$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d76fb60-51b7-3ffc-ab1b-c6d716911fa6.roa File: 5d76fb60-51b7-3ffc-ab1b-c6d716911fa6.roa (raw, json) Hash identifier: nVxlkGWbedjboIY74xvHnMfyNkXGMgiSBZbtACtjui4= Subject key identifier: 82:67:3B:20:6D:64:30:50:CF:8C:74:02:AE:AE:2E:1A:36:A9:10:44 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAE81B63EFD796A8D89D9D880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d76fb60-51b7-3ffc-ab1b-c6d716911fa6.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 7029 IP address blocks: 71.28.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:b6:3e:fd:79:6a:8d:89:d9:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=4a318de8-4d4f-4a4a-9dae-2cc3a36628e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c1:e2:3d:f7:36:80:73:c7:0e:ff:36:63:95: 09:f7:6f:dc:ba:76:4a:60:6e:99:67:ff:63:2f:55: 12:e6:a5:43:80:6d:5e:47:fa:bf:df:4f:62:48:1d: 8e:00:51:47:71:1d:e3:82:5c:ab:c5:4f:25:af:ff: d0:8a:96:3b:b5:28:67:b8:9b:47:f0:3a:93:17:b8: 68:68:a6:a4:57:33:fc:7a:43:5e:d2:b9:e2:80:f3: 10:45:2c:2e:7a:f2:68:70:08:1f:4b:ac:10:f7:80: 0c:a4:a7:7e:a4:92:69:f8:3d:47:b8:83:37:81:3d: 0d:e8:af:5c:9d:0a:04:b5:6e:a2:83:d8:81:2a:df: 6a:9d:c7:80:32:31:5e:77:f3:a7:c4:ac:b0:5b:0a: 0b:3b:52:18:21:85:c3:1c:ee:1c:c0:53:32:dc:e4: ef:5a:84:7b:a1:6e:e1:9a:7e:d4:3e:a2:80:3c:c8: 3f:70:af:a6:38:3e:0e:b6:e7:b3:78:b7:c2:07:f0: 4c:c4:79:7f:e3:5e:1c:ea:4e:7f:78:96:3d:2f:48: 8b:ad:88:09:30:72:14:fc:02:77:06:10:77:0d:19: b9:00:1a:0d:54:a3:87:26:33:bd:0b:f3:65:6d:cd: aa:5a:41:cd:d9:7f:ba:50:ea:a7:0a:8b:90:74:13: 58:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:67:3B:20:6D:64:30:50:CF:8C:74:02:AE:AE:2E:1A:36:A9:10:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d76fb60-51b7-3ffc-ab1b-c6d716911fa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:10:65:ae:ad:d1:7c:a4:47:93:c3:89:1b:24:02:fa:ac:e8: 97:ec:d9:c2:1e:cf:43:55:53:3c:ea:ee:5e:58:5e:dc:7c:59: 51:50:0b:c3:49:76:36:38:7f:89:e5:49:d0:ad:a2:31:13:46: 54:5d:62:e4:7c:b5:d3:26:44:ee:0e:f4:63:c0:35:b7:42:32: 96:bf:0f:e5:75:29:90:b1:d2:d7:5f:89:36:44:87:b5:dc:9c: f6:38:3b:fd:11:bd:7b:72:dd:ac:64:08:61:01:6b:c1:8f:43: 99:a4:20:e7:eb:4b:08:10:30:5c:39:6f:0f:c5:f1:80:00:c3: 2c:39:19:ce:5e:7a:82:37:28:50:37:fc:40:f6:9c:97:96:41: ca:fe:26:13:fd:1e:d5:2b:3b:2a:82:55:4a:2b:4f:98:89:34: 4b:39:11:f2:44:f8:e2:3c:e4:34:10:34:1e:47:95:94:82:bc: 88:80:99:05:24:82:cc:dc:98:d6:6d:8a:6f:20:82:92:a3:3b: a7:72:84:f2:de:b6:bd:50:21:8a:38:90:c1:1b:f4:02:33:b0: cc:26:13:cf:2a:ef:b0:eb:34:21:ec:50:8a:35:ed:3c:7f:c4: 53:2b:a2:ef:ef:cc:35:dc:a0:62:99:32:23:de:df:76:4c:fd: 7f:d1:a3:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugbY+/XlqjYnZ2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk NGEzMThkZTgtNGQ0Zi00YTRhLTlkYWUtMmNjM2EzNjYyOGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsHiPfc2gHPHDv82Y5UJ92/cunZKYG6ZZ/9j L1US5qVDgG1eR/q/309iSB2OAFFHcR3jglyrxU8lr//QipY7tShnuJtH8DqTF7ho aKakVzP8ekNe0rnigPMQRSwuevJocAgfS6wQ94AMpKd+pJJp+D1HuIM3gT0N6K9c nQoEtW6ig9iBKt9qnceAMjFed/OnxKywWwoLO1IYIYXDHO4cwFMy3OTvWoR7oW7h mn7UPqKAPMg/cK+mOD4OtuezeLfCB/BMxHl/414c6k5/eJY9L0iLrYgJMHIU/AJ3 BhB3DRm5ABoNVKOHJjO9C/Nlbc2qWkHN2X+6UOqnCouQdBNYLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJnOyBtZDBQz4x0Aq6uLho2qRBEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWQ3NmZiNjAtNTFiNy0z ZmZjLWFiMWItYzZkNzE2OTExZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRxyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoQZa6t0XykR5PDiRskAvqs6Jfs2cIez0NVUzzq7l5YXtx8WVFQC8NJ djY4f4nlSdCtojETRlRdYuR8tdMmRO4O9GPANbdCMpa/D+V1KZCx0tdfiTZEh7Xc nPY4O/0RvXty3axkCGEBa8GPQ5mkIOfrSwgQMFw5bw/F8YAAwyw5Gc5eeoI3KFA3 /ED2nJeWQcr+JhP9HtUrOyqCVUorT5iJNEs5EfJE+OI85DQQNB5HlZSCvIiAmQUk gszcmNZtim8ggpKjO6dyhPLetr1QIYo4kMEb9AIzsMwmE88q77DrNCHsUIo17Tx/ xFMrou/vzDXcoGKZMiPe33ZM/X/Row4= -----END CERTIFICATE-----Generated at Thu Aug 27 09:49:26 2026 by rpki-client