$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba82d23e-e34a-3aad-972f-27e59e917e29.roa File: ba82d23e-e34a-3aad-972f-27e59e917e29.roa (raw, json) Hash identifier: AHA1yV/Rkvqon2qELEngaMDuX592G5TvmZUZZvqSw1g= Subject key identifier: DE:F3:AF:C2:A2:F9:10:4A:0F:22:CA:70:3F:7C:45:5C:AE:CA:5F:1F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BA2F536581D42CB9850B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba82d23e-e34a-3aad-972f-27e59e917e29.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 71.29.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:2f:53:65:81:d4:2c:b9:85:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=72ad908a-2c02-4e24-9a0d-d16afb28b7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bf:28:37:f4:d2:3f:82:cb:32:5a:2d:51:8d: ef:0b:f0:11:02:76:76:6f:bf:a4:d2:7c:17:ce:99: 58:81:75:6a:a8:ee:93:f1:2f:81:74:b4:8f:ac:d6: a8:f6:29:92:8b:67:d7:0c:7d:91:03:32:be:f1:cf: c9:b5:0c:5c:7e:7e:a1:3b:3d:97:05:0a:d4:31:18: a0:4c:72:c9:e4:3d:50:4a:3e:ee:96:00:b7:db:3a: a8:50:b3:e0:cf:b2:5c:24:3c:fd:6f:d5:77:bf:7d: ab:10:2b:50:83:ec:ac:54:61:73:2f:82:a4:86:5d: a2:cb:00:9c:2f:26:33:95:32:a6:3e:87:31:b6:4d: b3:fd:48:78:77:da:4b:36:52:ce:4a:b3:39:c7:c6: 69:b9:08:1a:bb:bc:27:66:7e:fd:a4:25:71:d2:7b: c0:8b:6a:0c:50:53:f7:d2:b5:37:ce:de:6a:b7:92: 6f:8b:75:07:4d:12:7f:2a:8c:83:e4:ce:a9:8b:79: 1f:af:49:11:e6:b8:02:ac:14:16:fa:4a:a8:1d:67: 2e:ef:d8:5d:2d:95:b9:f3:3b:e9:23:31:42:41:29: 73:e3:2a:8a:3c:6f:e3:19:75:76:7c:af:9e:35:c5: 2a:24:1d:94:18:1e:b4:b6:be:76:a6:99:d5:8f:d4: 1f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F3:AF:C2:A2:F9:10:4A:0F:22:CA:70:3F:7C:45:5C:AE:CA:5F:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba82d23e-e34a-3aad-972f-27e59e917e29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:10:3b:99:9b:29:e4:a6:a0:9d:18:8c:2b:76:b9:c1:fc:d7: ef:1f:15:d6:a0:9e:61:91:d5:4a:0c:d5:a5:8b:71:f3:30:42: 9f:17:ca:d3:4a:d1:a9:31:f7:97:9c:3b:1b:86:8e:c7:71:35: 61:87:9f:be:9a:12:43:bc:a5:5b:6b:1a:e2:e7:3c:43:72:2e: b2:08:30:47:02:78:cf:0f:6b:3f:bc:4e:7d:a6:9e:f5:ce:3c: 4d:29:12:26:c3:48:41:9c:a9:05:53:f7:33:44:a3:94:8b:f7: bc:68:7a:15:9d:23:8a:4a:a3:7a:8a:c4:b9:cb:42:b7:48:3d: 5f:59:c3:8f:b4:7b:16:9c:09:66:aa:ce:2f:65:d3:6c:01:e4: a3:e0:b2:58:cf:70:a9:f0:fb:74:96:18:3e:51:4c:69:4e:de: 9f:69:85:07:87:b5:13:49:a2:22:95:c4:55:08:90:9b:e0:99: fd:8e:13:09:0f:46:26:fb:22:db:45:30:15:29:c9:de:c1:cb: 2d:2d:6a:87:d2:2e:50:61:a4:16:95:69:c9:66:91:ef:cc:e4: c6:fe:85:02:96:73:f4:60:38:21:5d:3d:49:a0:06:e0:c5:b4: 9d:ef:06:db:56:b5:cf:0e:db:0e:80:84:d3:6b:37:61:69:4f: 62:c8:e3:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vui9TZYHULLmFC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NzJhZDkwOGEtMmMwMi00ZTI0LTlhMGQtZDE2YWZiMjhiN2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL8oN/TSP4LLMlotUY3vC/ARAnZ2b7+k0nwX zplYgXVqqO6T8S+BdLSPrNao9imSi2fXDH2RAzK+8c/JtQxcfn6hOz2XBQrUMRig THLJ5D1QSj7ulgC32zqoULPgz7JcJDz9b9V3v32rECtQg+ysVGFzL4Kkhl2iywCc LyYzlTKmPocxtk2z/Uh4d9pLNlLOSrM5x8ZpuQgau7wnZn79pCVx0nvAi2oMUFP3 0rU3zt5qt5Jvi3UHTRJ/KoyD5M6pi3kfr0kR5rgCrBQW+kqoHWcu79hdLZW58zvp IzFCQSlz4yqKPG/jGXV2fK+eNcUqJB2UGB60tr52ppnVj9QfkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7zr8Ki+RBKDyLKcD98RVyuyl8fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmE4MmQyM2UtZTM0YS0z YWFkLTk3MmYtMjdlNTllOTE3ZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx1IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYQO5mbKeSmoJ0YjCt2ucH81+8fFdagnmGR1UoM1aWLcfMwQp8XytNK 0akx95ecOxuGjsdxNWGHn76aEkO8pVtrGuLnPENyLrIIMEcCeM8Paz+8Tn2mnvXO PE0pEibDSEGcqQVT9zNEo5SL97xoehWdI4pKo3qKxLnLQrdIPV9Zw4+0exacCWaq zi9l02wB5KPgsljPcKnw+3SWGD5RTGlO3p9phQeHtRNJoiKVxFUIkJvgmf2OEwkP Rib7IttFMBUpyd7Byy0taofSLlBhpBaVaclmke/M5Mb+hQKWc/RgOCFdPUmgBuDF tJ3vBttWtc8O2w6AhNNrN2FpT2LI448= -----END CERTIFICATE-----Generated at Mon Apr 13 13:07:15 2026 by rpki-client