$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eca34586-5349-3522-8be4-44d9c217bf23.roa File: eca34586-5349-3522-8be4-44d9c217bf23.roa (raw, json) Hash identifier: K/KybiuzTfChLbzH+sHaoPLpermFutZdpAjiu7E4LqA= Subject key identifier: BD:90:73:D0:54:8C:45:2F:F5:FF:0B:6F:17:71:3E:56:FF:6F:8E:27 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F5E62C8BFF806CC462E1740C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eca34586-5349-3522-8be4-44d9c217bf23.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 7029 IP address blocks: 71.29.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c8:bf:f8:06:cc:46:2e:17:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=8bd5581c-e778-4734-9fa4-a284474f6aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8e:d4:bc:27:e3:64:49:82:c1:e6:aa:58:cb: 30:3a:c5:c0:de:74:1e:a0:4d:6c:ab:50:34:ce:32: 2f:36:2f:b7:a5:8f:11:7b:75:b7:6d:a5:3a:83:10: ca:63:40:07:f7:c9:c0:29:34:9a:a5:c0:f4:e4:46: 0e:80:2e:48:79:32:a8:b9:8e:8b:87:76:3d:92:80: e5:78:96:6e:bc:f1:49:ee:07:70:27:73:eb:38:39: 48:2e:70:ed:b6:58:3e:e5:dc:bf:0b:37:03:ee:7e: a2:c9:86:e2:63:ea:26:59:3b:7f:f5:37:50:a0:38: c7:9a:79:c7:0a:86:6f:d1:1d:86:c6:88:85:65:d1: 3e:99:d8:ed:c9:d4:e5:9c:b1:90:94:22:f0:bd:00: 2b:1d:db:57:dd:b9:59:b8:df:b3:9c:56:be:76:5d: cd:92:0f:41:5f:33:be:e0:34:05:9a:7f:d4:b4:1d: 2b:85:1a:f9:bb:6a:a3:ac:8f:96:d3:ec:d8:6a:b4: d5:5b:55:62:c3:a2:63:8e:88:35:87:b7:3e:13:ee: 9b:e2:35:9e:57:3f:31:d0:c9:cb:7c:1d:98:2c:6b: ca:56:86:45:c6:ad:2a:9a:52:25:84:0c:f1:d6:39: 9d:db:d2:dd:bc:d6:88:3b:42:f9:03:4c:64:41:5d: 34:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:90:73:D0:54:8C:45:2F:F5:FF:0B:6F:17:71:3E:56:FF:6F:8E:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eca34586-5349-3522-8be4-44d9c217bf23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:88:82:e5:e9:7f:bd:4a:5b:57:27:fb:17:64:8c:3a:38:bd: 2d:32:f3:8b:92:3f:af:ad:9e:ea:50:6d:63:36:1e:ae:10:2b: 55:c0:16:35:7a:01:b8:05:25:ee:64:c3:c0:40:05:42:76:9c: de:73:86:7e:3a:70:cc:fb:72:48:f8:29:72:46:ce:60:37:67: f6:f5:b0:4d:ec:56:fb:84:ce:92:70:df:70:f5:bd:5a:8e:49: 32:59:6d:4d:67:a6:d8:ea:0a:54:16:ec:e2:fe:31:03:24:db: f1:0b:e3:24:2c:c8:15:b4:e1:50:eb:ea:ec:b4:5e:6e:2b:11: e1:15:c7:6c:ee:c0:cd:bb:3a:d2:b7:34:e2:f1:5d:dd:e9:d5: 62:6e:ec:ec:64:d3:df:20:a7:2f:ac:2a:87:ee:f6:79:98:d9: 9a:e4:e3:c3:0a:d8:98:f2:58:76:59:f1:5d:f0:28:dd:21:7a: 71:50:3d:5f:c6:a8:29:fc:17:95:a0:dc:05:ad:3c:0b:c6:b8: 1e:40:76:78:48:de:50:11:60:84:d0:75:a5:ec:10:07:bc:cd: 9d:40:20:16:49:39:d2:b2:67:09:c7:a3:5d:ec:60:98:2b:96: 03:10:1e:84:11:b3:e4:8f:1d:d0:35:73:7f:17:ac:a9:ae:d9: f4:c1:31:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYsi/+AbMRi4XQMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk OGJkNTU4MWMtZTc3OC00NzM0LTlmYTQtYTI4NDQ3NGY2YWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko7UvCfjZEmCweaqWMswOsXA3nQeoE1sq1A0 zjIvNi+3pY8Re3W3baU6gxDKY0AH98nAKTSapcD05EYOgC5IeTKouY6Lh3Y9koDl eJZuvPFJ7gdwJ3PrODlILnDttlg+5dy/CzcD7n6iyYbiY+omWTt/9TdQoDjHmnnH CoZv0R2GxoiFZdE+mdjtydTlnLGQlCLwvQArHdtX3blZuN+znFa+dl3Nkg9BXzO+ 4DQFmn/UtB0rhRr5u2qjrI+W0+zYarTVW1Viw6Jjjog1h7c+E+6b4jWeVz8x0MnL fB2YLGvKVoZFxq0qmlIlhAzx1jmd29LdvNaIO0L5A0xkQV00+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2Qc9BUjEUv9f8LbxdxPlb/b44nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWNhMzQ1ODYtNTM0OS0z NTIyLThiZTQtNDRkOWMyMTdiZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeIguXpf71KW1cn+xdkjDo4vS0y84uSP6+tnupQbWM2Hq4QK1XAFjV6 AbgFJe5kw8BABUJ2nN5zhn46cMz7ckj4KXJGzmA3Z/b1sE3sVvuEzpJw33D1vVqO STJZbU1nptjqClQW7OL+MQMk2/EL4yQsyBW04VDr6uy0Xm4rEeEVx2zuwM27OtK3 NOLxXd3p1WJu7Oxk098gpy+sKofu9nmY2Zrk48MK2JjyWHZZ8V3wKN0henFQPV/G qCn8F5Wg3AWtPAvGuB5AdnhI3lARYITQdaXsEAe8zZ1AIBZJOdKyZwnHo13sYJgr lgMQHoQRs+SPHdA1c38XrKmu2fTBMU0= -----END CERTIFICATE-----Generated at Sun Oct 11 15:25:44 2026 by rpki-client