$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d56405e-e032-3af5-8624-0dff99d29290.roa File: 4d56405e-e032-3af5-8624-0dff99d29290.roa (raw, json) Hash identifier: SE/0lRjyTdZhrT9swLkcP262x+aW4PPrr3a1l00AjYg= Subject key identifier: A9:C2:EF:96:78:99:A4:D5:A3:25:EA:91:D1:7C:72:BC:A1:02:B0:08 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E5FDF65C79F2DA954ECE22BE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d56405e-e032-3af5-8624-0dff99d29290.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 7029 IP address blocks: 71.29.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:65:c7:9f:2d:a9:54:ec:e2:2b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=45896a21-b5a9-46ea-8fc4-101ce01e0342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ee:48:b7:8b:71:90:39:1f:a0:da:51:c7:ee: fd:1c:39:1a:88:4a:fb:85:fc:26:10:c7:11:8f:13: 8a:2b:93:84:e1:7d:6b:8c:e1:38:a0:24:e6:7d:a5: 21:01:4c:46:75:38:27:e0:88:75:76:f3:77:29:da: 7c:e6:76:26:ce:32:1e:d5:9b:18:43:cd:a6:cc:93: ee:89:c8:30:45:27:78:66:2f:36:a7:cf:98:19:bd: d7:7b:f3:46:71:94:49:81:95:40:e0:81:1f:aa:e3: 1f:ab:ba:d5:f6:b4:dc:bc:a9:0c:de:35:4e:cc:93: b8:da:60:4d:b7:ec:59:22:4a:0e:43:b6:56:c0:68: b7:41:96:3f:25:b0:1d:2a:95:c8:d4:bc:dd:cd:f5: 3a:8f:b0:a0:c5:b3:99:f2:75:5a:f6:0f:0c:8d:ae: 91:16:28:bd:f3:fd:ad:92:da:07:c7:55:79:5c:9d: d7:d9:f8:88:65:08:ec:aa:96:5f:bf:5a:17:00:de: 36:47:a4:db:7b:a6:f5:b8:f5:fd:89:3c:34:80:8b: 08:24:ae:0f:9a:b6:89:2b:a1:a5:f3:db:bd:fb:8f: 9a:47:05:18:ae:6a:50:a2:68:a0:4b:2d:bf:12:df: 9a:3f:bf:74:03:3d:67:68:52:4d:8f:eb:fc:82:4d: ab:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C2:EF:96:78:99:A4:D5:A3:25:EA:91:D1:7C:72:BC:A1:02:B0:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d56405e-e032-3af5-8624-0dff99d29290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:8d:cd:f8:70:6d:ef:6e:83:0a:ea:4e:3c:3d:a3:25:c6:8e: 12:97:da:75:57:6e:40:e5:1b:6c:8e:34:84:fd:3b:79:52:fd: 37:c4:ee:58:f7:37:93:a7:dc:7b:ad:00:b7:1d:22:be:d1:62: 1d:0a:ce:48:47:2e:80:d2:72:fd:7a:70:70:1f:d5:f1:09:88: f2:7d:ef:1e:c5:08:f2:42:9b:4b:dc:a1:ec:a4:67:d4:0f:46: ef:a0:70:63:49:42:d5:dd:92:42:96:df:49:aa:41:8f:ae:d6: 28:46:39:a0:5b:57:fe:86:ef:a0:12:4d:74:ea:90:c6:8b:cc: 43:5c:89:6d:e2:0e:f2:29:0d:10:1d:0b:f5:c2:2f:c8:1c:9d: 9f:54:a5:c7:6d:12:b4:32:33:39:b3:6a:eb:df:da:f7:d8:f8: 22:37:49:46:29:f4:2d:5b:dd:19:45:7e:c0:81:c6:26:34:fc: 2b:77:05:87:c2:47:cd:a9:ba:6e:b0:03:ac:0d:09:0d:ae:b9: fc:06:cd:e2:b7:cd:73:19:1d:2c:a7:d8:77:af:44:f6:8e:13: 24:1c:16:31:74:e6:e9:5a:fd:87:42:b6:8b:3e:93:0f:85:8b: 62:53:f1:81:7d:6e:4a:85:a1:a4:f7:fc:03:c8:a2:de:22:94: 74:7c:e6:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f32XHny2pVOziK+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk NDU4OTZhMjEtYjVhOS00NmVhLThmYzQtMTAxY2UwMWUwMzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO5It4txkDkfoNpRx+79HDkaiEr7hfwmEMcR jxOKK5OE4X1rjOE4oCTmfaUhAUxGdTgn4Ih1dvN3Kdp85nYmzjIe1ZsYQ82mzJPu icgwRSd4Zi82p8+YGb3Xe/NGcZRJgZVA4IEfquMfq7rV9rTcvKkM3jVOzJO42mBN t+xZIkoOQ7ZWwGi3QZY/JbAdKpXI1LzdzfU6j7CgxbOZ8nVa9g8Mja6RFii98/2t ktoHx1V5XJ3X2fiIZQjsqpZfv1oXAN42R6Tbe6b1uPX9iTw0gIsIJK4PmraJK6Gl 89u9+4+aRwUYrmpQomigSy2/Et+aP790Az1naFJNj+v8gk2rIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnC75Z4maTVoyXqkdF8cryhArAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGQ1NjQwNWUtZTAzMi0z YWY1LTg2MjQtMGRmZjk5ZDI5MjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2Nzfhwbe9ugwrqTjw9oyXGjhKX2nVXbkDlG2yONIT9O3lS/TfE7lj3 N5On3HutALcdIr7RYh0KzkhHLoDScv16cHAf1fEJiPJ97x7FCPJCm0vcoeykZ9QP Ru+gcGNJQtXdkkKW30mqQY+u1ihGOaBbV/6G76ASTXTqkMaLzENciW3iDvIpDRAd C/XCL8gcnZ9UpcdtErQyMzmzauvf2vfY+CI3SUYp9C1b3RlFfsCBxiY0/Ct3BYfC R82pum6wA6wNCQ2uufwGzeK3zXMZHSyn2HevRPaOEyQcFjF05ula/YdCtos+kw+F i2JT8YF9bkqFoaT3/APIot4ilHR85qY= -----END CERTIFICATE-----Generated at Mon Jul 13 05:50:11 2026 by rpki-client