$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9df77081-57fb-39ce-9dd0-1a902633477f.roa File: 9df77081-57fb-39ce-9dd0-1a902633477f.roa (raw, json) Hash identifier: 2y9DIKs+KzryqztNK9w4te14FCfME0vtnFZSYa4OVdg= Subject key identifier: 83:D4:8F:3F:03:8D:46:ED:28:0E:4A:E0:03:E3:23:F2:31:65:0B:7F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F66C2BCDDE0C16B88D98FE000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9df77081-57fb-39ce-9dd0-1a902633477f.roa Signing time: Mon 05 Oct 2026 13:00:13 +0000 ROA not before: Mon 05 Oct 2026 13:00:13 +0000 ROA not after: Sun 03 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 71.28.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:c2:bc:dd:e0:c1:6b:88:d9:8f:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 5 13:00:13 2026 GMT Not After : Jan 3 14:00:13 2027 GMT Subject: CN=a5c7ed3f-fe6e-462f-bda1-4ffe1a18f735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2a:bf:43:35:7c:45:4d:7c:1d:bc:56:87:a8: b4:dc:0d:f7:4f:5e:ed:01:2a:05:05:1c:18:c2:ba: 34:b4:cc:54:91:28:5e:bd:49:4e:0d:1f:62:2a:61: 11:c5:2b:6d:28:9d:43:77:dd:cf:3f:5d:78:9f:7b: 89:81:f3:95:48:b6:a4:a6:db:57:62:26:c5:69:37: cd:7e:84:e3:8b:3e:e3:6a:a2:8a:d2:99:39:16:b1: 11:47:8b:fe:45:a1:38:c1:f2:8a:35:e1:44:e6:36: 61:96:b5:c6:7b:f2:6c:9c:71:8a:1c:8f:a2:1c:62: 85:91:1b:f5:4d:dc:8b:dd:95:d2:c4:31:c8:92:d3: eb:1a:09:80:d6:85:4e:7f:7a:a1:b5:12:98:b5:b8: 07:db:0b:8b:fd:c9:15:f5:a0:39:46:73:2a:36:c3: 24:e0:2a:83:a6:25:98:9b:d0:d5:7a:e4:0a:73:4d: 73:69:4b:02:ab:99:54:0b:fb:47:41:45:06:ca:14: 39:c3:bc:19:7a:d1:14:75:6e:a4:40:6d:04:07:94: 65:9d:0b:c7:c2:76:1d:d5:c4:fd:10:68:84:9d:6c: 70:20:2d:31:5d:0f:81:a6:4b:08:71:c3:ac:4f:5b: ec:c0:a6:bd:14:9f:13:29:43:0e:c7:17:73:21:0e: 99:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D4:8F:3F:03:8D:46:ED:28:0E:4A:E0:03:E3:23:F2:31:65:0B:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9df77081-57fb-39ce-9dd0-1a902633477f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:57:92:0e:79:97:bc:c9:2c:ee:b9:d5:c2:59:a8:de:62:d1: 8b:7e:32:f4:1d:5b:30:00:7f:49:da:02:c4:98:0a:3a:c2:ac: 94:fd:21:2a:fb:ac:ac:8c:e1:87:57:f5:20:e9:1c:a5:67:5c: b5:51:27:9f:62:89:a5:43:a3:d1:e8:7d:ef:a4:35:24:a8:3d: bc:08:15:54:dd:a2:9c:84:14:68:8b:b1:0a:50:2e:41:d3:dc: 84:31:23:6f:17:e5:db:18:84:f5:26:40:32:5a:78:fd:37:48: c0:39:e1:ad:01:38:66:8c:b4:14:57:e8:9d:b7:0d:42:4d:62: 88:2d:19:3c:d7:c0:83:82:a9:3b:7e:b1:f3:99:0a:bb:09:bd: a4:ac:05:0a:65:f0:c1:29:e2:22:49:fd:ba:01:6d:1d:37:ae: 72:36:2c:56:21:d5:18:f7:79:33:bb:ff:b4:b0:9b:8d:ca:ab: c0:eb:35:3e:15:f2:1d:7b:fd:a2:45:71:9a:ae:0e:c9:73:5c: 58:94:0e:f5:b8:01:54:81:ab:da:88:dc:b1:2f:b0:83:4f:40: 39:80:49:b0:9b:32:3b:a5:31:27:64:9d:80:9d:74:6b:e1:cd: 9c:37:9c:50:da:44:88:44:6f:cd:40:d5:ac:46:6a:40:81:45: 73:2c:e9:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mwrzd4MFriNmP4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk YTVjN2VkM2YtZmU2ZS00NjJmLWJkYTEtNGZmZTFhMThmNzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiq/QzV8RU18HbxWh6i03A33T17tASoFBRwY wro0tMxUkShevUlODR9iKmERxSttKJ1Dd93PP114n3uJgfOVSLakpttXYibFaTfN foTjiz7jaqKK0pk5FrERR4v+RaE4wfKKNeFE5jZhlrXGe/JsnHGKHI+iHGKFkRv1 TdyL3ZXSxDHIktPrGgmA1oVOf3qhtRKYtbgH2wuL/ckV9aA5RnMqNsMk4CqDpiWY m9DVeuQKc01zaUsCq5lUC/tHQUUGyhQ5w7wZetEUdW6kQG0EB5RlnQvHwnYd1cT9 EGiEnWxwIC0xXQ+BpksIccOsT1vswKa9FJ8TKUMOxxdzIQ6ZgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPUjz8DjUbtKA5K4APjI/IxZQt/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWRmNzcwODEtNTdmYi0z OWNlLTlkZDAtMWE5MDI2MzM0NzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxzjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFXkg55l7zJLO651cJZqN5i0Yt+MvQdWzAAf0naAsSYCjrCrJT9ISr7 rKyM4YdX9SDpHKVnXLVRJ59iiaVDo9Hofe+kNSSoPbwIFVTdopyEFGiLsQpQLkHT 3IQxI28X5dsYhPUmQDJaeP03SMA54a0BOGaMtBRX6J23DUJNYogtGTzXwIOCqTt+ sfOZCrsJvaSsBQpl8MEp4iJJ/boBbR03rnI2LFYh1Rj3eTO7/7Swm43Kq8DrNT4V 8h17/aJFcZquDslzXFiUDvW4AVSBq9qI3LEvsINPQDmASbCbMjulMSdknYCddGvh zZw3nFDaRIhEb81A1axGakCBRXMs6VI= -----END CERTIFICATE-----Generated at Tue Oct 13 17:48:22 2026 by rpki-client