$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6435e90f-1d14-3798-8de3-aafd7f7e2f47.roa File: 6435e90f-1d14-3798-8de3-aafd7f7e2f47.roa (raw, json) Hash identifier: yGLkNnNn+vMTt95TcfcI67tn1gHNzNRAeffAcDmsj60= Subject key identifier: 3A:04:FA:3A:BF:D9:0B:E8:47:DA:29:1C:C4:C8:85:94:91:07:6E:26 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1E3DEA416F296039E6340 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6435e90f-1d14-3798-8de3-aafd7f7e2f47.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 71.30.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:e3:de:a4:16:f2:96:03:9e:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=b3e450b8-39a7-4826-8b28-50887f06f2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:49:8c:f5:44:08:07:67:fe:24:ea:df:57:7b: 29:35:e9:29:32:9e:45:38:df:fb:07:68:8b:d1:79: b2:d9:d0:39:ff:87:c0:e0:21:d0:e1:22:d8:87:8c: 4e:a4:45:f1:9b:0f:13:80:cb:9e:ca:d3:9d:0e:75: be:e2:a2:67:de:bf:39:0d:5e:f0:55:5b:aa:a8:1c: f8:ca:42:1e:b7:d9:2a:37:55:64:4d:39:d8:f9:15: 87:f4:77:56:b3:ab:42:dc:66:89:85:b1:94:e1:7d: c7:64:03:79:17:d7:eb:b6:15:fb:06:c7:ae:69:67: ab:87:89:ab:30:a6:8a:a7:56:0b:80:d7:3b:10:ba: 24:1a:37:e5:f2:07:1b:58:ba:d8:e6:f9:8f:f2:1d: 2f:66:99:5e:d6:b9:7b:9a:59:bb:45:0d:99:b5:16: 29:e2:6d:da:1a:d5:7b:72:7e:77:5d:88:d5:39:1a: c0:dd:9c:4c:90:df:96:11:d9:2c:8d:85:7c:4b:90: 70:43:e2:e7:a0:0f:d3:72:0b:9f:a8:37:68:e2:54: 48:a2:cc:79:67:3b:01:c2:1d:29:bd:ea:81:a7:03: 02:ed:7b:f0:72:3f:85:df:0d:4c:b0:77:53:c6:68: 49:03:25:e2:24:3b:ab:56:c1:01:06:1a:37:8a:04: 84:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:04:FA:3A:BF:D9:0B:E8:47:DA:29:1C:C4:C8:85:94:91:07:6E:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6435e90f-1d14-3798-8de3-aafd7f7e2f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:7d:33:a8:ad:39:c7:fe:d6:73:20:28:65:13:fc:0f:67:28: 72:93:0f:81:b3:9b:e1:26:58:9b:16:70:f8:a6:bc:7f:41:13: 85:1c:42:ca:2b:bf:96:97:ae:14:fe:90:32:7a:77:51:7a:64: d6:18:58:69:4a:27:8e:6a:bf:3e:cc:eb:f8:29:97:71:a5:09: a0:b5:ab:b7:fb:73:41:ac:1a:15:c7:1f:b3:9f:27:b0:2d:b2: d3:bf:76:21:e2:ac:9e:bb:b1:de:d2:43:4e:d5:2d:c9:7e:13: f9:93:66:05:f6:27:23:a5:69:82:5c:44:d2:66:8b:26:09:12: fe:f2:90:9b:6f:c7:c8:54:26:25:74:05:fa:b3:87:8b:50:e4: cd:8a:7a:68:4e:ac:b9:20:d2:15:09:41:c0:43:5b:c4:e7:cd: a3:06:36:fe:29:b3:3e:a2:bb:02:0f:dd:05:eb:48:8d:03:ef: 76:1b:5c:39:90:5f:c2:30:27:33:06:40:26:20:91:15:16:1c: da:72:a2:b7:cc:f8:87:ad:c7:0e:fa:25:be:bd:e7:d6:36:21: 0b:cb:c7:74:a0:a1:2c:bb:d8:fa:cb:e6:b4:16:ca:a1:1a:2d: f9:9a:5c:17:c5:5f:cc:79:0d:bc:76:22:0c:31:3c:79:14:d2: d6:c3:d1:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysePepBbylgOeY0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk YjNlNDUwYjgtMzlhNy00ODI2LThiMjgtNTA4ODdmMDZmMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUmM9UQIB2f+JOrfV3spNekpMp5FON/7B2iL 0Xmy2dA5/4fA4CHQ4SLYh4xOpEXxmw8TgMueytOdDnW+4qJn3r85DV7wVVuqqBz4 ykIet9kqN1VkTTnY+RWH9HdWs6tC3GaJhbGU4X3HZAN5F9frthX7BseuaWerh4mr MKaKp1YLgNc7ELokGjfl8gcbWLrY5vmP8h0vZple1rl7mlm7RQ2ZtRYp4m3aGtV7 cn53XYjVORrA3ZxMkN+WEdksjYV8S5BwQ+LnoA/TcgufqDdo4lRIosx5ZzsBwh0p veqBpwMC7Xvwcj+F3w1MsHdTxmhJAyXiJDurVsEBBho3igSEIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoE+jq/2QvoR9opHMTIhZSRB24mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjQzNWU5MGYtMWQxNC0z Nzk4LThkZTMtYWFmZDdmN2UyZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx7UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE19M6itOcf+1nMgKGUT/A9nKHKTD4Gzm+EmWJsWcPimvH9BE4UcQsor v5aXrhT+kDJ6d1F6ZNYYWGlKJ45qvz7M6/gpl3GlCaC1q7f7c0GsGhXHH7OfJ7At stO/diHirJ67sd7SQ07VLcl+E/mTZgX2JyOlaYJcRNJmiyYJEv7ykJtvx8hUJiV0 Bfqzh4tQ5M2KemhOrLkg0hUJQcBDW8TnzaMGNv4psz6iuwIP3QXrSI0D73YbXDmQ X8IwJzMGQCYgkRUWHNpyorfM+Ietxw76Jb6959Y2IQvLx3SgoSy72PrL5rQWyqEa LfmaXBfFX8x5Dbx2IgwxPHkU0tbD0Xk= -----END CERTIFICATE-----Generated at Thu Aug 27 13:17:41 2026 by rpki-client