$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd2d9f6b-8dbc-3771-8907-99b5e7bf1c0e.roa File: bd2d9f6b-8dbc-3771-8907-99b5e7bf1c0e.roa (raw, json) Hash identifier: ChvKA9nRG7Sr4JhCVzNAfJcPDl+/8IIeAASU/YpPZew= Subject key identifier: 50:96:7C:20:FE:83:A1:71:C8:5F:7B:74:D3:23:98:5C:C0:07:77:C7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAE819D9BAC5699E19C942180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd2d9f6b-8dbc-3771-8907-99b5e7bf1c0e.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 7029 IP address blocks: 71.28.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:9d:9b:ac:56:99:e1:9c:94:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=7c33e095-d5cb-4e4b-967d-06864408d0c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c6:7c:51:8b:57:68:5c:b8:2b:8d:3e:bf:c1: d0:12:a0:2b:10:58:93:42:1d:e4:61:81:21:16:d4: 70:0e:94:a8:e7:c4:9a:ae:44:b2:99:ed:ca:12:8d: a1:3a:d9:00:5f:d6:32:f8:1b:46:7d:b4:21:51:01: 9f:74:e1:97:be:c0:02:98:53:fd:f8:d3:91:fd:8e: 0d:4d:86:dd:fd:a4:76:ce:bc:1b:53:8d:76:04:0f: 8e:f3:51:8a:f2:0e:b6:07:36:52:c8:35:dc:9a:2a: 77:4b:b9:07:90:94:d2:f1:17:3b:c3:9d:34:6f:75: 52:ca:af:64:57:fc:fa:e3:79:33:f8:38:46:eb:ba: 70:de:2e:33:ac:08:d0:c9:2f:62:98:81:38:80:76: d6:18:94:d8:33:24:be:e3:30:2b:a0:39:b5:14:1a: a7:11:ba:18:d6:19:ac:09:32:89:fd:c0:a0:5e:5c: 8f:c9:f5:4e:c9:9b:35:81:74:ca:1c:45:46:5e:df: b0:dd:5d:ef:fa:50:7b:9e:66:28:a9:40:f5:43:c6: 8d:b8:68:1d:0e:43:fb:05:09:6f:c8:4a:b6:44:43: 17:c5:7d:e5:ab:e8:9d:1a:75:5d:a3:3d:69:37:28: a1:fd:8a:ab:89:2d:3e:74:03:74:32:77:ec:d2:1a: 4a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:96:7C:20:FE:83:A1:71:C8:5F:7B:74:D3:23:98:5C:C0:07:77:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd2d9f6b-8dbc-3771-8907-99b5e7bf1c0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:00:d9:ea:2c:87:d4:f8:d5:d5:32:82:7a:0d:a9:75:33:41: d7:4d:c1:28:0e:e3:f2:41:fa:67:38:0e:73:74:c8:69:08:98: cc:5e:a7:aa:51:b6:21:9a:17:da:ab:2f:85:bb:b2:ce:a7:a6: 2e:f9:06:01:ec:1c:24:8d:d2:5c:c5:e0:42:1c:7c:a9:31:28: 5e:74:b7:bc:ea:99:f6:48:ad:73:e9:4e:9d:50:26:bb:f9:4f: 64:51:2d:bc:67:ac:15:63:54:81:25:47:1e:39:20:27:07:f3: 3f:3d:60:1e:19:46:bf:63:78:58:b2:26:b4:28:09:93:36:c3: 96:8d:55:cf:60:8f:11:3b:cd:1f:d8:a5:6b:f9:2f:6c:5a:1a: f7:fc:e8:8f:92:7e:51:63:b4:5a:08:fd:0a:02:8d:4f:5f:24: 7e:64:c8:94:b2:7b:c0:36:35:2a:0e:34:df:0f:33:45:11:e6: 3e:fd:97:cf:c5:a3:e5:4b:9c:32:e3:27:87:bb:5d:c7:52:ee: 32:19:f3:1f:8d:8f:f5:2b:bc:63:44:29:c6:20:fa:f4:56:a7: 3c:9c:73:80:e4:53:f8:2c:3c:b7:ec:b1:a5:14:cb:b8:89:ff: 49:3a:16:72:9f:42:03:aa:f6:10:55:8d:1b:60:e8:06:66:df: 68:b8:0a:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugZ2brFaZ4ZyUIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk N2MzM2UwOTUtZDVjYi00ZTRiLTk2N2QtMDY4NjQ0MDhkMGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsZ8UYtXaFy4K40+v8HQEqArEFiTQh3kYYEh FtRwDpSo58SarkSyme3KEo2hOtkAX9Yy+BtGfbQhUQGfdOGXvsACmFP9+NOR/Y4N TYbd/aR2zrwbU412BA+O81GK8g62BzZSyDXcmip3S7kHkJTS8Rc7w500b3VSyq9k V/z643kz+DhG67pw3i4zrAjQyS9imIE4gHbWGJTYMyS+4zAroDm1FBqnEboY1hms CTKJ/cCgXlyPyfVOyZs1gXTKHEVGXt+w3V3v+lB7nmYoqUD1Q8aNuGgdDkP7BQlv yEq2REMXxX3lq+idGnVdoz1pNyih/YqriS0+dAN0Mnfs0hpK1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCWfCD+g6FxyF97dNMjmFzAB3fHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmQyZDlmNmItOGRiYy0z NzcxLTg5MDctOTliNWU3YmYxYzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIA2eosh9T41dUygnoNqXUzQddNwSgO4/JB+mc4DnN0yGkImMxep6pR tiGaF9qrL4W7ss6npi75BgHsHCSN0lzF4EIcfKkxKF50t7zqmfZIrXPpTp1QJrv5 T2RRLbxnrBVjVIElRx45ICcH8z89YB4ZRr9jeFiyJrQoCZM2w5aNVc9gjxE7zR/Y pWv5L2xaGvf86I+SflFjtFoI/QoCjU9fJH5kyJSye8A2NSoONN8PM0UR5j79l8/F o+VLnDLjJ4e7XcdS7jIZ8x+Nj/UrvGNEKcYg+vRWpzycc4DkU/gsPLfssaUUy7iJ /0k6FnKfQgOq9hBVjRtg6AZm32i4Cvg= -----END CERTIFICATE-----Generated at Thu Aug 27 10:29:05 2026 by rpki-client