$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4f11cf2-ebd2-37c6-91e3-d9019db7dff1.roa File: d4f11cf2-ebd2-37c6-91e3-d9019db7dff1.roa (raw, json) Hash identifier: beWzitoDXG9CZPUt6ooYt1+fNYQTFmvtEgAiC0CxS5c= Subject key identifier: 90:C1:C6:D9:F1:F5:0E:24:1E:FF:79:43:3C:92:28:75:98:E7:60:0C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0D842EE0D7594D0711E08940 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4f11cf2-ebd2-37c6-91e3-d9019db7dff1.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 71.28.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:2e:e0:d7:59:4d:07:11:e0:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=89d29663-6467-4e3c-8b01-8f8e5bb9c9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:30:c0:c8:d4:d2:b7:5e:c3:1e:ce:6a:8d: 73:f4:6e:11:79:26:2b:88:f4:70:36:a5:72:cb:24: 3b:0d:fb:d0:1a:c3:75:58:b5:93:a4:90:25:a5:2a: b5:1b:8a:61:82:93:3d:e2:4d:63:3f:57:c7:0a:d2: 1f:ba:10:b5:d5:ef:dd:79:a1:a1:fe:cc:18:cf:7e: 27:9a:bd:05:7b:95:c2:1d:61:34:55:87:37:a7:f7: 7a:e5:28:78:d1:0f:fa:a5:3c:e4:34:05:5c:5b:c9: 86:6e:a5:74:7b:9c:5b:7e:28:e4:76:8c:83:5c:23: 97:cc:f7:0d:02:96:2c:25:53:87:75:e3:d1:ce:f0: 49:09:76:3b:1a:81:69:b9:f2:2d:c5:55:0d:ab:2f: 17:29:4e:bf:7c:15:f1:37:aa:d6:28:8f:32:a2:da: 75:b5:27:4a:08:67:6d:b9:e4:ec:50:a0:3c:86:c1: fb:d0:42:90:f9:e9:2d:cf:aa:f1:55:94:10:f5:b5: d5:92:21:7b:c2:1b:ee:53:de:72:aa:a9:42:9c:7b: cb:b6:10:d2:57:49:55:e0:be:10:7a:0d:e9:8b:ae: b1:fb:18:1a:48:34:54:a6:ee:3d:47:a6:5a:e7:f1: be:7e:76:75:01:89:7a:7f:c3:a9:e6:d6:79:90:e4: b3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C1:C6:D9:F1:F5:0E:24:1E:FF:79:43:3C:92:28:75:98:E7:60:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4f11cf2-ebd2-37c6-91e3-d9019db7dff1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:35:87:7e:3a:75:1a:81:24:37:72:e7:dc:3c:e3:18:38:41: 56:1f:97:98:53:2e:24:e1:14:3d:b6:91:6d:dd:da:41:ba:b5: ba:d0:3c:91:b4:c3:0a:1f:ff:53:d8:01:b7:e8:b9:c9:fa:91: 6b:38:fd:5c:ac:d4:a3:d9:e9:77:31:36:82:0b:b3:bb:27:96: fa:f9:aa:d8:b9:26:e7:fb:7c:b6:87:12:64:81:b1:6b:87:ea: 34:d6:d4:23:9d:06:02:95:e9:ce:f0:a4:70:41:eb:1c:04:3a: 66:24:0f:02:6d:75:30:7e:1d:d8:6f:49:2a:b0:db:f9:7e:07: 65:e8:fc:cb:ec:26:b2:19:6b:82:bf:ff:5b:10:21:7d:d7:f3: cf:0a:0b:87:2d:86:09:7c:38:09:20:a5:37:7d:b8:34:59:21: 2e:85:e5:0d:c1:c5:e0:7d:65:b3:a5:df:60:0b:30:40:c6:83: 5c:74:9c:e6:a8:1a:a8:41:c1:0f:cc:c4:3b:c9:82:8d:f7:f3: fc:d0:a3:14:44:01:41:ff:7b:89:99:bf:61:9b:f4:21:8e:df: 67:f2:4a:5b:b1:92:cc:60:c1:54:5e:69:63:98:39:9d:42:11: aa:61:4b:8f:15:91:60:88:00:1d:28:cf:fb:e7:b6:a9:b9:94: 30:f8:b8:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NhC7g11lNBxHgiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk ODlkMjk2NjMtNjQ2Ny00ZTNjLThiMDEtOGY4ZTViYjljOWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrcwwMjU0rdewx7Oao1z9G4ReSYriPRwNqVy yyQ7DfvQGsN1WLWTpJAlpSq1G4phgpM94k1jP1fHCtIfuhC11e/deaGh/swYz34n mr0Fe5XCHWE0VYc3p/d65Sh40Q/6pTzkNAVcW8mGbqV0e5xbfijkdoyDXCOXzPcN ApYsJVOHdePRzvBJCXY7GoFpufItxVUNqy8XKU6/fBXxN6rWKI8yotp1tSdKCGdt ueTsUKA8hsH70EKQ+ektz6rxVZQQ9bXVkiF7whvuU95yqqlCnHvLthDSV0lV4L4Q eg3pi66x+xgaSDRUpu49R6Za5/G+fnZ1AYl6f8Op5tZ5kOSzkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDBxtnx9Q4kHv95QzySKHWY52AMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDRmMTFjZjItZWJkMi0z N2M2LTkxZTMtZDkwMTlkYjdkZmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRxzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQ1h346dRqBJDdy59w84xg4QVYfl5hTLiThFD22kW3d2kG6tbrQPJG0 wwof/1PYAbfoucn6kWs4/Vys1KPZ6XcxNoILs7snlvr5qti5Juf7fLaHEmSBsWuH 6jTW1COdBgKV6c7wpHBB6xwEOmYkDwJtdTB+HdhvSSqw2/l+B2Xo/MvsJrIZa4K/ /1sQIX3X888KC4cthgl8OAkgpTd9uDRZIS6F5Q3BxeB9ZbOl32ALMEDGg1x0nOao GqhBwQ/MxDvJgo338/zQoxREAUH/e4mZv2Gb9CGO32fySluxksxgwVReaWOYOZ1C EaphS48VkWCIAB0oz/vntqm5lDD4uG8= -----END CERTIFICATE-----Generated at Sat Jun 13 05:57:56 2026 by rpki-client