$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1abac9eb-df64-3e5a-a248-a5543e84384e.roa File: 1abac9eb-df64-3e5a-a248-a5543e84384e.roa (raw, json) Hash identifier: 9UeA11vod/rR6LXwk4PbSj5LW/j8IAxIsw/qwg8Za7g= Subject key identifier: 39:BC:C9:73:B8:54:06:74:0C:A3:33:04:FE:6C:FA:06:6E:95:97:3B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E5FDF659992B3F97660590F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1abac9eb-df64-3e5a-a248-a5543e84384e.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 7029 IP address blocks: 71.28.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:65:99:92:b3:f9:76:60:59:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=d49e0be6-19bf-4b61-a810-a22b8fcf5e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:31:6c:9d:97:58:31:3d:74:41:77:51:5d:05: 2d:f9:10:cc:4b:6b:07:88:e8:f4:ba:9e:c1:c3:6b: 5d:fa:4f:38:4f:8c:01:88:79:a7:bb:c8:4b:f2:eb: 88:7e:27:e8:7c:76:e6:5d:6e:e9:52:7b:40:c6:46: 9e:47:60:d3:d5:db:b7:99:be:db:e5:76:cf:74:98: 4b:72:f1:83:77:32:4f:35:5b:c2:e5:3e:62:1f:fb: 1f:e5:cc:b3:c5:93:79:4b:0e:64:fe:14:8c:96:6e: 93:a2:29:24:c4:37:49:85:f3:1d:0e:fe:ea:92:e9: 31:db:a1:60:ea:e3:e4:44:a5:d0:90:39:8a:28:9c: af:df:64:31:02:e6:c1:66:cb:85:20:37:6e:04:1e: 7b:93:c0:b2:8e:54:25:55:9e:9c:e5:c9:84:43:62: 54:7c:08:d9:61:cb:24:d6:1f:f3:d8:2e:20:b4:8f: 94:41:48:02:8e:cd:f0:6e:ca:85:f3:e0:d4:00:1e: 40:3f:a4:b0:ea:6a:2f:7f:1e:47:02:9d:dc:0f:a6: 33:af:3c:c5:1a:30:80:98:ed:74:ef:00:e2:fa:30: a5:6a:7b:ba:ca:35:2e:f0:a1:44:b3:e9:f4:58:9d: 26:20:7e:70:33:99:5a:d7:17:bb:e4:dc:aa:e0:75: 34:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BC:C9:73:B8:54:06:74:0C:A3:33:04:FE:6C:FA:06:6E:95:97:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1abac9eb-df64-3e5a-a248-a5543e84384e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:76:f2:dd:ce:3f:83:d8:35:a4:38:18:8e:e7:c4:bc:9b:28: 8c:c7:88:a9:4a:d9:6d:ac:fa:c6:d8:79:2a:8a:75:e7:6b:85: 16:a7:98:7f:70:57:e6:e2:57:28:4e:11:36:e0:1c:e1:ec:5c: 17:7e:d2:37:f0:eb:c2:14:f9:36:aa:ad:56:ec:0f:4b:67:f7: 06:5c:3e:59:02:af:99:bc:15:e1:0b:6b:a2:ae:1c:af:11:10: d5:9e:ab:c8:b3:e9:96:b8:ba:bf:a0:79:88:99:ff:0a:d3:77: a5:20:a2:b4:25:92:cd:31:98:b1:cd:0a:71:9d:04:0b:8a:70: f6:58:ba:8d:ed:df:58:0c:c6:3b:cf:48:94:52:84:85:a7:3a: 03:51:03:29:b6:f4:31:33:4f:19:a8:42:46:e2:95:8b:db:02: 99:4f:4e:2e:e3:dd:f6:f6:24:62:f0:b1:58:6d:74:82:7c:cc: 7f:ff:3b:8a:de:56:f1:4f:31:5c:5a:d2:f8:a9:85:dd:39:b5: 9b:fc:55:48:52:9b:00:7d:28:50:2d:27:a5:53:e0:e0:02:c9: ef:e8:1d:9c:a0:37:eb:28:21:f2:28:3a:b0:15:f3:14:66:6b: ee:fa:81:01:67:a8:61:e0:b8:ab:14:1e:7d:40:f2:0b:c4:71: 99:b6:cb:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f32WZkrP5dmBZDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk ZDQ5ZTBiZTYtMTliZi00YjYxLWE4MTAtYTIyYjhmY2Y1ZTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9jFsnZdYMT10QXdRXQUt+RDMS2sHiOj0up7B w2td+k84T4wBiHmnu8hL8uuIfifofHbmXW7pUntAxkaeR2DT1du3mb7b5XbPdJhL cvGDdzJPNVvC5T5iH/sf5cyzxZN5Sw5k/hSMlm6ToikkxDdJhfMdDv7qkukx26Fg 6uPkRKXQkDmKKJyv32QxAubBZsuFIDduBB57k8CyjlQlVZ6c5cmEQ2JUfAjZYcsk 1h/z2C4gtI+UQUgCjs3wbsqF8+DUAB5AP6Sw6movfx5HAp3cD6YzrzzFGjCAmO10 7wDi+jClanu6yjUu8KFEs+n0WJ0mIH5wM5la1xe75Nyq4HU0YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDm8yXO4VAZ0DKMzBP5s+gZulZc7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWFiYWM5ZWItZGY2NC0z ZTVhLWEyNDgtYTU1NDNlODQzODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxyHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADB28t3OP4PYNaQ4GI7nxLybKIzHiKlK2W2s+sbYeSqKdedrhRanmH9w V+biVyhOETbgHOHsXBd+0jfw68IU+TaqrVbsD0tn9wZcPlkCr5m8FeELa6KuHK8R ENWeq8iz6Za4ur+geYiZ/wrTd6UgorQlks0xmLHNCnGdBAuKcPZYuo3t31gMxjvP SJRShIWnOgNRAym29DEzTxmoQkbilYvbAplPTi7j3fb2JGLwsVhtdIJ8zH//O4re VvFPMVxa0viphd05tZv8VUhSmwB9KFAtJ6VT4OACye/oHZygN+soIfIoOrAV8xRm a+76gQFnqGHguKsUHn1A8gvEcZm2y/c= -----END CERTIFICATE-----Generated at Mon Jul 13 05:52:24 2026 by rpki-client