$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96d1faa0-1e3a-3a66-8e6e-5b2845b0ee30.roa File: 96d1faa0-1e3a-3a66-8e6e-5b2845b0ee30.roa (raw, json) Hash identifier: lSJeoAPqr/+KJP0q90+0+1Sv01CjincIeK3vQsU7X4E= Subject key identifier: 59:4E:B6:99:F7:70:8C:70:0A:C9:BD:0F:64:A3:3B:7B:7A:81:F2:F9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C9EFC7DEA8E30DD650367B580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96d1faa0-1e3a-3a66-8e6e-5b2845b0ee30.roa Signing time: Fri 23 Jan 2026 14:00:38 +0000 ROA not before: Fri 23 Jan 2026 14:00:38 +0000 ROA not after: Thu 23 Apr 2026 13:00:38 +0000 asID: 7029 IP address blocks: 71.30.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9e:fc:7d:ea:8e:30:dd:65:03:67:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 23 14:00:38 2026 GMT Not After : Apr 23 13:00:38 2026 GMT Subject: CN=cc353d98-6a14-4f0e-aa54-8bc3da7c9df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:19:0b:c7:21:57:3b:f5:55:20:3a:3a:db:77: 79:a9:f5:39:76:c9:18:cc:12:86:02:4e:1d:14:89: b8:ee:56:ff:31:4a:b5:e9:e3:69:35:5a:8f:8b:e1: 76:9c:fa:31:22:f0:c6:5a:3c:46:f2:ed:df:c1:7b: e4:78:6f:91:ab:bd:68:e1:ed:d0:32:1d:36:62:77: 3f:bc:8a:29:14:03:92:15:ed:e0:ae:72:c3:08:2a: 83:0e:88:b9:d8:ea:bd:1a:e6:bb:94:0a:e5:59:21: e8:98:b1:74:66:d2:6b:6b:e3:e4:be:e8:a1:8d:1c: ec:21:ea:66:b3:75:cc:0d:b7:16:35:f3:a2:47:06: f4:26:d6:38:90:6d:3f:f5:02:29:70:04:77:c6:51: 17:f0:6d:05:8a:17:47:9b:6b:aa:f9:74:cf:da:2e: 21:e9:d8:c7:fc:92:58:41:82:85:4a:b9:fa:67:d0: 29:3c:55:1e:9f:9a:d4:ba:26:a2:47:0a:b5:ab:f6: cb:32:f0:2c:c8:92:66:21:d5:6e:3b:90:d8:4e:94: c3:66:dd:2a:a5:6b:e2:87:0c:43:f4:0d:cb:cc:54: 48:7d:d8:7e:5f:8a:fb:87:a5:ed:19:95:10:30:92: f2:55:7e:c8:c0:e5:8a:cb:84:5a:17:16:3e:29:7d: cd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:4E:B6:99:F7:70:8C:70:0A:C9:BD:0F:64:A3:3B:7B:7A:81:F2:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96d1faa0-1e3a-3a66-8e6e-5b2845b0ee30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ff:6b:cd:a7:03:c6:f1:00:6d:cb:3c:4a:3b:d3:51:75:57: ed:f6:2b:33:3b:ac:1b:82:a7:e1:e8:4a:dc:94:cf:51:80:92: f7:01:50:6b:01:c8:b4:77:04:60:a2:e3:ca:ba:75:08:99:e6: 3c:53:ae:4d:5b:1a:ff:07:46:9d:45:66:24:32:a4:e5:e9:91: 25:4d:c2:b7:e2:65:a5:f6:39:3b:59:e4:fa:39:1c:53:39:18: 67:60:5f:59:ad:21:e0:dc:d1:b2:90:85:9a:b1:75:e2:89:ba: 0d:c1:27:c4:1c:73:b3:87:f6:56:3f:41:50:4d:21:54:fd:ce: 29:dd:1c:47:35:ae:32:d0:4e:db:c9:5b:a3:8a:e7:30:31:a0: 10:23:11:2a:68:fb:f8:e6:06:f9:c7:94:cd:ff:da:a6:80:b8: d5:85:96:e8:45:1b:37:07:fb:d3:06:c5:a4:32:86:e6:e3:c9: 37:dd:49:10:be:af:aa:a5:4e:ce:a9:16:bf:1c:da:93:db:76: 05:c1:54:23:8b:17:d1:29:5a:af:8e:86:77:46:42:62:0c:a4: 61:bf:7a:86:1e:21:f5:88:ab:8c:85:5c:f0:4f:ac:13:92:26: 80:ac:39:f8:69:46:4b:ad:da:c7:34:0b:98:8b:ac:87:f3:91: cd:85:b5:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEye/H3qjjDdZQNntYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDEyMzE0MDAzOFoXDTI2MDQyMzEzMDAzOFowLzEtMCsGA1UEAxMk Y2MzNTNkOTgtNmExNC00ZjBlLWFhNTQtOGJjM2RhN2M5ZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBkLxyFXO/VVIDo623d5qfU5dskYzBKGAk4d FIm47lb/MUq16eNpNVqPi+F2nPoxIvDGWjxG8u3fwXvkeG+Rq71o4e3QMh02Ync/ vIopFAOSFe3grnLDCCqDDoi52Oq9Gua7lArlWSHomLF0ZtJra+PkvuihjRzsIepm s3XMDbcWNfOiRwb0JtY4kG0/9QIpcAR3xlEX8G0FihdHm2uq+XTP2i4h6djH/JJY QYKFSrn6Z9ApPFUen5rUuiaiRwq1q/bLMvAsyJJmIdVuO5DYTpTDZt0qpWvihwxD 9A3LzFRIfdh+X4r7h6XtGZUQMJLyVX7IwOWKy4RaFxY+KX3NFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlOtpn3cIxwCsm9D2SjO3t6gfL5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTZkMWZhYTAtMWUzYS0z YTY2LThlNmUtNWIyODQ1YjBlZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7/a82nA8bxAG3LPEo701F1V+32KzM7rBuCp+HoStyUz1GAkvcBUGsB yLR3BGCi48q6dQiZ5jxTrk1bGv8HRp1FZiQypOXpkSVNwrfiZaX2OTtZ5Po5HFM5 GGdgX1mtIeDc0bKQhZqxdeKJug3BJ8Qcc7OH9lY/QVBNIVT9zindHEc1rjLQTtvJ W6OK5zAxoBAjESpo+/jmBvnHlM3/2qaAuNWFluhFGzcH+9MGxaQyhubjyTfdSRC+ r6qlTs6pFr8c2pPbdgXBVCOLF9EpWq+OhndGQmIMpGG/eoYeIfWIq4yFXPBPrBOS JoCsOfhpRkut2sc0C5iLrIfzkc2FtdA= -----END CERTIFICATE-----Generated at Thu Feb 26 06:31:28 2026 by rpki-client