$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126c6742-4df7-3e16-966f-3b9c4b85cad9.roa File: 126c6742-4df7-3e16-966f-3b9c4b85cad9.roa (raw, json) Hash identifier: rQc+mpsRCQIUKEvKa+lUhvb8TtA1KNurm9xov9DkUds= Subject key identifier: 26:C6:D2:23:52:0B:09:9F:61:6D:2E:50:11:5A:4A:A7:9A:42:67:12 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7783580FAD6BC1A42AB92B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126c6742-4df7-3e16-966f-3b9c4b85cad9.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 71.28.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:58:0f:ad:6b:c1:a4:2a:b9:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=28a676fa-e6ba-4af1-b886-7625244a462c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0e:74:7f:00:e4:e4:17:e3:d0:74:08:6a:ae: 4b:b9:ef:60:82:b0:eb:4f:22:77:b7:6b:b1:40:8a: 4d:1f:8b:12:15:c8:c3:5b:26:69:c6:28:a2:cc:0a: b7:48:c1:14:ca:99:dd:0e:d1:29:3f:15:12:f6:ed: c4:7a:98:62:21:4f:da:ef:c6:42:1e:90:c1:15:3d: fb:f6:7f:77:05:39:60:f7:b9:3d:79:eb:75:4e:59: 67:42:1f:e8:3b:f1:46:73:e0:7f:92:82:cb:04:54: 37:32:65:8c:f7:bc:fd:cb:5b:8c:e7:49:35:9b:48: e5:0d:8b:e8:62:50:3c:1f:bd:57:9c:00:c1:88:77: 76:02:d0:e1:76:5b:c9:63:b5:bf:f0:14:63:5f:b0: f3:8c:1d:89:a7:f8:f9:ef:0d:5e:81:74:27:fd:98: b4:52:55:db:3e:99:22:05:a0:ca:ab:d7:3e:48:be: 2f:9b:8b:1d:a7:b3:d8:64:58:73:8e:b0:93:0f:01: d6:4e:6a:9a:c5:8a:08:51:6b:ec:de:1e:f6:60:02: 1c:7e:c7:e0:c2:76:12:4c:79:6a:ee:89:96:97:b6: 36:fc:a7:45:b9:20:a1:de:e4:a9:4a:43:c1:de:2b: b7:c2:c6:d1:8c:3d:58:ff:fd:27:1f:22:de:0c:bd: 92:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C6:D2:23:52:0B:09:9F:61:6D:2E:50:11:5A:4A:A7:9A:42:67:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126c6742-4df7-3e16-966f-3b9c4b85cad9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:1e:3f:ce:1b:8a:e6:72:05:eb:58:b4:22:fd:fa:14:8b:54: 75:ad:4e:20:f1:26:99:79:f0:3f:11:7f:58:8e:b4:d4:29:a1: bb:e3:4d:e3:4f:f7:57:35:13:89:58:d5:96:bf:5c:1e:22:42: bd:4a:a2:91:21:01:f4:a7:90:c9:c6:5e:2d:05:ac:f0:32:b6: 0c:db:1c:a1:0d:70:5b:0a:da:cc:81:a7:a1:cb:98:f2:46:e9: b3:d4:d3:41:24:2d:53:36:72:fd:9d:fe:0d:f8:76:90:5e:f8: 7a:b2:3d:9b:7d:44:ea:78:4d:c9:3f:ec:ba:60:96:f8:72:24: 0a:68:2e:39:2b:b9:b1:7a:c7:23:3c:5d:9c:97:3d:8f:f3:35: a9:97:ab:9b:66:75:07:16:a6:0e:18:47:bb:f7:42:5e:3f:f5: 9a:f0:23:57:b3:3a:a3:c0:a8:ec:89:31:d5:30:15:a6:27:38: 52:6f:d7:0c:3c:c7:5a:63:7c:d6:19:b1:0d:94:8d:25:3f:22: 01:52:ad:00:88:4e:eb:7d:2a:e3:41:e4:57:69:7f:f3:a3:4c: 05:ef:26:ca:d7:8d:47:af:86:5d:db:c5:a8:a3:2e:00:ee:82: e7:20:f5:ea:aa:f8:67:1c:a2:46:d3:74:ae:f7:9b:73:19:a7: 1d:0e:9e:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g1gPrWvBpCq5K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk MjhhNjc2ZmEtZTZiYS00YWYxLWI4ODYtNzYyNTI0NGE0NjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA50fwDk5Bfj0HQIaq5Lue9ggrDrTyJ3t2ux QIpNH4sSFcjDWyZpxiiizAq3SMEUypndDtEpPxUS9u3EephiIU/a78ZCHpDBFT37 9n93BTlg97k9eet1TllnQh/oO/FGc+B/koLLBFQ3MmWM97z9y1uM50k1m0jlDYvo YlA8H71XnADBiHd2AtDhdlvJY7W/8BRjX7DzjB2Jp/j57w1egXQn/Zi0UlXbPpki BaDKq9c+SL4vm4sdp7PYZFhzjrCTDwHWTmqaxYoIUWvs3h72YAIcfsfgwnYSTHlq 7omWl7Y2/KdFuSCh3uSpSkPB3iu3wsbRjD1Y//0nHyLeDL2SMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbG0iNSCwmfYW0uUBFaSqeaQmcSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTI2YzY3NDItNGRmNy0z ZTE2LTk2NmYtM2I5YzRiODVjYWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxxdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgeP84biuZyBetYtCL9+hSLVHWtTiDxJpl58D8Rf1iOtNQpobvjTeNP 91c1E4lY1Za/XB4iQr1KopEhAfSnkMnGXi0FrPAytgzbHKENcFsK2syBp6HLmPJG 6bPU00EkLVM2cv2d/g34dpBe+HqyPZt9ROp4Tck/7LpglvhyJApoLjkrubF6xyM8 XZyXPY/zNamXq5tmdQcWpg4YR7v3Ql4/9ZrwI1ezOqPAqOyJMdUwFaYnOFJv1ww8 x1pjfNYZsQ2UjSU/IgFSrQCITut9KuNB5Fdpf/OjTAXvJsrXjUevhl3bxaijLgDu gucg9eqq+GccokbTdK73m3MZpx0Onrw= -----END CERTIFICATE-----Generated at Tue Oct 13 04:17:41 2026 by rpki-client