$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d56405e-e032-3af5-8624-0dff99d29290.roa File: 4d56405e-e032-3af5-8624-0dff99d29290.roa (raw, json) Hash identifier: rfDTPkBPMd2ipTgrNmfjQuS1DkeUkokK/mfzYqtUrMU= Subject key identifier: 40:D3:8C:64:43:1F:AD:CE:7B:87:90:FA:AA:8D:B0:68:4E:7D:92:A3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7F9A9130CBEA93B291A27FC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d56405e-e032-3af5-8624-0dff99d29290.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 71.29.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:91:30:cb:ea:93:b2:91:a2:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=fb4e3691-eec2-457b-8df4-63f758bcc7eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8c:a2:2c:9a:32:b2:0e:78:62:6a:73:de:97: da:f6:5f:0b:d5:af:42:ea:da:2e:21:9d:d1:8f:5e: df:35:39:78:be:ff:97:d1:7c:c3:08:90:97:4f:75: 36:28:9b:3b:99:e8:ed:57:07:50:18:b7:49:cd:80: 23:be:7c:34:23:3c:da:cd:e0:41:2a:8e:11:c0:d6: d1:a4:4b:87:a2:32:fc:c9:8a:de:b1:b5:3b:7e:30: dc:90:5d:bc:62:8b:b6:ed:fb:38:c2:eb:eb:e0:58: 1c:44:53:00:e4:06:b0:73:df:ff:3d:28:7a:52:49: 62:39:21:a9:92:1d:34:50:f1:71:69:d4:29:15:07: fb:ec:c1:b7:a0:5b:f5:ba:cb:67:bf:60:2d:f7:9a: 3a:73:d5:51:25:c2:01:d4:45:f3:a7:bd:b2:4b:d1: 4a:e8:34:73:5b:b3:ad:42:c5:25:89:0f:ee:b7:67: 32:77:06:52:b6:46:3d:43:b6:28:2f:1a:a9:f9:31: 75:f0:0b:cb:27:2b:3c:7c:b4:69:86:9d:05:9d:db: 9d:b2:2c:a0:42:df:d1:17:60:d7:34:4a:6a:fa:ce: ca:cc:59:1d:f4:89:2e:20:88:ce:0c:69:9d:a2:0d: 05:75:b2:56:e8:4c:a2:09:6e:1b:f2:70:91:4e:6c: d3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D3:8C:64:43:1F:AD:CE:7B:87:90:FA:AA:8D:B0:68:4E:7D:92:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d56405e-e032-3af5-8624-0dff99d29290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:64:77:c8:1d:5f:d6:9e:c5:13:28:47:bc:fb:fa:24:de:40: 09:a0:81:34:43:6c:38:68:d7:4e:1a:3d:7f:20:c5:5c:a3:c2: 80:03:c6:5b:4d:68:0b:b3:00:b1:db:d5:42:24:3d:9b:2d:7a: 8a:de:48:ac:1a:f7:9d:02:d8:df:7a:63:58:b8:e5:64:a4:3a: 91:39:3f:5b:dd:72:3b:db:74:2a:7b:2d:e3:90:fd:b6:63:1a: b0:1f:d0:99:14:a9:55:52:90:81:46:c4:d9:c3:36:56:e1:8e: 61:1e:51:1d:2f:92:f1:88:19:89:84:14:36:ff:dd:47:09:83: 84:a3:90:f7:28:ad:cf:a1:91:fb:ea:90:58:27:8c:4e:be:41: 94:6a:1e:0e:79:1a:6d:94:30:f9:7e:b4:35:62:53:67:bd:bf: 0f:cc:90:11:ff:a8:93:dc:81:c4:18:7d:e4:44:14:1e:53:b4: 04:17:60:98:2c:a3:45:31:3c:99:ef:fb:cb:41:3a:19:ef:f7: 38:25:e3:09:25:fc:77:6a:de:19:a1:35:a1:7e:b6:ce:90:eb: 56:11:ae:c7:21:4f:5f:25:16:37:b2:88:66:7c:bf:0f:02:00: 99:78:48:cc:49:26:71:da:b6:6a:89:67:75:97:5b:dd:39:c2: 03:78:88:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpEwy+qTspGif8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZmI0ZTM2OTEtZWVjMi00NTdiLThkZjQtNjNmNzU4YmNjN2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoyiLJoysg54Ympz3pfa9l8L1a9C6touIZ3R j17fNTl4vv+X0XzDCJCXT3U2KJs7mejtVwdQGLdJzYAjvnw0IzzazeBBKo4RwNbR pEuHojL8yYresbU7fjDckF28You27fs4wuvr4FgcRFMA5Aawc9//PSh6UkliOSGp kh00UPFxadQpFQf77MG3oFv1ustnv2At95o6c9VRJcIB1EXzp72yS9FK6DRzW7Ot QsUliQ/ut2cydwZStkY9Q7YoLxqp+TF18AvLJys8fLRphp0FndudsiygQt/RF2DX NEpq+s7KzFkd9IkuIIjODGmdog0FdbJW6EyiCW4b8nCRTmzTOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDTjGRDH63Oe4eQ+qqNsGhOfZKjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGQ1NjQwNWUtZTAzMi0z YWY1LTg2MjQtMGRmZjk5ZDI5MjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBkd8gdX9aexRMoR7z7+iTeQAmggTRDbDho104aPX8gxVyjwoADxltN aAuzALHb1UIkPZsteoreSKwa950C2N96Y1i45WSkOpE5P1vdcjvbdCp7LeOQ/bZj GrAf0JkUqVVSkIFGxNnDNlbhjmEeUR0vkvGIGYmEFDb/3UcJg4SjkPcorc+hkfvq kFgnjE6+QZRqHg55Gm2UMPl+tDViU2e9vw/MkBH/qJPcgcQYfeREFB5TtAQXYJgs o0UxPJnv+8tBOhnv9zgl4wkl/Hdq3hmhNaF+ts6Q61YRrschT18lFjeyiGZ8vw8C AJl4SMxJJnHatmqJZ3WXW905wgN4iNQ= -----END CERTIFICATE-----Generated at Fri Apr 17 07:20:14 2026 by rpki-client