$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ecf8b3-b1d0-328e-b28d-0fd5c239f166.roa File: 95ecf8b3-b1d0-328e-b28d-0fd5c239f166.roa (raw, json) Hash identifier: oe7UpAS63V6YBms98CepuEv4wcWAKPWlPuljI57HpPk= Subject key identifier: 5C:11:81:CC:DD:7F:D2:F7:B8:87:47:17:A9:EF:A4:3F:53:53:87:6F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0D842A21732774D9D39EB780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ecf8b3-b1d0-328e-b28d-0fd5c239f166.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 71.29.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:2a:21:73:27:74:d9:d3:9e:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=883fdfca-f7e5-4b09-9e74-4ef5138de557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d5:e4:b6:4a:66:e9:31:87:47:e5:15:d1:ef: 2f:73:69:54:27:39:4d:58:a9:0d:f8:e1:a4:09:07: 4b:10:26:2e:78:1a:85:52:2d:c2:65:c4:82:0f:cd: 8c:c1:0b:36:23:49:c2:55:8a:5e:29:66:74:48:1e: 60:54:3b:69:bd:5d:7a:02:ff:1f:d0:ec:ac:aa:51: fa:3b:60:0d:8c:43:60:91:bc:10:0f:11:46:b9:a8: cd:d8:65:52:3c:66:d6:b8:0f:f9:78:b1:c2:5b:03: 04:f5:a9:32:de:11:b9:6e:f7:c9:27:46:e1:2c:db: ce:fa:61:e8:ca:2d:61:40:0c:da:08:6e:6f:d1:e5: ed:fa:d3:75:02:d5:57:16:2d:32:8b:3b:04:15:83: b9:c3:b8:c2:dc:e6:e4:2a:59:b9:a9:cc:2a:e0:d3: 07:45:29:a4:d0:15:a5:a9:c9:8c:e9:8a:89:e7:43: 6a:1d:e9:cc:fb:0f:74:f3:5d:ce:70:dd:e2:b8:9d: ae:2d:ec:ba:22:95:cf:b5:de:49:07:42:c6:f4:7f: de:35:2b:81:fe:9b:98:47:9e:53:4c:a5:b4:a6:93: 11:b2:49:35:fd:bf:9d:69:d1:b6:3d:7a:0c:9a:96: 56:5c:c2:12:26:88:81:d8:3e:b3:95:0e:ee:40:a5: 43:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:11:81:CC:DD:7F:D2:F7:B8:87:47:17:A9:EF:A4:3F:53:53:87:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ecf8b3-b1d0-328e-b28d-0fd5c239f166.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:8c:bb:87:12:f0:1c:4a:4b:5d:93:ee:8d:c2:65:a9:ab:f5: af:80:6b:38:bf:4f:26:2b:8d:86:18:7b:d9:d3:ff:5f:a0:f9: 2d:51:e4:3c:8a:cf:55:77:5a:47:b8:d5:90:ef:26:2b:4d:24: ee:7b:22:63:10:31:a8:4e:c8:14:a5:22:57:47:e3:c7:b0:1f: 35:5b:fd:04:86:9e:42:f7:6a:44:44:8f:bb:85:bc:d9:d9:6e: f5:30:94:cc:21:cc:ca:a9:fd:c6:94:5d:31:01:8d:0b:26:89: 9b:8b:f3:01:04:22:94:5f:ce:8c:15:a4:11:49:da:17:14:6e: 52:87:59:88:3b:91:d7:d0:e0:94:6f:6e:1f:e1:65:76:30:83: f0:0f:bd:dd:df:d9:4d:dd:c3:c2:13:8f:8a:b6:16:99:4b:d0: 23:8d:73:06:43:da:3e:66:e0:13:72:02:0c:2e:86:bf:6c:32: af:fb:eb:f8:f2:14:ce:1c:76:99:6e:78:14:fa:49:93:ff:5a: 0a:0e:61:1b:17:76:14:16:32:98:67:fb:b6:20:89:aa:8b:71: 3d:07:92:19:aa:fd:e2:50:bd:ac:05:f8:d3:12:27:58:e0:f1: 7d:51:5f:ff:58:e6:91:06:94:1a:39:ca:9a:91:63:11:6d:d4: 43:f4:63:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NhCohcyd02dOet4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk ODgzZmRmY2EtZjdlNS00YjA5LTllNzQtNGVmNTEzOGRlNTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldXktkpm6TGHR+UV0e8vc2lUJzlNWKkN+OGk CQdLECYueBqFUi3CZcSCD82MwQs2I0nCVYpeKWZ0SB5gVDtpvV16Av8f0OysqlH6 O2ANjENgkbwQDxFGuajN2GVSPGbWuA/5eLHCWwME9aky3hG5bvfJJ0bhLNvO+mHo yi1hQAzaCG5v0eXt+tN1AtVXFi0yizsEFYO5w7jC3ObkKlm5qcwq4NMHRSmk0BWl qcmM6YqJ50NqHenM+w90813OcN3iuJ2uLey6IpXPtd5JB0LG9H/eNSuB/puYR55T TKW0ppMRskk1/b+dadG2PXoMmpZWXMISJoiB2D6zlQ7uQKVDAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwRgczdf9L3uIdHF6nvpD9TU4dvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTVlY2Y4YjMtYjFkMC0z MjhlLWIyOGQtMGZkNWMyMzlmMTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx1oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiMu4cS8BxKS12T7o3CZamr9a+Aazi/TyYrjYYYe9nT/1+g+S1R5DyK z1V3Wke41ZDvJitNJO57ImMQMahOyBSlIldH48ewHzVb/QSGnkL3akREj7uFvNnZ bvUwlMwhzMqp/caUXTEBjQsmiZuL8wEEIpRfzowVpBFJ2hcUblKHWYg7kdfQ4JRv bh/hZXYwg/APvd3f2U3dw8ITj4q2FplL0CONcwZD2j5m4BNyAgwuhr9sMq/76/jy FM4cdplueBT6SZP/WgoOYRsXdhQWMphn+7YgiaqLcT0Hkhmq/eJQvawF+NMSJ1jg 8X1RX/9Y5pEGlBo5ypqRYxFt1EP0Y8I= -----END CERTIFICATE-----Generated at Sat Jun 13 07:23:41 2026 by rpki-client