$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ca3079d-831f-3002-9e2c-87c2c65a6570.roa File: 5ca3079d-831f-3002-9e2c-87c2c65a6570.roa (raw, json) Hash identifier: KmVVdxG+PzPfZHEiUJtMxryunesXe9oT0Os+0kC+znM= Subject key identifier: 25:6A:10:FE:3F:F6:07:32:84:47:78:4F:ED:88:BA:F5:E7:78:C1:14 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F4987F97AE12C74B4AF9F7100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ca3079d-831f-3002-9e2c-87c2c65a6570.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 71.28.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:f9:7a:e1:2c:74:b4:af:9f:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1e777c8f-3fd9-4026-b054-6a80b53e5a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:80:50:4a:9c:b1:46:ba:9f:d7:89:1d:f8:ff: 72:72:9b:13:53:fc:25:7d:fa:49:c6:54:2f:79:4f: 08:38:fd:0d:75:5b:86:e3:ea:e0:62:5c:ca:48:e0: dc:a9:c9:f0:a2:88:19:c5:64:bf:29:61:21:7d:60: 5f:cc:3a:f6:ee:6e:eb:fd:f3:19:e6:ed:5f:0b:c3: 54:c2:2d:b5:b8:9c:50:0d:d2:20:a8:9c:08:eb:94: f4:70:5e:c0:db:d2:d8:30:8d:d1:4b:41:d9:d8:01: 13:ea:ac:62:65:36:a4:e2:cf:22:59:ab:8a:cc:8b: b1:08:54:a0:7d:9a:41:e5:72:66:e3:f2:11:cf:2c: 76:5d:39:70:86:16:ea:c4:4c:d6:bf:8a:68:65:4b: e4:5b:06:31:1e:fd:32:d2:1a:a4:45:cf:40:64:73: 17:c9:02:bb:05:d2:f8:ff:a6:b4:14:03:dd:b2:43: 6d:fd:61:fb:af:ae:6c:9c:e8:28:4b:54:e9:98:d3: d0:12:b6:32:5b:fe:a7:7f:cf:9c:fe:59:4a:c1:93: 92:23:db:0a:f2:4f:a7:6f:fb:ac:8b:89:4d:3f:d1: ec:03:45:d9:73:22:45:de:74:4d:7e:b3:fa:2f:e3: 1a:86:a3:22:f3:02:4b:bb:d5:25:4d:55:1b:97:eb: 0d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6A:10:FE:3F:F6:07:32:84:47:78:4F:ED:88:BA:F5:E7:78:C1:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ca3079d-831f-3002-9e2c-87c2c65a6570.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:56:2c:16:a7:e6:b2:09:c2:db:f2:f0:bb:b5:af:35:2a:73: 02:82:bf:a5:0d:e7:81:ec:7a:56:a7:6e:40:54:c1:9d:b4:4b: d5:16:2b:40:8c:ed:69:2a:e5:ad:3d:76:e7:76:e4:f8:50:99: 73:21:22:9b:0e:3d:0f:8f:2f:a5:59:5d:5b:2c:ca:68:44:52: 60:a1:02:76:54:37:ab:9d:25:6d:bd:2a:46:e3:21:48:6a:e3: 68:7f:9e:1d:60:ac:06:b7:6f:52:c0:93:7e:87:5d:ab:a5:65: 00:27:82:2f:09:32:00:6f:25:08:d4:9c:a6:eb:31:13:64:00: 0c:61:76:0c:82:81:11:22:35:24:fa:f3:b9:89:18:3c:a8:ef: 9f:9a:05:61:a1:36:cc:a6:a7:1d:26:d5:47:4f:72:11:69:fc: 4f:c0:4a:b4:a0:1f:a7:61:2a:e3:c1:39:1a:a2:41:f6:00:64: fe:44:1b:ca:6d:1e:d6:f2:cd:05:10:3d:fe:fb:56:48:9f:2a: 2b:e9:4e:86:89:a5:34:37:35:0d:1f:37:8b:02:07:35:5c:ea: 1d:d8:69:b0:a7:e2:f4:f8:54:d5:6c:4a:76:af:f0:75:ea:fd: 14:b7:7f:6b:4d:b3:b0:b0:70:9b:74:3d:3b:5a:bf:bb:00:af: 57:52:3d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh/l64Sx0tK+fcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWU3NzdjOGYtM2ZkOS00MDI2LWIwNTQtNmE4MGI1M2U1YTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4BQSpyxRrqf14kd+P9ycpsTU/wlffpJxlQv eU8IOP0NdVuG4+rgYlzKSODcqcnwoogZxWS/KWEhfWBfzDr27m7r/fMZ5u1fC8NU wi21uJxQDdIgqJwI65T0cF7A29LYMI3RS0HZ2AET6qxiZTak4s8iWauKzIuxCFSg fZpB5XJm4/IRzyx2XTlwhhbqxEzWv4poZUvkWwYxHv0y0hqkRc9AZHMXyQK7BdL4 /6a0FAPdskNt/WH7r65snOgoS1TpmNPQErYyW/6nf8+c/llKwZOSI9sK8k+nb/us i4lNP9HsA0XZcyJF3nRNfrP6L+MahqMi8wJLu9UlTVUbl+sN4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVqEP4/9gcyhEd4T+2IuvXneMEUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWNhMzA3OWQtODMxZi0z MDAyLTllMmMtODdjMmM2NWE2NTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxxuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9WLBan5rIJwtvy8Lu1rzUqcwKCv6UN54HselanbkBUwZ20S9UWK0CM 7Wkq5a09dud25PhQmXMhIpsOPQ+PL6VZXVssymhEUmChAnZUN6udJW29KkbjIUhq 42h/nh1grAa3b1LAk36HXaulZQAngi8JMgBvJQjUnKbrMRNkAAxhdgyCgREiNST6 87mJGDyo75+aBWGhNsympx0m1UdPchFp/E/ASrSgH6dhKuPBORqiQfYAZP5EG8pt HtbyzQUQPf77VkifKivpToaJpTQ3NQ0fN4sCBzVc6h3YabCn4vT4VNVsSnav8HXq /RS3f2tNs7CwcJt0PTtav7sAr1dSPSE= -----END CERTIFICATE-----Generated at Fri Sep 25 22:33:03 2026 by rpki-client