$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8585300-5ca2-37eb-a643-7e794eec82bc.roa File: e8585300-5ca2-37eb-a643-7e794eec82bc.roa (raw, json) Hash identifier: 3RQAOCQUWaBYkhPJJ3PhDbQ/GjDDaAsvhtimPrM0Qkc= Subject key identifier: 88:7E:7A:34:D7:E8:27:AB:F9:2E:08:AF:D3:A0:C1:B0:73:A0:33:62 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F454289294F3C37CE00497E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8585300-5ca2-37eb-a643-7e794eec82bc.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 7029 IP address blocks: 71.29.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:89:29:4f:3c:37:ce:00:49:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=4a9fca97-cdf2-4b4f-911e-637f63585b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:17:d1:a6:0c:5a:72:89:a4:b0:00:e9:bf:ba: 6c:6a:16:2f:46:a2:4f:3e:5f:dd:59:9e:b1:eb:70: bd:7d:8c:4c:ff:29:d9:d5:d0:14:c1:92:86:c1:fb: 40:a4:f6:fb:88:e6:87:47:49:74:a0:19:a5:14:11: de:b4:7f:73:27:11:8a:12:7e:2f:5b:e3:e6:3e:d6: af:b8:a8:b8:24:86:34:bb:91:e6:09:8f:54:c6:53: f5:4d:cd:17:63:a6:36:9c:1f:d0:59:97:33:67:f2: 0d:73:fa:dc:6b:1a:3b:c9:5b:a2:47:cc:34:53:3d: 8f:02:37:48:69:69:d6:12:b6:34:a0:17:5f:ee:d4: 02:8b:88:f8:46:3e:6c:d9:bd:57:18:fa:29:04:3a: f1:f2:af:c5:ab:13:39:35:bd:16:6a:a3:5d:d7:4d: 5c:98:a9:cd:3d:fb:fe:67:d5:df:c6:c9:d0:ed:67: 58:a3:24:81:f5:c8:97:92:36:cb:5c:fa:99:05:c1: 2b:9b:50:48:b1:08:d9:54:2d:7e:57:0b:08:65:70: 09:f3:1a:17:b9:b6:f0:9d:6f:73:1d:28:10:44:33: 4d:21:d3:2d:2b:96:09:66:8d:cf:e9:47:73:bf:a2: f6:71:6d:c8:a3:65:80:7e:48:17:a1:ae:48:52:f0: 5c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7E:7A:34:D7:E8:27:AB:F9:2E:08:AF:D3:A0:C1:B0:73:A0:33:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8585300-5ca2-37eb-a643-7e794eec82bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:02:5e:6b:23:4e:33:90:78:52:2f:be:dc:16:09:1d:8a:07: a3:85:52:74:5d:58:a4:38:9c:21:06:a1:52:7f:75:bc:b7:fe: 09:1a:ce:a5:e8:28:61:14:7e:4d:d8:11:a1:a5:a4:38:98:3f: 9c:c3:db:77:5f:fc:0f:0b:23:a3:30:44:a6:ca:bd:21:e4:85: 7f:91:ee:64:25:a3:5a:a4:f4:46:92:31:6c:bf:6f:35:a7:48: 71:09:d4:c0:28:d7:81:ab:eb:1b:d1:12:13:3e:00:3b:86:02: 67:08:27:50:77:5c:6d:a2:cb:50:7b:57:aa:5d:3b:e6:e4:f4: 31:1f:3e:7c:9a:34:ab:2c:df:99:71:79:de:fe:90:88:ff:49: 46:6a:3d:65:6d:c6:ba:10:93:fb:54:01:53:6c:16:16:10:2e: 6c:5f:c7:fa:5f:56:03:57:9d:47:3a:2c:c2:f9:62:9a:fb:07: 1e:58:53:1c:7f:93:e6:63:18:de:84:09:ec:9d:5e:8b:68:3c: 65:cc:76:ab:f4:08:b2:be:59:59:ac:6e:46:ac:bf:68:f7:f6: 86:6b:a3:2e:e5:39:f2:a1:e1:eb:7b:76:58:98:9c:f5:78:0b: 08:20:cc:8f:0a:bd:c1:1f:a8:86:c5:e5:28:c0:3e:7d:24:de: c4:28:19:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQokpTzw3zgBJfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk NGE5ZmNhOTctY2RmMi00YjRmLTkxMWUtNjM3ZjYzNTg1YjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRfRpgxacomksADpv7psahYvRqJPPl/dWZ6x 63C9fYxM/ynZ1dAUwZKGwftApPb7iOaHR0l0oBmlFBHetH9zJxGKEn4vW+PmPtav uKi4JIY0u5HmCY9UxlP1Tc0XY6Y2nB/QWZczZ/INc/rcaxo7yVuiR8w0Uz2PAjdI aWnWErY0oBdf7tQCi4j4Rj5s2b1XGPopBDrx8q/FqxM5Nb0WaqNd101cmKnNPfv+ Z9XfxsnQ7WdYoySB9ciXkjbLXPqZBcErm1BIsQjZVC1+VwsIZXAJ8xoXubbwnW9z HSgQRDNNIdMtK5YJZo3P6Udzv6L2cW3Io2WAfkgXoa5IUvBclwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIh+ejTX6Cer+S4Ir9OgwbBzoDNiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTg1ODUzMDAtNWNhMi0z N2ViLWE2NDMtN2U3OTRlZWM4MmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx16MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACICXmsjTjOQeFIvvtwWCR2KB6OFUnRdWKQ4nCEGoVJ/dby3/gkazqXo KGEUfk3YEaGlpDiYP5zD23df/A8LI6MwRKbKvSHkhX+R7mQlo1qk9EaSMWy/bzWn SHEJ1MAo14Gr6xvREhM+ADuGAmcIJ1B3XG2iy1B7V6pdO+bk9DEfPnyaNKss35lx ed7+kIj/SUZqPWVtxroQk/tUAVNsFhYQLmxfx/pfVgNXnUc6LML5Ypr7Bx5YUxx/ k+ZjGN6ECeydXotoPGXMdqv0CLK+WVmsbkasv2j39oZroy7lOfKh4et7dliYnPV4 CwggzI8KvcEfqIbF5SjAPn0k3sQoGZA= -----END CERTIFICATE-----Generated at Thu Sep 24 09:05:20 2026 by rpki-client