$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2554db6e-c015-300e-96cd-5feec8e7db61.roa File: 2554db6e-c015-300e-96cd-5feec8e7db61.roa (raw, json) Hash identifier: Fx3+2A/+7phsvdFRoTxjcO4Hb0ul7M1+lG2aggbMkb4= Subject key identifier: 02:D2:62:11:2E:6D:4E:08:D3:07:B9:CB:3E:7A:D6:4D:FF:90:89:7D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F0242166D9EC22133A5ECE440 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2554db6e-c015-300e-96cd-5feec8e7db61.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 71.29.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:16:6d:9e:c2:21:33:a5:ec:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=8a9f2d8d-2739-438e-b8bc-bb01e06a1bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:85:91:52:ae:f7:61:d7:f1:bf:13:98:55:c4: 1b:80:49:45:b9:ed:bf:9c:73:25:40:a9:ed:ae:ea: 77:ae:21:43:be:cc:ea:2f:bd:e5:45:65:99:7d:98: 26:11:95:5d:43:a3:3e:02:b6:9d:c4:f6:29:10:f5: 86:61:9b:dd:7f:a8:5a:1f:eb:6a:0e:8c:98:47:6f: 15:95:ed:6a:7f:47:74:a2:33:00:34:51:8f:62:2b: 01:07:85:56:e5:da:2c:53:e6:f3:70:27:26:87:44: 0e:46:7f:2a:cd:36:6c:96:1a:ba:31:c9:05:08:25: eb:4f:78:3e:e1:89:37:12:bd:77:9e:50:43:e4:b8: 80:09:2d:6b:c1:f4:61:f1:96:1d:8a:da:f5:29:16: 25:94:8b:f7:d1:fa:e4:66:16:06:ba:cb:68:41:7b: d1:9d:b2:13:15:ac:ce:ba:50:fe:f2:4d:91:eb:5b: 83:43:6f:4e:88:51:3e:19:99:ae:45:24:67:1a:6d: 1e:69:08:c3:8a:67:f1:4d:50:6a:82:3f:28:6e:31: a9:dc:f3:1a:10:4d:c2:f2:b1:e9:39:4b:cd:94:0d: 0e:fe:d4:b9:b8:7f:04:d2:af:9d:63:03:47:33:32: d8:26:62:1d:ee:cc:64:1d:a0:3a:3e:09:75:cb:1f: 24:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D2:62:11:2E:6D:4E:08:D3:07:B9:CB:3E:7A:D6:4D:FF:90:89:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2554db6e-c015-300e-96cd-5feec8e7db61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:b0:1f:33:0b:90:56:f6:4e:24:9b:4d:a8:5a:92:50:17:bf: c4:1e:b0:bf:30:3f:98:70:a4:ff:34:1e:ab:56:b2:85:8f:c0: 5a:f5:b6:5e:2b:be:e9:b4:2d:ac:37:27:ab:3a:26:f9:e5:2f: a4:07:74:52:38:d0:1a:f1:35:ab:bd:22:15:15:23:3a:88:1b: 91:34:2f:e6:d0:29:52:ee:6b:bf:2c:02:43:61:20:40:4e:96: 3d:e6:37:55:9b:13:26:51:95:ac:9e:02:44:fe:0b:b1:b5:ca: 35:7c:49:25:7d:d6:e9:42:88:af:b4:1d:f3:db:b5:71:f8:2a: 75:06:2e:44:dd:0c:a7:ba:02:cf:97:0f:f5:f8:e4:f2:36:12: 46:d2:e7:86:2e:10:28:74:dd:34:d9:58:8e:e0:3e:37:ba:a0: 1a:19:31:01:48:21:6d:2e:77:c0:d8:ca:03:70:6b:c9:47:d9: fe:20:95:e7:ce:13:33:cc:e4:14:08:37:ea:34:ca:bb:f2:7e: 50:34:2a:24:cd:7f:2c:98:3e:43:ce:3b:c6:64:a5:f0:65:df: c6:39:02:ad:92:75:e2:38:68:d7:98:c5:99:24:b1:58:d5:04: 97:8f:5f:b4:ea:d2:7d:10:ad:fd:9e:57:42:d8:dc:ae:71:2b: 97:08:a4:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQhZtnsIhM6Xs5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk OGE5ZjJkOGQtMjczOS00MzhlLWI4YmMtYmIwMWUwNmExYmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IWRUq73YdfxvxOYVcQbgElFue2/nHMlQKnt rup3riFDvszqL73lRWWZfZgmEZVdQ6M+AradxPYpEPWGYZvdf6haH+tqDoyYR28V le1qf0d0ojMANFGPYisBB4VW5dosU+bzcCcmh0QORn8qzTZslhq6MckFCCXrT3g+ 4Yk3Er13nlBD5LiACS1rwfRh8ZYditr1KRYllIv30frkZhYGustoQXvRnbITFazO ulD+8k2R61uDQ29OiFE+GZmuRSRnGm0eaQjDimfxTVBqgj8objGp3PMaEE3C8rHp OUvNlA0O/tS5uH8E0q+dYwNHMzLYJmId7sxkHaA6Pgl1yx8kEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALSYhEubU4I0we5yz561k3/kIl9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjU1NGRiNmUtYzAxNS0z MDBlLTk2Y2QtNWZlZWM4ZTdkYjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+wHzMLkFb2TiSbTahaklAXv8QesL8wP5hwpP80HqtWsoWPwFr1tl4r vum0Law3J6s6JvnlL6QHdFI40BrxNau9IhUVIzqIG5E0L+bQKVLua78sAkNhIEBO lj3mN1WbEyZRlayeAkT+C7G1yjV8SSV91ulCiK+0HfPbtXH4KnUGLkTdDKe6As+X D/X45PI2EkbS54YuECh03TTZWI7gPje6oBoZMQFIIW0ud8DYygNwa8lH2f4glefO EzPM5BQIN+o0yrvyflA0KiTNfyyYPkPOO8ZkpfBl38Y5Aq2SdeI4aNeYxZkksVjV BJePX7Tq0n0Qrf2eV0LY3K5xK5cIpJU= -----END CERTIFICATE-----Generated at Wed Sep 23 22:41:55 2026 by rpki-client