$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/722f3704-d798-3059-b812-9e050f41dc24.roa File: 722f3704-d798-3059-b812-9e050f41dc24.roa (raw, json) Hash identifier: TK+gciESAMCdn3FGqUIfqs0tq+TwJ5SAvJdFsytsWj8= Subject key identifier: 01:5C:38:15:56:20:44:82:AD:97:24:8B:62:82:7C:06:B0:05:1C:B8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E5FDF65B050751F8AF2FA0980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/722f3704-d798-3059-b812-9e050f41dc24.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 7029 IP address blocks: 71.28.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:65:b0:50:75:1f:8a:f2:fa:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=a5dbc71d-e8ef-4f7d-9be4-dddc496aa7c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:62:ab:a1:79:b0:b9:b8:41:f5:61:68:75:95: 0b:6d:f0:13:4c:2d:2c:2b:9c:10:92:3e:08:94:61: bd:d7:a9:e9:ce:03:9a:18:59:e3:42:a3:17:2f:43: b9:29:c6:b6:13:76:6d:30:2e:d5:0c:c3:d4:03:4d: af:cb:93:6f:3d:bb:fa:be:d2:64:89:ef:06:27:4f: b2:20:96:21:27:3e:7b:59:9c:70:18:92:a6:1f:b3: fc:4d:40:d9:91:08:e4:3b:94:1e:02:48:6a:27:72: 4f:80:0b:cc:cb:8c:26:46:4b:61:64:5d:7e:00:33: d0:ff:65:f5:35:84:68:98:b0:ed:22:ab:0a:34:a8: 8e:18:d1:ac:3a:96:58:b2:3b:8c:59:11:99:c2:5d: 94:07:cc:b5:17:92:7e:ed:66:f4:97:5f:4e:34:06: 60:92:83:c3:52:1b:81:b3:80:e8:df:48:fe:5a:f4: 8c:71:ab:80:a3:d4:6f:1c:0b:f8:3b:c6:ca:b7:18: b2:76:a7:01:b8:1b:94:2e:1e:1a:b9:5f:30:9d:8c: 03:90:2a:88:2f:51:a0:19:45:1d:fe:c0:06:52:ab: 1b:e0:86:c6:f9:87:35:ce:0b:ac:cc:7e:b6:53:e4: 11:00:5e:65:b4:46:f4:56:47:89:9c:e3:01:48:59: 8c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5C:38:15:56:20:44:82:AD:97:24:8B:62:82:7C:06:B0:05:1C:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/722f3704-d798-3059-b812-9e050f41dc24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:4b:e7:fb:03:f0:f2:e1:5c:b9:56:e9:9d:eb:01:09:f9:5f: f5:29:82:7d:e9:ef:c7:2b:30:6a:f5:7d:08:a5:45:00:5d:7c: ce:1b:e2:62:f4:34:96:ee:fc:53:6a:48:32:3c:3c:20:6a:84: 72:e1:f3:9f:f4:41:ed:0e:83:88:72:79:e0:f6:23:34:65:35: 55:a2:8c:8f:bd:47:b3:fc:45:fd:c3:37:8f:43:bd:88:ea:bf: be:4b:95:d6:08:67:e4:39:1b:4d:fe:b1:f7:c6:f4:92:6a:c8: 25:3b:07:4f:38:fb:ce:f9:6b:bf:e1:4d:a1:26:b9:01:82:5e: 16:a9:b1:db:c3:e0:ec:86:91:d9:c0:eb:f2:4d:5f:69:d1:61: 64:b4:e9:2c:e3:e1:32:e4:b0:fb:30:81:13:b8:69:85:57:9a: f1:e7:4f:8a:a2:d8:d4:9d:e9:ef:88:8a:8b:90:66:63:60:84: ae:36:73:8f:a6:67:8c:a0:08:10:e6:81:7e:a4:77:e9:ed:03: b2:2d:96:4b:5e:c5:d2:46:03:a0:7f:76:23:56:70:e6:74:86: 49:81:d9:eb:de:23:24:06:83:fe:30:a7:30:7a:f1:51:8d:88: 38:c8:c6:64:46:24:c0:54:b9:2d:5e:14:bb:ff:c3:0a:68:8e: d5:69:6e:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f32WwUHUfivL6CYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk YTVkYmM3MWQtZThlZi00ZjdkLTliZTQtZGRkYzQ5NmFhN2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WKroXmwubhB9WFodZULbfATTC0sK5wQkj4I lGG916npzgOaGFnjQqMXL0O5Kca2E3ZtMC7VDMPUA02vy5NvPbv6vtJkie8GJ0+y IJYhJz57WZxwGJKmH7P8TUDZkQjkO5QeAkhqJ3JPgAvMy4wmRkthZF1+ADPQ/2X1 NYRomLDtIqsKNKiOGNGsOpZYsjuMWRGZwl2UB8y1F5J+7Wb0l19ONAZgkoPDUhuB s4Do30j+WvSMcauAo9RvHAv4O8bKtxiydqcBuBuULh4auV8wnYwDkCqIL1GgGUUd /sAGUqsb4IbG+Yc1zguszH62U+QRAF5ltEb0VkeJnOMBSFmMuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFcOBVWIESCrZcki2KCfAawBRy4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzIyZjM3MDQtZDc5OC0z MDU5LWI4MTItOWUwNTBmNDFkYzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxzKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRL5/sD8PLhXLlW6Z3rAQn5X/Upgn3p78crMGr1fQilRQBdfM4b4mL0 NJbu/FNqSDI8PCBqhHLh85/0Qe0Og4hyeeD2IzRlNVWijI+9R7P8Rf3DN49DvYjq v75LldYIZ+Q5G03+sffG9JJqyCU7B084+875a7/hTaEmuQGCXhapsdvD4OyGkdnA 6/JNX2nRYWS06Szj4TLksPswgRO4aYVXmvHnT4qi2NSd6e+IiouQZmNghK42c4+m Z4ygCBDmgX6kd+ntA7ItlktexdJGA6B/diNWcOZ0hkmB2eveIyQGg/4wpzB68VGN iDjIxmRGJMBUuS1eFLv/wwpojtVpbig= -----END CERTIFICATE-----Generated at Mon Jul 13 05:56:03 2026 by rpki-client