$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff06164f-0e3a-371b-ad49-4422ba3d64d2.roa File: ff06164f-0e3a-371b-ad49-4422ba3d64d2.roa (raw, json) Hash identifier: 8sUpYErMyix62DTG5/+4/oY3aYFRsnOChcoArt3TFy4= Subject key identifier: A8:68:59:3E:50:B9:71:AB:03:C6:56:66:5F:D0:B6:81:03:31:87:EF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C9EFC758A8F503AC40AE30180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff06164f-0e3a-371b-ad49-4422ba3d64d2.roa Signing time: Fri 23 Jan 2026 14:00:38 +0000 ROA not before: Fri 23 Jan 2026 14:00:38 +0000 ROA not after: Thu 23 Apr 2026 13:00:38 +0000 asID: 7029 IP address blocks: 71.28.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9e:fc:75:8a:8f:50:3a:c4:0a:e3:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 23 14:00:38 2026 GMT Not After : Apr 23 13:00:38 2026 GMT Subject: CN=dc9facbe-0df4-4130-80e1-52056cea5e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a1:1b:bf:93:32:72:57:14:89:c9:07:f8:6a: 63:74:60:f1:37:bc:6d:94:b6:07:6e:0e:78:44:8a: 20:56:ff:7c:db:fa:fe:48:79:59:de:aa:ca:06:72: fb:61:10:bc:c2:0b:4c:30:e2:53:6a:01:00:d3:7d: 61:46:4a:73:2f:e7:df:0e:35:c8:d0:25:ff:55:a2: 2f:7a:d5:0e:ef:5c:b0:4c:44:89:03:66:18:a0:f7: 7f:c1:84:5b:dc:4a:f6:6b:8d:f6:8e:9c:5d:c1:d4: 60:0a:4a:4a:52:27:eb:a5:c6:e8:98:77:cf:33:18: c5:8a:80:86:c4:73:9e:77:0c:f0:5c:d8:ca:e6:bc: bf:44:c4:d6:36:49:4a:a7:df:cc:be:e2:e7:47:f5: 7c:e7:3f:46:c7:e8:ec:6e:41:27:76:2d:d2:e3:9d: cb:0e:cf:5a:ad:c6:34:9a:25:f4:4a:57:9f:c3:00: a1:c5:45:58:56:a6:a9:95:d2:a2:6f:80:cc:b2:e5: c7:68:2f:cb:cf:d9:65:87:94:78:53:04:40:56:b2: a9:8d:4b:28:2d:89:e8:22:6c:af:6d:3a:62:ef:7c: 5d:37:69:31:58:f1:c7:b7:e8:97:c0:dc:d9:24:66: 5d:b0:77:c7:36:59:4b:d9:b9:24:93:b6:99:eb:05: 7c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:68:59:3E:50:B9:71:AB:03:C6:56:66:5F:D0:B6:81:03:31:87:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff06164f-0e3a-371b-ad49-4422ba3d64d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:fa:d4:45:e6:92:08:41:bb:c4:7f:fb:f6:f2:ae:8b:71:94: 8c:30:32:bb:ab:4b:fc:38:f4:06:e7:28:ec:f0:02:ea:a5:9b: 63:90:3e:a6:54:86:0f:7f:47:37:8f:f6:96:f9:f0:57:44:f0: 8b:f0:b6:d3:df:36:63:4e:59:b6:ad:2d:47:e5:b6:94:03:3e: 35:51:52:e2:48:85:de:58:0e:3c:09:6b:22:a1:62:53:e9:82: 15:fd:44:37:ab:0b:39:45:e1:f0:08:ce:a6:db:2d:79:71:ab: cf:06:fa:82:fe:f6:f2:dc:00:c4:1c:93:53:3e:91:ad:15:11: 9f:6c:2c:6a:1a:05:b3:d8:30:fc:c5:18:c6:13:65:ad:d6:7a: a8:22:21:41:54:ff:d8:8d:9f:b3:f5:f3:d0:b1:2f:bd:92:6c: 9e:84:17:2d:3c:52:ae:42:7d:17:47:ac:19:df:f0:7f:d2:3c: f6:d9:a2:43:91:7e:fe:47:31:aa:28:47:48:81:8b:79:3d:20: f5:b4:99:d1:ac:5d:0e:21:77:00:f6:da:37:f9:9d:8b:38:40: fd:09:fa:20:a2:ae:d9:cb:a8:75:c6:c8:20:a5:d9:52:03:85: 2d:6b:cf:d2:0d:5e:9e:59:16:5d:5c:a4:40:6b:35:b3:c7:c6: 1e:63:5a:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEye/HWKj1A6xArjAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDEyMzE0MDAzOFoXDTI2MDQyMzEzMDAzOFowLzEtMCsGA1UEAxMk ZGM5ZmFjYmUtMGRmNC00MTMwLTgwZTEtNTIwNTZjZWE1ZThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqEbv5MyclcUickH+GpjdGDxN7xtlLYHbg54 RIogVv982/r+SHlZ3qrKBnL7YRC8wgtMMOJTagEA031hRkpzL+ffDjXI0CX/VaIv etUO71ywTESJA2YYoPd/wYRb3Er2a432jpxdwdRgCkpKUifrpcbomHfPMxjFioCG xHOedwzwXNjK5ry/RMTWNklKp9/MvuLnR/V85z9Gx+jsbkEndi3S453LDs9arcY0 miX0SlefwwChxUVYVqapldKib4DMsuXHaC/Lz9llh5R4UwRAVrKpjUsoLYnoImyv bTpi73xdN2kxWPHHt+iXwNzZJGZdsHfHNllL2bkkk7aZ6wV8ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhoWT5QuXGrA8ZWZl/QtoEDMYfvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmYwNjE2NGYtMGUzYS0z NzFiLWFkNDktNDQyMmJhM2Q2NGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxyGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADP61EXmkghBu8R/+/byrotxlIwwMrurS/w49AbnKOzwAuqlm2OQPqZU hg9/RzeP9pb58FdE8IvwttPfNmNOWbatLUfltpQDPjVRUuJIhd5YDjwJayKhYlPp ghX9RDerCzlF4fAIzqbbLXlxq88G+oL+9vLcAMQck1M+ka0VEZ9sLGoaBbPYMPzF GMYTZa3WeqgiIUFU/9iNn7P189CxL72SbJ6EFy08Uq5CfRdHrBnf8H/SPPbZokOR fv5HMaooR0iBi3k9IPW0mdGsXQ4hdwD22jf5nYs4QP0J+iCirtnLqHXGyCCl2VID hS1rz9INXp5ZFl1cpEBrNbPHxh5jWoc= -----END CERTIFICATE-----Generated at Sun Mar 1 18:46:26 2026 by rpki-client