$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cff7846-ccfa-30c4-b82d-553692edd563.roa File: 8cff7846-ccfa-30c4-b82d-553692edd563.roa (raw, json) Hash identifier: cXoA8UYJptiV+JQKYeBz0gtWCrCYfPdxFtzarGOFMnU= Subject key identifier: 06:02:4B:04:22:A5:FF:69:52:1E:44:FC:69:EF:33:CA:B4:B1:53:09 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F4974D5C688C614954FCD5500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cff7846-ccfa-30c4-b82d-553692edd563.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 71.28.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:d5:c6:88:c6:14:95:4f:cd:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1a9efaf4-84a8-4750-86fe-8ef8274ff159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:25:02:be:51:c8:d1:e2:66:08:be:8f:59:93: 17:ab:6e:45:05:ab:d0:d9:f4:5b:7f:1b:3b:35:e2: 02:a3:a4:99:c6:bb:50:78:f3:a2:ed:45:f4:7b:ff: 27:2b:76:b0:dc:f6:7f:5a:d3:64:0c:95:90:c1:3f: 18:4c:ec:6f:c4:e6:0a:76:37:e1:8c:26:2d:cd:f4: aa:9b:dc:c4:8e:49:b6:72:b2:95:e3:92:5e:47:ee: d2:0a:f5:f3:9c:ea:dc:49:f2:f6:9c:c5:1f:67:d9: 1d:1b:ff:7e:48:92:33:53:ab:24:d5:94:da:14:ea: ee:1f:a7:66:26:34:71:d8:a4:2f:8c:af:3b:35:76: cc:ff:b9:52:ca:82:80:47:53:15:a5:5f:32:b2:91: 09:14:c0:ea:5e:03:75:d8:a7:75:14:10:72:b8:c9: 18:13:87:6c:53:a9:94:ce:eb:46:cd:73:4f:b6:f0: 37:8d:3a:fe:ee:ad:b5:8a:03:e6:a1:e6:8c:ef:91: 91:f7:64:de:d6:10:56:b8:7f:66:bf:1a:5f:88:00: e4:e6:df:ae:91:2c:50:73:7d:ea:3e:52:f8:9a:48: 33:08:ff:ff:be:53:65:ae:74:f0:ec:7e:9e:be:e6: 43:f7:4b:14:68:48:45:8a:ed:9e:d9:c0:d3:72:56: 99:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:02:4B:04:22:A5:FF:69:52:1E:44:FC:69:EF:33:CA:B4:B1:53:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cff7846-ccfa-30c4-b82d-553692edd563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:56:ce:4b:11:6f:a4:df:24:c4:42:85:3b:46:8c:33:75:c1: bb:5d:87:cb:b4:73:a6:8b:90:de:ea:ef:79:27:9e:3c:a2:c8: e8:8e:99:54:2e:2b:1b:d9:a6:0a:8f:8d:af:fe:9d:f7:34:f8: 83:a0:d5:cc:1f:6a:e3:0d:96:d9:57:5f:d7:b2:7c:1e:c4:8e: 94:65:fd:d6:d0:3f:0f:82:ea:75:46:74:e3:d6:e2:e1:4e:d8: 34:d5:0d:43:25:be:ac:45:bc:ae:a4:05:c5:de:6a:17:ef:e6: d7:71:8e:e7:6e:ac:73:a0:f8:b1:58:62:f0:62:f2:01:fc:39: f5:50:6a:90:53:83:91:60:44:3d:ba:0f:93:b1:50:c5:ee:92: 1d:69:59:13:3b:84:86:77:90:9a:8f:43:e0:b3:4f:37:4b:39: 86:a2:29:95:ef:c8:f4:88:e1:72:84:b1:5e:10:c9:d9:79:30: a9:b8:33:84:e1:e8:02:51:9b:26:af:a0:3c:15:95:43:e5:a8: 38:82:b2:d6:c0:a4:96:4a:a1:8a:9f:62:40:58:cd:04:63:41: e2:30:88:08:15:03:5b:39:be:bc:b4:02:88:a0:e8:5b:52:d5: 21:64:35:52:61:29:18:55:38:57:fd:7a:6e:f2:59:25:c5:0d: 3b:cc:35:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdNXGiMYUlU/NVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWE5ZWZhZjQtODRhOC00NzUwLTg2ZmUtOGVmODI3NGZmMTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiUCvlHI0eJmCL6PWZMXq25FBavQ2fRbfxs7 NeICo6SZxrtQePOi7UX0e/8nK3aw3PZ/WtNkDJWQwT8YTOxvxOYKdjfhjCYtzfSq m9zEjkm2crKV45JeR+7SCvXznOrcSfL2nMUfZ9kdG/9+SJIzU6sk1ZTaFOruH6dm JjRx2KQvjK87NXbM/7lSyoKAR1MVpV8yspEJFMDqXgN12Kd1FBByuMkYE4dsU6mU zutGzXNPtvA3jTr+7q21igPmoeaM75GR92Te1hBWuH9mvxpfiADk5t+ukSxQc33q PlL4mkgzCP//vlNlrnTw7H6evuZD90sUaEhFiu2e2cDTclaZvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYCSwQipf9pUh5E/GnvM8q0sVMJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGNmZjc4NDYtY2NmYS0z MGM0LWI4MmQtNTUzNjkyZWRkNTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxxoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdWzksRb6TfJMRChTtGjDN1wbtdh8u0c6aLkN7q73knnjyiyOiOmVQu KxvZpgqPja/+nfc0+IOg1cwfauMNltlXX9eyfB7EjpRl/dbQPw+C6nVGdOPW4uFO 2DTVDUMlvqxFvK6kBcXeahfv5tdxjudurHOg+LFYYvBi8gH8OfVQapBTg5FgRD26 D5OxUMXukh1pWRM7hIZ3kJqPQ+CzTzdLOYaiKZXvyPSI4XKEsV4Qydl5MKm4M4Th 6AJRmyavoDwVlUPlqDiCstbApJZKoYqfYkBYzQRjQeIwiAgVA1s5vry0Aoig6FtS 1SFkNVJhKRhVOFf9em7yWSXFDTvMNaQ= -----END CERTIFICATE-----Generated at Sat Sep 26 13:09:39 2026 by rpki-client