$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13d273c5-624e-3c6e-a8cf-9cf091a11d88.roa File: 13d273c5-624e-3c6e-a8cf-9cf091a11d88.roa (raw, json) Hash identifier: LegD9L3CfTHEuOlb34GtTzvEXdD7qIvbPc/DY4982g0= Subject key identifier: 54:D3:68:4E:4C:9A:25:27:5B:09:7A:23:E9:00:DD:25:5D:D2:93:7C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F024236BEA351935999B6F6C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13d273c5-624e-3c6e-a8cf-9cf091a11d88.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 71.28.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:36:be:a3:51:93:59:99:b6:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=0cfc009e-cb86-4580-ab6b-c1089409c9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d3:30:43:77:02:a7:4e:75:bc:ea:43:64:23: 3a:b5:a6:d2:b1:7f:04:4b:11:46:61:d6:65:9e:82: 05:5b:be:88:6c:a5:f9:85:df:a0:29:67:ef:86:c9: 9c:79:37:de:67:95:d9:2c:6b:85:d4:db:43:c9:3a: 1f:62:5c:16:79:6d:77:0f:eb:a0:0c:30:ab:5a:1c: cf:09:a6:05:d7:55:d7:14:6a:bf:f5:2f:b5:08:9d: 29:e9:c5:ab:9c:85:e2:84:33:d8:29:3e:f0:90:6d: 1e:d8:47:2a:0a:b1:72:25:af:e5:2c:83:2c:0e:86: 33:f9:76:8c:43:e3:60:2e:05:05:59:7a:77:67:d8: a8:37:fb:34:f9:03:dc:7b:f5:0e:43:ca:c8:a7:10: 00:79:66:11:f8:76:87:35:f2:ce:3c:c7:3c:84:3b: 32:1c:28:e9:8c:74:b8:78:12:b8:83:bd:16:f4:80: ee:3c:99:fa:2f:5d:56:24:1b:d4:49:1b:77:2f:a8: 71:c6:30:be:11:0e:71:a6:85:b0:6d:80:d4:0a:2c: 26:b5:6b:80:e1:41:03:70:f5:40:23:82:c3:67:86: 63:95:da:03:b3:34:8d:61:d0:5e:00:67:62:98:59: 35:1b:77:96:28:6e:8a:81:e7:46:17:d6:82:bc:8d: c8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D3:68:4E:4C:9A:25:27:5B:09:7A:23:E9:00:DD:25:5D:D2:93:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13d273c5-624e-3c6e-a8cf-9cf091a11d88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:5d:49:03:1f:b1:ae:dd:d4:cc:77:f0:bd:40:d3:d1:74:ed: 26:a7:87:3a:c3:48:92:ac:ed:38:7c:9f:70:f8:ba:3d:47:92: b7:16:fd:6c:0a:6c:80:38:e5:1a:29:0c:48:fe:cf:7a:f1:0e: 50:90:ab:81:80:16:34:92:33:8d:98:73:a0:e1:4f:e3:e0:49: 03:f4:6b:e1:7e:b6:9a:b5:00:9e:92:b8:b8:fd:1a:28:c6:1e: e5:f5:4b:56:64:5e:12:00:dd:b0:c2:89:6a:5a:d7:97:1b:58: f2:a7:45:1c:a9:77:f7:7f:52:14:40:60:63:51:af:f3:77:20: ca:ca:35:ad:8b:33:f1:28:1a:d2:f3:4e:61:35:70:cb:d0:11: 4b:56:fe:72:ec:04:0e:09:6f:a3:e7:e8:b6:b6:84:cd:93:75: a1:cf:3e:1f:ac:b8:9d:51:0f:2d:b1:ad:ff:f0:22:4d:05:0e: 5e:ea:0b:21:ae:9e:01:30:c6:fa:66:9a:a9:a5:8d:8a:e7:48: 7c:29:0a:50:2f:1d:c2:ac:8c:84:cc:ce:d5:64:4e:5b:b6:1d: 69:89:36:5a:ae:43:0f:1a:76:e1:57:1d:33:be:49:5b:0b:f7: 9f:d4:74:d9:22:66:d7:98:52:80:e6:83:dd:60:6b:44:eb:fa: 4f:d4:9d:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQja+o1GTWZm29sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk MGNmYzAwOWUtY2I4Ni00NTgwLWFiNmItYzEwODk0MDljOWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tMwQ3cCp051vOpDZCM6tabSsX8ESxFGYdZl noIFW76IbKX5hd+gKWfvhsmceTfeZ5XZLGuF1NtDyTofYlwWeW13D+ugDDCrWhzP CaYF11XXFGq/9S+1CJ0p6cWrnIXihDPYKT7wkG0e2EcqCrFyJa/lLIMsDoYz+XaM Q+NgLgUFWXp3Z9ioN/s0+QPce/UOQ8rIpxAAeWYR+HaHNfLOPMc8hDsyHCjpjHS4 eBK4g70W9IDuPJn6L11WJBvUSRt3L6hxxjC+EQ5xpoWwbYDUCiwmtWuA4UEDcPVA I4LDZ4ZjldoDszSNYdBeAGdimFk1G3eWKG6KgedGF9aCvI3I+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTTaE5MmiUnWwl6I+kA3SVd0pN8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTNkMjczYzUtNjI0ZS0z YzZlLWE4Y2YtOWNmMDkxYTExZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxyFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9dSQMfsa7d1Mx38L1A09F07SanhzrDSJKs7Th8n3D4uj1HkrcW/WwK bIA45RopDEj+z3rxDlCQq4GAFjSSM42Yc6DhT+PgSQP0a+F+tpq1AJ6SuLj9GijG HuX1S1ZkXhIA3bDCiWpa15cbWPKnRRypd/d/UhRAYGNRr/N3IMrKNa2LM/EoGtLz TmE1cMvQEUtW/nLsBA4Jb6Pn6La2hM2TdaHPPh+suJ1RDy2xrf/wIk0FDl7qCyGu ngEwxvpmmqmljYrnSHwpClAvHcKsjITMztVkTlu2HWmJNlquQw8aduFXHTO+SVsL 95/UdNkiZteYUoDmg91ga0Tr+k/UnVQ= -----END CERTIFICATE-----Generated at Thu Sep 24 21:38:11 2026 by rpki-client