$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5d84f8f-2d00-3697-baa6-eb05452b00de.roa File: a5d84f8f-2d00-3697-baa6-eb05452b00de.roa (raw, json) Hash identifier: xUW8AY8D1xQsMli2bEI0drYi7uLGy0KyxcFqPjAFbDc= Subject key identifier: 34:E4:4A:5E:76:6C:4B:42:8E:77:CD:C8:01:76:ED:D1:EC:0A:C6:0D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7A055041948A2B37827031E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5d84f8f-2d00-3697-baa6-eb05452b00de.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 71.29.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:50:41:94:8a:2b:37:82:70:31:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=60cb6e9f-7f6e-4302-8ea5-7f69fd6937ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ec:08:bc:07:cd:6f:ce:8d:85:ba:71:0d:74: 53:fa:21:29:2f:6a:d5:27:f2:e5:39:fc:a6:f5:fe: 8f:aa:7f:39:6e:f4:fc:76:7d:47:a4:f8:5c:29:0e: 3b:d9:04:2e:87:9f:64:81:d2:21:5f:bc:6d:be:1a: 2c:3a:90:09:6b:22:f9:74:b4:67:50:e4:dc:31:05: e4:e5:c8:87:30:72:cb:47:c2:2c:f1:28:2f:b2:31: 38:69:c2:1d:46:4f:cd:5d:b2:a4:20:78:3d:de:e6: 14:76:9f:85:db:2a:76:0c:93:5f:b5:07:54:13:4c: c2:34:b9:7c:20:79:03:da:88:13:92:02:e4:17:7e: 1e:d9:55:53:9c:11:bf:b1:e9:ba:f6:4e:cc:2d:9d: 64:99:b4:b8:6b:dc:b3:5d:9d:7d:83:13:c9:9f:11: ff:42:7f:e6:84:9b:38:28:cd:d4:c2:91:5e:e9:f3: d3:e7:79:37:91:27:5e:be:c5:3f:08:d5:63:fe:ee: 93:46:ba:07:79:8a:cd:dd:d6:06:ec:3e:72:5f:b4: fd:87:7e:ad:75:18:01:41:70:e3:2b:28:ba:8e:fd: 50:b6:ae:47:96:76:48:1c:9e:d6:70:d7:a8:bf:d2: f2:71:26:31:77:b1:6a:ee:7b:be:ec:2a:6a:3b:5a: 25:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E4:4A:5E:76:6C:4B:42:8E:77:CD:C8:01:76:ED:D1:EC:0A:C6:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5d84f8f-2d00-3697-baa6-eb05452b00de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:97:11:81:ba:04:c3:93:86:57:f3:c8:7d:c1:2e:70:f8:bc: 94:1c:15:a4:15:d9:c3:fd:78:0b:ae:46:df:9e:9c:c0:27:4d: 45:9f:75:cf:92:95:b6:0d:16:7f:e9:34:27:a6:c5:9f:8e:95: ce:d6:7b:f8:17:30:d5:4e:47:a5:88:b3:6e:8f:85:24:d5:7a: 96:4a:0a:db:6e:91:3d:75:b6:44:c5:5b:73:1f:f1:6b:d1:bf: 75:03:46:88:7d:67:1a:89:26:ea:6c:0d:6b:a5:33:a7:d4:55: b4:08:22:77:2a:75:1c:f3:1a:ba:8a:70:ca:18:f2:bc:be:83: 6c:c0:a9:ea:ba:99:60:19:55:bf:82:a8:41:82:28:30:ac:7f: 2e:54:98:53:b0:74:e4:a4:30:2d:7c:37:b8:2a:e9:42:b7:07: 89:5c:b3:0c:db:27:2c:63:0b:97:d1:62:8e:68:87:55:9b:dc: 75:14:a2:96:b9:fb:37:56:de:c1:9d:ca:ea:5b:92:bf:45:80: c8:96:70:cb:56:9f:0a:d5:6e:ad:f6:e1:d0:d6:be:83:9f:78: 7b:42:1b:c1:53:9f:e6:30:2f:31:29:c8:61:91:09:c5:f3:36: a5:20:ba:3a:63:c2:05:c7:f8:98:4f:5e:a8:17:6e:75:6b:54: 60:e2:5f:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BVBBlIorN4JwMeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk NjBjYjZlOWYtN2Y2ZS00MzAyLThlYTUtN2Y2OWZkNjkzN2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguwIvAfNb86NhbpxDXRT+iEpL2rVJ/LlOfym 9f6Pqn85bvT8dn1HpPhcKQ472QQuh59kgdIhX7xtvhosOpAJayL5dLRnUOTcMQXk 5ciHMHLLR8Is8SgvsjE4acIdRk/NXbKkIHg93uYUdp+F2yp2DJNftQdUE0zCNLl8 IHkD2ogTkgLkF34e2VVTnBG/sem69k7MLZ1kmbS4a9yzXZ19gxPJnxH/Qn/mhJs4 KM3UwpFe6fPT53k3kSdevsU/CNVj/u6TRroHeYrN3dYG7D5yX7T9h36tdRgBQXDj Kyi6jv1Qtq5HlnZIHJ7WcNeov9LycSYxd7Fq7nu+7CpqO1olhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTkSl52bEtCjnfNyAF27dHsCsYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTVkODRmOGYtMmQwMC0z Njk3LWJhYTYtZWIwNTQ1MmIwMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx3mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyXEYG6BMOThlfzyH3BLnD4vJQcFaQV2cP9eAuuRt+enMAnTUWfdc+S lbYNFn/pNCemxZ+Olc7We/gXMNVOR6WIs26PhSTVepZKCttukT11tkTFW3Mf8WvR v3UDRoh9ZxqJJupsDWulM6fUVbQIIncqdRzzGrqKcMoY8ry+g2zAqeq6mWAZVb+C qEGCKDCsfy5UmFOwdOSkMC18N7gq6UK3B4lcswzbJyxjC5fRYo5oh1Wb3HUUopa5 +zdW3sGdyupbkr9FgMiWcMtWnwrVbq324dDWvoOfeHtCG8FTn+YwLzEpyGGRCcXz NqUgujpjwgXH+JhPXqgXbnVrVGDiX0I= -----END CERTIFICATE-----Generated at Mon Apr 13 11:39:31 2026 by rpki-client