$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ca37203-9c88-36be-9325-8bdef4118d27.roa File: 4ca37203-9c88-36be-9325-8bdef4118d27.roa (raw, json) Hash identifier: Z5TELTub7xv7xbyRbbVagwVrIin/OLX5POSFhjk+Cx0= Subject key identifier: 97:32:2C:53:4C:0D:A8:1E:09:CE:A7:7A:C7:B6:B2:C2:A8:A3:7C:50 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F3A17D85A348F4B252C89B580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ca37203-9c88-36be-9325-8bdef4118d27.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 71.29.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:d8:5a:34:8f:4b:25:2c:89:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=3009ce26-98e5-4206-9862-bc8b6024e4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:39:17:f5:91:4d:18:91:12:33:b8:13:84:9a: 39:33:92:ca:62:46:9c:7e:89:b4:a5:05:1a:ea:ba: 20:52:44:09:75:26:23:c1:0e:ed:c9:62:24:cf:6a: f2:3f:c1:b2:ba:4e:63:f7:e0:93:43:d1:8e:a6:ba: 0e:ab:58:02:0a:42:25:0e:29:b2:d6:04:28:17:41: 4a:82:27:a1:5e:2e:e4:c6:f0:d7:c9:60:ee:a6:a2: d2:2c:36:26:fc:a5:de:f9:6d:49:71:61:60:5a:4d: a0:e5:07:cc:b0:cc:b0:ea:2e:b2:62:99:f7:f6:38: f5:72:2e:52:a8:78:2f:1e:52:dc:41:04:e7:a7:1c: a4:5e:d0:2b:6d:68:41:7e:96:0b:d0:6b:e4:c3:90: 5b:5f:4b:7c:98:5f:bc:51:cc:88:03:e5:9e:48:2a: 3d:3b:05:f6:b4:ba:75:9c:dd:d8:9b:b3:eb:30:ad: a6:bc:3e:95:ab:f2:78:03:2f:00:fd:a9:14:5c:34: 8a:b4:36:27:4a:2c:42:71:36:db:44:2a:4a:98:6c: 3a:ca:4c:5e:fc:c2:e5:ed:c1:68:1d:73:fc:70:f7: 1e:71:87:d6:07:3f:82:b2:f4:51:ef:8c:08:23:35: 6e:94:fe:28:5d:09:fd:7a:36:1f:c7:3e:b1:95:c4: d3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:32:2C:53:4C:0D:A8:1E:09:CE:A7:7A:C7:B6:B2:C2:A8:A3:7C:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ca37203-9c88-36be-9325-8bdef4118d27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:2e:b8:7c:80:7c:72:4a:32:e3:fe:86:66:f5:62:1e:38:cf: 95:08:ac:07:76:f2:fc:0b:0d:4b:87:76:cb:bd:a7:8d:20:b0: 5b:98:62:5b:03:55:4a:38:9c:5d:33:55:f8:43:e9:c2:57:f4: 09:18:6a:28:86:27:d0:78:34:72:70:07:9f:77:27:d5:11:66: b5:87:bb:79:b5:c7:9e:38:66:19:8d:44:96:2a:f7:03:05:d0: 28:f1:87:7f:da:6c:7a:d0:e2:66:39:64:89:4b:bd:85:dc:b3: 3b:a4:ba:89:9a:c6:65:b2:7c:13:b6:6f:f4:5e:5f:14:b3:1c: 30:35:dd:e1:a1:51:3e:24:9c:28:0f:0b:9e:78:e7:59:26:bf: 98:9d:1d:11:47:ee:a2:e4:3b:95:70:1a:af:3d:da:46:35:bc: 03:44:10:31:86:b7:5e:8e:22:3e:f1:7b:45:33:0f:d0:a9:fa: 3b:c5:e6:19:9d:c1:e3:02:84:ab:8d:88:b3:44:cf:fc:b0:18: 0e:c5:dd:31:38:35:4e:da:59:34:a2:97:2b:2a:cd:54:c5:c3: 06:3a:01:de:00:bf:a6:7d:c8:02:6c:09:1e:49:64:8c:3f:23: 7d:ab:23:b9:05:43:bd:f0:55:b5:84:34:cf:fa:70:86:95:ff: 0b:f3:45:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9haNI9LJSyJtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MzAwOWNlMjYtOThlNS00MjA2LTk4NjItYmM4YjYwMjRlNGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTkX9ZFNGJESM7gThJo5M5LKYkacfom0pQUa 6rogUkQJdSYjwQ7tyWIkz2ryP8Gyuk5j9+CTQ9GOproOq1gCCkIlDimy1gQoF0FK giehXi7kxvDXyWDupqLSLDYm/KXe+W1JcWFgWk2g5QfMsMyw6i6yYpn39jj1ci5S qHgvHlLcQQTnpxykXtArbWhBfpYL0Gvkw5BbX0t8mF+8UcyIA+WeSCo9OwX2tLp1 nN3Ym7PrMK2mvD6Vq/J4Ay8A/akUXDSKtDYnSixCcTbbRCpKmGw6ykxe/MLl7cFo HXP8cPcecYfWBz+CsvRR74wIIzVulP4oXQn9ejYfxz6xlcTTbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcyLFNMDageCc6nese2ssKoo3xQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGNhMzcyMDMtOWM4OC0z NmJlLTkzMjUtOGJkZWY0MTE4ZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx0aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYuuHyAfHJKMuP+hmb1Yh44z5UIrAd28vwLDUuHdsu9p40gsFuYYlsD VUo4nF0zVfhD6cJX9AkYaiiGJ9B4NHJwB593J9URZrWHu3m1x544ZhmNRJYq9wMF 0Cjxh3/abHrQ4mY5ZIlLvYXcszukuomaxmWyfBO2b/ReXxSzHDA13eGhUT4knCgP C55451kmv5idHRFH7qLkO5VwGq892kY1vANEEDGGt16OIj7xe0UzD9Cp+jvF5hmd weMChKuNiLNEz/ywGA7F3TE4NU7aWTSilysqzVTFwwY6Ad4Av6Z9yAJsCR5JZIw/ I32rI7kFQ73wVbWENM/6cIaV/wvzRS8= -----END CERTIFICATE-----Generated at Fri Oct 9 02:18:41 2026 by rpki-client