$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/59f1cf2f-5688-3047-b77c-95886deac729.roa File: 59f1cf2f-5688-3047-b77c-95886deac729.roa (raw, json) Hash identifier: yrvNUWINQ9p4+St/FFQzx4YFXT4qUontEiW6CIaA4y0= Subject key identifier: 6A:F2:CB:4F:93:5C:D1:94:60:AA:B6:00:F9:05:E8:4B:49:94:23:83 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B717B8CF0570B56A9A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/59f1cf2f-5688-3047-b77c-95886deac729.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 71.29.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b7:17:b8:cf:05:70:b5:6a:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=6c3257ef-bdd7-4ef2-94ef-9db276bc0baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3d:40:7c:8d:f2:29:c2:73:83:88:b0:9a:2d: 64:55:31:ad:d6:8a:1e:f0:c3:69:6d:58:de:fd:3e: 32:2c:0c:59:3c:db:62:90:8a:02:e4:60:af:e6:b3: 92:78:f0:a6:e3:61:e0:f4:3f:f9:77:93:66:b3:eb: f3:f5:25:b6:77:53:cd:3b:cd:f3:e0:41:80:8f:90: e8:9c:60:9c:b0:5b:bc:26:55:55:d1:0d:a3:54:a9: e0:8b:ad:c6:b1:23:bd:4f:7b:1f:fb:0d:c6:a9:9e: be:74:26:04:ed:e8:9c:c2:64:6a:54:b8:9e:e3:99: 62:5c:0d:80:0c:09:02:c9:b5:2b:84:31:81:03:40: ad:f0:63:49:2d:f2:15:b0:e1:16:83:18:20:98:e5: 84:de:8f:74:5c:02:46:5e:be:40:c5:2e:91:74:74: 47:57:d2:0b:dc:57:da:c9:43:e3:fa:18:19:3e:40: b8:5c:95:55:cd:1f:3f:38:43:ef:dd:de:f8:dd:f9: c8:d9:08:0e:0b:40:e8:27:ac:3e:d8:25:47:84:5d: 38:38:ef:b3:18:48:4a:ce:a2:13:5b:f4:bf:00:48: 1e:4d:a3:02:9c:d5:71:1f:7f:b9:00:4d:1b:5b:13: bf:7f:90:e6:c9:d4:db:51:f0:84:28:e5:9c:cc:2f: 94:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F2:CB:4F:93:5C:D1:94:60:AA:B6:00:F9:05:E8:4B:49:94:23:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/59f1cf2f-5688-3047-b77c-95886deac729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ef:89:c1:cb:3c:95:3b:1d:36:fb:93:6f:98:39:89:3f:05: e1:d7:e3:3d:ca:b0:53:fe:c2:a8:7a:6d:2a:2a:db:3f:7c:1f: b5:56:e2:d4:43:b2:25:09:a4:c0:78:20:00:95:19:5c:ce:c7: f5:b3:f1:05:0a:fb:b5:c7:08:18:34:d0:7b:74:b8:72:db:15: c5:c2:78:ca:6d:e6:27:fc:02:3c:c0:d9:13:c6:01:d5:73:a2: 0b:57:5a:b3:cb:8a:cb:76:4f:99:52:1f:fe:70:7a:64:5d:a6: 46:84:c5:5e:e0:97:1a:19:22:86:73:f7:26:ba:99:6f:80:95: 1d:ea:c9:92:b3:b2:71:34:6f:f0:c4:79:75:b0:f7:cc:18:33: e9:18:63:5f:f2:db:cd:3d:03:b2:34:bc:a5:f5:53:38:f2:d0: fa:05:98:be:07:b8:65:31:ea:0f:0a:7b:01:80:cd:3f:09:f0: 05:bf:3b:50:ce:0d:c0:2d:1e:1a:25:ec:a4:79:c2:54:7e:6b: 2f:be:0d:09:88:e9:df:cd:bc:2a:ff:d2:22:29:ee:1b:7f:ad: 3d:06:4a:7a:4e:85:97:3e:3b:41:16:75:80:92:1a:e5:2a:fd: 80:06:21:81:9d:80:eb:da:57:33:c2:31:69:23:2d:38:81:b0: 10:ea:8b:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rcXuM8FcLVqmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk NmMzMjU3ZWYtYmRkNy00ZWYyLTk0ZWYtOWRiMjc2YmMwYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgT1AfI3yKcJzg4iwmi1kVTGt1ooe8MNpbVje /T4yLAxZPNtikIoC5GCv5rOSePCm42Hg9D/5d5Nms+vz9SW2d1PNO83z4EGAj5Do nGCcsFu8JlVV0Q2jVKngi63GsSO9T3sf+w3GqZ6+dCYE7eicwmRqVLie45liXA2A DAkCybUrhDGBA0Ct8GNJLfIVsOEWgxggmOWE3o90XAJGXr5AxS6RdHRHV9IL3Ffa yUPj+hgZPkC4XJVVzR8/OEPv3d743fnI2QgOC0DoJ6w+2CVHhF04OO+zGEhKzqIT W/S/AEgeTaMCnNVxH3+5AE0bWxO/f5DmydTbUfCEKOWczC+UyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGryy0+TXNGUYKq2APkF6EtJlCODMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTlmMWNmMmYtNTY4OC0z MDQ3LWI3N2MtOTU4ODZkZWFjNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx0MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPvicHLPJU7HTb7k2+YOYk/BeHX4z3KsFP+wqh6bSoq2z98H7VW4tRD siUJpMB4IACVGVzOx/Wz8QUK+7XHCBg00Ht0uHLbFcXCeMpt5if8AjzA2RPGAdVz ogtXWrPList2T5lSH/5wemRdpkaExV7glxoZIoZz9ya6mW+AlR3qyZKzsnE0b/DE eXWw98wYM+kYY1/y2809A7I0vKX1Uzjy0PoFmL4HuGUx6g8KewGAzT8J8AW/O1DO DcAtHhol7KR5wlR+ay++DQmI6d/NvCr/0iIp7ht/rT0GSnpOhZc+O0EWdYCSGuUq /YAGIYGdgOvaVzPCMWkjLTiBsBDqiy0= -----END CERTIFICATE-----Generated at Tue Oct 13 17:47:49 2026 by rpki-client