$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b432e27-f978-3a71-b9d3-3a44510323be.roa File: 8b432e27-f978-3a71-b9d3-3a44510323be.roa (raw, json) Hash identifier: 5p3iir87OSoSx3o3D/AW9I7mN1aOSRqzZqSsp0alJCo= Subject key identifier: 32:FE:BB:B9:80:29:C1:8B:0B:F7:3B:B4:5B:B7:7D:00:B8:0E:CD:88 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA788A176B57E3137AC6E8EC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b432e27-f978-3a71-b9d3-3a44510323be.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 71.29.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:a1:76:b5:7e:31:37:ac:6e:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b0bef859-ac96-4575-9ae2-6167887b293f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:66:b8:07:11:57:e2:cd:05:ef:51:d3:e2:cf: 8f:a4:21:0d:95:2b:e0:c6:cf:53:40:fb:94:24:72: 80:85:fa:da:19:72:50:f5:1a:03:f6:49:1f:7f:ef: f7:4f:b1:41:96:0b:23:2f:70:46:cc:51:bc:4a:ca: 91:4d:3d:74:21:13:7b:a3:fb:ec:8b:f2:17:35:8e: 7f:bb:20:be:d1:85:8a:a4:e2:7d:df:50:f4:73:fe: 5d:cc:14:1c:82:28:a9:21:63:6a:c2:c9:1a:ff:6e: 72:53:b9:af:cb:b0:26:5f:cc:16:49:9c:6b:83:e3: 97:df:85:5c:2c:60:38:20:72:56:09:69:54:33:9c: c4:eb:30:d1:dd:d2:fe:a6:b8:2b:7f:07:b2:c7:06: 1c:85:96:78:59:b9:db:ae:ea:4a:0e:40:39:d8:c1: 8b:90:fd:05:d5:15:16:1c:95:ad:ee:e6:43:66:e5: 60:fa:37:22:9e:91:96:7b:3f:e7:ed:ed:08:ed:97: d2:ad:33:2b:c7:ea:de:3d:b2:ca:76:8e:4b:57:e1: 51:ac:12:48:ed:06:f9:85:71:ce:99:f4:4a:6d:98: a8:5c:2c:a0:05:ce:35:cf:01:f8:e1:a1:16:43:53: bc:e3:b9:91:91:42:aa:b6:da:cf:f5:cd:67:87:fd: 87:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FE:BB:B9:80:29:C1:8B:0B:F7:3B:B4:5B:B7:7D:00:B8:0E:CD:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b432e27-f978-3a71-b9d3-3a44510323be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c8:f3:81:59:03:d6:33:af:0f:6c:f5:b8:a9:4b:cb:ea:2a: e7:ab:6e:16:dc:bb:9e:cf:58:50:fa:bd:7b:4b:31:5e:58:d5: 5c:58:30:9f:6f:23:c8:c2:59:37:08:52:45:e7:62:16:bb:40: 1e:31:b7:20:5f:07:74:3c:9d:bd:fd:a0:09:a1:77:f1:11:af: 20:bd:5f:39:08:ae:6c:58:c1:aa:8c:4c:8c:3d:6e:0b:af:1b: d7:8a:16:99:8d:39:22:38:8d:cb:77:3c:74:d0:2f:38:e4:0a: 94:13:0c:33:5a:06:01:38:ee:7a:5c:cd:28:f6:f8:3d:00:be: 62:56:52:1f:fb:c8:a7:25:85:ce:38:ab:b2:2b:a4:5d:68:98: f1:85:85:88:c2:36:c9:c0:af:51:3b:bf:30:74:ea:8a:48:83: 50:75:29:8e:22:55:c8:96:67:e3:87:a1:9d:df:2a:02:3c:18: c2:87:ac:0f:f4:22:02:30:e9:33:a5:d2:8c:15:b2:5e:f1:2e: 96:06:00:fb:34:d5:0a:b8:e3:5f:14:7a:79:11:4f:28:76:a5: c2:87:97:76:25:05:f4:8f:f6:6b:d3:78:a6:4d:73:ee:e7:52: 05:2f:45:1a:10:8f:1a:4f:55:80:ab:e3:57:92:b5:a0:38:e9: d8:82:f2:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niKF2tX4xN6xujsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjBiZWY4NTktYWM5Ni00NTc1LTlhZTItNjE2Nzg4N2IyOTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWa4BxFX4s0F71HT4s+PpCENlSvgxs9TQPuU JHKAhfraGXJQ9RoD9kkff+/3T7FBlgsjL3BGzFG8SsqRTT10IRN7o/vsi/IXNY5/ uyC+0YWKpOJ931D0c/5dzBQcgiipIWNqwska/25yU7mvy7AmX8wWSZxrg+OX34Vc LGA4IHJWCWlUM5zE6zDR3dL+prgrfweyxwYchZZ4WbnbrupKDkA52MGLkP0F1RUW HJWt7uZDZuVg+jcinpGWez/n7e0I7ZfSrTMrx+rePbLKdo5LV+FRrBJI7Qb5hXHO mfRKbZioXCygBc41zwH44aEWQ1O847mRkUKqttrP9c1nh/2HXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDL+u7mAKcGLC/c7tFu3fQC4Ds2IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGI0MzJlMjctZjk3OC0z YTcxLWI5ZDMtM2E0NDUxMDMyM2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx2UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbI84FZA9Yzrw9s9bipS8vqKuerbhbcu57PWFD6vXtLMV5Y1VxYMJ9v I8jCWTcIUkXnYha7QB4xtyBfB3Q8nb39oAmhd/ERryC9XzkIrmxYwaqMTIw9bguv G9eKFpmNOSI4jct3PHTQLzjkCpQTDDNaBgE47npczSj2+D0AvmJWUh/7yKclhc44 q7IrpF1omPGFhYjCNsnAr1E7vzB06opIg1B1KY4iVciWZ+OHoZ3fKgI8GMKHrA/0 IgIw6TOl0owVsl7xLpYGAPs01Qq4418UenkRTyh2pcKHl3YlBfSP9mvTeKZNc+7n UgUvRRoQjxpPVYCr41eStaA46diC8jw= -----END CERTIFICATE-----Generated at Thu Aug 27 09:50:13 2026 by rpki-client