$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e1ad356b-782c-388b-8017-6047f509cd8f.roa File: e1ad356b-782c-388b-8017-6047f509cd8f.roa (raw, json) Hash identifier: xF2rmjHG7iSFE+jT7g9dCZTLrql9CR0DdQxNeFt3kK4= Subject key identifier: 21:67:36:1C:CC:02:1F:E3:25:73:83:ED:A2:A2:4D:4B:5F:E9:D2:D2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F506D68F5213BFD43CCB37200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e1ad356b-782c-388b-8017-6047f509cd8f.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 71.29.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:68:f5:21:3b:fd:43:cc:b3:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=737ecd23-b5db-473c-b043-ea73ba8980c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:02:e7:3f:7e:54:72:c0:fc:d3:83:5f:64:95: cd:d1:8f:6b:26:6c:41:ad:ec:52:f1:83:af:77:dc: a1:ac:36:de:9e:93:73:b3:44:45:49:e1:94:38:b1: f2:ed:f7:ae:1e:0a:54:e8:17:c0:b5:61:7b:a6:7d: ac:f0:31:8c:4c:b4:44:8d:1e:b3:4b:9d:c1:0f:30: d3:88:99:aa:0a:88:58:32:b2:f5:34:0e:c1:f8:07: 1c:93:2d:e8:07:da:f9:11:e6:e8:23:8e:37:60:28: f8:fc:4a:8a:94:37:41:a4:54:4f:d7:d7:f2:3f:77: f4:2d:30:c7:b1:80:55:b0:4a:ce:55:3c:f9:8a:ff: 31:65:d7:2b:c4:ce:b3:bd:66:c7:83:63:23:4b:67: 5e:e8:fb:cf:a5:87:88:b0:e5:c6:75:01:fc:2e:06: 1f:21:20:55:5c:e6:69:bb:d7:06:08:38:e2:30:00: 54:9b:cd:45:31:3f:c0:7e:4d:ec:af:8f:34:9f:ed: fb:f9:ce:e9:7f:a4:32:b4:63:fe:63:2e:fd:27:7e: fe:97:b8:9a:1e:ed:c6:d7:e9:71:27:8a:a8:05:26: cb:56:37:46:a0:61:51:e6:13:e2:f6:50:37:22:ec: 04:e3:83:e7:2e:e4:6a:17:22:57:1e:00:a2:b0:11: 1d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:67:36:1C:CC:02:1F:E3:25:73:83:ED:A2:A2:4D:4B:5F:E9:D2:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e1ad356b-782c-388b-8017-6047f509cd8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:25:d2:a1:32:5e:24:b1:fb:59:31:12:35:b8:d1:63:24:15: b9:62:65:a5:05:35:a4:2f:14:83:73:87:20:05:92:e0:66:6c: 21:ce:5a:80:f9:d7:bd:ee:03:03:fe:f6:70:94:0f:a4:3c:e4: 32:ac:e5:9d:1e:00:05:74:2e:e1:e0:bb:de:47:bc:be:ae:0e: c5:3f:9a:01:c2:b4:d9:0c:63:83:0a:81:20:e7:45:f6:5e:7d: ae:64:af:b8:47:ac:c7:7a:c3:e8:f3:66:0a:0e:0b:c1:6e:fb: 0b:fd:4b:04:42:7a:73:d0:a9:0d:14:7c:2c:f0:9b:f6:dd:17: 9e:43:e9:d7:ef:f6:96:18:b0:bb:76:cc:93:e9:b0:c7:6e:5e: ea:b5:5d:4a:5b:7d:c9:f3:62:e6:dc:85:23:57:aa:64:2c:a1: 57:7d:50:e0:af:43:b7:4f:e2:7d:c6:fd:b4:49:72:e0:63:a0: 31:fd:56:af:f2:69:db:19:5a:84:41:d0:ff:9d:a2:88:b5:78: 71:7c:38:de:ac:34:68:b8:78:46:e4:8b:c0:31:cd:80:b2:37: 45:f6:6b:b5:64:ed:bb:7c:31:cd:f4:2d:6c:9a:e9:94:94:0b: d4:4f:9e:16:51:e5:e7:49:78:ed:75:6a:cd:e8:5e:38:f6:aa: 46:af:27:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWj1ITv9Q8yzcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NzM3ZWNkMjMtYjVkYi00NzNjLWIwNDMtZWE3M2JhODk4MGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQLnP35UcsD804NfZJXN0Y9rJmxBrexS8YOv d9yhrDbenpNzs0RFSeGUOLHy7feuHgpU6BfAtWF7pn2s8DGMTLREjR6zS53BDzDT iJmqCohYMrL1NA7B+Accky3oB9r5EeboI443YCj4/EqKlDdBpFRP19fyP3f0LTDH sYBVsErOVTz5iv8xZdcrxM6zvWbHg2MjS2de6PvPpYeIsOXGdQH8LgYfISBVXOZp u9cGCDjiMABUm81FMT/Afk3sr480n+37+c7pf6QytGP+Yy79J37+l7iaHu3G1+lx J4qoBSbLVjdGoGFR5hPi9lA3IuwE44PnLuRqFyJXHgCisBEdHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFnNhzMAh/jJXOD7aKiTUtf6dLSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTFhZDM1NmItNzgyYy0z ODhiLTgwMTctNjA0N2Y1MDljZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4l0qEyXiSx+1kxEjW40WMkFbliZaUFNaQvFINzhyAFkuBmbCHOWoD5 173uAwP+9nCUD6Q85DKs5Z0eAAV0LuHgu95HvL6uDsU/mgHCtNkMY4MKgSDnRfZe fa5kr7hHrMd6w+jzZgoOC8Fu+wv9SwRCenPQqQ0UfCzwm/bdF55D6dfv9pYYsLt2 zJPpsMduXuq1XUpbfcnzYubchSNXqmQsoVd9UOCvQ7dP4n3G/bRJcuBjoDH9Vq/y adsZWoRB0P+dooi1eHF8ON6sNGi4eEbki8AxzYCyN0X2a7Vk7bt8Mc30LWya6ZSU C9RPnhZR5edJeO11as3oXjj2qkavJ8I= -----END CERTIFICATE-----Generated at Mon Sep 28 14:28:37 2026 by rpki-client