$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/79ac9c30-b80a-32eb-bfcb-552bb9f10fc1.roa File: 79ac9c30-b80a-32eb-bfcb-552bb9f10fc1.roa (raw, json) Hash identifier: hA7NJvRll+1h5cv//F6WLmFL1EWCQ50oC92yb6vvREw= Subject key identifier: AD:58:FF:07:0D:5A:07:2C:74:97:C7:7B:54:EF:94:17:36:80:F7:6C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D90DEC297D6738B928800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/79ac9c30-b80a-32eb-bfcb-552bb9f10fc1.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 74.11.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:90:de:c2:97:d6:73:8b:92:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=f52da170-caaf-473e-9755-caf72ea72c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c5:d5:0b:65:92:fd:84:ac:3a:ab:d4:70:58: 40:3a:45:42:dc:4d:cd:44:42:83:da:4c:d4:de:73: 58:0c:d2:57:a7:f8:1e:68:b3:ef:92:d9:8d:07:8c: 87:69:9f:79:e0:87:22:eb:6e:ce:b1:dc:83:9f:ce: 60:27:be:6e:c0:98:10:c9:57:51:1b:4c:1d:51:d0: 4d:66:2e:2d:e9:b3:29:6f:53:f5:24:79:e3:b2:9c: bf:d3:7d:e9:24:c7:16:73:d9:70:a4:b0:44:55:20: 79:04:ec:1a:de:58:e3:c3:ac:55:c8:0f:93:9e:20: 0f:c7:74:5f:61:31:30:5d:f9:54:07:0b:58:6f:3e: 7c:49:b1:7c:cf:c2:66:37:5c:0e:40:05:d7:fc:ea: 3f:c7:aa:52:a2:3c:15:05:7c:8f:f6:8e:65:19:c9: 23:26:85:2c:90:f0:d1:9d:b7:11:52:8f:3e:a1:f8: c4:4f:23:93:5b:7c:22:67:5b:cf:cd:da:e1:0f:27: bc:05:62:9f:55:5c:36:55:1e:40:c3:47:a9:5b:70: 02:1c:db:da:39:d2:08:4c:37:7a:fe:46:23:fd:a1: 9e:11:e0:c6:96:38:6f:84:ff:a0:f9:ca:58:f2:90: 1c:d1:e5:06:c8:4c:f8:a1:06:9f:8f:7d:81:c7:cb: b1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:58:FF:07:0D:5A:07:2C:74:97:C7:7B:54:EF:94:17:36:80:F7:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/79ac9c30-b80a-32eb-bfcb-552bb9f10fc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.11.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:2a:24:d0:3d:34:e7:88:32:35:4a:d2:4a:12:aa:9c:25:ca: af:70:aa:82:e8:8a:40:2d:07:cd:8b:84:08:c1:45:f6:a9:7a: c4:58:74:e9:7c:8d:65:2c:0a:0c:ae:25:1c:5a:e0:2c:ad:45: 14:8c:60:ae:23:90:7b:7d:4e:23:f3:dd:7d:83:3d:5b:61:34: b4:ae:11:ae:71:9f:ad:7a:0a:85:46:43:f5:ac:bf:98:a0:56: 78:f0:09:83:55:14:98:72:ee:c1:1d:ee:c4:3d:a5:d4:d3:08: 4a:92:f0:9e:95:d1:8f:e7:0d:7b:a2:27:e9:82:46:4a:49:a0: c9:6d:62:15:a2:67:4a:c6:a9:13:de:b6:1d:89:cf:54:34:91: 1b:f3:bb:9f:0a:fc:5b:11:5a:18:79:35:dd:75:ea:10:1e:84: 39:b6:a0:68:fa:fb:d6:41:38:7f:4f:45:9f:cd:9e:31:b1:69: 48:de:dd:e7:5e:ce:74:4d:11:b3:12:43:9f:1e:14:86:2d:94: 50:33:44:c7:4a:d3:b3:4b:a9:15:7c:06:0d:25:a3:1a:a3:bf: 2c:46:f4:d8:f7:48:26:b3:38:70:59:d0:82:24:93:71:c4:71: bf:57:9a:91:c5:73:50:2c:2a:02:3a:2c:bc:9c:ac:82:9c:6a: 92:1d:5e:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZDewpfWc4uSiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZjUyZGExNzAtY2FhZi00NzNlLTk3NTUtY2FmNzJlYTcyYzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcXVC2WS/YSsOqvUcFhAOkVC3E3NREKD2kzU 3nNYDNJXp/geaLPvktmNB4yHaZ954Ici627OsdyDn85gJ75uwJgQyVdRG0wdUdBN Zi4t6bMpb1P1JHnjspy/033pJMcWc9lwpLBEVSB5BOwa3ljjw6xVyA+TniAPx3Rf YTEwXflUBwtYbz58SbF8z8JmN1wOQAXX/Oo/x6pSojwVBXyP9o5lGckjJoUskPDR nbcRUo8+ofjETyOTW3wiZ1vPzdrhDye8BWKfVVw2VR5Aw0epW3ACHNvaOdIITDd6 /kYj/aGeEeDGljhvhP+g+cpY8pAc0eUGyEz4oQafj32Bx8uxTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1Y/wcNWgcsdJfHe1TvlBc2gPdsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzlhYzljMzAtYjgwYS0z MmViLWJmY2ItNTUyYmI5ZjEwZmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgvRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoqJNA9NOeIMjVK0koSqpwlyq9wqoLoikAtB82LhAjBRfapesRYdOl8 jWUsCgyuJRxa4CytRRSMYK4jkHt9TiPz3X2DPVthNLSuEa5xn616CoVGQ/Wsv5ig VnjwCYNVFJhy7sEd7sQ9pdTTCEqS8J6V0Y/nDXuiJ+mCRkpJoMltYhWiZ0rGqRPe th2Jz1Q0kRvzu58K/FsRWhh5Nd116hAehDm2oGj6+9ZBOH9PRZ/NnjGxaUje3ede znRNEbMSQ58eFIYtlFAzRMdK07NLqRV8Bg0loxqjvyxG9Nj3SCazOHBZ0IIkk3HE cb9XmpHFc1AsKgI6LLycrIKcapIdXls= -----END CERTIFICATE-----Generated at Tue Oct 13 16:03:26 2026 by rpki-client