicM+rg= -----END CERTIFICATE-----Generated at Mon Jul 13 05:53:34 2026 by rpki-client