$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3e7810e2-19b8-34f9-8ff4-18ffabae701b.roa File: 3e7810e2-19b8-34f9-8ff4-18ffabae701b.roa (raw, json) Hash identifier: 8jihsg5zseUWfP9RfsdNufW3yfKes37ZDrY5YoC1qaM= Subject key identifier: 67:CE:AC:79:2D:50:89:33:74:59:C0:AC:34:9D:26:7E:44:5C:41:41 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED861D7E5BEC6D7299F311C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3e7810e2-19b8-34f9-8ff4-18ffabae701b.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 71.7.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:d7:e5:be:c6:d7:29:9f:31:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=daffdebd-4ecf-492d-8067-144498cc9e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:21:fd:cc:2e:7c:b5:56:b6:06:9b:ae:16:27: 23:e1:eb:c8:08:a1:48:d6:27:eb:29:d6:9c:38:0a: 2d:46:75:90:70:3f:94:f8:dd:7c:3d:68:28:50:3a: 9b:43:12:6f:d6:26:01:96:93:d8:0d:30:7e:2c:79: f7:9c:5e:b8:32:b3:1c:93:00:cf:8a:6a:06:41:31: 67:9b:9c:83:cf:15:44:2b:fc:79:04:40:59:94:1d: bf:d4:02:f7:90:10:6d:22:fc:b7:4d:d1:f2:80:3b: bd:df:6c:ef:59:15:69:6a:d2:82:32:65:3e:5d:f7: 29:75:5a:66:ef:91:19:72:aa:90:3b:c1:18:b6:5f: ab:9a:47:a1:a8:00:9b:b7:61:a4:aa:b6:d1:41:cb: 54:db:e1:90:a2:1b:f3:40:70:b6:27:b9:6b:33:34: 37:ba:b7:22:e0:e7:4e:2d:d9:cb:94:6a:5d:f6:02: 79:73:a9:bb:c7:4e:33:34:6f:db:d3:8f:e1:db:c6: ee:b0:bd:28:a2:80:b4:34:02:17:72:f1:06:c4:bd: ba:04:ea:df:26:43:fd:e2:c5:94:5f:8b:8a:ec:b6: e4:91:78:bc:ca:03:6f:6c:49:6f:54:46:55:02:d5: 96:2f:6e:7e:f4:bb:14:b7:3d:9c:89:d6:3b:37:9e: ec:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CE:AC:79:2D:50:89:33:74:59:C0:AC:34:9D:26:7E:44:5C:41:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3e7810e2-19b8-34f9-8ff4-18ffabae701b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.7.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:65:eb:8c:be:a5:9e:91:57:d7:4b:2a:da:d4:d8:43:be:8b: 3b:ed:3f:20:cc:4b:5a:ec:6b:96:91:61:42:1c:4d:cd:96:d6: 1e:71:38:cd:cc:ea:38:48:1e:d4:3a:3e:74:3d:db:07:72:64: 4f:e2:b4:09:e6:c2:01:88:f1:60:44:cc:ab:a4:5b:71:8b:38: 6d:63:a0:37:5a:65:ff:8b:ac:f8:10:70:4d:a0:82:93:c8:8f: 0f:34:f4:3a:a9:2a:b6:83:b8:6b:99:42:94:11:9a:08:cb:bc: e7:fb:1d:89:e8:75:9b:df:61:f4:55:e7:34:24:1d:c3:8c:80: fc:6f:bd:52:e6:25:6f:f2:f6:ce:5c:be:57:e8:f4:fa:4a:a8: 30:7b:2a:b4:cd:3c:c6:d6:92:22:bb:5b:e5:77:da:ef:37:33: 0a:11:22:0a:48:1c:ad:8e:dc:d4:36:8f:8f:b6:c5:5c:c6:72: aa:3a:b5:a1:0f:75:35:d0:1b:1e:6c:be:ea:36:f3:01:95:a3: 9a:11:13:42:ca:81:c6:7d:c9:c5:a6:8b:aa:63:1f:14:0e:66: ea:0c:88:d0:66:a0:21:4c:d3:08:e7:08:b2:72:17:56:0f:67: ce:2a:15:ae:4b:83:9c:c8:a6:c8:05:ad:17:eb:4a:bc:3d:d3: fa:78:f2:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYdflvsbXKZ8xHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZGFmZmRlYmQtNGVjZi00OTJkLTgwNjctMTQ0NDk4Y2M5ZTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSH9zC58tVa2BpuuFicj4evICKFI1ifrKdac OAotRnWQcD+U+N18PWgoUDqbQxJv1iYBlpPYDTB+LHn3nF64MrMckwDPimoGQTFn m5yDzxVEK/x5BEBZlB2/1AL3kBBtIvy3TdHygDu932zvWRVpatKCMmU+XfcpdVpm 75EZcqqQO8EYtl+rmkehqACbt2GkqrbRQctU2+GQohvzQHC2J7lrMzQ3urci4OdO LdnLlGpd9gJ5c6m7x04zNG/b04/h28busL0oooC0NAIXcvEGxL26BOrfJkP94sWU X4uK7LbkkXi8ygNvbElvVEZVAtWWL25+9LsUtz2cidY7N57suQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfOrHktUIkzdFnArDSdJn5EXEFBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2U3ODEwZTItMTliOC0z NGY5LThmZjQtMThmZmFiYWU3MDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERwdQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9l64y+pZ6RV9dLKtrU2EO+izvtPyDMS1rsa5aRYUIcTc2W1h5xOM3M 6jhIHtQ6PnQ92wdyZE/itAnmwgGI8WBEzKukW3GLOG1joDdaZf+LrPgQcE2ggpPI jw809DqpKraDuGuZQpQRmgjLvOf7HYnodZvfYfRV5zQkHcOMgPxvvVLmJW/y9s5c vlfo9PpKqDB7KrTNPMbWkiK7W+V32u83MwoRIgpIHK2O3NQ2j4+2xVzGcqo6taEP dTXQGx5svuo28wGVo5oRE0LKgcZ9ycWmi6pjHxQOZuoMiNBmoCFM0wjnCLJyF1YP Z84qFa5Lg5zIpsgFrRfrSrw90/p48kA= -----END CERTIFICATE-----Generated at Thu Aug 27 09:49:18 2026 by rpki-client