$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba82d23e-e34a-3aad-972f-27e59e917e29.roa File: ba82d23e-e34a-3aad-972f-27e59e917e29.roa (raw, json) Hash identifier: 3FsM1FR9rq62cNn42eTeQnEz7e7K1qUaJNBh4u40SZs= Subject key identifier: FB:89:C2:C0:13:F9:85:AF:31:F8:81:12:8D:60:E1:B2:BF:7F:9F:81 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED861D42860D60C2B15EB0C40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba82d23e-e34a-3aad-972f-27e59e917e29.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 71.29.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:d4:28:60:d6:0c:2b:15:eb:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=b2d6daba-b862-4378-8a2c-91c14f1d0c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4f:27:d4:07:01:e1:66:56:20:ff:72:ed:66: 86:a7:a0:a0:37:c3:7f:91:55:66:c9:64:b5:78:8c: 08:bb:ed:ae:7f:e3:e3:16:d1:c1:8c:1e:29:1c:51: ed:e9:83:23:78:15:97:34:ed:65:6a:e7:74:8b:60: 7a:c1:89:cd:78:73:bc:02:92:db:d7:e1:71:1f:40: 86:d7:54:e3:1c:7b:89:e6:aa:6a:04:9a:e1:33:5d: bb:8a:10:c0:7a:81:5c:c1:07:32:d3:4f:b0:64:86: f9:1e:f5:9c:04:83:fd:e8:ae:01:26:f6:5a:78:9d: e8:2e:43:c8:0c:21:27:ad:31:a7:d0:fc:85:bd:ff: 21:07:86:fd:c7:2f:21:a7:97:f7:90:5d:74:42:71: b7:81:5b:4c:b2:45:b3:8a:1d:b8:6e:bc:e2:ba:8d: 04:e8:e5:2b:e8:ea:10:a3:13:63:5b:3b:94:4b:6b: fc:88:16:24:da:43:81:3c:c5:91:fc:34:7d:01:8e: 00:85:03:11:c6:bf:d0:9e:4b:cb:94:b3:7e:f0:0a: 71:bc:8e:1f:32:9b:92:78:20:03:ad:f2:58:4b:28: fe:71:6e:bc:74:a0:ad:92:6c:a9:22:35:0b:f3:8f: 2d:d7:5f:7c:e1:00:9d:b3:58:8e:3c:24:b0:ba:5f: 63:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:89:C2:C0:13:F9:85:AF:31:F8:81:12:8D:60:E1:B2:BF:7F:9F:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba82d23e-e34a-3aad-972f-27e59e917e29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a6:ae:11:5d:38:e9:0e:44:fc:38:8a:7d:15:d3:bd:63:ac: 3b:94:78:da:c0:e4:9e:ab:28:73:13:f1:ce:ce:87:11:6e:ff: 77:47:46:7f:60:2d:bb:63:1f:da:a4:95:78:28:b1:f5:7e:3e: bd:f6:3e:bb:72:fc:58:12:c5:7e:c4:5b:d8:26:64:7f:15:d0: 02:f7:ec:9e:9e:4e:9a:e0:45:a8:7e:53:94:93:4e:44:39:13: fa:f9:83:c9:67:b9:c2:1e:a3:9c:ae:78:5a:13:bb:67:16:30: 2b:bb:72:39:3b:a2:02:cb:1d:19:57:d9:1a:7a:35:af:94:5f: 35:fe:d8:5b:b7:5d:d5:60:b1:a3:1e:1c:2b:84:e4:9e:c4:ab: 64:26:67:21:c9:01:c6:ac:bf:b4:4b:c3:59:e7:da:01:2e:95: 95:07:25:6b:28:a1:ae:13:ae:68:82:c3:20:dc:00:c5:65:e7: b1:75:f9:9b:39:ee:4e:dd:a6:d0:81:a3:1b:b8:2e:22:db:17: 87:28:ff:76:62:8a:e8:fa:7a:69:18:a6:f1:91:8c:06:e1:18: af:68:05:a3:e5:29:69:9c:65:62:dd:89:11:ac:76:e3:5f:87: d7:ca:e4:46:b3:82:a8:c5:74:35:89:80:30:07:40:4f:a1:be: 52:7f:d5:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYdQoYNYMKxXrDEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk YjJkNmRhYmEtYjg2Mi00Mzc4LThhMmMtOTFjMTRmMWQwYzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7E8n1AcB4WZWIP9y7WaGp6CgN8N/kVVmyWS1 eIwIu+2uf+PjFtHBjB4pHFHt6YMjeBWXNO1laud0i2B6wYnNeHO8ApLb1+FxH0CG 11TjHHuJ5qpqBJrhM127ihDAeoFcwQcy00+wZIb5HvWcBIP96K4BJvZaeJ3oLkPI DCEnrTGn0PyFvf8hB4b9xy8hp5f3kF10QnG3gVtMskWzih24brziuo0E6OUr6OoQ oxNjWzuUS2v8iBYk2kOBPMWR/DR9AY4AhQMRxr/QnkvLlLN+8ApxvI4fMpuSeCAD rfJYSyj+cW68dKCtkmypIjUL848t11984QCds1iOPCSwul9jiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuJwsAT+YWvMfiBEo1g4bK/f5+BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmE4MmQyM2UtZTM0YS0z YWFkLTk3MmYtMjdlNTllOTE3ZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx1IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSmrhFdOOkORPw4in0V071jrDuUeNrA5J6rKHMT8c7OhxFu/3dHRn9g LbtjH9qklXgosfV+Pr32Prty/FgSxX7EW9gmZH8V0AL37J6eTprgRah+U5STTkQ5 E/r5g8lnucIeo5yueFoTu2cWMCu7cjk7ogLLHRlX2Rp6Na+UXzX+2Fu3XdVgsaMe HCuE5J7Eq2QmZyHJAcasv7RLw1nn2gEulZUHJWsooa4TrmiCwyDcAMVl57F1+Zs5 7k7dptCBoxu4LiLbF4co/3Ziiuj6emkYpvGRjAbhGK9oBaPlKWmcZWLdiRGsduNf h9fK5EazgqjFdDWJgDAHQE+hvlJ/1ZU= -----END CERTIFICATE-----Generated at Thu Aug 27 15:13:45 2026 by rpki-client