$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7a3668d-bb9a-387b-b605-5f5bfc7c9d4c.roa File: b7a3668d-bb9a-387b-b605-5f5bfc7c9d4c.roa (raw, json) Hash identifier: tz9G/mXLnVtu2khiPJrK2sphjicYXsZUl5EDYNTycn0= Subject key identifier: 8A:6F:EE:F6:AB:41:CF:C0:42:B3:F0:DE:10:68:D0:E4:07:2D:86:48 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F1302342DE86B7ED878C20940 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7a3668d-bb9a-387b-b605-5f5bfc7c9d4c.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 71.29.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:34:2d:e8:6b:7e:d8:78:c2:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=fd093205-7d96-46be-ab92-33db282713ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6e:90:6c:bc:28:b6:d4:81:ba:90:e5:42:fb: 0b:95:a1:3e:12:7b:6e:fd:1b:d7:59:93:e4:35:fa: 90:28:73:b0:9e:64:e8:24:86:5c:ec:da:d1:cd:71: d8:d4:ea:3e:08:91:4b:fc:40:1e:11:8d:ae:85:d0: 26:c7:27:aa:e4:9d:dd:b5:02:8b:bd:44:f6:57:b8: 27:3a:10:8e:17:a2:d1:ee:43:1b:70:4c:32:07:76: 28:91:7f:3c:95:b6:60:eb:fa:f3:75:66:59:c0:af: d4:7e:f3:bb:fa:1b:8c:bf:0f:71:24:ae:9e:0e:22: b9:0c:14:0a:81:48:41:86:55:30:e1:7e:66:01:00: 10:32:7d:2d:46:18:7c:7e:08:aa:82:75:00:17:1d: 4d:26:20:7c:ce:7f:ca:84:4c:42:2b:4c:70:e9:b1: 51:03:d2:9d:58:e4:06:57:98:bb:ea:ed:e1:d1:e0: 8f:a5:28:d4:12:ee:71:81:11:ec:aa:78:98:4e:1b: d1:9e:b8:a1:c9:01:33:1f:ad:e7:34:b7:f3:84:c0: 35:f4:dc:18:f3:60:0c:e6:2a:ab:e6:fa:bb:86:26: a2:5c:53:44:e1:69:95:52:ec:32:13:2b:c5:bb:20: 6d:82:df:3a:ff:eb:c4:15:07:3a:0c:08:4a:51:4e: 98:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6F:EE:F6:AB:41:CF:C0:42:B3:F0:DE:10:68:D0:E4:07:2D:86:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7a3668d-bb9a-387b-b605-5f5bfc7c9d4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:c1:54:e8:d5:6f:de:ce:24:47:cc:1a:e9:00:33:f6:98:c2: aa:f4:9e:de:44:bd:b1:1d:90:d7:9c:58:9f:87:23:36:6d:41: ac:d8:33:51:d7:7b:ac:fb:91:e6:74:91:32:d9:52:57:94:ed: 06:65:d6:49:13:c5:fa:6f:86:49:d5:77:3b:3d:94:23:f2:4f: e4:a6:d3:4c:fa:d6:f1:68:56:8b:b1:c9:ad:57:4e:71:f8:1a: 1f:60:c0:0d:83:e1:f4:be:07:61:a0:aa:43:28:8d:a6:6a:2b: fa:73:c2:e5:cb:70:24:9f:27:e4:35:2b:21:af:45:87:9d:36: 88:fb:24:9e:23:d2:7b:31:f4:e8:59:c6:64:5f:93:98:dc:d0: 28:24:14:c2:e1:5a:e3:a3:a3:80:94:93:b5:56:e1:ac:88:85: 28:55:77:51:fb:85:01:98:cc:fe:13:ea:89:98:31:1c:d7:34: 3e:a1:32:1e:76:c3:bd:db:7b:0f:59:b5:c6:28:e8:b0:51:01: 0d:0d:f8:3d:99:3e:bf:79:07:82:9c:c8:0b:08:36:bd:ac:91: ae:f8:3b:c6:99:3d:7b:4e:25:40:82:6f:e4:ce:e6:62:ff:ef: 94:b5:90:42:51:49:cb:6c:2a:ad:43:ac:da:12:10:b1:cd:d9: 7b:39:3e:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAjQt6Gt+2HjCCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk ZmQwOTMyMDUtN2Q5Ni00NmJlLWFiOTItMzNkYjI4MjcxM2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi26QbLwottSBupDlQvsLlaE+Entu/RvXWZPk NfqQKHOwnmToJIZc7NrRzXHY1Oo+CJFL/EAeEY2uhdAmxyeq5J3dtQKLvUT2V7gn OhCOF6LR7kMbcEwyB3YokX88lbZg6/rzdWZZwK/UfvO7+huMvw9xJK6eDiK5DBQK gUhBhlUw4X5mAQAQMn0tRhh8fgiqgnUAFx1NJiB8zn/KhExCK0xw6bFRA9KdWOQG V5i76u3h0eCPpSjUEu5xgRHsqniYThvRnrihyQEzH63nNLfzhMA19NwY82AM5iqr 5vq7hiaiXFNE4WmVUuwyEyvFuyBtgt86/+vEFQc6DAhKUU6YMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpv7varQc/AQrPw3hBo0OQHLYZIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjdhMzY2OGQtYmI5YS0z ODdiLWI2MDUtNWY1YmZjN2M5ZDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx33MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXBVOjVb97OJEfMGukAM/aYwqr0nt5EvbEdkNecWJ+HIzZtQazYM1HX e6z7keZ0kTLZUleU7QZl1kkTxfpvhknVdzs9lCPyT+Sm00z61vFoVouxya1XTnH4 Gh9gwA2D4fS+B2GgqkMojaZqK/pzwuXLcCSfJ+Q1KyGvRYedNoj7JJ4j0nsx9OhZ xmRfk5jc0CgkFMLhWuOjo4CUk7VW4ayIhShVd1H7hQGYzP4T6omYMRzXND6hMh52 w73bew9ZtcYo6LBRAQ0N+D2ZPr95B4KcyAsINr2ska74O8aZPXtOJUCCb+TO5mL/ 75S1kEJRSctsKq1DrNoSELHN2Xs5PjE= -----END CERTIFICATE-----Generated at Sat Sep 26 16:49:55 2026 by rpki-client