$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/faf66482-7afc-33d4-8de6-1371ecfa4006.roa File: faf66482-7afc-33d4-8de6-1371ecfa4006.roa (raw, json) Hash identifier: NmTdOxSozAIlxnIHFBAZJw9ggEvIwRNOHWY9/b+mK2c= Subject key identifier: C1:44:62:9E:ED:F4:B9:87:9A:35:8E:BA:4F:3A:D6:74:BD:60:1C:A1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F024230A6FD955FA7EA3662F0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/faf66482-7afc-33d4-8de6-1371ecfa4006.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 71.29.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:30:a6:fd:95:5f:a7:ea:36:62:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=71f26eb7-8d29-4888-a70b-7ed04867442b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:da:06:94:4c:e5:db:2f:7a:2e:79:df:be:15: 2f:de:0e:21:50:9a:d2:a2:92:8d:b0:31:ff:35:fd: be:6a:c3:63:e3:02:1d:83:ec:30:e1:a1:7e:36:c9: 90:e8:34:1c:08:c0:da:fd:ac:25:24:3e:6d:30:79: d9:a9:01:97:0f:c0:14:6f:ee:8a:af:eb:a3:4e:97: b5:58:c3:f8:7e:62:e9:7f:b5:a3:e1:c1:6d:06:dc: a2:62:99:14:4a:a9:d1:43:d6:b2:a3:af:b4:36:72: f0:fe:f3:4f:a3:a2:56:ea:65:7e:12:25:be:43:b4: be:80:ad:55:01:bd:b2:f5:d7:a0:89:60:07:31:d6: fc:95:ca:f6:62:0f:2f:b1:f9:dd:43:45:44:d0:4c: f4:28:51:95:b9:cf:67:a3:48:f2:0c:fe:c3:f4:68: eb:46:08:04:c0:15:62:29:c2:61:22:27:05:06:ab: 2c:ae:3e:90:48:8f:f7:9c:26:78:4b:b4:dc:00:5f: c2:79:5e:e4:48:03:df:34:d7:da:87:9b:92:66:5f: cc:40:55:53:58:bf:8d:e9:01:df:9b:0b:4d:ee:f5: 2a:c1:2b:8d:74:5c:3f:2e:07:a4:2a:95:3e:06:cf: a6:67:c6:09:20:1a:87:17:47:e0:1d:1a:c7:c2:b6: 8d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:44:62:9E:ED:F4:B9:87:9A:35:8E:BA:4F:3A:D6:74:BD:60:1C:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/faf66482-7afc-33d4-8de6-1371ecfa4006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b2:19:c9:b3:50:f3:a7:a8:91:4d:44:5d:0f:a5:2f:6f:40: 97:68:5a:6a:b1:b9:2b:99:04:cc:73:62:8a:88:a3:11:93:0c: e9:e5:dd:28:b0:8d:cb:01:d3:9d:17:bc:39:c9:2a:53:e2:ba: 3b:53:9d:10:be:fb:ba:10:81:25:09:91:c5:3a:ce:26:85:91: 4a:af:be:98:79:92:ae:1e:da:ec:45:2e:34:df:9e:5a:1f:6d: 4f:00:d3:2f:29:9a:e4:a5:61:06:2f:cf:87:5c:59:28:70:0d: e5:af:84:a8:35:e4:b8:93:33:48:b5:5b:02:61:f1:ae:05:b3: 63:77:47:1d:69:c4:c4:fe:c9:3b:c3:e6:79:f9:1e:90:d3:94: 66:85:b8:77:3c:49:69:33:58:75:42:f7:2f:a2:52:30:c5:65: b8:41:f7:cd:f1:54:42:d1:36:08:ca:4c:1d:4c:fe:80:99:8a: 6b:53:44:64:3f:ad:46:e6:6f:27:cd:8e:0b:af:8e:c6:14:1b: fc:46:e3:16:9c:f7:1c:91:81:66:34:87:68:76:80:d4:e3:b8: 9f:db:f1:8e:34:4b:0f:a7:ca:d4:41:45:f1:d0:13:e3:38:f3: b3:b7:ac:fc:a2:d8:eb:16:86:2a:f7:49:2e:94:1a:f6:23:35: 85:62:81:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjCm/ZVfp+o2YvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk NzFmMjZlYjctOGQyOS00ODg4LWE3MGItN2VkMDQ4Njc0NDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9oGlEzl2y96LnnfvhUv3g4hUJrSopKNsDH/ Nf2+asNj4wIdg+ww4aF+NsmQ6DQcCMDa/awlJD5tMHnZqQGXD8AUb+6Kr+ujTpe1 WMP4fmLpf7Wj4cFtBtyiYpkUSqnRQ9ayo6+0NnLw/vNPo6JW6mV+EiW+Q7S+gK1V Ab2y9degiWAHMdb8lcr2Yg8vsfndQ0VE0Ez0KFGVuc9no0jyDP7D9GjrRggEwBVi KcJhIicFBqssrj6QSI/3nCZ4S7TcAF/CeV7kSAPfNNfah5uSZl/MQFVTWL+N6QHf mwtN7vUqwSuNdFw/LgekKpU+Bs+mZ8YJIBqHF0fgHRrHwraNXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFEYp7t9LmHmjWOuk861nS9YByhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmFmNjY0ODItN2FmYy0z M2Q0LThkZTYtMTM3MWVjZmE0MDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx1HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyyGcmzUPOnqJFNRF0PpS9vQJdoWmqxuSuZBMxzYoqIoxGTDOnl3Siw jcsB050XvDnJKlPiujtTnRC++7oQgSUJkcU6ziaFkUqvvph5kq4e2uxFLjTfnlof bU8A0y8pmuSlYQYvz4dcWShwDeWvhKg15LiTM0i1WwJh8a4Fs2N3Rx1pxMT+yTvD 5nn5HpDTlGaFuHc8SWkzWHVC9y+iUjDFZbhB983xVELRNgjKTB1M/oCZimtTRGQ/ rUbmbyfNjguvjsYUG/xG4xac9xyRgWY0h2h2gNTjuJ/b8Y40Sw+nytRBRfHQE+M4 87O3rPyi2OsWhir3SS6UGvYjNYVigVU= -----END CERTIFICATE-----Generated at Wed Sep 23 10:59:59 2026 by rpki-client