$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff06164f-0e3a-371b-ad49-4422ba3d64d2.roa File: ff06164f-0e3a-371b-ad49-4422ba3d64d2.roa (raw, json) Hash identifier: TEb4QTg4Zpo60rJkkQqQaIwc8HuNiN5FC2UqpeJBuRM= Subject key identifier: B9:D2:1F:FB:69:BC:9E:7A:8E:53:EF:9C:F3:54:2D:0A:EF:AC:0F:8D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F02423077495A53EBC34683B8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff06164f-0e3a-371b-ad49-4422ba3d64d2.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 71.28.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:30:77:49:5a:53:eb:c3:46:83:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=ad855534-ad55-464d-86d3-72e0027fdd10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:73:0d:a0:ba:e9:82:86:0a:bf:91:ce:15:62: 78:f2:f3:cf:e4:9b:7d:1e:e2:51:55:76:0b:6f:06: 8f:1f:cb:23:21:55:13:ec:11:2c:47:81:aa:ea:09: c2:ec:38:07:34:2b:31:c7:5c:e7:4f:86:9a:e4:99: 4d:4e:9a:f2:ef:6b:ab:5d:da:85:10:a4:92:3a:97: 67:72:70:7e:68:23:3d:6e:ea:83:b6:97:d6:90:ba: 02:e5:61:a3:94:ff:86:9f:81:b1:2d:58:bb:9e:9d: 0c:b2:68:90:a9:f6:55:80:5a:b9:1b:97:4d:16:69: b0:e7:77:92:97:8c:05:7e:e7:d7:4c:10:5d:ec:d2: 8b:f6:8e:79:72:5d:81:32:57:26:aa:b0:c1:d1:95: 34:5c:ea:00:a2:69:65:a6:8f:5a:99:d9:c4:44:5f: a4:1a:f2:e3:e3:7f:fd:e9:61:1e:2f:34:c4:26:92: 30:10:45:1b:69:72:f0:50:35:56:6d:fc:a5:e6:47: ca:c5:11:c1:36:1e:ef:60:2e:b6:86:54:bf:66:35: b3:71:f4:f5:d8:94:2c:8a:f0:a3:ce:a9:cc:25:4f: 1e:ea:b2:79:82:a3:f7:3b:73:dd:07:94:ca:41:53: 97:fd:8d:7a:15:8f:e7:3e:58:14:53:e9:70:c6:ec: 36:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D2:1F:FB:69:BC:9E:7A:8E:53:EF:9C:F3:54:2D:0A:EF:AC:0F:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff06164f-0e3a-371b-ad49-4422ba3d64d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:98:aa:48:b3:4f:d8:35:fd:84:e4:8f:0b:4c:fb:9e:d2:7f: 3e:62:68:9c:b2:84:e3:07:63:3c:09:61:cd:b4:15:64:9d:0a: 45:96:0f:69:00:16:9e:45:6d:fc:cc:75:db:ce:dd:1d:2a:69: 78:0b:7c:14:68:62:bc:8d:22:55:0d:81:03:79:4e:bf:0e:b3: 75:82:b8:f8:fb:77:78:e4:05:44:cd:00:51:54:33:59:93:68: 43:4d:af:68:43:61:d2:32:06:52:cc:24:98:8d:d3:34:16:a7: e8:eb:66:9d:6f:e7:8f:0c:02:cb:8c:34:fb:dc:b1:37:b2:da: c6:d2:80:d1:f7:9c:15:6c:30:ea:d3:36:ad:79:3e:33:fa:11: 51:2f:90:6e:b0:c3:cc:6a:30:c4:d8:5c:3b:11:04:50:18:1e: 3f:ed:63:60:2d:13:ea:d8:ff:be:c0:b4:88:39:eb:6d:aa:24: c4:e3:06:34:d4:99:e8:ed:9c:2a:b9:eb:83:5e:0b:a4:cd:b8: e0:ed:3a:5c:05:05:38:fe:4b:e1:a9:a9:02:8c:43:f5:6f:8d: c7:d7:8d:34:3f:9c:52:f7:cc:52:14:ec:99:d3:dd:ec:05:72: 47:80:73:d8:b4:6a:ce:af:e9:a4:58:bf:75:35:5b:b9:cf:a2: 41:90:ce:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjB3SVpT68NGg7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk YWQ4NTU1MzQtYWQ1NS00NjRkLTg2ZDMtNzJlMDAyN2ZkZDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHMNoLrpgoYKv5HOFWJ48vPP5Jt9HuJRVXYL bwaPH8sjIVUT7BEsR4Gq6gnC7DgHNCsxx1znT4aa5JlNTpry72urXdqFEKSSOpdn cnB+aCM9buqDtpfWkLoC5WGjlP+Gn4GxLVi7np0MsmiQqfZVgFq5G5dNFmmw53eS l4wFfufXTBBd7NKL9o55cl2BMlcmqrDB0ZU0XOoAomllpo9amdnERF+kGvLj43/9 6WEeLzTEJpIwEEUbaXLwUDVWbfyl5kfKxRHBNh7vYC62hlS/ZjWzcfT12JQsivCj zqnMJU8e6rJ5gqP3O3PdB5TKQVOX/Y16FY/nPlgUU+lwxuw2zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnSH/tpvJ56jlPvnPNULQrvrA+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmYwNjE2NGYtMGUzYS0z NzFiLWFkNDktNDQyMmJhM2Q2NGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxyGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSYqkizT9g1/YTkjwtM+57Sfz5iaJyyhOMHYzwJYc20FWSdCkWWD2kA Fp5FbfzMddvO3R0qaXgLfBRoYryNIlUNgQN5Tr8Os3WCuPj7d3jkBUTNAFFUM1mT aENNr2hDYdIyBlLMJJiN0zQWp+jrZp1v548MAsuMNPvcsTey2sbSgNH3nBVsMOrT Nq15PjP6EVEvkG6ww8xqMMTYXDsRBFAYHj/tY2AtE+rY/77AtIg5622qJMTjBjTU mejtnCq564NeC6TNuODtOlwFBTj+S+GpqQKMQ/VvjcfXjTQ/nFL3zFIU7JnT3ewF ckeAc9i0as6v6aRYv3U1W7nPokGQzsI= -----END CERTIFICATE-----Generated at Fri Sep 25 03:27:42 2026 by rpki-client