$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09a6a2d5-41f0-34ed-a96d-b751f0c89f0e.roa File: 09a6a2d5-41f0-34ed-a96d-b751f0c89f0e.roa (raw, json) Hash identifier: APRJ3t7GeqC7+c4GJRDxd/cjywIcXTLeTUyjB8vnVCQ= Subject key identifier: E2:45:48:EC:13:B3:E1:6D:65:12:F1:52:66:AC:E9:EA:8B:E8:BE:49 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED4325584B89E9AF88AF93540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09a6a2d5-41f0-34ed-a96d-b751f0c89f0e.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 7029 IP address blocks: 71.28.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:55:84:b8:9e:9a:f8:8a:f9:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=e64cdf79-4030-44cc-8514-0b3dec9500b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c7:ae:30:65:79:26:36:7d:cb:64:e7:be:73: e4:f1:f7:bd:dd:3a:ac:4a:c7:b5:4c:a4:55:22:99: 8c:07:6c:28:a1:5a:40:61:82:6f:45:74:8d:29:ac: 56:9a:fa:ac:0b:4b:5d:45:42:2b:f5:72:46:27:f4: 44:03:21:62:cc:ff:d8:48:7d:74:47:55:85:8c:cf: 3a:f3:d1:3e:40:a4:5a:e9:b9:31:c1:47:4b:95:48: e8:a4:8d:91:e3:53:0a:3c:74:5f:7f:ca:29:4f:71: f5:45:7d:67:f6:5b:b7:12:b4:1e:db:52:84:47:f9: ef:a1:f9:a4:1c:25:ff:dd:99:db:7f:62:d0:89:74: fd:41:0b:91:4f:db:b8:c5:37:f8:1e:68:56:92:75: db:63:5b:0f:90:d2:66:5b:db:6a:85:34:5a:00:84: 74:a3:fc:26:09:70:de:3a:47:f4:68:b0:c9:7a:21: cc:20:bf:6c:54:91:2f:3a:3b:6a:1b:38:8c:ca:9a: 7e:d8:db:4f:2f:0a:53:66:03:40:0c:55:9c:b1:e9: 64:d2:f8:61:bf:ab:2f:2d:e5:01:68:b9:b3:a1:74: 16:f1:a6:3e:f5:55:aa:7a:a1:98:17:a5:06:7a:c1: 47:00:21:f0:35:01:e4:27:70:87:66:2c:01:eb:5d: 43:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:45:48:EC:13:B3:E1:6D:65:12:F1:52:66:AC:E9:EA:8B:E8:BE:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09a6a2d5-41f0-34ed-a96d-b751f0c89f0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:9d:a7:27:a3:56:73:a7:7c:2e:ed:9c:24:6b:ec:79:dd:e8: 76:c2:11:2d:b3:26:e0:b0:04:b2:e5:d3:81:e9:a6:f4:fd:52: 6d:38:9f:f4:0c:0e:cd:bf:67:64:fe:7b:29:8a:6f:94:35:fe: 2e:a6:33:79:74:13:4a:bb:8d:47:c4:11:3a:13:09:75:14:4a: 05:a3:d6:d6:eb:f2:92:60:06:01:77:8a:28:dd:7b:a0:20:13: 05:72:83:2c:4d:c3:ed:a8:96:f3:9b:85:c0:a9:0a:a6:eb:1f: e1:72:84:76:2f:b9:a9:28:f9:e2:fb:26:6f:ab:95:8f:4e:c1: e6:56:de:b3:41:cf:5b:bf:5f:ff:33:db:69:64:46:48:6c:dd: 2f:5d:91:a3:ab:63:e4:5a:b5:d7:c5:fb:d1:ad:64:81:2c:ca: 84:af:71:ca:cd:ec:04:05:63:d3:4a:ce:01:2e:59:2a:d0:93: e2:e7:dc:5b:90:69:4d:c3:31:95:ef:c8:3d:ce:d1:7d:d9:b4: 2c:ea:79:fd:37:4e:4b:76:aa:d1:6e:2a:48:12:d0:56:ec:19: fa:e6:6a:84:1e:4a:ff:5a:a0:4f:fb:e5:04:64:5d:bc:09:f3: cc:b9:bb:18:36:33:c4:2c:08:83:2c:4a:31:be:7c:36:2d:9d: 69:52:0c:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMlWEuJ6a+Ir5NUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZTY0Y2RmNzktNDAzMC00NGNjLTg1MTQtMGIzZGVjOTUwMGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8euMGV5JjZ9y2TnvnPk8fe93TqsSse1TKRV IpmMB2wooVpAYYJvRXSNKaxWmvqsC0tdRUIr9XJGJ/REAyFizP/YSH10R1WFjM86 89E+QKRa6bkxwUdLlUjopI2R41MKPHRff8opT3H1RX1n9lu3ErQe21KER/nvofmk HCX/3Znbf2LQiXT9QQuRT9u4xTf4HmhWknXbY1sPkNJmW9tqhTRaAIR0o/wmCXDe Okf0aLDJeiHMIL9sVJEvOjtqGziMypp+2NtPLwpTZgNADFWcselk0vhhv6svLeUB aLmzoXQW8aY+9VWqeqGYF6UGesFHACHwNQHkJ3CHZiwB611DcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJFSOwTs+FtZRLxUmas6eqL6L5JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDlhNmEyZDUtNDFmMC0z NGVkLWE5NmQtYjc1MWYwYzg5ZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxxcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqdpyejVnOnfC7tnCRr7Hnd6HbCES2zJuCwBLLl04HppvT9Um04n/QM Ds2/Z2T+eymKb5Q1/i6mM3l0E0q7jUfEEToTCXUUSgWj1tbr8pJgBgF3iijde6Ag EwVygyxNw+2olvObhcCpCqbrH+FyhHYvuako+eL7Jm+rlY9OweZW3rNBz1u/X/8z 22lkRkhs3S9dkaOrY+RatdfF+9GtZIEsyoSvccrN7AQFY9NKzgEuWSrQk+Ln3FuQ aU3DMZXvyD3O0X3ZtCzqef03Tkt2qtFuKkgS0FbsGfrmaoQeSv9aoE/75QRkXbwJ 88y5uxg2M8QsCIMsSjG+fDYtnWlSDFY= -----END CERTIFICATE-----Generated at Thu Aug 27 12:29:46 2026 by rpki-client