$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3334c8f-3a03-37dd-af86-ce48ec5bf8a3.roa File: a3334c8f-3a03-37dd-af86-ce48ec5bf8a3.roa (raw, json) Hash identifier: Iu1gipDTPF2xCGDbwle/fqkabbbzUH5SMo4RPJi61xg= Subject key identifier: 08:EB:A0:E5:22:85:5C:7A:01:D3:2C:55:0B:88:F3:90:2B:CE:44:0C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED86485E845F9B1458E96C880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3334c8f-3a03-37dd-af86-ce48ec5bf8a3.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 71.28.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:64:85:e8:45:f9:b1:45:8e:96:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=0e2e7f4e-80cf-4a2a-869b-9e309144fe9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:21:93:da:20:34:d6:11:9f:08:31:cc:fa:81: 18:c1:16:25:04:ac:d4:36:fa:1b:d1:0b:e7:e2:b1: fd:e6:39:72:f8:d0:c6:3d:2a:d5:3d:40:23:ed:eb: cf:ad:11:1d:35:20:2c:9c:21:19:fd:5d:e6:36:be: a6:31:04:c8:61:ad:f5:43:df:f4:0e:cf:2d:ba:c1: b9:ce:63:73:1a:8c:10:ed:da:ab:ec:c4:cd:15:7c: e0:55:b8:7d:26:0d:6f:05:d7:18:37:c1:98:fe:6b: 31:b4:4d:b5:68:84:8b:60:2d:2e:e3:71:8b:c8:ee: 33:50:60:3c:b5:c6:70:a4:bd:86:25:00:51:18:62: 74:29:db:0e:f8:91:a4:c8:ca:f9:a0:6a:9d:f3:03: 11:c8:0f:ce:52:66:d7:25:6d:76:2c:00:d7:0e:25: ef:26:2a:cb:d9:bb:5b:ea:a6:e8:f6:b8:a5:10:9a: 6f:ee:e4:40:aa:21:ac:3d:e2:a4:06:b1:55:4a:79: 0c:ff:f8:cd:88:4c:7d:4a:31:81:2c:30:6f:78:d7: cc:bc:95:6d:26:01:04:8f:05:5f:43:83:34:86:48: c2:c7:bf:22:54:18:61:79:c6:53:88:3f:0b:09:f1: 68:65:c6:a2:3c:df:0f:72:66:c2:ec:d8:2d:af:71: 44:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:EB:A0:E5:22:85:5C:7A:01:D3:2C:55:0B:88:F3:90:2B:CE:44:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3334c8f-3a03-37dd-af86-ce48ec5bf8a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:44:bc:58:36:f4:8b:87:24:ff:87:0d:3a:a5:75:7a:77:ef: f8:44:f6:f4:a7:98:7c:64:0e:10:46:3c:c7:77:5f:86:cf:ca: 07:14:e4:45:fc:77:93:a8:83:5b:7b:e2:35:89:32:14:b1:52: f1:a5:e6:62:bd:2f:cc:3f:ae:39:4a:6d:22:4d:e9:5b:fb:56: cb:b3:4b:1c:76:25:12:e5:28:06:26:a4:88:0c:44:c6:d1:c6: 77:7c:4f:9d:6e:16:eb:c9:69:96:46:b0:fd:7e:ba:fb:0c:7b: b4:14:9c:e2:33:a4:0a:65:7b:ab:0b:f1:a3:17:9e:35:d5:5b: 9b:bc:3e:59:ab:06:53:b5:d4:30:4f:20:d8:8c:ea:3a:0e:1e: 00:4f:86:e3:a0:0b:e2:c3:9d:d5:d5:f7:45:47:8c:fc:04:da: 9e:08:d6:e1:30:70:19:51:22:f6:3d:a8:6d:b3:61:b2:37:83: 71:ac:ac:e4:ec:51:3c:db:ef:ba:53:d8:dc:49:45:94:07:3c: 04:ba:67:b9:30:17:9f:5b:a9:e9:ed:87:c3:52:d8:40:7b:03: 79:b8:e5:28:2a:8c:c8:06:dc:f4:6c:9e:e2:a8:8c:74:f1:57: ed:90:f9:6d:74:9c:55:c4:f4:1c:90:27:3b:c4:e7:55:62:03: 07:e3:3b:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YZIXoRfmxRY6WyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MGUyZTdmNGUtODBjZi00YTJhLTg2OWItOWUzMDkxNDRmZTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySGT2iA01hGfCDHM+oEYwRYlBKzUNvob0Qvn 4rH95jly+NDGPSrVPUAj7evPrREdNSAsnCEZ/V3mNr6mMQTIYa31Q9/0Ds8tusG5 zmNzGowQ7dqr7MTNFXzgVbh9Jg1vBdcYN8GY/msxtE21aISLYC0u43GLyO4zUGA8 tcZwpL2GJQBRGGJ0KdsO+JGkyMr5oGqd8wMRyA/OUmbXJW12LADXDiXvJirL2btb 6qbo9rilEJpv7uRAqiGsPeKkBrFVSnkM//jNiEx9SjGBLDBveNfMvJVtJgEEjwVf Q4M0hkjCx78iVBhhecZTiD8LCfFoZcaiPN8PcmbC7Ngtr3FEKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjroOUihVx6AdMsVQuI85ArzkQMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTMzMzRjOGYtM2EwMy0z N2RkLWFmODYtY2U0OGVjNWJmOGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRxzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNEvFg29IuHJP+HDTqldXp37/hE9vSnmHxkDhBGPMd3X4bPygcU5EX8 d5Oog1t74jWJMhSxUvGl5mK9L8w/rjlKbSJN6Vv7VsuzSxx2JRLlKAYmpIgMRMbR xnd8T51uFuvJaZZGsP1+uvsMe7QUnOIzpAple6sL8aMXnjXVW5u8PlmrBlO11DBP INiM6joOHgBPhuOgC+LDndXV90VHjPwE2p4I1uEwcBlRIvY9qG2zYbI3g3GsrOTs UTzb77pT2NxJRZQHPAS6Z7kwF59bqenth8NS2EB7A3m45SgqjMgG3PRsnuKojHTx V+2Q+W10nFXE9ByQJzvE51ViAwfjO9U= -----END CERTIFICATE-----Generated at Thu Aug 27 16:00:47 2026 by rpki-client