$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4aedf5bb-03e5-3ae4-80fb-6a89e13d6802.roa File: 4aedf5bb-03e5-3ae4-80fb-6a89e13d6802.roa (raw, json) Hash identifier: nvw/TY1+mWwtLzuVJcWTeH6hM5St2STQ6n5SQTO9PDk= Subject key identifier: 47:25:16:40:73:8C:01:AA:57:AD:A6:B6:A4:AB:B7:5E:B1:AD:8F:DE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7F9A915EDB4BDE9C299C74E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4aedf5bb-03e5-3ae4-80fb-6a89e13d6802.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 71.30.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:91:5e:db:4b:de:9c:29:9c:74:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=001615d5-8aab-413e-8ae8-22d08dabf3ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cf:aa:96:f6:83:b1:5a:ec:ce:bf:f2:a8:88: 30:69:39:7c:11:d5:9e:db:16:04:9b:e1:45:9b:92: c5:d3:f0:60:b4:15:75:e0:ed:50:2a:9b:c0:05:0c: 79:8c:3d:2d:14:52:16:fc:22:80:5e:a3:b7:b6:c8: 2d:78:70:20:5d:0f:b5:8e:67:6c:3d:d2:f8:58:71: be:68:a2:e3:6e:37:4d:f0:48:39:57:c5:2f:6d:c7: 85:14:cc:8a:c1:0e:98:99:92:35:e6:b4:e5:d2:70: f0:a5:15:07:45:31:af:99:50:62:84:da:26:dc:e4: f3:72:b4:bb:86:6b:96:6d:93:86:0d:e3:c5:ed:f8: f3:d0:39:77:b4:0e:31:45:d1:e4:3d:9a:8b:56:b0: be:e1:26:d7:6b:c2:2c:27:4d:d2:09:90:cd:7c:47: 7c:4d:90:e6:55:91:5f:d6:76:de:23:ff:d9:4f:46: d3:11:76:52:87:54:63:86:96:ee:2e:1c:da:88:c7: 93:80:f2:39:34:1a:6c:72:db:9c:88:51:58:a4:de: 50:97:90:30:98:a4:96:3c:90:4c:8d:a5:ed:cf:2d: 61:d6:3c:96:6d:79:f3:cd:fd:7b:7a:b1:60:59:bb: 0b:93:c8:9f:c4:eb:d7:e5:3b:e7:d0:5d:8c:4b:b6: b8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:25:16:40:73:8C:01:AA:57:AD:A6:B6:A4:AB:B7:5E:B1:AD:8F:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4aedf5bb-03e5-3ae4-80fb-6a89e13d6802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:c4:44:3c:2a:0a:ff:bf:84:b4:82:c8:91:0e:d3:77:bd:78: 47:64:d1:8e:39:31:2b:c4:fd:23:0c:ef:2a:76:5b:00:7d:f8: 80:e5:0c:cc:ef:6f:84:42:df:4e:e7:a9:bb:34:30:08:24:84: a8:63:56:14:9b:3a:30:c0:37:2f:d9:6f:52:50:2c:98:ea:5d: ae:ed:46:66:5c:ba:f4:34:27:a6:a2:ea:28:a5:03:a2:c8:20: 18:da:42:cf:bf:06:ff:e1:68:8a:ba:a4:6d:4f:27:df:8c:f1: f5:0f:58:ac:8a:55:95:61:1b:54:8c:b6:2e:69:ca:0e:bb:80: c7:f0:6b:86:c1:43:f1:0f:38:9c:61:8a:2c:4c:91:af:58:75: 2b:08:05:99:f6:2f:f0:fd:9d:f5:1b:19:40:10:9e:37:69:f8: b4:0b:8e:64:b2:03:d0:b7:60:96:e7:8c:d5:7b:6b:88:ae:53: 21:ea:ab:0c:76:f2:07:49:05:a7:e0:dc:da:54:e2:6f:06:24: 56:24:75:80:6a:19:ad:71:3b:3c:99:ec:0d:37:9d:d4:1e:08: 4d:00:04:86:d3:af:6b:42:71:e2:c9:bc:a1:32:5b:c7:f8:cb: 30:bb:5f:71:68:e8:8c:ee:5b:f3:7a:ac:ae:9c:7b:ab:14:fb: 0b:4e:01:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpFe20venCmcdOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MDAxNjE1ZDUtOGFhYi00MTNlLThhZTgtMjJkMDhkYWJmM2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8+qlvaDsVrszr/yqIgwaTl8EdWe2xYEm+FF m5LF0/BgtBV14O1QKpvABQx5jD0tFFIW/CKAXqO3tsgteHAgXQ+1jmdsPdL4WHG+ aKLjbjdN8Eg5V8UvbceFFMyKwQ6YmZI15rTl0nDwpRUHRTGvmVBihNom3OTzcrS7 hmuWbZOGDePF7fjz0Dl3tA4xRdHkPZqLVrC+4SbXa8IsJ03SCZDNfEd8TZDmVZFf 1nbeI//ZT0bTEXZSh1RjhpbuLhzaiMeTgPI5NBpsctuciFFYpN5Ql5AwmKSWPJBM jaXtzy1h1jyWbXnzzf17erFgWbsLk8ifxOvX5Tvn0F2MS7a4zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEclFkBzjAGqV62mtqSrt16xrY/eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGFlZGY1YmItMDNlNS0z YWU0LTgwZmItNmE4OWUxM2Q2ODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbERDwqCv+/hLSCyJEO03e9eEdk0Y45MSvE/SMM7yp2WwB9+IDlDMzv b4RC307nqbs0MAgkhKhjVhSbOjDANy/Zb1JQLJjqXa7tRmZcuvQ0J6ai6iilA6LI IBjaQs+/Bv/haIq6pG1PJ9+M8fUPWKyKVZVhG1SMti5pyg67gMfwa4bBQ/EPOJxh iixMka9YdSsIBZn2L/D9nfUbGUAQnjdp+LQLjmSyA9C3YJbnjNV7a4iuUyHqqwx2 8gdJBafg3NpU4m8GJFYkdYBqGa1xOzyZ7A03ndQeCE0ABIbTr2tCceLJvKEyW8f4 yzC7X3Fo6IzuW/N6rK6ce6sU+wtOASA= -----END CERTIFICATE-----Generated at Fri Apr 17 16:58:02 2026 by rpki-client