$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c77f3968-1e5e-334f-96fa-e76652c76e3c.roa File: c77f3968-1e5e-334f-96fa-e76652c76e3c.roa (raw, json) Hash identifier: 1sInvmtChjjrIkLmy21lpa9I3SMJmEHqlayZ7dBFnMo= Subject key identifier: 02:43:82:32:19:D9:AC:AE:CE:5D:E8:62:D5:E5:EC:BC:E4:E8:39:CB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F305278A6317B9C61B6BD4300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c77f3968-1e5e-334f-96fa-e76652c76e3c.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 71.28.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:78:a6:31:7b:9c:61:b6:bd:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=94e5fa4d-bc1f-43fb-bcff-442a18f91fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f8:64:8d:de:fe:57:7b:e0:58:5f:82:a0:fa: ad:92:bf:c7:99:59:89:85:dc:d8:2f:09:4c:45:e0: 6a:57:45:b2:76:2f:0c:e3:ee:fb:df:7e:cf:f9:aa: 1d:5a:e2:17:59:9c:4c:e4:1d:c6:b9:36:97:88:99: d0:ef:80:d3:9c:ec:20:95:33:89:b8:e8:0a:5e:d1: 18:b5:77:e9:58:23:99:cd:e1:e1:42:ae:f4:5a:51: 89:9c:22:0b:ec:da:41:97:60:55:b7:ca:73:36:63: fa:b4:b9:b9:ee:17:97:3c:9c:52:4f:6e:68:51:d4: 77:0c:b5:4f:70:4a:15:3b:63:dd:0e:89:ec:17:5f: 97:c9:76:08:97:3b:4d:37:09:a0:98:ba:6d:4b:87: 69:95:20:44:4a:82:e9:6a:88:d0:4b:50:d7:b1:2b: f8:ca:41:11:48:da:16:fa:b7:63:c3:95:dd:70:2b: be:c7:f4:7a:8a:72:9a:2e:3b:e6:01:42:24:10:b8: 54:96:51:e9:35:93:7a:e7:29:ca:fb:34:11:0a:ce: 96:43:e6:b4:24:04:6c:89:a4:67:fe:88:6e:dc:65: 22:c8:5f:09:ce:1a:98:39:63:3f:46:65:fb:9f:18: 3e:46:7d:c5:77:bd:0b:6b:06:fd:63:07:65:62:4a: a4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:43:82:32:19:D9:AC:AE:CE:5D:E8:62:D5:E5:EC:BC:E4:E8:39:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c77f3968-1e5e-334f-96fa-e76652c76e3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:3c:f2:c0:ad:0f:ae:c7:3e:6a:2b:11:69:ba:21:7e:d4:55: 1f:93:9e:37:b8:61:f5:69:36:5e:44:c8:6d:f7:36:2b:c0:0e: e5:0c:9d:28:f3:44:53:f3:8a:22:69:9c:f7:0b:a6:68:08:68: 2c:b2:0f:aa:d9:25:26:a7:4a:9a:34:9f:79:02:5b:3c:e0:ce: ac:70:83:c1:0b:e7:ba:81:cf:0f:6b:5c:7b:61:75:18:37:6f: c3:8b:b0:4b:7f:5c:25:b7:e6:ed:f5:f3:99:71:83:31:b9:9a: 42:a4:1f:c5:68:97:c9:a5:23:b4:26:a6:25:43:15:1b:2a:b2: ad:fb:12:57:08:46:94:21:0b:e3:f5:08:dd:71:7c:02:53:f7: 52:0c:4f:45:b1:ea:bb:52:54:17:63:62:e4:08:0d:51:63:b3: a2:fe:77:81:f2:f6:2d:2d:90:d2:14:2b:b1:8a:49:c4:9e:1b: d5:ac:d5:c3:a5:61:68:20:b3:0f:4a:43:e0:7a:f5:15:f2:b5: 69:b3:e8:7e:f3:4d:7b:7c:7f:55:d0:8d:ba:54:2b:9b:d4:32: 06:6a:49:60:bd:2a:b8:e5:0a:aa:4e:e2:32:3c:b7:cc:60:8a: e1:41:3d:bc:91:58:ff:58:13:f2:36:22:5e:57:d6:67:25:19: 18:98:6e:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUnimMXucYba9QwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk OTRlNWZhNGQtYmMxZi00M2ZiLWJjZmYtNDQyYTE4ZjkxZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/hkjd7+V3vgWF+CoPqtkr/HmVmJhdzYLwlM ReBqV0Wydi8M4+77337P+aodWuIXWZxM5B3GuTaXiJnQ74DTnOwglTOJuOgKXtEY tXfpWCOZzeHhQq70WlGJnCIL7NpBl2BVt8pzNmP6tLm57heXPJxST25oUdR3DLVP cEoVO2PdDonsF1+XyXYIlztNNwmgmLptS4dplSBESoLpaojQS1DXsSv4ykERSNoW +rdjw5XdcCu+x/R6inKaLjvmAUIkELhUllHpNZN65ynK+zQRCs6WQ+a0JARsiaRn /ohu3GUiyF8JzhqYOWM/RmX7nxg+Rn3Fd70Lawb9YwdlYkqkgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJDgjIZ2ayuzl3oYtXl7Lzk6DnLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzc3ZjM5NjgtMWU1ZS0z MzRmLTk2ZmEtZTc2NjUyYzc2ZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxwEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHM88sCtD67HPmorEWm6IX7UVR+Tnje4YfVpNl5EyG33NivADuUMnSjz RFPziiJpnPcLpmgIaCyyD6rZJSanSpo0n3kCWzzgzqxwg8EL57qBzw9rXHthdRg3 b8OLsEt/XCW35u3185lxgzG5mkKkH8Vol8mlI7QmpiVDFRsqsq37ElcIRpQhC+P1 CN1xfAJT91IMT0Wx6rtSVBdjYuQIDVFjs6L+d4Hy9i0tkNIUK7GKScSeG9Ws1cOl YWggsw9KQ+B69RXytWmz6H7zTXt8f1XQjbpUK5vUMgZqSWC9KrjlCqpO4jI8t8xg iuFBPbyRWP9YE/I2Il5X1mclGRiYbg4= -----END CERTIFICATE-----Generated at Sun Sep 20 20:36:26 2026 by rpki-client