$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96754f7b-9547-3947-beca-f13dd9962e64.roa File: 96754f7b-9547-3947-beca-f13dd9962e64.roa (raw, json) Hash identifier: 22JrbVU7qdNoBfsA3nMx9uY8dT+a4qCX7RcNonxRCgE= Subject key identifier: 50:9D:BA:A0:3F:93:54:BB:2B:58:0E:D5:33:90:89:C6:7B:D1:BC:01 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F024236E266F0215BCFE18720 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96754f7b-9547-3947-beca-f13dd9962e64.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 71.28.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:36:e2:66:f0:21:5b:cf:e1:87:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=c68e9582-cd03-401f-8ae5-c3fee0537549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:00:90:16:1b:7b:53:1c:eb:56:c9:56:53:ae: 09:10:1e:b5:79:3e:44:88:54:a6:c4:d9:d5:3f:c8: 79:6a:af:ee:51:89:5d:16:67:16:af:07:a6:29:54: 1a:e9:a8:13:02:42:c0:03:a0:28:de:17:42:29:ca: 66:d3:9b:8b:aa:9f:48:55:e7:12:4f:20:b3:9a:33: e3:bd:32:5c:81:2b:b4:40:3e:42:60:6a:03:5e:af: b7:92:42:8b:b1:3f:16:8e:17:15:94:1b:20:a6:07: 3a:48:e4:4f:fe:7c:3f:cb:ed:84:56:d0:61:87:30: 00:55:a4:31:5f:d5:07:b1:6e:f0:59:30:9d:df:64: 98:62:59:27:e1:cd:6e:c2:f7:4a:6d:07:ca:8a:4f: 93:64:98:45:a6:23:aa:ef:4b:95:b9:ac:6e:13:9e: 5d:20:49:70:1e:9a:8c:8f:6c:a5:f3:54:22:1f:50: 50:86:cc:8e:21:c7:24:cf:f1:e7:07:75:ea:c1:24: 6b:70:05:f9:a3:b7:42:ac:39:27:14:18:3b:e3:bb: 6c:98:0c:b0:4f:ba:c5:8a:4a:05:88:b4:b8:38:16: 02:29:d1:2d:c5:d7:99:c0:2b:9b:da:5b:31:81:af: e8:61:34:46:b3:dd:68:8d:d9:2d:0b:83:25:0d:88: 14:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9D:BA:A0:3F:93:54:BB:2B:58:0E:D5:33:90:89:C6:7B:D1:BC:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96754f7b-9547-3947-beca-f13dd9962e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:b5:4d:e6:7d:dc:ef:a1:02:b7:5e:8b:46:94:a0:85:f6:ff: 92:a0:34:70:d1:f2:3e:1b:14:74:4a:48:fd:b3:80:f0:10:3a: 17:85:6f:a9:50:96:07:07:4a:56:c4:b9:d3:4e:68:c0:91:4d: 5c:ec:87:63:2c:e9:61:35:81:73:2a:66:af:9a:c9:1b:95:84: 2a:e2:0a:61:3f:89:72:9f:50:69:a1:0f:b6:eb:c4:d6:26:87: 82:b3:3f:07:d4:6e:89:6f:7a:6e:05:78:70:2d:8d:72:c5:e9: d8:ee:50:51:8e:90:bb:d3:36:c1:69:51:7a:66:56:e6:42:7a: 99:17:44:5a:d4:1b:ca:27:ea:25:0d:a4:52:ab:42:8f:47:fb: 68:6e:0c:95:62:ae:c2:46:ba:22:d1:8f:15:8d:0d:2f:9f:49: e0:65:66:3c:d9:1e:30:56:9e:dd:e3:40:7a:94:53:75:47:79: b5:07:ea:1b:96:b4:28:48:15:12:a5:b3:97:62:4b:48:ae:00: 37:9b:9a:19:16:5a:2f:30:8d:94:83:11:63:e0:8e:b5:1e:79: 8e:22:09:6e:d1:20:a2:67:80:04:dc:51:4d:9a:ff:41:53:d2: e0:5f:06:07:36:d5:b6:46:b3:cb:dc:38:cb:e9:4d:1b:0a:fa: 15:fc:db:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjbiZvAhW8/hhyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk YzY4ZTk1ODItY2QwMy00MDFmLThhZTUtYzNmZWUwNTM3NTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QCQFht7UxzrVslWU64JEB61eT5EiFSmxNnV P8h5aq/uUYldFmcWrwemKVQa6agTAkLAA6Ao3hdCKcpm05uLqp9IVecSTyCzmjPj vTJcgSu0QD5CYGoDXq+3kkKLsT8WjhcVlBsgpgc6SORP/nw/y+2EVtBhhzAAVaQx X9UHsW7wWTCd32SYYlkn4c1uwvdKbQfKik+TZJhFpiOq70uVuaxuE55dIElwHpqM j2yl81QiH1BQhsyOIcckz/HnB3XqwSRrcAX5o7dCrDknFBg747tsmAywT7rFikoF iLS4OBYCKdEtxdeZwCub2lsxga/oYTRGs91ojdktC4MlDYgU2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCduqA/k1S7K1gO1TOQicZ70bwBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTY3NTRmN2ItOTU0Ny0z OTQ3LWJlY2EtZjEzZGQ5OTYyZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJe1TeZ93O+hArdei0aUoIX2/5KgNHDR8j4bFHRKSP2zgPAQOheFb6lQ lgcHSlbEudNOaMCRTVzsh2Ms6WE1gXMqZq+ayRuVhCriCmE/iXKfUGmhD7brxNYm h4KzPwfUbolvem4FeHAtjXLF6djuUFGOkLvTNsFpUXpmVuZCepkXRFrUG8on6iUN pFKrQo9H+2huDJVirsJGuiLRjxWNDS+fSeBlZjzZHjBWnt3jQHqUU3VHebUH6huW tChIFRKls5diS0iuADebmhkWWi8wjZSDEWPgjrUeeY4iCW7RIKJngATcUU2a/0FT 0uBfBgc21bZGs8vcOMvpTRsK+hX82xs= -----END CERTIFICATE-----Generated at Mon Sep 28 22:36:26 2026 by rpki-client