$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ae78b85-0310-3d0b-ae8c-250eaf19caa3.roa File: 9ae78b85-0310-3d0b-ae8c-250eaf19caa3.roa (raw, json) Hash identifier: LvazlIxwJc2/8uWV38mQv5C9Y+sTjRenCKD03APnOWA= Subject key identifier: 64:6B:E4:BC:6D:7E:4D:4E:ED:DA:51:E6:C9:B6:F3:BB:35:A1:AE:C9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E66DA39D3CF28CC2397A1A580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ae78b85-0310-3d0b-ae8c-250eaf19caa3.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 7029 IP address blocks: 71.29.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:39:d3:cf:28:cc:23:97:a1:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=8c600e0f-4f57-4ca4-b536-23e38b2ac4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:64:22:e2:29:6f:19:1c:b1:65:55:72:e8:48: 3d:27:11:a6:6e:78:a9:1e:20:1a:37:9e:b3:8c:a5: 30:6a:c7:86:72:56:6d:36:28:ef:c5:7d:61:46:68: 17:b9:57:0f:2d:33:6b:5c:6c:63:be:5a:c4:e2:33: 5d:a3:7c:bf:8e:3a:40:f4:62:a5:75:58:10:68:0a: 9b:c1:8f:fa:a6:02:21:82:41:79:c2:ce:10:99:50: 11:7e:45:16:41:08:f1:73:33:51:ca:67:52:97:6e: 99:bd:ce:4d:78:07:b7:e0:b1:db:58:91:21:3a:fc: 01:ba:43:13:91:f9:4e:07:00:79:9e:df:e3:06:5f: 36:88:1d:5f:7d:a9:65:61:44:f2:d2:5e:0c:dd:9d: e0:d1:fd:2f:e7:e8:6a:b1:9c:04:bb:1a:cd:05:bc: 1a:92:88:d9:55:b1:e9:11:7c:c6:73:2b:74:94:e7: 81:6e:63:e3:02:da:47:2c:a8:cb:77:64:8e:f8:58: d0:ef:04:0f:00:cd:4b:29:87:a8:19:89:67:be:c8: 92:60:5d:ff:fa:90:d5:03:e9:e7:a5:4c:79:47:d5: 1b:00:77:a4:cb:7f:ce:4a:94:8f:a5:75:63:6e:55: 85:be:b8:94:e7:7b:10:ae:82:8a:18:ef:1b:2b:78: 62:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6B:E4:BC:6D:7E:4D:4E:ED:DA:51:E6:C9:B6:F3:BB:35:A1:AE:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ae78b85-0310-3d0b-ae8c-250eaf19caa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:7f:8b:57:c1:2f:bf:9e:98:7a:16:64:4d:a1:9a:01:47:cc: 0e:2f:81:68:ed:94:c9:1b:02:72:0b:ba:ec:2d:7a:c3:b3:6a: 07:06:c1:bd:ed:29:31:58:8e:16:5f:36:3e:ac:9a:f9:ae:57: b2:fe:49:53:a2:22:5b:6f:7d:a6:06:14:2c:aa:86:aa:83:df: 74:ff:a4:96:89:d8:1f:e8:b7:3b:b4:6e:05:a3:39:cb:8c:4f: 5c:0a:82:ca:b0:59:1e:80:74:f3:84:5b:8b:cb:d4:a2:79:2f: 20:10:93:54:6f:fe:53:7f:b4:f5:9d:c4:51:18:db:08:fe:ab: ff:36:39:55:5c:13:af:c5:6c:e7:b2:9b:a0:8d:07:bf:68:11: 5c:e4:8d:15:6a:08:8e:31:63:61:75:c1:8b:29:3f:16:df:57: 01:a6:b1:0c:59:39:e6:c4:c1:62:55:fc:c2:5a:aa:d0:73:e2: a8:90:5e:e7:db:93:ad:bb:ee:29:c8:ac:72:77:9f:c0:d3:08: f1:d4:25:f1:78:ce:7b:fd:8d:b0:62:91:ea:df:64:c2:24:e4: 0a:c9:ad:d5:20:5c:e3:9b:f0:8d:6e:8f:06:9d:25:92:8b:0a: bc:31:3a:ca:40:c1:6c:ac:8b:b5:b3:0f:19:8f:c2:87:7d:ac: 3f:59:bf:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2jnTzyjMI5ehpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk OGM2MDBlMGYtNGY1Ny00Y2E0LWI1MzYtMjNlMzhiMmFjNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmQi4ilvGRyxZVVy6Eg9JxGmbnipHiAaN56z jKUwaseGclZtNijvxX1hRmgXuVcPLTNrXGxjvlrE4jNdo3y/jjpA9GKldVgQaAqb wY/6pgIhgkF5ws4QmVARfkUWQQjxczNRymdSl26Zvc5NeAe34LHbWJEhOvwBukMT kflOBwB5nt/jBl82iB1ffallYUTy0l4M3Z3g0f0v5+hqsZwEuxrNBbwakojZVbHp EXzGcyt0lOeBbmPjAtpHLKjLd2SO+FjQ7wQPAM1LKYeoGYlnvsiSYF3/+pDVA+nn pUx5R9UbAHeky3/OSpSPpXVjblWFvriU53sQroKKGO8bK3hiHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRr5Lxtfk1O7dpR5sm287s1oa7JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWFlNzhiODUtMDMxMC0z ZDBiLWFlOGMtMjUwZWFmMTljYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx30MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACh/i1fBL7+emHoWZE2hmgFHzA4vgWjtlMkbAnILuuwtesOzagcGwb3t KTFYjhZfNj6smvmuV7L+SVOiIltvfaYGFCyqhqqD33T/pJaJ2B/otzu0bgWjOcuM T1wKgsqwWR6AdPOEW4vL1KJ5LyAQk1Rv/lN/tPWdxFEY2wj+q/82OVVcE6/FbOey m6CNB79oEVzkjRVqCI4xY2F1wYspPxbfVwGmsQxZOebEwWJV/MJaqtBz4qiQXufb k6277inIrHJ3n8DTCPHUJfF4znv9jbBikerfZMIk5ArJrdUgXOOb8I1ujwadJZKL CrwxOspAwWysi7WzDxmPwod9rD9Zv/c= -----END CERTIFICATE-----Generated at Mon Jul 13 05:53:57 2026 by rpki-client