$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff2f9d09-0b7e-3f72-b84e-4148a49823f2.roa File: ff2f9d09-0b7e-3f72-b84e-4148a49823f2.roa (raw, json) Hash identifier: OvKKRj4P0QmedZDb9TKYHqK8zJdArqRADEP10bDFpVQ= Subject key identifier: 44:EA:C8:7A:53:7F:55:F3:B0:A7:D6:47:F9:71:88:28:3C:D2:E0:EC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F024230ECEE4AE6FFB8664C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff2f9d09-0b7e-3f72-b84e-4148a49823f2.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 71.30.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:30:ec:ee:4a:e6:ff:b8:66:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=7675748c-b98e-4943-aa09-3913b2313720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d0:4a:35:3a:4f:2c:44:50:ba:a7:60:2a:10: cd:50:91:3e:d5:cf:f8:49:2d:7c:99:94:4c:67:54: 16:c2:13:73:93:b9:46:67:77:c8:8e:ac:50:00:8b: fa:59:f3:6a:14:bd:49:78:7d:a9:46:06:95:1e:de: f6:85:e3:0d:b3:71:68:65:e1:d5:52:a8:bf:d7:73: 2d:2e:e6:2f:5e:56:ca:75:6b:df:ff:e2:bc:9a:b9: ac:1e:e9:80:e3:de:c8:65:e4:66:89:b8:6f:94:29: 37:6b:a6:9e:04:6f:04:fd:bb:17:3d:81:fb:aa:2c: b8:f2:5e:4a:b0:21:4d:51:92:da:48:28:c5:9b:ed: 58:8e:d9:6d:b9:c5:70:50:f4:c3:de:ff:10:08:c4: bd:7c:03:6e:74:15:f7:2f:3d:cf:5e:3d:46:7e:b1: 3b:a6:cc:37:00:93:ff:a2:27:d2:8f:ca:50:bc:86: 17:a7:dc:23:0f:92:67:53:61:1f:76:b6:b4:41:2b: 1d:98:e4:9f:a9:a4:e4:59:8b:31:c6:ed:69:40:87: 68:47:ad:44:86:0e:7e:42:81:cc:1a:7c:ad:54:6c: 42:b3:dd:1b:be:8d:5b:ff:1b:e7:b6:bb:4d:e8:a1: b5:e8:54:d7:1c:13:06:fa:7c:6b:fb:95:d8:c7:f5: c8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EA:C8:7A:53:7F:55:F3:B0:A7:D6:47:F9:71:88:28:3C:D2:E0:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff2f9d09-0b7e-3f72-b84e-4148a49823f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d0:f9:a4:45:23:ef:ed:d7:27:69:ce:fc:bb:e2:5b:d4:f8: 45:c9:fd:b6:f3:92:42:b8:1b:03:52:a4:cc:2b:60:f4:f1:52: 0b:36:00:09:7e:af:87:37:87:0d:68:e8:ec:90:ba:d3:0a:08: 72:17:d7:e4:81:14:74:af:7b:cd:e6:3b:d9:1a:66:b6:3e:99: 6c:22:d8:a1:19:05:39:7f:a5:4b:9e:80:c6:4c:f5:a4:64:fa: 23:e7:43:37:ed:b3:64:d3:a0:d3:f2:1b:62:a0:a9:dc:98:7e: c1:92:42:89:bd:e7:87:82:03:7a:a0:0e:b2:41:a8:e7:17:10: ac:ac:3f:e4:f9:5b:30:af:de:99:d0:a8:fb:58:9d:95:6b:d5: 34:50:ae:09:b8:44:73:bc:05:ce:70:15:b0:49:ab:89:99:83: 01:32:e8:73:e0:3f:bb:4a:40:be:fd:83:83:70:b8:e3:4e:44: 64:f1:48:7e:40:a0:17:2d:2d:ad:76:ed:5b:7e:a2:ad:88:fe: 69:c7:1c:e8:1f:bf:2b:33:bf:91:2f:ee:54:33:9e:60:86:6b: 0b:b1:e2:c0:98:3e:d8:f9:10:55:dd:4b:7a:56:b4:cf:40:77: c0:88:e0:3f:f9:e1:d6:dc:a1:96:9f:ec:e1:1c:7d:07:6d:2e: 71:7c:70:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjDs7krm/7hmTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk NzY3NTc0OGMtYjk4ZS00OTQzLWFhMDktMzkxM2IyMzEzNzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutBKNTpPLERQuqdgKhDNUJE+1c/4SS18mZRM Z1QWwhNzk7lGZ3fIjqxQAIv6WfNqFL1JeH2pRgaVHt72heMNs3FoZeHVUqi/13Mt LuYvXlbKdWvf/+K8mrmsHumA497IZeRmibhvlCk3a6aeBG8E/bsXPYH7qiy48l5K sCFNUZLaSCjFm+1YjtltucVwUPTD3v8QCMS9fANudBX3Lz3PXj1GfrE7psw3AJP/ oifSj8pQvIYXp9wjD5JnU2Efdra0QSsdmOSfqaTkWYsxxu1pQIdoR61Ehg5+QoHM GnytVGxCs90bvo1b/xvntrtN6KG16FTXHBMG+nxr+5XYx/XIMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETqyHpTf1XzsKfWR/lxiCg80uDsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmYyZjlkMDktMGI3ZS0z ZjcyLWI4NGUtNDE0OGE0OTgyM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx7SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELQ+aRFI+/t1ydpzvy74lvU+EXJ/bbzkkK4GwNSpMwrYPTxUgs2AAl+ r4c3hw1o6OyQutMKCHIX1+SBFHSve83mO9kaZrY+mWwi2KEZBTl/pUuegMZM9aRk +iPnQzfts2TToNPyG2KgqdyYfsGSQom954eCA3qgDrJBqOcXEKysP+T5WzCv3pnQ qPtYnZVr1TRQrgm4RHO8Bc5wFbBJq4mZgwEy6HPgP7tKQL79g4NwuONORGTxSH5A oBctLa127Vt+oq2I/mnHHOgfvyszv5Ev7lQznmCGawux4sCYPtj5EFXdS3pWtM9A d8CI4D/54dbcoZaf7OEcfQdtLnF8cIo= -----END CERTIFICATE-----Generated at Sun Sep 20 19:41:13 2026 by rpki-client