$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a661af9c-80ea-344c-ac05-94e45117320a.roa File: a661af9c-80ea-344c-ac05-94e45117320a.roa (raw, json) Hash identifier: 0IRojx8lLIJBsg5EFkQJzLBgSmY7bhJkXiaf05HEbOs= Subject key identifier: 5B:6D:2A:1E:9C:A3:E3:42:52:59:44:D5:C7:0F:C4:4A:67:13:54:82 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F024230E10963B5FFF2DC1C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a661af9c-80ea-344c-ac05-94e45117320a.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 71.30.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:30:e1:09:63:b5:ff:f2:dc:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=e699a082-be4a-40e1-9e7d-e33d3e541ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:70:ca:7b:dd:07:dd:7c:69:d6:aa:8d:66:3d: d6:42:50:4c:24:05:85:99:c7:75:df:8a:83:72:17: 1c:d8:af:19:f5:38:5c:50:d7:6e:4a:e7:92:62:63: d2:b6:46:31:31:3b:01:d1:1b:0d:82:1c:eb:bd:a4: 38:94:d4:fe:24:a1:6b:ea:e1:1b:a9:a6:eb:09:a2: e3:22:1e:0c:86:27:1e:4e:11:92:f2:58:e6:7a:4d: 6a:8a:b6:f6:90:b6:67:d0:7f:53:8b:c1:cd:e7:43: b1:01:46:93:41:31:d7:d7:a5:03:07:7e:1c:c1:0b: 98:ad:32:fc:ca:25:28:68:60:b4:86:ec:43:88:d0: 37:2a:0b:2c:36:01:20:83:e4:64:a8:d0:c3:14:97: 28:52:42:92:6b:6a:35:11:bb:30:c9:40:e5:c9:5a: e2:e0:3f:39:94:7c:b9:f4:93:e0:35:26:54:c2:a1: cb:b9:4b:b3:82:fb:b5:c1:2d:ae:37:74:4e:4d:50: c5:42:a2:28:a4:7c:70:01:7e:89:01:12:60:dc:a8: 3b:7a:e0:0a:5c:3b:81:b4:8d:50:d8:0d:c1:1b:bf: 95:f2:a0:66:82:78:2a:f1:e6:95:05:6a:a1:22:48: 15:1a:84:41:75:22:8a:49:bd:92:14:2b:7b:e0:04: 1c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6D:2A:1E:9C:A3:E3:42:52:59:44:D5:C7:0F:C4:4A:67:13:54:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a661af9c-80ea-344c-ac05-94e45117320a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:d8:94:69:0e:d4:93:09:35:91:35:8a:58:ae:c8:94:cb:16: 2b:ae:14:ab:6b:42:b4:ef:40:45:b5:71:bf:56:da:fd:0d:08: 90:e9:59:d1:e5:7d:b8:96:9f:ed:66:a6:8e:5d:42:a1:1b:27: 26:49:28:03:8f:f5:6d:47:d2:cb:cc:b7:2b:65:1c:19:f0:d0: bf:f5:dc:63:bc:e5:cf:e1:f2:8b:15:1a:ab:ce:49:ce:f8:79: 30:b9:46:0b:6f:cd:f2:5c:48:7e:9d:bb:8b:05:34:76:9b:f7: a4:b0:fb:62:9b:af:42:58:03:31:84:45:38:9a:6f:b6:ba:3f: f8:f6:12:8a:f4:1b:84:d0:2a:77:50:8f:2d:08:9f:bc:f0:1a: de:9b:6c:17:ef:d3:f0:8b:9e:c6:de:0c:b5:15:e8:db:99:94: 66:2f:17:f8:5c:e9:38:3b:fb:af:e7:d1:b3:f7:12:1f:11:ab: b5:a4:ad:01:b8:c8:d0:80:e6:f1:9b:dd:11:8b:3c:97:d5:ea: 12:98:b4:ab:fd:3b:70:87:71:80:e4:73:3e:df:df:25:02:6a: a3:1c:e4:78:0b:8e:88:56:1d:66:cc:02:93:c4:15:a0:b0:aa: f6:0f:eb:bb:8c:b4:e8:37:35:10:30:83:b3:ab:69:0e:d5:db: 89:69:58:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjDhCWO1//LcHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk ZTY5OWEwODItYmU0YS00MGUxLTllN2QtZTMzZDNlNTQxYmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnDKe90H3Xxp1qqNZj3WQlBMJAWFmcd134qD chcc2K8Z9ThcUNduSueSYmPStkYxMTsB0RsNghzrvaQ4lNT+JKFr6uEbqabrCaLj Ih4MhiceThGS8ljmek1qirb2kLZn0H9Ti8HN50OxAUaTQTHX16UDB34cwQuYrTL8 yiUoaGC0huxDiNA3KgssNgEgg+RkqNDDFJcoUkKSa2o1EbswyUDlyVri4D85lHy5 9JPgNSZUwqHLuUuzgvu1wS2uN3ROTVDFQqIopHxwAX6JARJg3Kg7euAKXDuBtI1Q 2A3BG7+V8qBmgngq8eaVBWqhIkgVGoRBdSKKSb2SFCt74AQc2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFttKh6co+NCUllE1ccPxEpnE1SCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTY2MWFmOWMtODBlYS0z NDRjLWFjMDUtOTRlNDUxMTczMjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx7RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/YlGkO1JMJNZE1iliuyJTLFiuuFKtrQrTvQEW1cb9W2v0NCJDpWdHl fbiWn+1mpo5dQqEbJyZJKAOP9W1H0svMtytlHBnw0L/13GO85c/h8osVGqvOSc74 eTC5RgtvzfJcSH6du4sFNHab96Sw+2Kbr0JYAzGERTiab7a6P/j2Eor0G4TQKndQ jy0In7zwGt6bbBfv0/CLnsbeDLUV6NuZlGYvF/hc6Tg7+6/n0bP3Eh8Rq7WkrQG4 yNCA5vGb3RGLPJfV6hKYtKv9O3CHcYDkcz7f3yUCaqMc5HgLjohWHWbMApPEFaCw qvYP67uMtOg3NRAwg7OraQ7V24lpWCs= -----END CERTIFICATE-----Generated at Tue Sep 22 17:59:47 2026 by rpki-client