$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46847ea1-119e-3b8f-8b5b-eb0480651a31.roa File: 46847ea1-119e-3b8f-8b5b-eb0480651a31.roa (raw, json) Hash identifier: P6stJgowEDide7DXGPHOOIgQzLOxNmx3rrbMv0LeORg= Subject key identifier: 49:A0:C5:BA:93:19:29:15:66:53:63:A4:D3:05:D0:33:4E:6D:83:E4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAFE6FFEF2ACAF970EE663300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46847ea1-119e-3b8f-8b5b-eb0480651a31.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 71.29.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:ff:ef:2a:ca:f9:70:ee:66:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=2ba2d85f-e9bf-461f-a5cd-7e58c2504972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:5e:7e:71:ee:ef:7d:9d:de:53:88:ab:61: 41:5a:d1:f3:72:6c:6e:c1:50:92:84:f8:59:f2:7e: ea:ad:a2:a9:15:3c:a5:a1:cf:1b:d9:7f:c8:f3:ab: 70:5f:13:63:82:46:eb:77:f5:44:58:08:40:25:cb: 88:9e:d1:ca:7c:87:2b:38:b9:20:58:fc:ae:ad:a2: 17:ac:f9:cf:ca:a6:88:28:22:04:76:67:2d:ec:69: c0:32:1a:90:c7:06:26:ce:7c:2e:f4:54:8c:76:50: af:0f:c8:12:61:ad:02:bb:f8:d9:e4:d5:42:9b:30: 35:e7:c7:24:66:8d:ba:b1:f5:36:c2:71:0c:d9:d7: 32:7b:c7:22:10:d4:5e:de:6e:4c:a1:4d:67:e1:32: de:c4:96:80:b4:ba:a6:c7:5d:c1:cc:1a:73:1f:cc: 87:91:a7:6d:2f:71:fd:a8:d0:92:5e:d1:d1:12:b0: 0a:55:86:ff:f7:18:d2:02:56:e3:f8:e6:59:f5:eb: 83:75:06:af:92:cb:4f:bf:60:e5:09:b8:8c:12:c1: a5:d9:ac:d6:e5:c8:b2:cf:2d:1b:19:28:3d:e0:c1: dd:9d:1f:bd:56:52:a7:6a:81:52:f6:4c:cf:c0:ad: 21:c5:f4:bd:ad:f9:22:a9:f0:d0:5d:66:ff:94:6a: 90:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A0:C5:BA:93:19:29:15:66:53:63:A4:D3:05:D0:33:4E:6D:83:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46847ea1-119e-3b8f-8b5b-eb0480651a31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a5:7d:66:5b:fe:05:bc:c1:99:26:dc:2d:df:b8:fd:5d:88: 99:15:46:d2:e7:76:73:0c:19:65:15:fe:c6:be:3f:f0:6f:bb: 48:11:6a:17:ed:3f:23:02:a4:c1:8a:63:8c:f5:ad:ec:f4:5c: fa:f5:1e:6e:ee:81:3e:dd:ae:b4:7a:a9:2e:f2:a6:9b:fa:d1: ec:56:66:e5:90:fe:6e:db:ae:ba:c8:e2:a0:99:41:f2:e7:7e: a6:c1:ee:fa:67:05:6f:32:ed:02:cd:16:ac:af:bc:b6:e3:2e: 57:1a:dc:6c:fe:f0:28:89:59:de:8e:94:69:4b:59:c6:7c:a5: bf:86:db:e9:2f:75:94:4a:53:3b:26:41:e7:c2:ff:75:5e:f1: 9f:77:26:80:7c:93:8e:d3:bd:7d:a4:12:fc:83:bc:1b:44:fa: 12:ac:f5:19:c0:1d:1f:8f:41:22:d4:61:80:17:6f:35:ae:06: 92:c2:20:41:88:4a:b8:e4:77:ec:ab:4b:a8:04:29:f7:57:c6: be:8d:d0:1e:06:7b:c8:6f:76:41:9a:e4:28:04:ba:20:15:5a: 68:b3:14:ff:88:95:8e:38:11:1a:c3:82:ac:c4:e5:4e:52:4f: 44:d9:6a:d7:9e:42:3a:69:fb:25:73:c7:59:9b:0d:0c:b0:1c: 7a:e0:a9:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5v/vKsr5cO5mMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk MmJhMmQ4NWYtZTliZi00NjFmLWE1Y2QtN2U1OGMyNTA0OTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrJefnHu732d3lOIq2FBWtHzcmxuwVCShPhZ 8n7qraKpFTyloc8b2X/I86twXxNjgkbrd/VEWAhAJcuIntHKfIcrOLkgWPyuraIX rPnPyqaIKCIEdmct7GnAMhqQxwYmznwu9FSMdlCvD8gSYa0Cu/jZ5NVCmzA158ck Zo26sfU2wnEM2dcye8ciENRe3m5MoU1n4TLexJaAtLqmx13BzBpzH8yHkadtL3H9 qNCSXtHRErAKVYb/9xjSAlbj+OZZ9euDdQavkstPv2DlCbiMEsGl2azW5ciyzy0b GSg94MHdnR+9VlKnaoFS9kzPwK0hxfS9rfkiqfDQXWb/lGqQzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmgxbqTGSkVZlNjpNMF0DNObYPkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDY4NDdlYTEtMTE5ZS0z YjhmLThiNWItZWIwNDgwNjUxYTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6lfWZb/gW8wZkm3C3fuP1diJkVRtLndnMMGWUV/sa+P/Bvu0gRahft PyMCpMGKY4z1rez0XPr1Hm7ugT7drrR6qS7yppv60exWZuWQ/m7brrrI4qCZQfLn fqbB7vpnBW8y7QLNFqyvvLbjLlca3Gz+8CiJWd6OlGlLWcZ8pb+G2+kvdZRKUzsm QefC/3Ve8Z93JoB8k47TvX2kEvyDvBtE+hKs9RnAHR+PQSLUYYAXbzWuBpLCIEGI Srjkd+yrS6gEKfdXxr6N0B4Ge8hvdkGa5CgEuiAVWmizFP+IlY44ERrDgqzE5U5S T0TZateeQjpp+yVzx1mbDQywHHrgqYI= -----END CERTIFICATE-----Generated at Thu Aug 27 10:32:52 2026 by rpki-client