$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ae78b85-0310-3d0b-ae8c-250eaf19caa3.roa File: 9ae78b85-0310-3d0b-ae8c-250eaf19caa3.roa (raw, json) Hash identifier: 1r1FRX6qiFZAcBmaG6acUilxUuDz5MJD5Wq9fkwvOq8= Subject key identifier: C2:D8:13:71:5C:B0:17:15:D0:66:41:68:36:1A:73:99:A3:64:7B:DA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584CA5F73FBBCB82BB827C6D8580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ae78b85-0310-3d0b-ae8c-250eaf19caa3.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 7029 IP address blocks: 71.29.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:3f:bb:cb:82:bb:82:7c:6d:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=e847b8c5-978a-49f5-8a5c-7b9ed23507b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:10:8b:4e:6a:a6:a5:c6:6a:20:2d:40:8c:2d: 3b:de:69:a1:b5:bc:d0:b6:fa:52:d4:9c:dc:5e:43: 56:cd:b1:09:73:03:3e:a1:ff:b3:22:eb:68:fe:7f: be:f8:40:f2:6b:bf:9d:cc:ca:60:fa:d8:e1:14:46: 18:c2:d6:6c:67:fa:53:d2:82:4d:17:4d:85:96:2a: fc:30:2d:8c:92:ec:74:3e:e2:8d:4f:65:40:44:f0: d3:dc:be:1e:10:0f:dc:e5:c2:ee:31:ab:ca:8c:e0: c0:00:80:e2:19:c7:88:2f:d4:5c:48:2b:82:5c:1e: 3c:25:cb:04:a2:df:5e:67:71:da:fb:95:0d:9c:bd: de:68:8b:c8:a4:12:24:c4:2b:1b:2c:9c:52:ea:fa: 5e:10:a1:4b:ce:84:58:56:55:05:76:19:d0:9b:24: 7d:14:f6:7d:3e:04:c8:9a:c5:7c:8b:2b:86:f9:15: 6e:7d:a2:da:ef:63:6f:72:01:44:e1:ce:27:81:02: b4:a2:08:32:72:a2:41:c0:fd:4b:97:39:9f:b7:d2: ec:39:3d:e1:6c:2e:68:b8:07:5a:c8:0b:2f:6b:09: b9:62:ed:38:8d:f5:ee:d6:63:c5:51:ab:1e:a6:30: 28:c0:51:49:e3:8a:66:27:3e:86:b0:13:08:2b:4f: df:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D8:13:71:5C:B0:17:15:D0:66:41:68:36:1A:73:99:A3:64:7B:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ae78b85-0310-3d0b-ae8c-250eaf19caa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e5:78:a3:4f:fc:25:83:7d:bd:aa:3d:a7:80:53:2e:88:c8: b4:6b:f7:d8:3d:3c:72:8b:27:0b:3a:56:9f:f2:1b:4f:3c:bf: 9f:aa:7d:99:88:ba:30:c9:60:b8:6a:22:f2:21:2c:b5:72:02: 78:da:8a:89:0d:a1:83:9a:49:d2:1a:45:63:4f:6c:71:9f:52: 46:53:ba:c5:73:f4:f4:fc:4c:94:ae:6d:59:5f:9f:6e:07:41: 92:e4:9a:dd:53:7e:22:35:b2:bc:1d:fc:65:da:79:cc:21:b8: 78:1e:6a:ec:76:38:7c:4b:17:41:9f:1d:47:ef:77:eb:f0:52: 2a:c9:a6:82:b6:03:97:83:c7:00:42:d0:f6:19:e2:fc:11:d0: d3:db:88:ed:46:3a:09:10:8c:88:20:ab:b2:65:25:fc:57:b2: f0:23:46:c5:82:99:34:f8:64:e9:07:14:69:8c:3a:8d:a7:13: 0c:71:13:ec:a0:7e:4a:e9:e4:11:a2:75:29:c8:1a:9f:f0:15: 2f:66:0f:a6:68:f6:76:83:52:27:bd:2e:c3:16:cf:6a:15:08: 44:74:a4:e4:9e:e8:36:c0:4d:af:45:59:1b:1e:34:06:26:52: 74:8b:be:d2:a7:89:25:de:49:5c:4e:ed:b5:81:d3:12:4b:97: 8f:03:91:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9z+7y4K7gnxthYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk ZTg0N2I4YzUtOTc4YS00OWY1LThhNWMtN2I5ZWQyMzUwN2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphCLTmqmpcZqIC1AjC073mmhtbzQtvpS1Jzc XkNWzbEJcwM+of+zIuto/n+++EDya7+dzMpg+tjhFEYYwtZsZ/pT0oJNF02Flir8 MC2Mkux0PuKNT2VARPDT3L4eEA/c5cLuMavKjODAAIDiGceIL9RcSCuCXB48JcsE ot9eZ3Ha+5UNnL3eaIvIpBIkxCsbLJxS6vpeEKFLzoRYVlUFdhnQmyR9FPZ9PgTI msV8iyuG+RVufaLa72NvcgFE4c4ngQK0oggycqJBwP1Llzmft9LsOT3hbC5ouAda yAsvawm5Yu04jfXu1mPFUasepjAowFFJ44pmJz6GsBMIK0/fOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLYE3FcsBcV0GZBaDYac5mjZHvaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWFlNzhiODUtMDMxMC0z ZDBiLWFlOGMtMjUwZWFmMTljYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx30MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHleKNP/CWDfb2qPaeAUy6IyLRr99g9PHKLJws6Vp/yG088v5+qfZmI ujDJYLhqIvIhLLVyAnjaiokNoYOaSdIaRWNPbHGfUkZTusVz9PT8TJSubVlfn24H QZLkmt1TfiI1srwd/GXaecwhuHgeaux2OHxLF0GfHUfvd+vwUirJpoK2A5eDxwBC 0PYZ4vwR0NPbiO1GOgkQjIggq7JlJfxXsvAjRsWCmTT4ZOkHFGmMOo2nEwxxE+yg fkrp5BGidSnIGp/wFS9mD6Zo9naDUie9LsMWz2oVCER0pOSe6DbATa9FWRseNAYm UnSLvtKniSXeSVxO7bWB0xJLl48DkVA= -----END CERTIFICATE-----Generated at Thu Feb 26 06:31:39 2026 by rpki-client