$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a886a35-8188-35cf-a736-e18de9d2c349.roa File: 2a886a35-8188-35cf-a736-e18de9d2c349.roa (raw, json) Hash identifier: flZSVP3g4/f/maLG6MZLqEcWOiZoMdsyn0OAd2OvnFQ= Subject key identifier: D8:D0:32:ED:44:B5:20:A2:94:2A:43:EF:DA:F7:26:0F:0C:72:0B:7E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F6292F959D6A7E8FF1376DD00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a886a35-8188-35cf-a736-e18de9d2c349.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 71.30.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f9:59:d6:a7:e8:ff:13:76:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=28470b4a-bd2b-46fc-88e6-4cccf0a0fb52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5b:1a:0e:26:78:32:15:33:9c:91:74:7d:56: 27:e0:57:2c:b9:b2:b3:a6:c9:6d:4a:9e:97:6b:31: dc:56:fa:63:29:c1:47:50:94:4c:37:7b:27:ce:f4: 1f:dd:10:6e:b2:08:a9:eb:54:35:5b:ea:36:17:c5: 69:25:b0:85:44:a0:e1:c6:e9:44:00:bb:98:05:1e: d5:06:d7:f3:18:65:bb:f8:a9:29:59:70:85:28:e2: c0:af:77:0d:62:eb:a6:b5:c5:a1:69:4f:be:ce:0e: 8b:07:0e:2b:a1:f8:16:8c:df:1d:1a:45:f7:ff:6d: 96:dc:99:99:22:d8:56:b7:4c:53:02:a4:27:f7:49: 24:63:2f:0d:4a:74:ea:33:a4:96:56:44:a1:74:29: f1:91:1e:53:1b:1f:84:f4:06:ff:1e:b7:76:4d:f9: 6a:b9:8f:66:ef:c9:1a:51:d8:1f:eb:ed:4e:a5:5e: ad:b7:cf:f3:8d:cd:8b:88:fc:58:f8:e2:06:3c:6c: bc:2a:18:9f:54:1b:ef:d4:6a:ff:77:34:91:78:88: 58:4f:63:57:a4:fb:55:cd:b8:9c:6e:92:e3:9e:3d: e4:b4:30:41:6b:3d:59:e5:81:08:df:b9:76:38:fa: 9a:8a:a3:36:ee:c0:97:48:cc:03:b6:8e:bb:7e:c3: a3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D0:32:ED:44:B5:20:A2:94:2A:43:EF:DA:F7:26:0F:0C:72:0B:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a886a35-8188-35cf-a736-e18de9d2c349.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b8:a7:0b:9a:29:21:2d:eb:2e:be:0e:3b:7f:85:88:c5:38: 46:57:8e:70:04:8a:d0:9c:e6:1a:14:17:82:80:0e:56:e3:04: 74:4f:af:65:1e:ff:ba:13:6c:7e:e7:12:d3:16:d0:b5:89:6e: ad:b0:0c:26:e2:fc:82:c4:24:fc:3f:ed:55:94:5b:62:fe:c5: b3:55:1b:03:86:68:58:92:3b:c0:d0:4d:d1:6b:13:e1:15:10: d0:77:88:33:cc:46:f7:61:e1:40:bd:5f:a2:db:53:67:ce:49: 1d:f0:82:ca:7c:27:a2:27:c4:aa:d1:93:55:16:01:9a:fe:85: 0a:ba:eb:9e:8e:5a:a8:21:9e:a2:20:6f:ce:60:d7:d7:89:d7: 68:66:0f:14:15:f5:9d:69:fc:0a:d2:3b:e8:f2:64:c0:13:89: 09:70:b3:0b:6d:d5:83:a2:92:e4:70:d8:e0:f5:a2:3f:c7:95: d2:03:30:34:5d:87:9c:80:8b:22:01:a5:ea:62:0a:6a:f0:ba: b0:cc:2e:5d:51:58:b1:52:61:b1:e9:e8:6d:d7:f3:c5:1e:b4: b1:7d:21:a5:e2:88:df:12:37:68:d3:1a:f3:b9:ae:33:c3:82: 45:00:a6:cc:30:e6:3b:42:d0:eb:32:b1:97:96:88:f2:65:0a: e1:d7:bb:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikvlZ1qfo/xN23QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk Mjg0NzBiNGEtYmQyYi00NmZjLTg4ZTYtNGNjY2YwYTBmYjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFsaDiZ4MhUznJF0fVYn4FcsubKzpsltSp6X azHcVvpjKcFHUJRMN3snzvQf3RBusgip61Q1W+o2F8VpJbCFRKDhxulEALuYBR7V BtfzGGW7+KkpWXCFKOLAr3cNYuumtcWhaU++zg6LBw4rofgWjN8dGkX3/22W3JmZ IthWt0xTAqQn90kkYy8NSnTqM6SWVkShdCnxkR5TGx+E9Ab/Hrd2TflquY9m78ka Udgf6+1OpV6tt8/zjc2LiPxY+OIGPGy8KhifVBvv1Gr/dzSReIhYT2NXpPtVzbic bpLjnj3ktDBBaz1Z5YEI37l2OPqaiqM27sCXSMwDto67fsOjUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjQMu1EtSCilCpD79r3Jg8Mcgt+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmE4ODZhMzUtODE4OC0z NWNmLWE3MzYtZTE4ZGU5ZDJjMzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFe4pwuaKSEt6y6+Djt/hYjFOEZXjnAEitCc5hoUF4KADlbjBHRPr2Ue /7oTbH7nEtMW0LWJbq2wDCbi/ILEJPw/7VWUW2L+xbNVGwOGaFiSO8DQTdFrE+EV ENB3iDPMRvdh4UC9X6LbU2fOSR3wgsp8J6InxKrRk1UWAZr+hQq6656OWqghnqIg b85g19eJ12hmDxQV9Z1p/ArSO+jyZMATiQlwswtt1YOikuRw2OD1oj/HldIDMDRd h5yAiyIBpepiCmrwurDMLl1RWLFSYbHp6G3X88UetLF9IaXiiN8SN2jTGvO5rjPD gkUApsww5jtC0OsysZeWiPJlCuHXu3Y= -----END CERTIFICATE-----Generated at Tue Oct 13 09:14:08 2026 by rpki-client