$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca70b4e1-b5c3-3a21-bc83-13c3f690ea82.roa File: ca70b4e1-b5c3-3a21-bc83-13c3f690ea82.roa (raw, json) Hash identifier: X1IQ+0bYnxGOurnto/k6yFLQJad875QNAVTtEdLbf5o= Subject key identifier: F5:D7:53:E6:BB:0C:37:91:14:42:4D:EB:DB:15:F9:79:99:00:08:A4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F4F0823F6D28187F1ED761000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca70b4e1-b5c3-3a21-bc83-13c3f690ea82.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 71.30.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:23:f6:d2:81:87:f1:ed:76:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=d6145340-392f-465b-a464-5ec1b49e1acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:61:36:87:bb:ff:12:51:02:d9:83:63:bc:96: 3d:b0:6e:76:71:c9:9a:e9:5e:63:90:20:88:06:75: 8b:af:0a:80:22:42:70:6f:fc:8e:cb:2a:a5:8a:12: df:1a:ff:77:c3:71:fb:41:f6:83:78:c0:cf:77:83: f9:9c:ed:ce:1e:2c:a6:53:69:d5:00:3a:4b:f9:9b: 31:7d:a1:f8:9e:0c:36:e5:eb:9a:f7:e6:1f:6d:94: a0:3d:3b:20:a7:14:df:63:ed:2a:50:41:7c:44:9c: 2e:ca:05:b3:86:b7:e2:6d:47:1b:41:3d:11:57:33: a4:35:35:39:85:4b:67:69:57:18:15:6c:a8:3d:a4: c9:3d:d7:cd:bf:0b:58:22:43:18:54:a2:f1:6e:7f: 34:47:38:7b:9c:ae:c2:2c:23:75:25:b4:a5:5b:cf: 3d:94:2d:50:62:76:be:24:98:7b:4b:a8:b3:c3:e5: 47:ae:fa:42:04:23:f8:a6:e4:10:24:69:11:32:e0: 6f:c0:a4:4a:d7:ad:fe:63:7c:b6:35:1b:b8:40:e5: 33:e8:70:f7:44:8d:94:bf:c6:be:42:19:3a:de:d0: af:e1:15:21:c0:96:4e:3e:b9:5c:36:d7:3a:0e:55: c9:2c:3a:a6:c1:dc:88:40:4b:20:13:87:08:3b:cb: 9b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D7:53:E6:BB:0C:37:91:14:42:4D:EB:DB:15:F9:79:99:00:08:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca70b4e1-b5c3-3a21-bc83-13c3f690ea82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:0a:b8:5b:26:50:ac:8b:65:d3:6a:6c:13:e7:2a:b6:ab:4f: eb:ca:2f:45:7c:bb:44:e3:ce:7f:04:a6:fb:47:e9:45:0a:1b: 0a:3d:39:1f:d0:36:f1:1a:f1:38:94:f2:b5:cd:98:ea:d4:fc: 26:c0:91:b7:fb:9f:2f:5b:c5:6b:8a:44:b9:de:aa:25:dc:50: 2f:d9:1e:5a:d1:bc:c0:fb:ca:bc:98:97:2e:59:83:f1:a2:c8: b7:79:c4:d3:e1:59:fb:a6:14:62:54:f4:18:6c:6b:10:ed:f1: 37:8f:49:79:6c:76:6f:78:1c:dd:2f:5b:0b:08:9b:3f:05:2f: 96:70:22:c8:76:40:bf:6e:ac:c1:25:db:a1:cd:80:6a:63:6c: 96:f1:e0:e4:e2:75:d5:56:bc:ca:d2:88:39:e1:d0:9c:83:0c: fa:b8:b3:05:32:f8:a7:bd:3a:c3:ba:5d:43:24:4c:58:69:a1: 17:df:d4:ca:60:b7:4e:44:38:49:d1:69:22:73:2e:2e:94:8c: 77:05:85:17:83:d6:59:ab:81:27:44:57:58:a6:3f:55:b6:20: 31:61:83:8a:f9:4f:45:90:c7:e4:4f:dc:70:6d:fa:78:59:c5: ce:87:47:b8:f5:8c:bf:aa:72:55:9f:e7:e6:0a:e8:fd:fc:b7: 98:ac:37:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCCP20oGH8e12EAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk ZDYxNDUzNDAtMzkyZi00NjViLWE0NjQtNWVjMWI0OWUxYWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumE2h7v/ElEC2YNjvJY9sG52ccma6V5jkCCI BnWLrwqAIkJwb/yOyyqlihLfGv93w3H7QfaDeMDPd4P5nO3OHiymU2nVADpL+Zsx faH4ngw25eua9+YfbZSgPTsgpxTfY+0qUEF8RJwuygWzhrfibUcbQT0RVzOkNTU5 hUtnaVcYFWyoPaTJPdfNvwtYIkMYVKLxbn80Rzh7nK7CLCN1JbSlW889lC1QYna+ JJh7S6izw+VHrvpCBCP4puQQJGkRMuBvwKRK163+Y3y2NRu4QOUz6HD3RI2Uv8a+ Qhk63tCv4RUhwJZOPrlcNtc6DlXJLDqmwdyIQEsgE4cIO8ubkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXXU+a7DDeRFEJN69sV+XmZAAikMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2E3MGI0ZTEtYjVjMy0z YTIxLWJjODMtMTNjM2Y2OTBlYTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx5iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4KuFsmUKyLZdNqbBPnKrarT+vKL0V8u0Tjzn8EpvtH6UUKGwo9OR/Q NvEa8TiU8rXNmOrU/CbAkbf7ny9bxWuKRLneqiXcUC/ZHlrRvMD7yryYly5Zg/Gi yLd5xNPhWfumFGJU9BhsaxDt8TePSXlsdm94HN0vWwsImz8FL5ZwIsh2QL9urMEl 26HNgGpjbJbx4OTiddVWvMrSiDnh0JyDDPq4swUy+Ke9OsO6XUMkTFhpoRff1Mpg t05EOEnRaSJzLi6UjHcFhReD1lmrgSdEV1imP1W2IDFhg4r5T0WQx+RP3HBt+nhZ xc6HR7j1jL+qclWf5+YK6P38t5isN0k= -----END CERTIFICATE-----Generated at Tue Oct 13 12:53:04 2026 by rpki-client