$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf6f6148-06bd-31ea-90d4-a683b7fa37da.roa File: cf6f6148-06bd-31ea-90d4-a683b7fa37da.roa (raw, json) Hash identifier: bqVkv36GZGbITfbdZxaagG1xRN25cGzwm2rwlYkdLwo= Subject key identifier: 6A:E7:2D:D5:FA:A9:73:89:FC:CC:B8:BE:B6:B5:7B:6A:3A:95:B2:42 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA7873E5040EAED4A10A6A000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf6f6148-06bd-31ea-90d4-a683b7fa37da.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 71.28.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:3e:50:40:ea:ed:4a:10:a6:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9afaf0b0-2b2f-4d04-96d8-7b51a5c6e6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b9:86:d3:dc:5f:21:e1:89:ff:98:3b:0e:b3: 9c:26:56:96:4d:42:06:51:4e:13:87:e8:8c:0e:37: 95:52:08:54:a5:d9:21:b5:a4:b0:be:69:9b:9c:9d: fb:03:86:bb:d3:ae:8e:2a:43:67:ec:ae:f3:9a:25: 8a:b9:fe:f2:4b:9c:32:4a:19:a3:e1:64:a5:48:15: 7c:a7:ab:11:01:d6:ec:4b:2a:d7:b6:63:69:20:9c: 42:f7:69:bb:36:7b:33:30:b6:66:1d:cc:30:f2:47: 9c:e1:39:fe:01:d6:46:33:44:7d:b7:6b:e6:2f:97: c9:09:17:b2:ce:5c:8f:6d:1e:39:fe:81:b6:74:56: 34:d1:1f:2c:2c:00:5d:13:67:49:c0:37:33:b2:b6: 09:d3:df:42:47:4c:8a:44:d5:2a:a2:ff:25:4e:3b: c0:6c:f2:75:6b:4d:cc:cc:b0:c5:82:ab:2b:8d:d6: 4d:6a:99:0b:ca:14:51:c1:96:2a:04:9a:2a:88:fe: ac:5b:b7:1a:3c:c9:1c:f1:24:98:7c:98:95:fb:d7: c5:8e:77:b1:54:26:ac:af:f0:b5:69:9f:8e:fb:46: e3:5d:a1:45:ec:dd:d1:cd:da:c3:fb:f4:5e:48:d1: 28:3b:b5:53:ff:a3:81:49:e0:56:ff:da:9b:a9:b1: 93:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E7:2D:D5:FA:A9:73:89:FC:CC:B8:BE:B6:B5:7B:6A:3A:95:B2:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf6f6148-06bd-31ea-90d4-a683b7fa37da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:9f:9f:6e:85:fc:fd:43:6e:1f:ed:ab:06:85:b6:1b:0d:42: 41:27:50:45:9e:92:3e:74:82:75:9b:5a:29:89:a8:36:0e:72: 01:cd:ff:30:64:52:2d:19:f2:b0:2e:91:41:56:ad:88:26:d9: 11:f1:ca:6c:4a:6e:57:65:48:98:a3:73:53:e2:0b:be:c8:d1: bc:58:b1:f5:38:73:55:ea:6e:99:12:2a:de:b4:ca:4d:3c:c8: b2:61:9c:03:59:d5:87:e5:32:89:1f:f5:38:49:2f:f6:2b:4c: fd:e0:74:a9:58:3a:67:8d:26:ed:d9:e1:a7:76:0d:e4:6f:bb: 74:b1:f6:a6:b1:5b:d7:2a:20:e7:a4:88:1e:40:d6:21:8e:e7: 3b:c6:05:9d:69:25:3f:45:7f:fa:a2:18:f3:5d:81:62:0b:cc: 9a:23:c7:50:39:5d:83:8a:0d:55:7c:5a:41:c2:35:19:30:d8: 53:74:63:4e:13:19:cc:34:5a:36:26:cb:bb:1b:2d:1b:da:61: 1f:6f:da:5a:ef:21:56:4a:18:15:53:3c:5d:b0:31:9e:ce:a5: cb:53:c1:cb:95:2a:d6:4e:90:26:52:c2:f8:44:12:54:21:e0: 9c:6a:29:4a:b7:88:fa:73:da:74:87:aa:80:ca:f5:fb:13:7f: 04:17:4e:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhz5QQOrtShCmoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWFmYWYwYjAtMmIyZi00ZDA0LTk2ZDgtN2I1MWE1YzZlNmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbmG09xfIeGJ/5g7DrOcJlaWTUIGUU4Th+iM DjeVUghUpdkhtaSwvmmbnJ37A4a7066OKkNn7K7zmiWKuf7yS5wyShmj4WSlSBV8 p6sRAdbsSyrXtmNpIJxC92m7NnszMLZmHcww8kec4Tn+AdZGM0R9t2vmL5fJCRey zlyPbR45/oG2dFY00R8sLABdE2dJwDczsrYJ099CR0yKRNUqov8lTjvAbPJ1a03M zLDFgqsrjdZNapkLyhRRwZYqBJoqiP6sW7caPMkc8SSYfJiV+9fFjnexVCasr/C1 aZ+O+0bjXaFF7N3RzdrD+/ReSNEoO7VT/6OBSeBW/9qbqbGTtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrnLdX6qXOJ/My4vra1e2o6lbJCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2Y2ZjYxNDgtMDZiZC0z MWVhLTkwZDQtYTY4M2I3ZmEzN2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERxzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyfn26F/P1Dbh/tqwaFthsNQkEnUEWekj50gnWbWimJqDYOcgHN/zBk Ui0Z8rAukUFWrYgm2RHxymxKbldlSJijc1PiC77I0bxYsfU4c1XqbpkSKt60yk08 yLJhnANZ1YflMokf9ThJL/YrTP3gdKlYOmeNJu3Z4ad2DeRvu3Sx9qaxW9cqIOek iB5A1iGO5zvGBZ1pJT9Ff/qiGPNdgWILzJojx1A5XYOKDVV8WkHCNRkw2FN0Y04T Gcw0WjYmy7sbLRvaYR9v2lrvIVZKGBVTPF2wMZ7OpctTwcuVKtZOkCZSwvhEElQh 4JxqKUq3iPpz2nSHqoDK9fsTfwQXTmQ= -----END CERTIFICATE-----Generated at Thu Aug 27 12:26:28 2026 by rpki-client