$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3b2d476-53cc-3baa-a6a2-55359bb26138.roa File: a3b2d476-53cc-3baa-a6a2-55359bb26138.roa (raw, json) Hash identifier: ebswbtyUZwkRPkK8J2AW4qvmNWLFCrko9RZ6DqEEcaQ= Subject key identifier: 67:C3:3F:9C:04:33:14:F0:25:08:63:7D:CC:76:FE:43:05:99:A2:66 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D52438AA50B49480AE0908330 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3b2d476-53cc-3baa-a6a2-55359bb26138.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7029 IP address blocks: 71.7.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:8a:a5:0b:49:48:0a:e0:90:83:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=1cbda358-275c-43aa-ae78-a571833b0d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:92:a6:54:e6:ae:ee:5c:a7:51:84:27:28:55: f9:95:7d:da:3a:5d:b0:a6:0d:91:be:36:34:e6:ec: 4a:8d:45:f9:fd:0b:df:48:72:fb:e1:1d:82:cd:2b: a2:97:54:4b:c2:58:45:97:ca:92:e4:dd:d8:46:95: 08:55:18:cb:b0:c5:c3:ad:1d:c4:aa:01:67:fd:a7: e1:e0:90:1b:ae:17:5e:0b:d0:bc:8f:10:e1:de:4a: 30:6b:88:9d:c0:fe:66:a3:ec:7f:1e:a5:82:e6:e0: 91:f9:1d:2a:89:3a:04:17:52:6a:83:2b:c4:a7:fb: 7f:d8:85:3a:d2:4e:a3:83:ff:ff:aa:d5:0f:66:0f: 98:4c:88:82:0b:53:b7:c3:b1:82:a4:a4:7f:be:e2: cd:0d:89:61:71:0f:1e:69:16:81:fe:1a:79:90:a5: 0b:fa:90:22:dc:04:a3:54:1e:c5:50:80:e4:62:c2: 41:f1:e7:25:e5:8d:65:ac:84:1d:b0:a3:34:69:0f: 1e:74:48:74:25:8a:3c:30:23:b5:61:a7:d0:43:2e: 1b:08:78:3f:22:55:c3:96:cc:3e:32:5f:b4:49:e4: 0a:b7:a9:8d:f3:82:e6:5c:75:05:12:4f:90:29:dd: f4:5a:c1:95:c2:91:7d:ef:ca:5c:16:00:16:48:9a: 4d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C3:3F:9C:04:33:14:F0:25:08:63:7D:CC:76:FE:43:05:99:A2:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3b2d476-53cc-3baa-a6a2-55359bb26138.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.7.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:92:74:25:57:3b:d4:99:cd:49:1f:f3:83:d6:5a:89:2b:48: b4:f5:56:97:78:7c:0d:77:65:78:2d:7b:14:54:18:2e:98:82: 93:bc:62:80:0f:65:98:ba:d2:42:12:3c:2e:58:84:3a:22:1f: 40:e3:0d:8e:35:8a:e9:19:18:70:f4:c0:02:be:87:af:d2:82: a5:a9:e8:be:60:cb:aa:7c:c4:1f:3d:0f:da:73:41:ba:20:3c: 02:55:50:97:4e:18:fb:0a:7d:94:0b:68:f6:8c:71:3d:06:30: 8f:99:9a:e8:be:40:3f:1f:85:40:c5:f2:8a:aa:dc:e3:3b:4b: 1e:cd:9b:f1:53:bb:04:42:f3:4a:ba:a9:d7:0f:ea:b5:cf:1c: e4:ba:72:02:c7:6e:ea:dc:1b:62:9d:42:3f:73:e6:0f:78:4e: 6f:3a:91:2b:14:6a:48:10:6a:6d:07:71:2f:26:b2:dc:c7:aa: 1e:ad:e3:3d:e5:8f:96:68:24:88:a0:42:91:f7:e7:a9:c6:2e: 7a:42:31:19:60:5b:85:2c:ca:2b:5e:cc:02:bf:4b:80:c5:bc: 19:6c:75:18:f6:2e:9c:93:12:12:e9:95:5e:37:f7:f0:31:ac: 8f:10:db:28:49:59:92:ad:76:f8:e0:e0:63:1b:cf:2c:29:5b: 83:3f:ec:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ4qlC0lICuCQgzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk MWNiZGEzNTgtMjc1Yy00M2FhLWFlNzgtYTU3MTgzM2IwZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJKmVOau7lynUYQnKFX5lX3aOl2wpg2RvjY0 5uxKjUX5/QvfSHL74R2CzSuil1RLwlhFl8qS5N3YRpUIVRjLsMXDrR3EqgFn/afh 4JAbrhdeC9C8jxDh3kowa4idwP5mo+x/HqWC5uCR+R0qiToEF1JqgyvEp/t/2IU6 0k6jg///qtUPZg+YTIiCC1O3w7GCpKR/vuLNDYlhcQ8eaRaB/hp5kKUL+pAi3ASj VB7FUIDkYsJB8ecl5Y1lrIQdsKM0aQ8edEh0JYo8MCO1YafQQy4bCHg/IlXDlsw+ Ml+0SeQKt6mN84LmXHUFEk+QKd30WsGVwpF978pcFgAWSJpNzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfDP5wEMxTwJQhjfcx2/kMFmaJmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTNiMmQ0NzYtNTNjYy0z YmFhLWE2YTItNTUzNTliYjI2MTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRwcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmSdCVXO9SZzUkf84PWWokrSLT1Vpd4fA13ZXgtexRUGC6YgpO8YoAP ZZi60kISPC5YhDoiH0DjDY41iukZGHD0wAK+h6/SgqWp6L5gy6p8xB89D9pzQbog PAJVUJdOGPsKfZQLaPaMcT0GMI+Zmui+QD8fhUDF8oqq3OM7Sx7Nm/FTuwRC80q6 qdcP6rXPHOS6cgLHburcG2KdQj9z5g94Tm86kSsUakgQam0HcS8mstzHqh6t4z3l j5ZoJIigQpH356nGLnpCMRlgW4UsyitezAK/S4DFvBlsdRj2LpyTEhLplV439/Ax rI8Q2yhJWZKtdvjg4GMbzywpW4M/7Js= -----END CERTIFICATE-----Generated at Mon Apr 13 11:41:13 2026 by rpki-client