$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3611ae14-c367-3f02-83f5-e9996eb1e1e7.roa File: 3611ae14-c367-3f02-83f5-e9996eb1e1e7.roa (raw, json) Hash identifier: pn72APEWPQwUS9DWdsaKywwdWgun0a+jnESpfHwgf50= Subject key identifier: E7:2E:0D:F8:86:7A:0D:42:26:85:59:3A:48:E9:56:3E:78:12:96:09 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EF6FC92328DE9B2F446C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3611ae14-c367-3f02-83f5-e9996eb1e1e7.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 71.28.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:f6:fc:92:32:8d:e9:b2:f4:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=41893ee9-7e32-4fa2-bb72-8af00d8be75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6c:08:1b:7f:71:56:7e:83:1e:25:d7:45:05: 8b:0a:88:3f:c1:47:63:80:e3:38:ae:10:64:86:97: 43:15:f7:76:69:a6:90:3f:26:3e:17:5d:e7:d9:10: 77:35:33:ae:dc:e1:db:a2:d4:05:2a:43:1f:f6:c6: 1f:60:01:38:88:4c:e2:1c:79:4b:2c:2f:1f:32:f3: 74:f2:66:d7:d7:5d:15:d3:18:0d:cc:b6:6d:1b:ac: a2:4e:22:a3:28:47:05:87:5e:ae:61:45:73:6f:1d: 11:25:da:77:60:36:4f:2b:5b:56:d9:77:33:4e:27: 47:40:af:79:73:57:ad:1d:5d:37:d2:d7:d7:88:74: 66:86:c8:72:db:02:60:87:99:7f:1f:8c:51:5a:01: 5e:c9:0b:95:c8:70:3b:81:28:9f:0c:27:0c:f8:33: 4c:20:a5:c1:46:ab:4f:20:a3:69:fe:f2:3b:3a:97: 5f:3f:13:24:da:58:18:54:dd:2f:79:1e:ca:8a:95: 8a:0d:e3:b4:ec:ed:fc:df:89:27:fc:0a:29:55:3b: 5e:5e:8e:3d:a5:3c:88:06:82:0c:d6:42:ff:85:cd: dd:44:25:87:3b:d7:09:87:69:b8:30:f3:2e:94:5c: 62:c0:6a:20:3b:c6:d6:78:18:a4:fe:07:d2:b4:c3: e2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2E:0D:F8:86:7A:0D:42:26:85:59:3A:48:E9:56:3E:78:12:96:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3611ae14-c367-3f02-83f5-e9996eb1e1e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b8:49:21:cb:9e:cf:35:9d:aa:53:9c:07:59:a5:e7:a2:88: 9e:33:6e:cd:43:90:f8:18:1c:fd:26:0b:66:74:43:66:b7:48: 61:07:8e:71:b2:f5:08:c1:3e:92:fd:29:ac:31:c2:ec:2b:58: 23:e9:a5:2e:f6:a6:db:b0:4f:10:6c:a9:65:a8:6d:4d:45:5c: 74:ee:ed:04:9c:2d:06:7d:45:fb:de:35:7c:bf:6e:37:13:d7: 5e:2f:70:40:b1:00:66:eb:a6:98:c7:c9:82:31:02:d7:66:38: df:1d:68:25:10:5d:03:f4:81:57:bc:c5:9d:38:c6:42:0f:e9: 74:bc:0a:1b:e1:ee:84:b5:16:06:7b:73:06:c6:51:77:08:6f: 0c:b2:c5:e6:4b:ed:5e:13:4e:c4:26:a8:10:5b:47:ba:84:ec: 28:8d:6a:4d:c5:00:c2:ce:fb:16:18:e4:68:18:06:d7:d4:d0: fa:00:02:98:0a:c5:1e:ba:26:c7:5a:b3:11:83:ff:9e:81:b9: f2:8f:dd:4d:a1:76:bd:2e:42:f1:3c:3b:54:a8:cd:a4:33:b6: 70:89:24:6c:2d:6c:98:24:c2:69:e2:01:f2:2c:7c:89:dd:0f: 96:6f:cc:5b:fa:bf:9b:26:c6:84:1b:3e:82:39:62:5e:32:cd: de:94:91:01 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE4QTvb8kjKN6bL0RsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NDE4OTNlZTktN2UzMi00ZmEyLWJiNzItOGFmMDBkOGJlNzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmwIG39xVn6DHiXXRQWLCog/wUdjgOM4rhBk hpdDFfd2aaaQPyY+F13n2RB3NTOu3OHbotQFKkMf9sYfYAE4iEziHHlLLC8fMvN0 8mbX110V0xgNzLZtG6yiTiKjKEcFh16uYUVzbx0RJdp3YDZPK1tW2XczTidHQK95 c1etHV030tfXiHRmhshy2wJgh5l/H4xRWgFeyQuVyHA7gSifDCcM+DNMIKXBRqtP IKNp/vI7OpdfPxMk2lgYVN0veR7KipWKDeO07O3834kn/AopVTteXo49pTyIBoIM 1kL/hc3dRCWHO9cJh2m4MPMulFxiwGogO8bWeBik/gfStMPiywIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOcuDfiGeg1CJoVZOkjpVj54EpYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzYxMWFlMTQtYzM2Ny0z ZjAyLTgzZjUtZTk5OTZlYjFlMWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCRxwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAh7hJIcuezzWdqlOcB1ml56KInjNuzUOQ+Bgc/SYLZnRDZrdIYQeOcbL1 CME+kv0prDHC7CtYI+mlLvam27BPEGypZahtTUVcdO7tBJwtBn1F+941fL9uNxPX Xi9wQLEAZuummMfJgjEC12Y43x1oJRBdA/SBV7zFnTjGQg/pdLwKG+HuhLUWBntz BsZRdwhvDLLF5kvtXhNOxCaoEFtHuoTsKI1qTcUAws77FhjkaBgG19TQ+gACmArF Hromx1qzEYP/noG58o/dTaF2vS5C8Tw7VKjNpDO2cIkkbC1smCTCaeIB8ix8id0P lm/MW/q/mybGhBs+gjliXjLN3pSRAQ== -----END CERTIFICATE-----Generated at Sat Jun 13 07:18:57 2026 by rpki-client