$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba82d23e-e34a-3aad-972f-27e59e917e29.roa File: ba82d23e-e34a-3aad-972f-27e59e917e29.roa (raw, json) Hash identifier: 7EX1Lq1OaeNi/pSt52nR6TuMKO9G6v3vt9opFBO7rbw= Subject key identifier: 88:99:55:B8:B8:DD:CB:19:2A:30:DE:1F:7E:B6:14:93:9B:D6:6B:CC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7A4D82B99C8C0E7068BCBE60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba82d23e-e34a-3aad-972f-27e59e917e29.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 71.29.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:82:b9:9c:8c:0e:70:68:bc:be:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=8ccd12f4-b6ce-4ebe-aaa9-07fdadc28ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c4:c2:d6:ee:95:a8:c7:3e:56:09:67:0b:01: 6d:5c:1a:c2:50:f6:4c:29:d6:19:ca:6d:cb:fb:25: e1:06:1e:c0:45:69:b5:ca:21:71:00:a9:f7:81:7c: 27:8e:17:2a:8b:b8:24:f5:0f:bc:1b:65:09:75:1f: 2c:29:48:8c:53:5d:df:30:31:6e:ca:9f:8e:e8:e1: 03:54:30:8b:f6:51:f0:75:58:6b:37:aa:81:3b:86: ff:92:06:e7:d3:61:b3:d5:56:d0:ef:35:92:a5:f0: c2:8d:59:4a:0e:75:01:e9:83:b7:e8:71:d1:ee:04: 7e:10:b6:f1:48:d0:e3:b8:22:a6:58:9b:a8:3d:a7: fc:e7:37:cc:a0:89:6f:73:3f:90:a8:70:e3:92:71: 79:55:f0:5b:a9:89:e1:47:7c:40:07:5f:95:81:ba: 20:0d:ea:57:0a:62:9c:e2:cf:01:c0:52:4d:ac:6b: eb:7b:9d:26:02:e9:47:91:53:fc:78:4c:5d:35:50: 99:0a:29:03:6f:80:5a:22:97:ad:d6:ca:e9:bb:60: d7:03:23:80:da:de:de:8f:a7:a1:c3:cf:d8:7a:0d: c4:c5:1d:46:d7:d6:54:d2:fb:54:6f:d3:06:83:95: 62:9e:fd:60:87:57:a8:1f:f8:5d:e4:a7:78:10:2b: 85:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:99:55:B8:B8:DD:CB:19:2A:30:DE:1F:7E:B6:14:93:9B:D6:6B:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba82d23e-e34a-3aad-972f-27e59e917e29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:17:24:40:47:a0:f7:9d:27:70:de:97:0d:d2:78:18:3e:67: e8:9e:c5:2b:a1:2c:c0:6a:3c:d4:61:d9:81:44:3f:59:9e:39: b0:ac:bc:af:86:12:e4:56:22:a8:52:4a:a8:2d:70:34:d9:df: 9d:7a:ae:f3:a2:b7:71:e0:3d:e2:f1:87:e7:d6:fd:5a:eb:a5: df:af:c9:bf:18:a3:99:d6:3d:44:57:e6:4a:92:fc:d3:c6:13: 01:50:f1:6b:03:c0:75:17:4d:d9:b4:4f:98:c5:a6:8d:c7:54: 01:71:a1:6d:48:ee:28:df:4d:df:81:0b:65:14:29:80:f9:b1: 32:c3:50:f8:bb:fe:52:b7:9a:46:11:df:74:c5:4c:f3:61:74: db:38:71:fe:60:f9:a5:a7:66:67:7f:e3:a1:6d:3c:03:85:bb: 83:3a:35:3f:14:a6:ed:ec:c1:65:56:80:7f:2c:06:fb:e7:e9: 33:65:94:6e:91:63:9a:d3:28:99:25:50:0f:4e:47:3c:78:48: 71:d8:dc:e0:45:33:f1:09:96:0e:c6:6a:60:39:25:d8:46:be: f1:1c:42:72:22:94:92:6a:50:65:ed:b7:31:d2:b6:cd:56:80: 9e:9f:58:8b:ef:62:9f:8e:1a:48:5e:e4:9a:d3:76:06:ef:90: 56:10:bf:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TYK5nIwOcGi8vmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk OGNjZDEyZjQtYjZjZS00ZWJlLWFhYTktMDdmZGFkYzI4YWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisTC1u6VqMc+VglnCwFtXBrCUPZMKdYZym3L +yXhBh7ARWm1yiFxAKn3gXwnjhcqi7gk9Q+8G2UJdR8sKUiMU13fMDFuyp+O6OED VDCL9lHwdVhrN6qBO4b/kgbn02Gz1VbQ7zWSpfDCjVlKDnUB6YO36HHR7gR+ELbx SNDjuCKmWJuoPaf85zfMoIlvcz+QqHDjknF5VfBbqYnhR3xAB1+VgbogDepXCmKc 4s8BwFJNrGvre50mAulHkVP8eExdNVCZCikDb4BaIpet1srpu2DXAyOA2t7ej6eh w8/Yeg3ExR1G19ZU0vtUb9MGg5Vinv1gh1eoH/hd5Kd4ECuF6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiZVbi43csZKjDeH362FJOb1mvMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmE4MmQyM2UtZTM0YS0z YWFkLTk3MmYtMjdlNTllOTE3ZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx1IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIXJEBHoPedJ3Delw3SeBg+Z+iexSuhLMBqPNRh2YFEP1meObCsvK+G EuRWIqhSSqgtcDTZ3516rvOit3HgPeLxh+fW/Vrrpd+vyb8Yo5nWPURX5kqS/NPG EwFQ8WsDwHUXTdm0T5jFpo3HVAFxoW1I7ijfTd+BC2UUKYD5sTLDUPi7/lK3mkYR 33TFTPNhdNs4cf5g+aWnZmd/46FtPAOFu4M6NT8Upu3swWVWgH8sBvvn6TNllG6R Y5rTKJklUA9ORzx4SHHY3OBFM/EJlg7GamA5JdhGvvEcQnIilJJqUGXttzHSts1W gJ6fWIvvYp+OGkhe5JrTdgbvkFYQv94= -----END CERTIFICATE-----Generated at Tue Oct 13 08:14:18 2026 by rpki-client