$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/717c4358-15b0-3f84-969e-b7f10fdb2f3b.roa File: 717c4358-15b0-3f84-969e-b7f10fdb2f3b.roa (raw, json) Hash identifier: UKpHQIvx/nazqTKdo/GYPJRZWtEGE7iLA9CEgP0dSeQ= Subject key identifier: 68:09:19:DB:E7:B5:25:46:38:06:50:E5:D0:BE:52:8C:80:35:2C:35 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D903FE2A51019ED58C360 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/717c4358-15b0-3f84-969e-b7f10fdb2f3b.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 71.7.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:90:3f:e2:a5:10:19:ed:58:c3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=d07dbd59-a243-465b-ac84-ec5f4eedd2ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:97:c3:89:87:99:14:1e:e5:95:b5:ed:ff:f5: a8:25:5a:2a:98:f2:1d:14:30:ae:f9:ed:3a:2f:90: 58:78:b9:04:65:ce:8c:d5:73:07:77:0d:31:56:65: 96:ef:92:81:e9:56:9b:65:b1:d8:07:5b:ee:13:90: 65:f8:93:43:89:5f:5d:7b:03:c4:0d:fd:3e:2d:47: ce:33:ef:16:bd:91:3a:c7:24:0e:b7:a6:e7:26:d1: de:c8:bb:23:25:24:fd:e1:2e:5b:31:0e:b6:b0:d6: 89:ba:4d:ad:ed:4f:39:9a:4b:1f:4f:d6:82:84:a3: 41:ca:1f:bb:00:45:73:ed:8b:eb:03:55:6f:82:52: 21:28:11:29:a4:43:78:04:c8:79:31:29:dd:7c:10: 42:f1:33:22:2b:77:3e:57:87:f2:f0:0e:eb:44:b8: 2c:e8:a1:f7:c7:d5:e3:e9:35:c9:64:d3:d6:ce:25: be:c5:38:25:7d:8d:3f:af:f9:8d:4c:bc:e7:5f:49: 80:de:33:c8:6d:d6:89:2d:1a:b2:58:d3:53:98:ab: 27:5f:4d:0e:a2:42:e2:df:3e:0d:c8:5f:46:e5:b8: c7:1e:fe:db:16:08:8d:e5:0b:73:9f:c3:e3:62:72: ed:73:fe:2b:0d:3b:68:96:6a:08:75:7f:ad:1e:e8: c5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:09:19:DB:E7:B5:25:46:38:06:50:E5:D0:BE:52:8C:80:35:2C:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/717c4358-15b0-3f84-969e-b7f10fdb2f3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.7.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:e8:0b:c4:bc:12:33:b3:4b:f9:fc:db:63:b5:e6:67:42:60: 54:5f:14:96:8c:37:29:eb:af:c0:38:da:67:d6:79:e9:c5:8d: 1b:7e:f1:50:9b:82:5c:a9:38:98:ff:8c:13:a5:c8:7e:ed:3e: 5d:00:06:91:84:36:36:1d:8a:e4:27:f0:0e:57:9c:d4:b6:0a: 49:e6:2d:f8:b9:5a:25:af:b4:08:f0:dc:c9:43:5a:1f:17:4c: 85:50:d4:dd:8f:c0:ad:61:c0:97:64:ce:1a:b0:ed:81:92:f0: da:79:95:90:19:03:e1:3d:08:e7:f8:51:cb:b8:e4:e8:01:2b: 99:6e:b6:ed:0a:ee:77:c7:84:92:8b:95:67:ed:ae:6a:63:fc: c3:fe:59:57:86:3d:43:99:c4:a5:e3:94:cd:96:2b:92:38:3d: 0d:f7:93:a1:75:f6:8c:8d:0f:5e:79:2c:bc:62:3b:62:d7:e7: 33:b2:39:9e:17:4a:98:cd:8b:e3:dc:cf:42:1f:dc:8d:02:8b: a4:c5:a0:10:00:21:2a:58:c5:b6:33:8f:9a:64:21:4f:ed:c5: b0:da:93:c5:d5:31:8d:ec:73:e0:96:37:11:5a:2d:e0:d5:3d: cf:47:31:84:3b:95:1a:5e:80:d3:5a:a0:47:aa:97:6f:20:f1: 13:28:0c:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZA/4qUQGe1Yw2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZDA3ZGJkNTktYTI0My00NjViLWFjODQtZWM1ZjRlZWRkMmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpfDiYeZFB7llbXt//WoJVoqmPIdFDCu+e06 L5BYeLkEZc6M1XMHdw0xVmWW75KB6VabZbHYB1vuE5Bl+JNDiV9dewPEDf0+LUfO M+8WvZE6xyQOt6bnJtHeyLsjJST94S5bMQ62sNaJuk2t7U85mksfT9aChKNByh+7 AEVz7YvrA1VvglIhKBEppEN4BMh5MSndfBBC8TMiK3c+V4fy8A7rRLgs6KH3x9Xj 6TXJZNPWziW+xTglfY0/r/mNTLznX0mA3jPIbdaJLRqyWNNTmKsnX00OokLi3z4N yF9G5bjHHv7bFgiN5Qtzn8PjYnLtc/4rDTtolmoIdX+tHujFNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgJGdvntSVGOAZQ5dC+UoyANSw1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzE3YzQzNTgtMTViMC0z Zjg0LTk2OWUtYjdmMTBmZGIyZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARwcnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPoC8S8EjOzS/n822O15mdCYFRfFJaMNynrr8A42mfWeenFjRt+8VCb glypOJj/jBOlyH7tPl0ABpGENjYdiuQn8A5XnNS2CknmLfi5WiWvtAjw3MlDWh8X TIVQ1N2PwK1hwJdkzhqw7YGS8Np5lZAZA+E9COf4Ucu45OgBK5lutu0K7nfHhJKL lWftrmpj/MP+WVeGPUOZxKXjlM2WK5I4PQ33k6F19oyND155LLxiO2LX5zOyOZ4X SpjNi+Pcz0If3I0Ci6TFoBAAISpYxbYzj5pkIU/txbDak8XVMY3sc+CWNxFaLeDV Pc9HMYQ7lRpegNNaoEeql28g8RMoDMA= -----END CERTIFICATE-----Generated at Tue Oct 13 10:26:18 2026 by rpki-client