$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d57da0e6-f691-31f3-9cdb-493375eb5d74.roa File: d57da0e6-f691-31f3-9cdb-493375eb5d74.roa (raw, json) Hash identifier: 5kidS4arR7JhFtdQ+7vx6DqplGbdHt9PqknPX6x+2os= Subject key identifier: B7:5D:EF:44:0F:4B:C0:7A:06:44:E6:8E:E3:5B:76:92:F4:C0:73:4E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7F9A9142ABD1EEA960114320 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d57da0e6-f691-31f3-9cdb-493375eb5d74.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 71.29.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:91:42:ab:d1:ee:a9:60:11:43:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=8f8e92a0-82eb-4c27-8a26-e38478075a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:15:f1:44:87:db:72:78:7d:81:42:03:4f:d6: 30:70:16:46:3f:86:86:49:9a:d9:54:53:3c:56:b9: 86:2b:16:23:7e:00:d1:00:0a:0b:84:16:c8:3d:8c: e1:c1:a6:e3:be:3a:b8:4b:ce:95:c4:67:f2:b4:0f: d0:74:1a:3f:3a:dd:00:18:3f:17:46:8a:81:06:8f: a7:a1:66:78:c6:01:9d:a7:c3:74:20:86:ea:ca:39: 33:dc:df:08:83:88:55:9b:0b:fb:a5:9b:f0:7b:35: 18:35:37:fd:89:4c:dc:67:de:03:21:37:e4:7e:ca: 2d:36:b9:75:9a:80:9a:8f:49:f5:59:d7:31:b8:ef: 34:5c:b9:ff:d7:42:f6:3c:2d:f6:ee:39:fc:b2:0e: ff:86:55:bf:8c:5b:33:ed:64:62:53:68:0a:62:e2: 24:ad:69:c7:f3:a7:43:28:96:bc:94:d1:16:8a:68: cb:dd:a6:2b:d3:8a:ac:86:62:36:83:68:0c:65:c0: f6:d0:63:4c:19:cd:73:7b:19:03:a1:8d:a9:44:43: 1b:b3:d1:73:f1:b6:5c:aa:86:f8:07:41:07:b2:55: b0:78:da:2b:b7:71:41:d9:dd:99:6d:4b:c6:8a:09: a0:33:c8:b9:b7:4c:77:b2:e7:a0:c4:3f:ad:d8:a4: 3b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5D:EF:44:0F:4B:C0:7A:06:44:E6:8E:E3:5B:76:92:F4:C0:73:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d57da0e6-f691-31f3-9cdb-493375eb5d74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:45:9e:c2:b9:7d:ee:6a:48:a9:2c:3d:61:aa:7f:32:e6:fa: c9:fa:74:3d:a5:da:12:35:42:80:12:45:d8:5a:96:e3:e1:a0: 4b:60:cc:db:d5:44:fa:ba:78:64:7b:34:bc:71:6c:ce:9d:46: a5:a4:3c:71:cd:53:9d:8a:57:9e:c9:dc:3d:42:36:55:d2:dc: da:9d:70:14:0c:ef:fe:37:80:29:2e:e6:bd:c0:d1:40:51:24: bb:cc:68:a0:93:f7:ab:33:ac:d4:c3:6f:44:b5:48:0c:f1:e2: cd:fa:6d:c2:c4:1c:0f:bb:df:d2:07:7c:5b:4c:dc:3c:9c:37: 10:60:3b:f5:dd:08:a5:da:c3:6e:a4:a4:44:aa:d6:7a:b6:64: 4b:a4:56:d5:88:3f:b2:4b:5f:33:58:26:8c:59:91:f8:fb:56: 99:39:3c:98:e2:fa:c9:6a:ea:28:72:1a:24:e8:b8:07:94:aa: e8:a0:f5:2a:9d:2b:b4:2e:3b:df:8e:95:60:dc:f7:22:b5:13: 60:b3:1d:7c:36:97:37:ea:e7:b8:96:af:11:6e:de:a8:e4:4c: af:6a:6d:ad:c4:d7:83:7b:37:f6:3c:08:93:a8:67:20:27:b4: da:65:3c:0a:b2:35:7a:14:0c:b6:ae:af:f9:8d:4d:89:10:f9: 19:eb:4b:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpFCq9HuqWARQyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk OGY4ZTkyYTAtODJlYi00YzI3LThhMjYtZTM4NDc4MDc1YTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBXxRIfbcnh9gUIDT9YwcBZGP4aGSZrZVFM8 VrmGKxYjfgDRAAoLhBbIPYzhwabjvjq4S86VxGfytA/QdBo/Ot0AGD8XRoqBBo+n oWZ4xgGdp8N0IIbqyjkz3N8Ig4hVmwv7pZvwezUYNTf9iUzcZ94DITfkfsotNrl1 moCaj0n1WdcxuO80XLn/10L2PC327jn8sg7/hlW/jFsz7WRiU2gKYuIkrWnH86dD KJa8lNEWimjL3aYr04qshmI2g2gMZcD20GNMGc1zexkDoY2pREMbs9Fz8bZcqob4 B0EHslWweNort3FB2d2ZbUvGigmgM8i5t0x3suegxD+t2KQ7swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdd70QPS8B6BkTmjuNbdpL0wHNOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDU3ZGEwZTYtZjY5MS0z MWYzLTljZGItNDkzMzc1ZWI1ZDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpFnsK5fe5qSKksPWGqfzLm+sn6dD2l2hI1QoASRdhaluPhoEtgzNvV RPq6eGR7NLxxbM6dRqWkPHHNU52KV57J3D1CNlXS3NqdcBQM7/43gCku5r3A0UBR JLvMaKCT96szrNTDb0S1SAzx4s36bcLEHA+739IHfFtM3DycNxBgO/XdCKXaw26k pESq1nq2ZEukVtWIP7JLXzNYJoxZkfj7Vpk5PJji+slq6ihyGiTouAeUquig9Sqd K7QuO9+OlWDc9yK1E2CzHXw2lzfq57iWrxFu3qjkTK9qba3E14N7N/Y8CJOoZyAn tNplPAqyNXoUDLaur/mNTYkQ+RnrS6A= -----END CERTIFICATE-----Generated at Fri Apr 17 18:05:40 2026 by rpki-client