$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d34831cb-aade-3b02-85c4-76a6a232a1fb.roa File: d34831cb-aade-3b02-85c4-76a6a232a1fb.roa (raw, json) Hash identifier: UyTqZTekIdGMkzCPOjxp9HtEx3l6MN68JnM37uFGdCE= Subject key identifier: DB:84:B7:8C:4B:CD:19:52:62:D1:F7:5A:32:1C:63:97:CA:79:98:F2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F3CE291F369FD1C5AE2C51D10 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d34831cb-aade-3b02-85c4-76a6a232a1fb.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 71.28.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:91:f3:69:fd:1c:5a:e2:c5:1d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=64eb716b-ff0a-4d02-8e8c-7e80780836aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:47:fe:b9:f6:38:5e:a1:4b:ac:f8:9a:3f:b7: 0a:d4:1c:00:86:ff:52:eb:76:61:08:fb:a0:a3:d8: 57:72:e3:d1:aa:13:8d:2c:c8:12:f6:8f:62:84:07: 75:66:25:4f:52:14:1e:d0:76:e1:76:d4:6c:7a:f2: 13:61:f5:5a:ce:6a:a1:b9:47:9b:4b:73:d3:b1:ae: 97:90:69:87:03:d2:3c:28:a0:28:a4:51:93:ca:37: 3f:22:95:b6:b3:f3:5d:e3:cc:5a:ca:af:01:83:d9: cf:02:f3:2c:c1:36:cc:55:f6:1f:c5:8c:ac:a8:f0: bd:ef:6f:d8:c1:8d:cc:f1:64:db:fe:62:5c:1a:a3: 25:21:4d:8a:28:cc:6e:bb:02:3f:78:35:02:3a:a1: 82:5d:62:2b:12:a4:cd:4e:59:22:13:ac:f9:31:81: ea:92:77:c7:4e:2c:92:2e:59:47:24:25:f1:99:51: 72:fc:00:c0:19:5a:92:ea:ac:2a:6a:9e:1e:28:74: b4:d5:19:3a:43:dc:75:61:d1:43:af:46:37:5b:7a: 54:fd:4c:98:98:70:d1:ad:9c:e9:e8:f9:ab:0d:42: ba:a2:52:02:f9:fc:90:bc:30:90:14:01:8a:dd:19: 87:72:82:67:90:03:54:2f:20:f3:af:55:06:d3:35: b9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:84:B7:8C:4B:CD:19:52:62:D1:F7:5A:32:1C:63:97:CA:79:98:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d34831cb-aade-3b02-85c4-76a6a232a1fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:30:ca:62:4b:7e:5a:75:df:78:38:36:46:47:6b:9f:91:fb: 24:5f:bc:66:3e:44:8d:9c:c4:62:b5:6a:9f:02:b8:f3:8f:78: 2c:0e:66:1d:2f:c2:30:92:e5:47:e4:d9:a3:15:80:ec:90:90: 97:7c:c2:ea:51:aa:bc:fb:76:bd:25:e7:82:70:98:73:d2:27: 57:ab:d7:e5:a1:ba:39:3f:6f:d9:4a:07:a2:39:c4:52:41:70: 45:38:88:2e:79:bd:7f:b9:be:96:ee:50:11:be:4e:07:fc:42: cb:85:20:0d:66:ea:31:77:78:8c:9d:5b:04:03:f2:46:23:f5: 46:2a:d1:47:84:33:eb:46:d2:79:02:1a:33:78:6b:bd:52:96: 6c:a5:88:ba:6a:9a:f2:40:da:1f:da:3d:23:4e:3e:af:19:69: 5b:32:9a:1a:58:30:a1:df:92:d1:60:6d:4a:15:58:a6:cb:06: 4d:8f:19:86:27:2b:38:74:23:2d:6f:d9:40:5d:4e:28:2d:f9: 07:b4:a3:e8:43:e6:6a:69:1e:ad:2c:67:4e:51:b9:58:64:71: bf:dc:69:67:42:5d:4a:98:81:f9:55:6c:14:a9:24:a9:21:12: 0b:0b:ac:ba:cf:c7:c9:c0:bf:ec:18:60:86:af:8a:f5:12:2d: cf:f1:d2:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884pHzaf0cWuLFHRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk NjRlYjcxNmItZmYwYS00ZDAyLThlOGMtN2U4MDc4MDgzNmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0f+ufY4XqFLrPiaP7cK1BwAhv9S63ZhCPug o9hXcuPRqhONLMgS9o9ihAd1ZiVPUhQe0HbhdtRsevITYfVazmqhuUebS3PTsa6X kGmHA9I8KKAopFGTyjc/IpW2s/Nd48xayq8Bg9nPAvMswTbMVfYfxYysqPC972/Y wY3M8WTb/mJcGqMlIU2KKMxuuwI/eDUCOqGCXWIrEqTNTlkiE6z5MYHqknfHTiyS LllHJCXxmVFy/ADAGVqS6qwqap4eKHS01Rk6Q9x1YdFDr0Y3W3pU/UyYmHDRrZzp 6PmrDUK6olIC+fyQvDCQFAGK3RmHcoJnkANULyDzr1UG0zW5WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuEt4xLzRlSYtH3WjIcY5fKeZjyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDM0ODMxY2ItYWFkZS0z YjAyLTg1YzQtNzZhNmEyMzJhMWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxyRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwwymJLflp133g4NkZHa5+R+yRfvGY+RI2cxGK1ap8CuPOPeCwOZh0v wjCS5Ufk2aMVgOyQkJd8wupRqrz7dr0l54JwmHPSJ1er1+Whujk/b9lKB6I5xFJB cEU4iC55vX+5vpbuUBG+Tgf8QsuFIA1m6jF3eIydWwQD8kYj9UYq0UeEM+tG0nkC GjN4a71SlmyliLpqmvJA2h/aPSNOPq8ZaVsymhpYMKHfktFgbUoVWKbLBk2PGYYn Kzh0Iy1v2UBdTigt+Qe0o+hD5mppHq0sZ05RuVhkcb/caWdCXUqYgflVbBSpJKkh EgsLrLrPx8nAv+wYYIavivUSLc/x0rM= -----END CERTIFICATE-----Generated at Sun Sep 20 23:19:08 2026 by rpki-client