$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7029d70-d556-3ba1-983d-457b97a89e40.roa File: a7029d70-d556-3ba1-983d-457b97a89e40.roa (raw, json) Hash identifier: NRdba2wYUN50FbZCN3k6afCmYi9KDp26e2zS6FwxitE= Subject key identifier: 99:2C:09:7E:92:52:33:B3:1D:8A:B8:9C:51:EB:0A:9B:C0:EC:97:5F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F49861B04BC80F26C04EC7B40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7029d70-d556-3ba1-983d-457b97a89e40.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 27338 IP address blocks: 74.8.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:1b:04:bc:80:f2:6c:04:ec:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=41da2074-362f-4ab0-9003-66b95e2908bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b8:8d:0f:fa:ef:e6:18:bb:80:2f:36:45:39: dc:e6:79:0f:c4:b4:74:7e:e4:7c:02:89:86:52:bf: cb:5c:31:7c:eb:c3:62:c9:f5:73:20:14:d0:54:97: 51:d4:f9:86:24:1e:43:6b:99:55:f3:94:13:34:ae: 36:b9:e2:00:c3:8a:5d:5b:00:13:7a:e6:46:cc:16: 2b:09:0c:03:e2:f1:c8:2f:82:ca:5e:76:04:d1:59: 77:50:4f:51:ba:95:7d:a8:50:5e:3f:8f:49:00:61: 58:c2:dc:ac:7f:68:c9:a0:09:fe:33:07:f0:1a:43: bc:ad:9e:eb:f9:bc:ee:ff:87:6e:bf:aa:d2:d4:bf: 19:b1:9c:8f:26:ac:c2:cc:ab:45:c0:ff:3e:a8:bb: f4:59:97:20:7a:d9:2c:1e:5a:51:c9:c9:25:3f:44: 6d:96:5b:7d:27:63:d5:29:0c:36:61:44:16:ec:ec: bb:9f:f3:89:68:53:1a:36:8c:7c:b4:8f:f8:f9:ba: 46:a3:fd:07:8c:fe:94:d2:b2:88:c3:97:26:d2:09: 95:22:2c:ce:b1:33:bb:e0:3b:45:27:26:e2:09:6e: 43:ec:4e:86:2f:6c:fe:ba:81:2b:89:d0:c6:b7:e9: f6:5b:f8:7f:bd:1c:87:d2:d2:de:20:f9:bc:fe:9a: 21:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2C:09:7E:92:52:33:B3:1D:8A:B8:9C:51:EB:0A:9B:C0:EC:97:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7029d70-d556-3ba1-983d-457b97a89e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.8.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:c2:a8:f9:59:c2:25:40:12:64:9c:10:d1:6d:d8:0e:61:e6: a0:57:c4:15:4d:14:ec:b8:67:9e:40:3c:f0:81:d7:3b:23:c2: 8a:ca:59:af:75:8c:c7:ef:d4:4f:cc:a3:7e:8e:68:2f:12:a1: c3:8b:b8:5a:9d:19:09:3d:4c:50:86:08:22:09:07:c4:42:4b: 39:64:0d:59:89:af:d1:53:fc:9a:b3:58:45:14:9d:42:ea:71: 29:2e:9e:e7:fd:6d:86:3b:84:32:19:be:a7:30:cf:ad:8c:57: c9:e4:d1:85:af:f4:7d:15:19:5b:8b:e0:29:6a:7b:11:fd:95: 36:3b:dd:3e:11:5b:14:c1:d6:7b:dd:e6:1a:c1:d0:20:e3:32: 9b:29:eb:d5:f3:f7:02:3a:e2:68:23:48:3e:81:38:42:4b:71: f3:13:4c:a7:a4:05:28:4e:84:d4:d1:1e:b9:c7:94:2e:cc:b4: 2f:5f:f5:db:61:51:80:2e:3d:91:fe:70:4a:7b:be:77:85:da: e8:60:ca:8b:91:4d:43:d5:39:e7:87:d9:b5:6b:48:f7:7a:e7: 4e:c3:13:a0:c1:de:1b:5c:92:9e:2d:30:f3:8c:d6:fb:32:70: 8f:69:35:76:c0:25:d7:e1:26:32:3d:5f:b6:ef:71:96:cd:f5: 38:a3:b3:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhhsEvIDybATse0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDFkYTIwNzQtMzYyZi00YWIwLTkwMDMtNjZiOTVlMjkwOGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LiND/rv5hi7gC82RTnc5nkPxLR0fuR8AomG Ur/LXDF868NiyfVzIBTQVJdR1PmGJB5Da5lV85QTNK42ueIAw4pdWwATeuZGzBYr CQwD4vHIL4LKXnYE0Vl3UE9RupV9qFBeP49JAGFYwtysf2jJoAn+MwfwGkO8rZ7r +bzu/4duv6rS1L8ZsZyPJqzCzKtFwP8+qLv0WZcgetksHlpRycklP0Rtllt9J2PV KQw2YUQW7Oy7n/OJaFMaNox8tI/4+bpGo/0HjP6U0rKIw5cm0gmVIizOsTO74DtF JybiCW5D7E6GL2z+uoEridDGt+n2W/h/vRyH0tLeIPm8/pohgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJksCX6SUjOzHYq4nFHrCpvA7JdfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTcwMjlkNzAtZDU1Ni0z YmExLTk4M2QtNDU3Yjk3YTg5ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgheMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHCqPlZwiVAEmScENFt2A5h5qBXxBVNFOy4Z55APPCB1zsjworKWa91 jMfv1E/Mo36OaC8SocOLuFqdGQk9TFCGCCIJB8RCSzlkDVmJr9FT/JqzWEUUnULq cSkunuf9bYY7hDIZvqcwz62MV8nk0YWv9H0VGVuL4ClqexH9lTY73T4RWxTB1nvd 5hrB0CDjMpsp69Xz9wI64mgjSD6BOEJLcfMTTKekBShOhNTRHrnHlC7MtC9f9dth UYAuPZH+cEp7vneF2uhgyouRTUPVOeeH2bVrSPd6507DE6DB3htckp4tMPOM1vsy cI9pNXbAJdfhJjI9X7bvcZbN9Tijs1I= -----END CERTIFICATE-----Generated at Tue Sep 29 02:50:14 2026 by rpki-client