$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d4cf01e-d2a3-3beb-8ea3-41c365188a9f.roa File: 3d4cf01e-d2a3-3beb-8ea3-41c365188a9f.roa (raw, json) Hash identifier: oN7miUw6aDjhfJp6qJP2un5tbH/dfQxXGWOOKTrSRWs= Subject key identifier: DB:55:42:6C:E1:E3:C0:1E:67:B5:1A:00:38:B3:5E:A6:B9:FB:1B:64 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F225D05F14CF152A2E4B34D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d4cf01e-d2a3-3beb-8ea3-41c365188a9f.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 71.30.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:05:f1:4c:f1:52:a2:e4:b3:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=cf7f889a-93c5-4c56-b7da-a1ad136f7b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:63:ca:d0:c1:20:48:b3:ac:92:d5:74:da:d5: c9:59:64:e0:c8:05:73:4c:e4:d6:87:db:2f:d8:87: eb:41:8f:ab:39:70:7e:05:6e:ca:95:c0:27:b7:b6: 6f:68:81:d1:ff:78:14:46:07:96:f3:dc:7f:79:65: 3f:6c:27:81:a1:f4:03:a2:be:b5:b3:2b:76:4f:68: be:4f:b3:d5:5a:cd:0f:88:da:2a:76:0e:38:4a:80: 28:7b:36:9a:37:e1:48:3f:6f:b2:10:af:b2:d6:4b: 4c:d5:93:6e:83:c0:88:73:50:d9:f4:95:5a:9e:22: 18:08:a4:60:0e:31:a2:4a:6a:54:51:92:e9:f4:c4: b4:5b:8a:9c:6d:b9:f0:59:02:a1:32:43:0a:48:16: 82:17:68:6f:c8:5a:ba:8e:c1:a5:03:2a:c8:65:b2: 4f:7b:09:a5:47:4d:8d:de:96:f8:e2:4a:3c:e7:79: f6:81:cb:a4:74:00:de:50:bb:0c:6f:8c:3f:96:0b: a3:9f:8f:a4:51:f1:44:91:64:33:d0:4c:3e:30:56: da:79:5f:2c:2f:da:bc:41:9d:fc:b0:2e:c3:2e:c6: 53:fc:5f:62:7d:88:76:2d:c3:ad:cb:c1:1e:36:04: 08:e4:c0:16:f2:0b:ad:de:2e:32:f9:e4:75:2f:b7: d4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:55:42:6C:E1:E3:C0:1E:67:B5:1A:00:38:B3:5E:A6:B9:FB:1B:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d4cf01e-d2a3-3beb-8ea3-41c365188a9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:84:de:a0:3c:cb:5f:39:e7:68:79:55:48:fd:61:32:27:73: 89:0c:c2:f8:ba:72:6a:6f:38:c7:b8:5c:ca:70:ed:5f:94:84: 44:92:67:6c:aa:66:7c:cd:7e:be:a0:ba:0d:08:e0:8c:66:5b: 4d:42:53:db:6c:a2:c2:a7:5b:60:1a:2d:19:2a:a8:20:b9:e4: b1:7a:12:50:6d:b1:29:3d:af:b6:c8:f4:d8:49:f8:b0:5f:17: 71:b8:2b:a8:1b:51:80:c3:f9:51:95:71:10:10:fc:62:09:f8: 47:01:fc:7b:37:e7:a9:3b:1d:5d:b1:8b:06:f5:ae:92:17:95: 73:4d:5f:59:9d:6c:7d:7d:0f:ed:07:0f:90:d3:73:3d:7f:1f: 94:54:64:a2:1d:59:90:d4:56:90:f7:78:0d:a2:13:de:ef:27: 62:63:93:93:c3:34:1b:3d:d9:7c:fe:dd:4b:37:20:67:3c:e8: 31:70:75:08:6c:b1:32:b3:40:96:a5:00:a5:9e:ca:c2:dc:de: 61:58:25:a3:b1:86:3a:b7:1b:90:93:7a:09:de:d3:12:32:e8: ed:25:24:d2:6f:82:fa:82:28:4c:61:8c:7d:ad:07:c0:54:01: 05:a9:e6:ff:2e:03:ab:a5:55:ef:4f:44:af:51:8f:9c:79:0f: 76:6a:8d:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXQXxTPFSouSzTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk Y2Y3Zjg4OWEtOTNjNS00YzU2LWI3ZGEtYTFhZDEzNmY3YjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGPK0MEgSLOsktV02tXJWWTgyAVzTOTWh9sv 2IfrQY+rOXB+BW7KlcAnt7ZvaIHR/3gURgeW89x/eWU/bCeBofQDor61syt2T2i+ T7PVWs0PiNoqdg44SoAoezaaN+FIP2+yEK+y1ktM1ZNug8CIc1DZ9JVaniIYCKRg DjGiSmpUUZLp9MS0W4qcbbnwWQKhMkMKSBaCF2hvyFq6jsGlAyrIZbJPewmlR02N 3pb44ko853n2gcukdADeULsMb4w/lgujn4+kUfFEkWQz0Ew+MFbaeV8sL9q8QZ38 sC7DLsZT/F9ifYh2LcOty8EeNgQI5MAW8gut3i4y+eR1L7fUYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtVQmzh48AeZ7UaADizXqa5+xtkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2Q0Y2YwMWUtZDJhMy0z YmViLThlYTMtNDFjMzY1MTg4YTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx4eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSE3qA8y18552h5VUj9YTInc4kMwvi6cmpvOMe4XMpw7V+UhESSZ2yq ZnzNfr6gug0I4IxmW01CU9tsosKnW2AaLRkqqCC55LF6ElBtsSk9r7bI9NhJ+LBf F3G4K6gbUYDD+VGVcRAQ/GIJ+EcB/Hs356k7HV2xiwb1rpIXlXNNX1mdbH19D+0H D5DTcz1/H5RUZKIdWZDUVpD3eA2iE97vJ2Jjk5PDNBs92Xz+3Us3IGc86DFwdQhs sTKzQJalAKWeysLc3mFYJaOxhjq3G5CTegne0xIy6O0lJNJvgvqCKExhjH2tB8BU AQWp5v8uA6ulVe9PRK9Rj5x5D3ZqjYc= -----END CERTIFICATE-----Generated at Tue Sep 22 14:43:10 2026 by rpki-client