$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca405d9e-ba7d-32c7-9864-df8d4356bca0.roa File: ca405d9e-ba7d-32c7-9864-df8d4356bca0.roa (raw, json) Hash identifier: UXK9EOWlvhoKRwUK7yPD3aoVPrZrFLgh8lx7jBNTKDY= Subject key identifier: 9A:D8:4E:9E:AA:E1:24:DC:A8:1E:3F:1A:59:50:76:5D:93:24:A7:2B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DDA55D886FCCBF0576A8A2D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca405d9e-ba7d-32c7-9864-df8d4356bca0.roa Signing time: Sat 16 May 2026 13:00:31 +0000 ROA not before: Sat 16 May 2026 13:00:31 +0000 ROA not after: Fri 14 Aug 2026 13:00:31 +0000 asID: 7029 IP address blocks: 71.29.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:da:55:d8:86:fc:cb:f0:57:6a:8a:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 16 13:00:31 2026 GMT Not After : Aug 14 13:00:31 2026 GMT Subject: CN=4d7f3b02-b8a6-419d-938b-168f13b4b4de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9d:f4:80:ea:25:d7:4d:5c:11:1f:a5:87:78: f2:1c:e2:50:43:72:f7:0f:39:c0:e5:5b:70:d6:3c: 62:1c:e5:28:80:db:53:5b:68:8e:68:40:f5:ec:1a: 77:50:75:38:b7:fe:cc:4c:4b:6f:3c:3a:44:ee:b5: b9:4f:07:9b:8e:b2:8b:08:dd:3a:3a:42:f7:d0:d6: f2:32:8b:5c:81:7f:c8:f7:83:d9:f9:1a:98:91:f9: cf:ae:f0:0f:ea:64:38:a0:0f:ef:c0:c0:13:2c:45: 7c:fb:cc:91:14:f3:a9:8d:29:65:2f:26:a1:2e:47: b4:d1:71:7f:f1:9c:91:06:57:10:60:16:80:7f:48: 50:e3:a3:06:e2:97:da:ae:31:d9:c1:dc:c1:b7:e5: fd:d1:22:90:74:05:f3:bf:f8:d2:8d:ff:f7:d4:53: ea:5a:49:7b:a6:ff:33:b5:47:02:ad:b0:b5:52:a6: 1d:fb:b2:b2:a5:7e:2d:ae:e7:64:56:e0:04:3d:6a: 6d:b4:f5:27:7d:9a:44:05:35:0b:41:9a:61:70:04: 49:c8:81:b2:f1:b7:4b:46:1e:20:f6:1a:3c:21:4f: 2e:c9:59:b1:ea:a6:43:f4:11:85:86:86:28:1b:7b: f1:b0:fa:07:24:60:fb:c8:e3:73:80:e1:4c:47:fd: a0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D8:4E:9E:AA:E1:24:DC:A8:1E:3F:1A:59:50:76:5D:93:24:A7:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca405d9e-ba7d-32c7-9864-df8d4356bca0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:48:e8:ea:aa:58:eb:fe:d2:35:9d:77:2c:b8:5f:d6:7b:8d: dc:49:1e:2b:ec:be:e7:a2:0d:be:23:91:c1:19:77:c8:2d:12: 15:ba:df:73:0d:dc:8b:f2:de:a8:9e:01:29:ed:7b:19:0b:73: 4c:7b:f8:0f:3e:bf:50:07:0d:72:fe:3f:8c:50:ca:60:27:66: 2a:9d:34:77:68:1f:63:49:ce:10:5d:68:f7:ac:57:9b:2f:cf: 72:2f:dc:1a:93:e6:a7:ec:aa:57:46:84:28:a7:ee:a5:9e:74: 47:bd:e2:da:ac:16:05:e5:26:d2:89:f2:d5:60:5e:bd:74:24: df:8c:66:a0:14:5d:7e:bf:e8:fb:08:99:77:de:ae:07:2b:6c: ff:53:68:2e:00:5e:ae:4a:ac:dd:50:c7:13:fd:32:a9:b6:9d: 36:5a:26:9f:8f:d2:a5:ba:36:0b:7f:f5:01:99:64:8e:53:fc: 67:b5:f6:df:74:a9:bc:8c:8d:36:61:9e:b4:48:16:53:12:a8: 84:63:22:61:2b:42:f5:34:a1:75:75:a2:05:35:af:10:b3:e0: a7:9b:92:7b:f9:2f:58:75:de:73:54:c6:75:41:73:05:72:c2: a5:3a:90:8b:82:37:c1:39:7a:72:75:32:83:a9:ef:a4:f2:78: b8:23:40:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3aVdiG/MvwV2qKLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxNjEzMDAzMVoXDTI2MDgxNDEzMDAzMVowLzEtMCsGA1UEAxMk NGQ3ZjNiMDItYjhhNi00MTlkLTkzOGItMTY4ZjEzYjRiNGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi530gOol101cER+lh3jyHOJQQ3L3DznA5Vtw 1jxiHOUogNtTW2iOaED17Bp3UHU4t/7MTEtvPDpE7rW5TwebjrKLCN06OkL30Nby MotcgX/I94PZ+RqYkfnPrvAP6mQ4oA/vwMATLEV8+8yRFPOpjSllLyahLke00XF/ 8ZyRBlcQYBaAf0hQ46MG4pfarjHZwdzBt+X90SKQdAXzv/jSjf/31FPqWkl7pv8z tUcCrbC1UqYd+7KypX4trudkVuAEPWpttPUnfZpEBTULQZphcARJyIGy8bdLRh4g 9ho8IU8uyVmx6qZD9BGFhoYoG3vxsPoHJGD7yONzgOFMR/2gHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrYTp6q4STcqB4/GllQdl2TJKcrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2E0MDVkOWUtYmE3ZC0z MmM3LTk4NjQtZGY4ZDQzNTZiY2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx2WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlI6OqqWOv+0jWddyy4X9Z7jdxJHivsvueiDb4jkcEZd8gtEhW633MN 3Ivy3qieASntexkLc0x7+A8+v1AHDXL+P4xQymAnZiqdNHdoH2NJzhBdaPesV5sv z3Iv3BqT5qfsqldGhCin7qWedEe94tqsFgXlJtKJ8tVgXr10JN+MZqAUXX6/6PsI mXfergcrbP9TaC4AXq5KrN1QxxP9Mqm2nTZaJp+P0qW6Ngt/9QGZZI5T/Ge19t90 qbyMjTZhnrRIFlMSqIRjImErQvU0oXV1ogU1rxCz4Kebknv5L1h13nNUxnVBcwVy wqU6kIuCN8E5enJ1MoOp76TyeLgjQNE= -----END CERTIFICATE-----Generated at Thu May 28 17:44:36 2026 by rpki-client