$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/756827f3-3cf1-3ed4-ac96-6cc1a659833c.roa File: 756827f3-3cf1-3ed4-ac96-6cc1a659833c.roa (raw, json) Hash identifier: lah8ehaXyWmF95ruGzY8AuKMmwR3xWecv9HV1cQyg5w= Subject key identifier: B5:80:3B:58:88:5B:42:69:7F:1E:90:8A:6C:03:74:BF:9A:93:5E:8A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED864955D914720D52B71FEB0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/756827f3-3cf1-3ed4-ac96-6cc1a659833c.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 71.29.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:64:95:5d:91:47:20:d5:2b:71:fe:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=052242e9-bbe8-4d14-aaf0-3386d87021e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:23:19:9c:ae:61:7b:e3:df:18:5e:71:39:b2: ba:e3:12:0f:91:32:2d:12:5d:21:91:49:9f:e3:42: f9:e0:b1:65:d3:89:cf:a9:49:49:b0:3f:75:a2:db: 31:24:91:fa:52:e9:98:b0:c9:ec:98:2f:04:0e:10: ee:2b:3f:fe:dc:d9:63:bd:aa:a6:8f:45:3f:b3:ec: e8:7e:92:d6:f6:66:cd:8c:16:0c:d1:0d:fc:e9:4d: 1e:54:de:e1:15:ac:9d:a2:66:84:ab:07:51:61:27: ef:a1:76:5d:c0:e7:0c:e2:c1:75:69:aa:7d:2d:4b: 3c:b2:e2:c6:4d:e4:5a:9d:d1:41:59:a7:34:05:d8: e8:bc:08:93:2c:c2:f2:ab:a3:20:3b:96:25:22:a6: 66:30:de:4a:b1:03:ef:82:bc:75:10:64:a9:e1:f5: df:3f:de:c2:09:9e:35:c6:62:13:1b:af:9e:80:6d: 81:87:15:cd:90:20:ac:04:05:97:f0:69:09:b5:9f: e4:c4:d4:a6:37:e6:35:49:a2:8a:eb:a3:98:12:b2: 72:60:c6:9a:bb:b1:bb:7f:29:96:ac:09:65:fc:21: ef:0d:52:20:09:c5:0e:65:46:2c:89:02:e5:94:d1: d5:8d:13:46:9e:27:b8:03:64:db:97:90:9e:e3:3c: c1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:80:3B:58:88:5B:42:69:7F:1E:90:8A:6C:03:74:BF:9A:93:5E:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/756827f3-3cf1-3ed4-ac96-6cc1a659833c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:5e:56:d9:e6:dc:e7:f0:37:91:91:87:ae:52:e8:44:d3:cd: 4e:29:bc:25:97:2f:a1:e4:50:4a:eb:32:99:36:52:d0:8b:6b: f7:78:b5:45:fe:40:28:ea:f2:fd:11:16:3b:bf:5a:5f:20:96: 1e:f7:1c:50:f1:24:a9:a2:b6:89:66:46:19:4f:35:c9:d0:f8: 3c:fe:0b:04:61:18:c8:7d:2d:ab:3f:ce:da:64:2c:9e:79:1e: 1d:20:9b:60:da:90:84:d3:2a:f4:8e:d4:f6:bc:31:5c:d7:df: d1:a6:35:ae:f3:1e:6a:82:03:e7:d7:5c:ab:c4:06:5b:5b:d0: 18:56:ab:43:8e:86:dc:4e:f2:44:3b:51:2c:69:d2:6f:c0:d6: 27:1b:29:7f:0a:71:14:60:3d:31:75:63:27:d3:d6:eb:5e:93: 64:e0:4a:f7:ed:fe:87:a2:61:19:70:81:e3:a0:fe:3e:61:91: 65:db:99:54:c2:23:7b:31:e1:8c:b3:d9:28:69:2a:25:a4:99: 60:13:2b:44:f6:32:36:f3:bf:94:fd:e5:c1:57:af:a4:ad:b7: cc:d1:9f:bb:c8:7f:bd:02:1a:5c:ca:e3:03:fb:25:b1:7f:88: 1a:1c:73:72:ee:d8:90:55:11:db:5b:12:94:52:10:f0:b2:de: bd:de:c6:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YZJVdkUcg1Stx/rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MDUyMjQyZTktYmJlOC00ZDE0LWFhZjAtMzM4NmQ4NzAyMWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziMZnK5he+PfGF5xObK64xIPkTItEl0hkUmf 40L54LFl04nPqUlJsD91otsxJJH6UumYsMnsmC8EDhDuKz/+3Nljvaqmj0U/s+zo fpLW9mbNjBYM0Q386U0eVN7hFaydomaEqwdRYSfvoXZdwOcM4sF1aap9LUs8suLG TeRandFBWac0BdjovAiTLMLyq6MgO5YlIqZmMN5KsQPvgrx1EGSp4fXfP97CCZ41 xmITG6+egG2BhxXNkCCsBAWX8GkJtZ/kxNSmN+Y1SaKK66OYErJyYMaau7G7fymW rAll/CHvDVIgCcUOZUYsiQLllNHVjRNGnie4A2Tbl5Ce4zzBVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWAO1iIW0Jpfx6QimwDdL+ak16KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzU2ODI3ZjMtM2NmMS0z ZWQ0LWFjOTYtNmNjMWE2NTk4MzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9eVtnm3OfwN5GRh65S6ETTzU4pvCWXL6HkUErrMpk2UtCLa/d4tUX+ QCjq8v0RFju/Wl8glh73HFDxJKmitolmRhlPNcnQ+Dz+CwRhGMh9Las/ztpkLJ55 Hh0gm2DakITTKvSO1Pa8MVzX39GmNa7zHmqCA+fXXKvEBltb0BhWq0OOhtxO8kQ7 USxp0m/A1icbKX8KcRRgPTF1YyfT1utek2TgSvft/oeiYRlwgeOg/j5hkWXbmVTC I3sx4Yyz2ShpKiWkmWATK0T2Mjbzv5T95cFXr6Stt8zRn7vIf70CGlzK4wP7JbF/ iBocc3Lu2JBVEdtbEpRSEPCy3r3exnk= -----END CERTIFICATE-----Generated at Tue Sep 1 03:55:23 2026 by rpki-client