$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d56405e-e032-3af5-8624-0dff99d29290.roa File: 4d56405e-e032-3af5-8624-0dff99d29290.roa (raw, json) Hash identifier: zXD5PebUyJDgihTDGPaHhcqILEMGq9KgkT7halbTonA= Subject key identifier: 8F:8E:47:5D:C6:CB:65:75:F5:1A:CD:CA:DE:2E:47:C1:34:F7:AF:EE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F024230B2F75D0ED215558580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d56405e-e032-3af5-8624-0dff99d29290.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 71.29.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:30:b2:f7:5d:0e:d2:15:55:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=26bc7848-4307-491d-a142-9bcfad629b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:65:78:37:b0:f3:69:0a:78:a1:47:12:f9:ee: a2:7b:4a:ca:6c:df:85:24:58:40:91:4f:fe:54:1f: 8c:e8:df:a1:c9:b3:f7:69:59:da:83:c6:75:ac:f6: 0d:74:9e:ab:ed:4d:5a:ee:52:df:93:83:cf:31:ba: a6:2d:a7:cd:46:f4:e1:4f:05:53:1d:43:13:2f:d6: 30:7a:3a:55:a0:c6:bc:bd:6d:b1:e0:50:01:12:fc: b6:76:b9:da:92:ab:49:6f:01:e5:e4:70:92:f6:fb: ef:81:d8:94:90:cf:6e:3e:5c:57:2a:be:da:dd:c0: 5c:20:b8:4b:bc:5c:a8:1f:eb:57:c2:1a:08:69:56: 5a:61:0b:50:05:b4:49:7a:95:69:02:f0:ce:03:80: c5:3b:32:b7:d1:34:e5:8a:1e:3a:53:eb:af:15:7f: f8:7d:04:cb:70:0a:f5:5a:75:d4:fa:36:9d:38:03: 94:f2:95:48:82:57:a1:ff:28:86:da:3c:af:8f:95: cc:28:65:c2:2e:59:38:9f:50:0a:fe:3c:a6:57:9e: 25:28:7e:02:fc:e9:ea:be:18:25:10:80:dd:0e:18: ce:bf:0f:a4:df:cd:f4:ee:cb:d1:9d:4c:70:d5:92: 07:ee:da:cc:91:5b:36:f6:2e:66:5c:2a:da:a4:71: 2b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8E:47:5D:C6:CB:65:75:F5:1A:CD:CA:DE:2E:47:C1:34:F7:AF:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d56405e-e032-3af5-8624-0dff99d29290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:5f:d6:46:8b:fe:3d:00:f3:4a:86:6c:26:7d:d5:06:1e:25: 6b:36:52:88:f2:85:7d:44:1f:37:6b:32:12:ea:9c:9d:27:27: 09:88:49:46:bc:cf:6b:e6:e1:50:23:a4:9d:fc:9a:7b:6d:27: be:a0:6f:76:af:5b:75:72:e0:3e:98:53:0d:94:e1:da:62:c5: ba:24:9d:48:a4:3a:5e:b5:51:65:cf:dc:14:c7:e1:e0:a3:cd: ba:2d:07:fa:ad:f0:b5:09:d4:88:9b:83:61:10:82:3a:76:9d: 02:1a:4e:75:f9:98:49:be:b0:45:bb:a4:d8:e1:6a:82:b0:ad: 77:ac:2d:d7:8e:b2:de:10:83:65:be:1a:79:bb:a8:67:36:3b: f2:42:68:bf:c1:6c:0b:28:19:7c:40:b8:a9:39:f9:a6:da:69: 1d:68:68:06:99:8a:7c:f9:bd:10:ee:7c:56:f9:6e:f7:f4:41: fd:ef:61:e8:4d:60:e9:f5:13:02:f8:54:08:e0:96:cf:9a:3d: ec:94:f5:f8:ce:e5:5e:8b:7f:00:1e:95:8f:b9:28:ad:2e:98: 8e:6e:28:2a:4a:17:70:68:24:c3:fd:87:83:16:f2:ba:a8:cc: 0b:9d:83:45:f9:da:35:c5:fa:dc:53:ce:0b:6c:86:de:a8:ff: 1e:a3:b9:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjCy910O0hVVhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk MjZiYzc4NDgtNDMwNy00OTFkLWExNDItOWJjZmFkNjI5YjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymV4N7DzaQp4oUcS+e6ie0rKbN+FJFhAkU/+ VB+M6N+hybP3aVnag8Z1rPYNdJ6r7U1a7lLfk4PPMbqmLafNRvThTwVTHUMTL9Yw ejpVoMa8vW2x4FABEvy2drnakqtJbwHl5HCS9vvvgdiUkM9uPlxXKr7a3cBcILhL vFyoH+tXwhoIaVZaYQtQBbRJepVpAvDOA4DFOzK30TTlih46U+uvFX/4fQTLcAr1 WnXU+jadOAOU8pVIgleh/yiG2jyvj5XMKGXCLlk4n1AK/jymV54lKH4C/Onqvhgl EIDdDhjOvw+k38307svRnUxw1ZIH7trMkVs29i5mXCrapHErFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+OR13Gy2V19RrNyt4uR8E096/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGQ1NjQwNWUtZTAzMi0z YWY1LTg2MjQtMGRmZjk5ZDI5MjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFf1kaL/j0A80qGbCZ91QYeJWs2UojyhX1EHzdrMhLqnJ0nJwmISUa8 z2vm4VAjpJ38mnttJ76gb3avW3Vy4D6YUw2U4dpixboknUikOl61UWXP3BTH4eCj zbotB/qt8LUJ1Iibg2EQgjp2nQIaTnX5mEm+sEW7pNjhaoKwrXesLdeOst4Qg2W+ Gnm7qGc2O/JCaL/BbAsoGXxAuKk5+abaaR1oaAaZinz5vRDufFb5bvf0Qf3vYehN YOn1EwL4VAjgls+aPeyU9fjO5V6LfwAelY+5KK0umI5uKCpKF3BoJMP9h4MW8rqo zAudg0X52jXF+txTzgtsht6o/x6jufg= -----END CERTIFICATE-----Generated at Sun Sep 20 19:38:28 2026 by rpki-client