$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87d61e5e-efc9-3a8a-9c51-e1c6a34bb183.roa File: 87d61e5e-efc9-3a8a-9c51-e1c6a34bb183.roa (raw, json) Hash identifier: yaTh+Qp1ji2+vPU5aqmbZGyYNlWAwd36gmdoif2gGEA= Subject key identifier: B3:C8:4A:71:17:6C:43:3E:FF:BF:C9:39:1F:F8:24:87:B9:58:07:A3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B4B17E2E3DD91323B108 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87d61e5e-efc9-3a8a-9c51-e1c6a34bb183.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 71.7.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b4:b1:7e:2e:3d:d9:13:23:b1:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=79fa9a23-fc7d-4261-83d7-ab17bdf8136d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b5:fb:fa:53:cd:4c:c0:66:e3:6e:ab:9f:58: a4:36:ee:51:29:04:20:e8:0b:13:5b:d1:4a:03:eb: b2:e9:bf:25:07:6c:bd:34:f5:c6:0c:c8:5e:e7:0b: 4e:5d:d3:ce:e2:44:54:e6:05:ce:f3:71:24:12:fd: 9c:3e:ed:e3:cf:eb:13:5a:30:ff:cd:42:c5:ce:0a: 34:0b:81:25:cb:a0:d3:09:2c:e0:b9:8a:71:d9:68: 81:ed:31:aa:e1:d1:d4:4f:3f:1d:05:91:4d:be:e1: 3b:68:e7:db:6a:df:a6:29:c3:3e:2b:f4:9f:5f:0a: d6:a7:8d:09:63:28:8a:dd:db:df:f0:fb:47:82:43: b1:6a:49:2e:8f:f4:69:a0:f8:01:a3:68:95:35:d5: 1e:06:d7:34:6c:7a:96:48:76:01:30:04:1b:ca:1c: d3:61:52:83:64:af:16:d9:27:86:8e:31:d1:09:87: 2f:71:bf:32:96:e1:55:15:46:83:57:1e:d7:0b:65: 9b:c3:fe:f1:c7:f1:73:c5:0c:a6:7c:b4:f1:57:c9: c5:e8:e1:15:c6:82:96:6f:c1:4b:f8:79:55:59:92: 44:1f:04:f5:8e:10:2f:b0:fc:69:38:4e:d2:4e:8c: 02:cb:4e:ca:82:91:97:05:7b:df:b7:cf:a0:45:d0: 96:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C8:4A:71:17:6C:43:3E:FF:BF:C9:39:1F:F8:24:87:B9:58:07:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87d61e5e-efc9-3a8a-9c51-e1c6a34bb183.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.7.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:6a:a1:39:ac:65:1a:b1:a2:96:8c:7c:64:e6:5c:72:b4:bb: a3:a4:8f:f6:9c:e3:b4:b4:26:4f:97:c7:6f:9c:6a:00:8a:40: d2:3e:0f:06:a9:f6:3b:a8:bc:a4:7e:8d:06:0d:42:7b:c9:d3: ca:1e:3a:ad:55:de:9e:c2:80:b5:44:20:44:d4:45:70:10:09: e5:ef:48:3f:64:40:7d:82:dc:13:c5:f6:2b:35:98:4e:7c:4a: a9:84:bc:0c:13:17:f8:d5:68:6f:39:82:7c:2c:cd:d0:16:2f: d0:63:09:99:f5:ef:fc:5f:86:fd:7a:94:8a:07:e7:b1:8e:6f: 0d:a6:66:81:e6:3a:a3:df:ec:7d:d7:9b:e4:14:ff:29:98:1a: 75:b5:6e:8f:0e:4e:19:a4:d7:55:ee:45:92:90:8f:03:fd:a2: 52:c0:19:a3:1f:db:ea:32:1b:32:b2:0d:18:1d:80:56:74:1d: 72:04:e8:7e:b6:96:3d:0d:78:d4:ea:a5:88:16:0a:71:52:62: 3c:58:ed:52:f5:e0:8f:88:51:56:b4:c9:b2:d3:23:41:dc:71: ca:18:2f:64:17:70:14:ed:86:e0:ad:a2:b7:c3:68:0d:3e:ea: 41:1a:75:e7:b7:15:d2:ca:73:d8:33:11:fe:0f:7e:58:be:fe: 40:04:b6:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rSxfi492RMjsQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk NzlmYTlhMjMtZmM3ZC00MjYxLTgzZDctYWIxN2JkZjgxMzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7X7+lPNTMBm426rn1ikNu5RKQQg6AsTW9FK A+uy6b8lB2y9NPXGDMhe5wtOXdPO4kRU5gXO83EkEv2cPu3jz+sTWjD/zULFzgo0 C4Ely6DTCSzguYpx2WiB7TGq4dHUTz8dBZFNvuE7aOfbat+mKcM+K/SfXwrWp40J YyiK3dvf8PtHgkOxakkuj/RpoPgBo2iVNdUeBtc0bHqWSHYBMAQbyhzTYVKDZK8W 2SeGjjHRCYcvcb8yluFVFUaDVx7XC2Wbw/7xx/FzxQymfLTxV8nF6OEVxoKWb8FL +HlVWZJEHwT1jhAvsPxpOE7STowCy07KgpGXBXvft8+gRdCW/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPISnEXbEM+/7/JOR/4JIe5WAejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODdkNjFlNWUtZWZjOS0z YThhLTljNTEtZTFjNmEzNGJiMTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRwd2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJqoTmsZRqxopaMfGTmXHK0u6Okj/ac47S0Jk+Xx2+cagCKQNI+Dwap 9juovKR+jQYNQnvJ08oeOq1V3p7CgLVEIETURXAQCeXvSD9kQH2C3BPF9is1mE58 SqmEvAwTF/jVaG85gnwszdAWL9BjCZn17/xfhv16lIoH57GObw2mZoHmOqPf7H3X m+QU/ymYGnW1bo8OThmk11XuRZKQjwP9olLAGaMf2+oyGzKyDRgdgFZ0HXIE6H62 lj0NeNTqpYgWCnFSYjxY7VL14I+IUVa0ybLTI0HcccoYL2QXcBTthuCtorfDaA0+ 6kEadee3FdLKc9gzEf4Pfli+/kAEtqk= -----END CERTIFICATE-----Generated at Tue Oct 13 19:26:20 2026 by rpki-client