$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f94a629-79eb-368a-9b8f-56715d70c771.roa File: 4f94a629-79eb-368a-9b8f-56715d70c771.roa (raw, json) Hash identifier: +g1GNBHPEi3LAExNnAWBPyxYZrEHS0kwfpUUEHbKUlA= Subject key identifier: 4F:CE:0E:A5:D2:81:68:F1:15:5E:61:B4:4F:89:45:92:BD:9E:98:A6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F3CE2B1C13FF01532908CD940 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f94a629-79eb-368a-9b8f-56715d70c771.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 71.28.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:b1:c1:3f:f0:15:32:90:8c:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=2b9574fb-74f1-4f64-bb54-1b597845ff65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9d:33:4f:5f:48:95:8c:f5:23:e6:ec:12:16: 66:93:ca:f6:92:b2:2b:9f:c5:f7:ca:0e:ad:49:cc: cc:0f:9f:85:db:1b:3a:12:f1:6f:b2:f6:5f:b3:3b: 2e:b3:e4:4a:2f:9c:b5:75:fb:76:37:d4:84:61:03: e7:e9:b5:c0:e0:e0:f9:30:2a:db:1a:b4:d1:9d:14: c3:d1:f6:4c:88:35:40:99:6d:e7:57:f1:92:41:f8: 7f:cd:86:93:24:a7:25:41:11:fa:cc:32:41:74:28: 41:23:6d:bd:a8:03:32:e0:e1:90:c3:5c:e5:d4:4f: 93:f4:c8:8a:f1:4b:a1:2a:22:f3:b9:66:20:82:c9: e2:d8:5b:a5:33:c5:2d:24:b6:d2:e9:55:44:e9:1b: 48:23:85:11:55:d4:f1:0b:8c:b4:dc:12:0a:c1:93: 37:31:0a:2b:fe:95:be:f3:0c:0c:de:92:e4:b3:da: f1:65:02:11:94:c6:07:37:44:67:cb:ee:c3:d1:33: 93:9e:b6:63:e4:f6:c1:ba:af:ec:40:79:04:f5:95: 5e:13:a3:e3:93:1e:72:b8:9a:df:a8:d9:dc:76:33: b8:57:52:4c:2c:29:77:10:52:0a:88:6c:ca:ee:c9: 51:73:12:91:f6:eb:4d:f0:26:46:f5:68:a5:d7:ec: 10:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CE:0E:A5:D2:81:68:F1:15:5E:61:B4:4F:89:45:92:BD:9E:98:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f94a629-79eb-368a-9b8f-56715d70c771.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:7a:ab:a6:26:e9:4b:64:60:90:47:61:74:c7:6d:7d:c0:db: d4:ac:25:11:43:7e:33:c2:e3:97:47:84:5f:99:05:74:44:46: ca:ce:c6:97:1e:cc:c9:7e:95:d9:c9:33:09:de:86:b6:84:ab: cf:c2:57:c5:5f:f5:13:e4:e3:05:00:cc:19:f0:6e:a7:ae:80: 71:21:1e:d3:3a:08:86:72:aa:6c:a2:16:12:d9:96:36:dd:77: c5:9e:7e:c1:28:b3:54:ab:12:77:0b:17:50:2f:0f:d5:07:2f: bc:59:66:3a:00:89:47:3c:d7:14:6c:fa:1d:8d:66:2e:9b:49: d9:eb:41:a2:24:20:44:fd:1c:58:f8:4d:76:44:40:fd:21:57: fc:4c:45:fa:5e:b3:84:63:56:99:a1:84:2b:43:c0:8d:3c:b1: b8:32:da:8a:60:d6:06:62:af:80:8b:92:8c:8d:d0:56:53:70: 65:6d:ea:5f:32:0e:64:f2:42:b0:1e:1c:eb:85:fa:b7:a4:68: 66:b4:8c:72:85:0c:27:8d:69:6a:19:b9:18:5e:30:30:ee:ca: 37:52:d3:90:4c:73:2c:e8:8b:f9:bb:76:c2:f4:0c:d3:57:69: 98:d4:75:f4:21:88:a5:73:f5:2c:26:ee:71:92:64:20:a4:68: 6d:7a:88:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884rHBP/AVMpCM2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MmI5NTc0ZmItNzRmMS00ZjY0LWJiNTQtMWI1OTc4NDVmZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA150zT19IlYz1I+bsEhZmk8r2krIrn8X3yg6t SczMD5+F2xs6EvFvsvZfszsus+RKL5y1dft2N9SEYQPn6bXA4OD5MCrbGrTRnRTD 0fZMiDVAmW3nV/GSQfh/zYaTJKclQRH6zDJBdChBI229qAMy4OGQw1zl1E+T9MiK 8UuhKiLzuWYggsni2FulM8UtJLbS6VVE6RtII4URVdTxC4y03BIKwZM3MQor/pW+ 8wwM3pLks9rxZQIRlMYHN0Rny+7D0TOTnrZj5PbBuq/sQHkE9ZVeE6Pjkx5yuJrf qNncdjO4V1JMLCl3EFIKiGzK7slRcxKR9utN8CZG9Wil1+wQ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/ODqXSgWjxFV5htE+JRZK9npimMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGY5NGE2MjktNzllYi0z NjhhLTliOGYtNTY3MTVkNzBjNzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE16q6Ym6UtkYJBHYXTHbX3A29SsJRFDfjPC45dHhF+ZBXRERsrOxpce zMl+ldnJMwnehraEq8/CV8Vf9RPk4wUAzBnwbqeugHEhHtM6CIZyqmyiFhLZljbd d8WefsEos1SrEncLF1AvD9UHL7xZZjoAiUc81xRs+h2NZi6bSdnrQaIkIET9HFj4 TXZEQP0hV/xMRfpes4RjVpmhhCtDwI08sbgy2opg1gZir4CLkoyN0FZTcGVt6l8y DmTyQrAeHOuF+rekaGa0jHKFDCeNaWoZuRheMDDuyjdS05BMcyzoi/m7dsL0DNNX aZjUdfQhiKVz9Swm7nGSZCCkaG16iN0= -----END CERTIFICATE-----Generated at Mon Sep 28 00:58:00 2026 by rpki-client