$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d57da0e6-f691-31f3-9cdb-493375eb5d74.roa File: d57da0e6-f691-31f3-9cdb-493375eb5d74.roa (raw, json) Hash identifier: 3oSiJ1NdCanOo5ax4a17pMc/qxdJeqES79pPxh2YlEc= Subject key identifier: 52:00:17:6C:FA:CB:67:C1:C5:1D:04:06:6D:69:DE:E0:5E:58:14:98 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F024230BEDFDA942417893980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d57da0e6-f691-31f3-9cdb-493375eb5d74.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 71.29.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:30:be:df:da:94:24:17:89:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=7bec355b-3013-4358-91a2-93bcb5044512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:66:32:91:e2:61:73:c0:37:0c:06:cb:5f:08: 54:db:7d:e1:ce:b1:3a:bd:14:b8:08:90:19:ff:5f: 07:95:c1:57:99:4c:3e:a1:8c:37:8d:ab:5c:d7:07: 46:d8:85:1f:65:30:b8:b0:69:e0:8e:73:cb:6e:dc: 78:41:8a:c4:f2:a6:34:f3:35:f8:3b:6f:9f:8e:01: 95:ce:7f:c9:a4:19:98:ad:87:1d:98:92:9d:1e:7a: 50:16:fc:2e:0c:09:23:1e:74:94:8e:3a:60:5e:24: 62:8f:8c:98:6d:60:d4:08:87:c2:53:69:8f:e4:16: 49:95:77:b1:88:a8:b0:99:9d:af:ec:c6:1f:d0:16: fa:d7:c2:b9:55:b9:6d:75:8f:dc:63:a9:88:25:49: 50:24:b2:6c:42:a5:fd:75:8f:31:5f:9d:76:26:c1: 7f:61:80:26:95:fe:51:ea:13:2a:51:4c:fd:cb:7e: d8:0a:9d:45:97:c1:33:83:57:b2:2a:99:c0:2b:fc: d3:ba:fd:23:04:d2:da:e8:36:c0:3c:88:f0:cc:5c: 6d:d7:0f:57:be:10:11:df:53:14:4a:3c:82:f6:47: a0:d8:d0:5a:cf:e9:76:90:26:fd:17:cd:09:7c:b9: 24:6d:d1:b8:a9:4b:e2:e1:6f:f4:9b:b6:9c:fa:7a: 7a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:00:17:6C:FA:CB:67:C1:C5:1D:04:06:6D:69:DE:E0:5E:58:14:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d57da0e6-f691-31f3-9cdb-493375eb5d74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:11:85:b5:c5:4a:e2:34:96:40:a0:f1:ca:92:69:74:1d:49: 23:97:60:8e:e4:63:27:bd:ff:29:3c:9b:3a:15:26:3c:a3:44: 1b:36:e8:35:c5:30:26:0d:08:f0:39:a2:6a:0f:cf:03:73:20: c7:b7:be:f6:c3:4f:84:cc:2d:3c:c2:4e:6d:d5:da:aa:2e:f3: e9:53:75:f3:6d:06:11:cb:69:a8:d6:98:2d:55:51:e5:42:3d: e9:3c:7e:49:87:6d:d8:c8:91:3d:11:29:c8:d9:ee:fe:0a:7f: f7:11:bc:2b:94:d4:a3:1d:94:45:08:e9:c0:f8:f6:1a:58:38: d9:66:95:08:a2:6b:c2:e0:e8:d7:08:35:0e:07:8a:c7:9c:7a: 25:5d:cf:64:e5:e2:6f:9b:4e:bc:6a:09:b9:80:fa:6f:be:3b: 7d:0f:d1:63:cb:84:ef:09:85:9f:5e:fa:0f:08:c7:67:6d:6c: 8c:49:91:d6:b0:67:2c:09:48:47:f8:55:dd:f2:ac:09:f5:cb: 31:c1:64:db:4e:27:f1:8b:ee:76:7f:5a:d0:7a:b3:f0:52:5c: 80:29:ef:f6:8c:57:38:2b:99:8c:87:68:ce:84:14:70:03:99: 98:fd:9b:98:40:cc:ca:a3:14:db:36:4a:26:a3:31:fd:95:55: ea:6f:ab:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjC+39qUJBeJOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk N2JlYzM1NWItMzAxMy00MzU4LTkxYTItOTNiY2I1MDQ0NTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2YykeJhc8A3DAbLXwhU233hzrE6vRS4CJAZ /18HlcFXmUw+oYw3jatc1wdG2IUfZTC4sGngjnPLbtx4QYrE8qY08zX4O2+fjgGV zn/JpBmYrYcdmJKdHnpQFvwuDAkjHnSUjjpgXiRij4yYbWDUCIfCU2mP5BZJlXex iKiwmZ2v7MYf0Bb618K5VbltdY/cY6mIJUlQJLJsQqX9dY8xX512JsF/YYAmlf5R 6hMqUUz9y37YCp1Fl8Ezg1eyKpnAK/zTuv0jBNLa6DbAPIjwzFxt1w9XvhAR31MU SjyC9keg2NBaz+l2kCb9F80JfLkkbdG4qUvi4W/0m7ac+np68QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIAF2z6y2fBxR0EBm1p3uBeWBSYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDU3ZGEwZTYtZjY5MS0z MWYzLTljZGItNDkzMzc1ZWI1ZDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsRhbXFSuI0lkCg8cqSaXQdSSOXYI7kYye9/yk8mzoVJjyjRBs26DXF MCYNCPA5omoPzwNzIMe3vvbDT4TMLTzCTm3V2qou8+lTdfNtBhHLaajWmC1VUeVC Pek8fkmHbdjIkT0RKcjZ7v4Kf/cRvCuU1KMdlEUI6cD49hpYONlmlQiia8Lg6NcI NQ4HiseceiVdz2Tl4m+bTrxqCbmA+m++O30P0WPLhO8JhZ9e+g8Ix2dtbIxJkdaw ZywJSEf4Vd3yrAn1yzHBZNtOJ/GL7nZ/WtB6s/BSXIAp7/aMVzgrmYyHaM6EFHAD mZj9m5hAzMqjFNs2SiajMf2VVepvqyQ= -----END CERTIFICATE-----Generated at Sun Oct 11 23:45:22 2026 by rpki-client