$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67f31af4-21cb-3c4b-a1c4-e3e7c3103533.roa File: 67f31af4-21cb-3c4b-a1c4-e3e7c3103533.roa (raw, json) Hash identifier: WYP4qIDIDEn/F7bdH2E3Fh725Pm1hsBId/iza0BPGZw= Subject key identifier: CA:D8:99:8E:73:BB:63:4C:B5:F6:43:C6:59:12:8A:C7:51:19:5B:14 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D74C593F355BE1ACA8E30 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67f31af4-21cb-3c4b-a1c4-e3e7c3103533.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 71.29.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:74:c5:93:f3:55:be:1a:ca:8e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=004a46b8-72f4-4900-9c98-62a3a0098753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4b:53:3f:40:28:3d:85:e4:97:c1:fa:b5:de: 8b:4e:01:d4:cb:aa:fb:92:65:2e:06:42:8e:d5:bf: 10:90:d0:d4:d7:a1:a9:e2:81:7a:d3:40:d7:fc:81: 16:7f:9c:29:61:f6:b8:33:01:f2:73:37:87:39:2b: a3:98:97:35:e8:20:e6:c3:96:e6:97:4a:c3:03:9e: b9:82:2e:e5:99:ee:66:cb:ae:fb:0c:75:6f:0f:32: 47:e0:a2:fb:3b:30:e3:ba:d2:29:60:c0:14:26:39: 9f:3a:60:c3:85:50:72:3f:2f:0e:c7:05:aa:63:61: ec:2c:09:47:8f:d1:bf:c6:e3:53:5d:90:93:c8:17: 7a:f9:c0:52:bb:30:aa:f5:3e:07:ca:c3:c3:30:6f: dd:79:7a:5a:57:59:87:d9:01:e9:2c:cd:ad:71:1f: 74:24:ad:35:b3:b3:45:6e:9b:db:52:2b:a9:a7:d0: 4d:ec:05:9f:c1:f8:64:31:ff:fa:a2:45:36:d3:84: ae:a8:f9:29:0a:ff:0a:6f:5f:fb:c3:95:83:f5:b9: 41:ce:b6:4d:56:ca:13:c9:8c:4e:5f:82:a2:7d:1d: e8:36:21:18:8f:38:b1:81:6b:84:36:6d:96:e8:85: d2:20:9a:07:9f:c8:67:7b:55:59:dc:a2:8d:7a:b4: 14:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D8:99:8E:73:BB:63:4C:B5:F6:43:C6:59:12:8A:C7:51:19:5B:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67f31af4-21cb-3c4b-a1c4-e3e7c3103533.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:1a:b0:34:a9:d5:9d:f4:f2:80:60:9f:f6:73:53:89:2b:94: 1f:66:1e:47:82:04:57:4e:f3:68:2a:88:31:24:52:aa:a3:43: 58:5e:4f:d3:67:30:6b:ec:9a:4d:cb:ac:ae:7f:7c:e5:e8:25: ca:da:6b:cb:b7:04:6a:a9:c5:4c:58:fa:92:01:79:1a:f3:5b: d2:8c:df:ed:99:24:c6:67:2d:d6:93:38:48:fc:7a:e8:eb:56: 96:11:49:d5:1c:94:a3:2e:8b:f5:45:f1:74:27:9b:b1:6a:e8: 6c:a3:d8:49:2e:41:dd:d7:63:f2:4a:9e:ea:9b:5e:12:4a:8f: 92:f9:80:b5:db:7f:41:bf:57:05:12:35:81:64:aa:06:39:87: b5:9b:86:65:e6:e2:d9:10:b7:2a:d6:02:41:45:82:ef:9f:eb: 49:3d:a0:db:5b:c2:4a:ed:90:9c:2c:a6:dd:15:64:6d:37:1e: bc:d0:24:d2:99:5b:c7:ff:b9:68:92:70:42:d6:cb:d7:ec:64: 40:60:8c:ce:dc:a1:9f:14:7d:81:1c:be:f8:b7:f8:9c:77:32: e8:7a:8d:5a:54:d4:bf:04:cb:7b:04:a8:9a:d9:85:87:9b:a8: a7:1d:22:1a:ef:1b:5e:6e:d2:af:d5:0c:28:da:4e:57:f5:95: dc:d9:6d:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXTFk/NVvhrKjjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MDA0YTQ2YjgtNzJmNC00OTAwLTljOTgtNjJhM2EwMDk4NzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiktTP0AoPYXkl8H6td6LTgHUy6r7kmUuBkKO 1b8QkNDU16Gp4oF600DX/IEWf5wpYfa4MwHyczeHOSujmJc16CDmw5bml0rDA565 gi7lme5my677DHVvDzJH4KL7OzDjutIpYMAUJjmfOmDDhVByPy8OxwWqY2HsLAlH j9G/xuNTXZCTyBd6+cBSuzCq9T4HysPDMG/deXpaV1mH2QHpLM2tcR90JK01s7NF bpvbUiupp9BN7AWfwfhkMf/6okU204SuqPkpCv8Kb1/7w5WD9blBzrZNVsoTyYxO X4KifR3oNiEYjzixgWuENm2W6IXSIJoHn8hne1VZ3KKNerQUMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrYmY5zu2NMtfZDxlkSisdRGVsUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjdmMzFhZjQtMjFjYi0z YzRiLWExYzQtZTNlN2MzMTAzNTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgasDSp1Z308oBgn/ZzU4krlB9mHkeCBFdO82gqiDEkUqqjQ1heT9Nn MGvsmk3LrK5/fOXoJcraa8u3BGqpxUxY+pIBeRrzW9KM3+2ZJMZnLdaTOEj8eujr VpYRSdUclKMui/VF8XQnm7Fq6Gyj2EkuQd3XY/JKnuqbXhJKj5L5gLXbf0G/VwUS NYFkqgY5h7WbhmXm4tkQtyrWAkFFgu+f60k9oNtbwkrtkJwspt0VZG03HrzQJNKZ W8f/uWiScELWy9fsZEBgjM7coZ8UfYEcvvi3+Jx3Muh6jVpU1L8Ey3sEqJrZhYeb qKcdIhrvG15u0q/VDCjaTlf1ldzZbW8= -----END CERTIFICATE-----Generated at Tue Oct 13 21:32:25 2026 by rpki-client