$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3b2d476-53cc-3baa-a6a2-55359bb26138.roa File: a3b2d476-53cc-3baa-a6a2-55359bb26138.roa (raw, json) Hash identifier: rmxniAzRgwyBX0IjwotslShXerYf6eqJ8f5QYCxRcW4= Subject key identifier: 36:34:97:0C:DF:EA:DD:4C:EA:DB:7D:4B:80:A1:B4:56:3A:39:F5:EF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F77832425821943CD3FE23340 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3b2d476-53cc-3baa-a6a2-55359bb26138.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 71.7.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:24:25:82:19:43:cd:3f:e2:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=8fed6257-95aa-4cf2-8c07-90d6efee2e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8d:c3:b4:50:cb:fd:25:b6:2e:9f:cf:f9:d2: 06:fc:18:c6:42:82:3c:da:2e:4b:1b:4f:95:bb:2f: 6d:b8:3b:f6:db:0f:21:19:d7:11:5c:6f:cf:26:15: 28:c0:82:2b:32:07:be:e3:07:bb:8d:47:49:6d:38: 8e:bd:33:4b:36:63:01:e3:96:eb:f2:50:6d:48:ec: 0e:45:66:d5:2d:74:02:f5:ff:81:a2:a0:1d:62:4f: f1:a8:93:3c:29:98:1d:60:73:18:99:2d:cc:74:f1: 89:41:96:81:7a:87:eb:cf:8f:d4:78:cc:d1:d0:d8: f5:e3:81:e2:24:24:e3:73:46:dc:7f:db:f1:64:c0: a1:4f:e1:6b:e5:1e:dd:ea:09:a1:d8:c4:8c:d8:e1: 28:73:44:0b:0a:af:d6:d0:92:e7:96:59:f0:06:25: 2b:9a:de:d2:f3:d0:36:4d:b3:6c:b4:e6:ef:c9:ac: a6:b4:4e:9b:d7:1e:35:0d:95:64:e2:49:c6:bb:9b: 5b:8a:15:33:61:8f:43:09:f9:1f:01:8b:26:e4:b4: 1a:98:01:0c:66:e5:91:eb:4f:6b:59:87:57:00:0a: 89:01:8d:c1:df:da:24:98:5e:5a:17:bd:ea:b2:10: df:e5:dd:7d:a8:97:2e:be:da:e7:84:d5:bc:b0:ab: 65:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:34:97:0C:DF:EA:DD:4C:EA:DB:7D:4B:80:A1:B4:56:3A:39:F5:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3b2d476-53cc-3baa-a6a2-55359bb26138.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.7.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:a7:cc:16:30:21:b0:d0:df:ea:f4:53:98:8c:2b:43:bb:57: 81:3c:69:7e:e4:37:dd:e7:c6:d8:86:c7:c7:7e:a6:95:ab:8a: f5:63:08:6d:7e:47:1e:c3:a1:26:d1:a3:3e:5e:c2:39:97:62: c4:22:76:4a:0c:1a:9c:08:47:bf:21:0f:1a:33:b5:ad:f1:ce: 70:9a:b1:4c:f2:77:c0:4c:b4:34:59:bb:db:2a:1b:98:69:c4: 58:96:41:2d:1c:79:a5:ae:06:cf:62:fc:55:fc:4b:be:aa:da: a7:87:58:a5:61:08:43:e7:cb:c7:e3:db:29:2b:b1:73:07:90: 90:5f:a8:20:7d:b8:e3:14:14:4c:eb:23:da:63:5d:36:0f:f8: 9b:9f:a5:5b:3a:06:b1:52:97:dd:76:1d:6c:fa:c9:60:ff:9a: e2:ac:66:9f:2b:19:49:76:63:67:73:ae:fb:e9:2e:f1:c7:b5: 46:a3:b0:18:b7:72:dc:97:d9:0d:c3:00:49:b6:3b:9d:31:81: 3c:23:02:ef:ab:2c:36:97:8e:79:74:74:ae:ed:31:11:ed:79: 6a:9a:f8:d9:4a:b2:10:25:0e:75:b2:78:33:a4:24:59:6e:5d: 1f:a9:0d:63:e9:79:27:28:ff:27:f1:e3:cc:a5:1c:57:43:e9: 3b:a3:7b:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gyQlghlDzT/iM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk OGZlZDYyNTctOTVhYS00Y2YyLThjMDctOTBkNmVmZWUyZTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo3DtFDL/SW2Lp/P+dIG/BjGQoI82i5LG0+V uy9tuDv22w8hGdcRXG/PJhUowIIrMge+4we7jUdJbTiOvTNLNmMB45br8lBtSOwO RWbVLXQC9f+BoqAdYk/xqJM8KZgdYHMYmS3MdPGJQZaBeofrz4/UeMzR0Nj144Hi JCTjc0bcf9vxZMChT+Fr5R7d6gmh2MSM2OEoc0QLCq/W0JLnllnwBiUrmt7S89A2 TbNstObvyaymtE6b1x41DZVk4knGu5tbihUzYY9DCfkfAYsm5LQamAEMZuWR609r WYdXAAqJAY3B39okmF5aF73qshDf5d19qJcuvtrnhNW8sKtldQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDY0lwzf6t1M6tt9S4ChtFY6OfXvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTNiMmQ0NzYtNTNjYy0z YmFhLWE2YTItNTUzNTliYjI2MTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRwcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmnzBYwIbDQ3+r0U5iMK0O7V4E8aX7kN93nxtiGx8d+ppWrivVjCG1+ Rx7DoSbRoz5ewjmXYsQidkoMGpwIR78hDxozta3xznCasUzyd8BMtDRZu9sqG5hp xFiWQS0ceaWuBs9i/FX8S76q2qeHWKVhCEPny8fj2ykrsXMHkJBfqCB9uOMUFEzr I9pjXTYP+JufpVs6BrFSl912HWz6yWD/muKsZp8rGUl2Y2dzrvvpLvHHtUajsBi3 ctyX2Q3DAEm2O50xgTwjAu+rLDaXjnl0dK7tMRHteWqa+NlKshAlDnWyeDOkJFlu XR+pDWPpeSco/yfx48ylHFdD6Tuje5U= -----END CERTIFICATE-----Generated at Tue Oct 13 06:20:43 2026 by rpki-client