$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c4b2a32-b878-3e00-bc74-0f9281fcb4d5.roa File: 4c4b2a32-b878-3e00-bc74-0f9281fcb4d5.roa (raw, json) Hash identifier: V9z66Dm9Qown+pHtRqSAwRlJxpaViOHpAyQLBPcHGm0= Subject key identifier: 32:40:26:2F:CD:FD:8D:31:E1:9D:D2:5E:54:79:0B:22:87:C6:DC:A5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7A4D86510B74F76D30342580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c4b2a32-b878-3e00-bc74-0f9281fcb4d5.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 71.7.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:86:51:0b:74:f7:6d:30:34:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=f653e761-f40d-4c17-ac72-d7b6cdf4e411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:26:41:a1:30:c4:93:c3:b8:28:4b:d4:1e:6a: 5f:2a:be:94:c6:a3:5d:77:9e:23:e4:48:a3:e4:8a: 30:fe:57:e7:fd:85:82:5d:ea:1f:1a:00:53:1f:a4: 14:0c:46:32:98:83:65:df:31:c8:77:fe:d7:06:09: 7f:f6:c5:9e:b1:b9:e8:1b:d5:d8:c5:16:e7:5e:b0: 19:3d:eb:88:d4:76:be:71:88:af:81:35:54:7e:a7: ac:6f:41:cc:64:30:6c:63:e7:d6:ee:db:4a:18:74: 36:0e:77:0a:47:ae:ad:bb:99:44:30:df:3b:62:3d: be:eb:ff:bc:5f:d2:e4:d4:2e:36:39:85:bc:8c:67: 02:4b:76:c2:19:a0:80:c1:16:15:a1:ff:1f:ce:81: b7:f8:6c:96:ea:58:e1:3b:75:18:79:4c:6a:e0:eb: fc:16:a9:09:32:7f:8e:2c:c4:70:97:b4:83:a4:dc: e2:19:ad:40:c6:53:f0:3f:f3:27:34:cf:03:f4:98: 76:87:4d:32:67:7c:72:a5:1f:b7:1d:69:a3:1c:b0: 21:a4:22:ef:75:e5:f1:73:cf:d4:59:a2:35:25:bc: 44:be:06:70:c1:e5:29:c5:e4:2a:9d:5a:5f:22:b8: 4f:1a:0b:28:42:0b:99:e9:41:17:ac:53:81:dd:76: 8e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:40:26:2F:CD:FD:8D:31:E1:9D:D2:5E:54:79:0B:22:87:C6:DC:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c4b2a32-b878-3e00-bc74-0f9281fcb4d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.7.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:28:f9:60:6a:de:62:27:30:0c:2a:5b:fd:b1:0a:12:07:a0: 07:f4:5c:59:f2:ad:d1:a1:27:06:09:8a:c1:ff:d0:e8:cd:44: 77:11:22:c5:32:09:51:1e:56:f9:b3:de:71:bb:1a:99:ac:69: 1b:10:44:dc:34:a5:b2:cd:ce:8a:37:95:db:93:c3:23:76:ae: 6f:a0:2b:35:7a:7c:e1:03:55:5b:65:d7:08:26:d5:e4:c2:f8: 97:67:6d:57:be:21:d0:ba:ad:16:27:37:54:ce:14:cd:4d:55: 04:7a:48:49:3c:70:77:1f:93:50:b2:2b:b0:42:d0:66:1b:f5: c2:88:8c:ea:75:ec:ac:47:7e:25:cc:84:37:5d:54:d6:71:3b: 6b:d2:f2:94:7b:86:94:25:22:a7:c3:59:28:d1:f9:1e:b3:cc: cc:44:ae:a9:f2:a0:a1:60:14:b2:86:44:d3:31:0e:d6:85:56: ab:09:03:dc:ef:85:18:18:ce:ed:66:8b:25:a1:f9:5a:31:78: 3e:35:4f:64:f7:29:80:01:f3:1d:63:52:d3:01:fd:53:76:e6: 02:67:c7:53:b7:54:2b:ca:69:66:5e:96:9c:c5:b0:a4:62:d9: bd:2c:c0:2f:94:d2:4e:ae:55:52:c6:7f:0e:88:fa:80:3b:06: 95:9d:d0:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TYZRC3T3bTA0JYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZjY1M2U3NjEtZjQwZC00YzE3LWFjNzItZDdiNmNkZjRlNDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiZBoTDEk8O4KEvUHmpfKr6UxqNdd54j5Eij 5Iow/lfn/YWCXeofGgBTH6QUDEYymINl3zHId/7XBgl/9sWesbnoG9XYxRbnXrAZ PeuI1Ha+cYivgTVUfqesb0HMZDBsY+fW7ttKGHQ2DncKR66tu5lEMN87Yj2+6/+8 X9Lk1C42OYW8jGcCS3bCGaCAwRYVof8fzoG3+GyW6ljhO3UYeUxq4Ov8FqkJMn+O LMRwl7SDpNziGa1AxlPwP/MnNM8D9Jh2h00yZ3xypR+3HWmjHLAhpCLvdeXxc8/U WaI1JbxEvgZwweUpxeQqnVpfIrhPGgsoQguZ6UEXrFOB3XaOYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJAJi/N/Y0x4Z3SXlR5CyKHxtylMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGM0YjJhMzItYjg3OC0z ZTAwLWJjNzQtMGY5MjgxZmNiNGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERwcwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgo+WBq3mInMAwqW/2xChIHoAf0XFnyrdGhJwYJisH/0OjNRHcRIsUy CVEeVvmz3nG7GpmsaRsQRNw0pbLNzoo3lduTwyN2rm+gKzV6fOEDVVtl1wgm1eTC +JdnbVe+IdC6rRYnN1TOFM1NVQR6SEk8cHcfk1CyK7BC0GYb9cKIjOp17KxHfiXM hDddVNZxO2vS8pR7hpQlIqfDWSjR+R6zzMxErqnyoKFgFLKGRNMxDtaFVqsJA9zv hRgYzu1miyWh+VoxeD41T2T3KYAB8x1jUtMB/VN25gJnx1O3VCvKaWZelpzFsKRi 2b0swC+U0k6uVVLGfw6I+oA7BpWd0BA= -----END CERTIFICATE-----Generated at Tue Oct 13 17:42:04 2026 by rpki-client