$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1b55f89-5ffd-3a4b-8e48-37e825835068.roa File: d1b55f89-5ffd-3a4b-8e48-37e825835068.roa (raw, json) Hash identifier: x2AoYLa7LxDzEcPdv2DpD9HV7ScgzCHxgP/42GK39pU= Subject key identifier: 5B:99:75:47:CD:43:AE:26:99:78:C1:7A:20:A4:D1:10:06:36:95:39 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0D842A9FBE324878C2F69672 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1b55f89-5ffd-3a4b-8e48-37e825835068.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 71.30.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:2a:9f:be:32:48:78:c2:f6:96:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=74822cd6-cbef-452e-91e1-01c3e9c6a60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7d:f3:76:5d:a1:f5:41:51:12:67:ea:cb:ae: b3:8d:5e:4c:e5:02:17:3b:b0:a0:ba:cd:c3:48:67: fa:1e:aa:7a:57:cf:0a:e5:d2:47:21:f9:d0:25:3e: bf:3b:c0:04:ef:07:c6:1a:35:be:47:10:f8:e2:8e: 8e:73:4c:ab:de:fc:6e:fc:90:2c:a8:82:06:53:65: d3:c9:de:ca:95:d6:7c:cc:37:5f:09:77:ac:2e:e1: e2:17:25:a2:48:9d:6c:11:1b:51:08:fb:68:6a:61: 4e:f3:05:a7:15:d8:85:d8:0b:3a:9f:80:b6:3c:0e: e1:3d:60:98:a9:5e:f8:0e:74:90:c2:dc:cc:ee:2d: 71:67:12:dc:10:ca:e4:d1:ee:e4:c7:35:6b:25:a9: dc:47:d5:b1:34:9d:36:20:f7:1b:60:94:d5:b8:c1: 5e:f0:3f:bb:61:69:36:b2:58:5e:cd:27:ed:84:9e: 01:9a:de:5f:e3:40:99:ed:00:35:74:bb:b2:73:9b: f7:78:43:a7:de:85:a7:6a:27:0f:12:66:f9:1d:31: 66:c6:bf:43:9a:19:96:cc:c9:e7:bd:fd:d3:cc:65: d9:5a:56:fe:bc:79:28:e8:05:a2:3d:be:2d:9d:59: af:bc:f9:8d:b4:e1:c4:f6:9e:7d:1f:1a:5e:35:2c: 1d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:99:75:47:CD:43:AE:26:99:78:C1:7A:20:A4:D1:10:06:36:95:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1b55f89-5ffd-3a4b-8e48-37e825835068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:6a:2f:83:be:ca:26:c4:3f:34:2b:fe:2e:69:c7:38:0c:b5: 6d:1b:d9:c5:59:ed:b9:62:c6:84:52:ba:ee:e0:bf:d6:9e:55: 7f:e7:f3:e1:7b:27:f3:10:f3:4e:53:2f:b9:b0:1e:d4:0c:7d: a0:36:2a:78:61:2a:c1:ca:94:aa:b6:58:59:53:c2:63:1b:11: 0f:1e:b9:48:09:2d:5b:ed:86:97:bd:63:3e:87:4c:e8:0e:96: bd:4e:e2:95:30:98:68:46:bf:39:5d:b9:81:13:23:4c:4a:e1: 1e:8d:ba:ea:d5:d1:2e:5f:b6:6c:2b:b2:2f:f2:b8:33:a6:6d: d9:cf:0e:7a:8c:27:7e:b9:22:13:c3:08:7f:e5:5d:db:70:72: 3d:a4:cb:b0:33:c1:41:fe:28:ef:99:22:7f:f5:82:c9:5a:a4: 12:99:eb:8b:0c:ff:95:61:00:d4:55:17:a4:97:fe:f9:f8:f9: fe:ee:bb:7b:f1:8a:5f:bd:37:78:96:64:03:8c:cc:6f:55:a8: e5:49:50:28:a1:fd:cd:f8:14:0b:c5:8c:33:6f:3c:c4:57:c4: eb:21:0e:0e:41:12:28:5a:de:74:30:c0:1f:ea:c3:c4:b6:ee: ac:9c:ac:38:0e:5d:0a:e1:69:2f:50:2f:b8:e4:3e:24:5a:eb: b9:05:58:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NhCqfvjJIeML2lnIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk NzQ4MjJjZDYtY2JlZi00NTJlLTkxZTEtMDFjM2U5YzZhNjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH3zdl2h9UFREmfqy66zjV5M5QIXO7Cgus3D SGf6Hqp6V88K5dJHIfnQJT6/O8AE7wfGGjW+RxD44o6Oc0yr3vxu/JAsqIIGU2XT yd7KldZ8zDdfCXesLuHiFyWiSJ1sERtRCPtoamFO8wWnFdiF2As6n4C2PA7hPWCY qV74DnSQwtzM7i1xZxLcEMrk0e7kxzVrJancR9WxNJ02IPcbYJTVuMFe8D+7YWk2 slhezSfthJ4Bmt5f40CZ7QA1dLuyc5v3eEOn3oWnaicPEmb5HTFmxr9DmhmWzMnn vf3TzGXZWlb+vHko6AWiPb4tnVmvvPmNtOHE9p59HxpeNSwdxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuZdUfNQ64mmXjBeiCk0RAGNpU5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDFiNTVmODktNWZmZC0z YTRiLThlNDgtMzdlODI1ODM1MDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZqL4O+yibEPzQr/i5pxzgMtW0b2cVZ7blixoRSuu7gv9aeVX/n8+F7 J/MQ805TL7mwHtQMfaA2KnhhKsHKlKq2WFlTwmMbEQ8euUgJLVvthpe9Yz6HTOgO lr1O4pUwmGhGvzlduYETI0xK4R6NuurV0S5ftmwrsi/yuDOmbdnPDnqMJ365IhPD CH/lXdtwcj2ky7AzwUH+KO+ZIn/1gslapBKZ64sM/5VhANRVF6SX/vn4+f7uu3vx il+9N3iWZAOMzG9VqOVJUCih/c34FAvFjDNvPMRXxOshDg5BEiha3nQwwB/qw8S2 7qycrDgOXQrhaS9QL7jkPiRa67kFWGQ= -----END CERTIFICATE-----Generated at Sat Jun 13 06:05:11 2026 by rpki-client