$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a661af9c-80ea-344c-ac05-94e45117320a.roa File: a661af9c-80ea-344c-ac05-94e45117320a.roa (raw, json) Hash identifier: d4Psw9iVXWZOZyhVOSnbRniwX5V5MkaXv9MbEI8sYXg= Subject key identifier: 07:8F:1E:7C:3C:B8:B4:08:4B:80:C1:FD:B4:F1:C3:44:08:23:6B:E3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7F9A916B5DC65C1319CACD80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a661af9c-80ea-344c-ac05-94e45117320a.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 71.30.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:91:6b:5d:c6:5c:13:19:ca:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=dab7a508-959d-4c1a-aba5-5d65406928e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:61:b9:0a:9f:ba:72:2e:f3:ba:d6:b6:6c: 02:98:3e:e6:5b:96:12:fc:51:90:24:c6:91:30:9b: d7:f5:b6:ef:d5:4e:79:00:ec:de:c7:45:d5:f4:4e: 39:c2:c6:9f:2f:85:29:f3:98:ba:7d:78:e6:1d:b5: 59:fd:e8:a0:43:80:15:6b:6b:dc:66:2a:bd:e2:9b: 08:65:fc:be:2b:9c:43:d6:b1:aa:36:2d:b1:fd:8f: c3:c7:1f:8d:e7:ad:66:89:af:6a:33:f0:e2:fd:51: c3:95:a3:61:a3:9e:d7:c8:2f:0c:ce:63:f8:30:25: ff:19:b5:86:df:c2:b0:fe:58:b0:14:1b:b2:06:ce: bc:28:61:bd:a8:dd:d0:24:eb:12:70:fc:bc:47:c1: 14:53:54:01:ef:ba:c2:dc:4a:c3:1d:28:68:e0:f6: 0c:03:04:b8:0d:a1:e3:51:22:69:11:87:62:59:8b: a3:4c:c4:86:63:38:7c:ca:71:23:f4:4f:67:d0:ca: d2:bc:5a:bb:cc:b8:ff:5b:31:d9:ec:1d:c4:a6:d0: ff:86:be:60:47:96:cf:63:fd:94:72:e1:82:9c:d7: 63:5a:8e:19:f7:45:4a:81:a0:70:91:31:2c:4b:f7: 0f:3a:e2:9c:fa:d3:01:fa:f6:3c:8b:1f:3d:a3:0b: ac:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8F:1E:7C:3C:B8:B4:08:4B:80:C1:FD:B4:F1:C3:44:08:23:6B:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a661af9c-80ea-344c-ac05-94e45117320a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ab:90:3a:80:c3:82:6d:fc:26:7f:66:f7:e4:18:ad:9e:c4: e2:19:1b:9f:d7:4c:35:46:a9:42:5a:f4:c5:37:2f:28:81:40: bc:f9:47:a4:da:e9:d7:2d:72:b3:90:0c:f1:42:05:56:2e:bc: 4d:37:66:96:29:13:7d:0d:7d:b5:f8:b1:41:21:9d:c5:fb:fc: e8:66:a3:87:ea:bc:04:5f:c5:73:06:a3:e6:d5:78:bf:e5:34: e2:c4:78:db:13:b4:5a:1d:52:91:17:65:a6:c7:b6:80:76:1d: 8e:03:c2:70:a9:77:34:77:ed:a6:6a:33:94:80:b5:aa:51:f8: d8:63:72:ef:42:ac:93:ba:4c:fb:f5:d9:91:d3:00:11:88:99: e1:e7:de:ad:56:ae:62:ca:dd:bd:93:11:a0:e1:a0:12:1d:7f: c3:5d:aa:2c:d0:b2:a0:6d:69:c1:48:57:a2:eb:7e:d9:e5:6e: 49:1e:6a:70:93:19:07:3d:48:95:49:50:1f:cd:52:f5:74:1b: 00:5a:27:5c:d1:b2:27:1a:9d:33:62:9f:2e:08:5e:28:ad:0f: 86:82:42:71:a2:7a:a8:f0:9f:8a:cf:54:df:85:5c:78:46:d5: e4:27:7d:c0:c6:73:0c:5b:e9:17:6d:5e:c3:de:8a:d5:ad:94: 81:6f:d7:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpFrXcZcExnKzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZGFiN2E1MDgtOTU5ZC00YzFhLWFiYTUtNWQ2NTQwNjkyOGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKRhuQqfunIu87rWtmwCmD7mW5YS/FGQJMaR MJvX9bbv1U55AOzex0XV9E45wsafL4Up85i6fXjmHbVZ/eigQ4AVa2vcZiq94psI Zfy+K5xD1rGqNi2x/Y/Dxx+N561mia9qM/Di/VHDlaNho57XyC8MzmP4MCX/GbWG 38Kw/liwFBuyBs68KGG9qN3QJOsScPy8R8EUU1QB77rC3ErDHSho4PYMAwS4DaHj USJpEYdiWYujTMSGYzh8ynEj9E9n0MrSvFq7zLj/WzHZ7B3EptD/hr5gR5bPY/2U cuGCnNdjWo4Z90VKgaBwkTEsS/cPOuKc+tMB+vY8ix89owusJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAePHnw8uLQIS4DB/bTxw0QII2vjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTY2MWFmOWMtODBlYS0z NDRjLWFjMDUtOTRlNDUxMTczMjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx7RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCrkDqAw4Jt/CZ/ZvfkGK2exOIZG5/XTDVGqUJa9MU3LyiBQLz5R6Ta 6dctcrOQDPFCBVYuvE03ZpYpE30NfbX4sUEhncX7/Ohmo4fqvARfxXMGo+bVeL/l NOLEeNsTtFodUpEXZabHtoB2HY4DwnCpdzR37aZqM5SAtapR+Nhjcu9CrJO6TPv1 2ZHTABGImeHn3q1WrmLK3b2TEaDhoBIdf8NdqizQsqBtacFIV6LrftnlbkkeanCT GQc9SJVJUB/NUvV0GwBaJ1zRsicanTNiny4IXiitD4aCQnGieqjwn4rPVN+FXHhG 1eQnfcDGcwxb6RdtXsPeitWtlIFv19c= -----END CERTIFICATE-----Generated at Fri Apr 17 16:09:37 2026 by rpki-client