$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fef181dd-6b0d-3837-9465-7b4b9128065a.roa File: fef181dd-6b0d-3837-9465-7b4b9128065a.roa (raw, json) Hash identifier: z+XZyMNWmJIe4XTVkab37Z0ot0duVXfz6yOIFysSAbo= Subject key identifier: 36:F7:33:E6:3F:F7:AD:AA:7E:F3:64:2E:E1:B5:E3:09:23:38:26:42 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B6E888BC1A42E8270DB0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fef181dd-6b0d-3837-9465-7b4b9128065a.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 71.30.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b6:e8:88:bc:1a:42:e8:27:0d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=aa466f66-9e32-46de-b6fc-bf0d2a40fba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:65:e0:6a:d8:ff:a0:12:0c:b9:9c:a3:60:96: 92:5c:b0:3d:b2:fa:62:50:be:63:c3:9c:07:66:e0: be:14:58:cf:21:10:0d:02:3a:ac:63:5f:34:b7:09: 71:09:af:62:c9:e5:7f:ee:1c:55:73:75:13:73:2a: 8b:fa:e4:4b:37:96:47:0b:f9:6b:34:94:73:2b:65: 5b:ef:4e:98:87:c8:d9:1d:0d:5c:e1:34:3c:b4:a5: 13:ba:0c:84:24:10:ee:bf:d4:78:e0:cf:aa:12:9f: a9:41:da:8f:f4:2e:fd:ec:81:75:a3:be:28:f0:5f: 6d:3d:92:27:7c:ae:1f:2d:39:a6:14:a4:21:9e:21: 0e:ae:c9:48:ea:1c:19:77:d6:ee:73:c7:4e:49:66: 33:10:6a:05:c6:8a:6e:fd:dc:8f:a1:67:ea:70:f0: 9b:21:54:94:0f:99:c2:de:6d:b4:1a:f3:79:ef:fc: 03:2b:dc:c9:56:fe:4a:05:27:33:9c:51:8a:0f:ad: 72:05:48:29:0b:bc:15:0d:7c:59:b2:9a:c2:08:6c: 60:de:3e:cd:1b:19:34:c4:cb:98:4a:26:75:9c:50: 68:36:23:57:92:37:e4:ec:22:5b:b1:25:c3:e8:9d: 9b:f8:bc:04:07:14:54:f7:7b:ce:ee:e9:cd:66:1a: 96:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F7:33:E6:3F:F7:AD:AA:7E:F3:64:2E:E1:B5:E3:09:23:38:26:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fef181dd-6b0d-3837-9465-7b4b9128065a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:98:c3:a7:81:9b:83:79:49:ab:55:2d:7d:75:f5:39:12:5f: a0:45:0f:be:9f:43:7c:9d:e4:a1:62:89:7c:72:83:de:ad:56: 34:5d:93:90:36:34:96:dd:39:05:86:eb:5f:15:29:df:b4:3c: 26:2a:af:4b:57:bb:6d:42:dd:80:fc:36:37:cd:7b:42:ec:1b: a5:03:5c:46:f2:d9:2d:9c:ac:c1:e2:a4:3b:fb:f2:89:91:2b: 50:31:bb:96:82:1d:03:9b:d9:95:e4:f8:8a:3f:e6:e5:29:e0: 18:85:d1:91:09:10:7f:c8:ae:81:73:d4:d2:4a:78:1c:57:c5: c3:cd:f4:7a:a7:61:b3:db:97:ac:ca:b7:5e:9a:28:00:43:e0: 47:39:89:57:69:a5:3f:c7:ec:58:3d:f5:01:38:f2:9a:3b:88: c0:8c:8b:fe:c2:c5:4c:af:cc:20:0c:bc:4b:58:3a:75:b3:3c: ba:e8:8e:0d:78:40:58:d9:9d:20:b8:ac:a4:77:b3:82:7b:2c: 27:de:4f:0d:c9:57:01:05:37:e6:c1:62:9a:97:30:ed:11:57: af:9e:98:1b:3d:db:ed:17:e7:76:81:01:cb:45:56:43:08:70: b4:b3:71:ea:26:8b:2e:a4:36:07:9c:eb:03:c7:ee:ce:ee:12: af:25:2a:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rboiLwaQugnDbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk YWE0NjZmNjYtOWUzMi00NmRlLWI2ZmMtYmYwZDJhNDBmYmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2Xgatj/oBIMuZyjYJaSXLA9svpiUL5jw5wH ZuC+FFjPIRANAjqsY180twlxCa9iyeV/7hxVc3UTcyqL+uRLN5ZHC/lrNJRzK2Vb 706Yh8jZHQ1c4TQ8tKUTugyEJBDuv9R44M+qEp+pQdqP9C797IF1o74o8F9tPZIn fK4fLTmmFKQhniEOrslI6hwZd9buc8dOSWYzEGoFxopu/dyPoWfqcPCbIVSUD5nC 3m20GvN57/wDK9zJVv5KBScznFGKD61yBUgpC7wVDXxZsprCCGxg3j7NGxk0xMuY SiZ1nFBoNiNXkjfk7CJbsSXD6J2b+LwEBxRU93vO7unNZhqWpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDb3M+Y/962qfvNkLuG14wkjOCZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmVmMTgxZGQtNmIwZC0z ODM3LTk0NjUtN2I0YjkxMjgwNjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx64MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeYw6eBm4N5SatVLX119TkSX6BFD76fQ3yd5KFiiXxyg96tVjRdk5A2 NJbdOQWG618VKd+0PCYqr0tXu21C3YD8NjfNe0LsG6UDXEby2S2crMHipDv78omR K1Axu5aCHQOb2ZXk+Io/5uUp4BiF0ZEJEH/IroFz1NJKeBxXxcPN9HqnYbPbl6zK t16aKABD4Ec5iVdppT/H7Fg99QE48po7iMCMi/7CxUyvzCAMvEtYOnWzPLrojg14 QFjZnSC4rKR3s4J7LCfeTw3JVwEFN+bBYpqXMO0RV6+emBs92+0X53aBActFVkMI cLSzceomiy6kNgec6wPH7s7uEq8lKpE= -----END CERTIFICATE-----Generated at Tue Sep 29 15:46:18 2026 by rpki-client