$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cfdab452-30ce-33d8-b092-188782742a3d.roa File: cfdab452-30ce-33d8-b092-188782742a3d.roa (raw, json) Hash identifier: 9uECsqdGq69JaaW6km7DPSleqxhOqNTU6oLcj5ERIVA= Subject key identifier: 58:25:10:93:3A:D3:1C:05:8B:1A:E5:6F:BC:1C:30:E7:98:33:42:C0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F6292F9BFB58FC8D428E8D0E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cfdab452-30ce-33d8-b092-188782742a3d.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 71.30.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f9:bf:b5:8f:c8:d4:28:e8:d0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=83cedd0a-4323-48cd-bb33-625dcd905a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5a:41:34:e9:7a:42:dd:e7:92:2a:78:18:c0: 69:12:68:1c:68:27:f2:b1:79:bd:c1:49:ba:e4:29: 2a:8f:17:ed:15:38:f3:fd:63:47:d0:0d:f0:4e:a7: 11:97:ea:2c:e7:1c:18:f7:3d:3a:d6:d9:06:29:d8: 48:44:2b:71:0d:c0:bf:4d:14:0b:bf:ae:15:b9:44: 16:2c:bf:89:25:e1:af:d8:b8:d9:88:63:72:9d:d5: 1f:47:ec:ec:e6:0c:15:0c:9f:83:8f:ed:35:0f:39: 73:69:86:e4:a3:0f:61:2c:b9:e0:e9:21:fc:68:a8: 7a:9c:e1:76:a2:5c:c2:7e:30:69:e7:6e:08:e1:39: ed:9e:10:71:84:6f:f8:fd:07:b9:60:d8:f4:06:c9: ff:f2:dc:4b:45:c0:8c:fe:34:69:13:a0:21:b0:3e: d4:33:ea:b6:35:22:ac:b8:30:26:86:aa:0f:73:c0: 61:a9:f7:eb:59:57:fe:79:6a:a9:b0:22:dd:5a:34: 98:88:64:f8:ed:e5:01:bb:05:21:cb:8a:78:0d:85: 94:01:35:66:15:ae:63:97:51:ed:5c:ca:23:e9:1f: b2:fc:55:9f:de:04:e5:09:3b:c0:57:99:9d:92:2c: b1:dc:2d:fb:ed:27:4c:81:9c:7d:5a:e5:f9:2f:07: 7c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:25:10:93:3A:D3:1C:05:8B:1A:E5:6F:BC:1C:30:E7:98:33:42:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cfdab452-30ce-33d8-b092-188782742a3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:df:43:89:c4:48:a9:5d:93:cd:58:0a:39:f0:44:47:c2:c0: 60:0f:3a:35:63:7a:d1:da:66:49:04:51:60:96:dd:22:74:df: cb:2a:92:44:98:c3:4c:f5:4b:f6:51:1c:ac:6a:0c:42:1c:32: 3b:e4:de:f1:09:21:18:ff:37:7b:c4:cc:81:5d:e8:54:0a:5a: d4:d7:4d:df:77:da:3d:43:42:06:0d:8a:7d:47:51:c9:c5:1b: a6:0a:ad:b7:16:33:13:d3:1e:42:98:a9:94:98:c5:37:88:8c: 4c:d3:5a:31:42:17:c8:b3:f0:c9:d5:f7:ad:d7:79:91:31:dc: b8:df:c9:8f:85:9d:b9:2b:0b:4f:80:61:c4:d9:75:f0:c6:1a: 11:7d:21:ad:d5:0d:a7:c7:a6:48:12:f5:5a:da:ac:b8:d5:22: d4:93:36:9a:76:ab:e3:bd:d4:66:35:59:70:8c:a7:a8:6e:8a: 70:f1:8c:66:6e:08:f5:02:cb:86:f0:88:70:f1:4f:58:bf:82: 62:a8:bb:5b:fe:0a:e7:f2:ff:a9:9d:23:66:80:dc:4c:38:e2: 77:c0:17:76:82:28:89:9a:2c:f7:2e:16:c9:2f:72:9a:55:ac: 04:3e:30:c3:e5:94:60:b3:f0:68:d7:bf:fe:60:13:7f:87:7a: aa:93:09:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikvm/tY/I1Cjo0OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ODNjZWRkMGEtNDMyMy00OGNkLWJiMzMtNjI1ZGNkOTA1YTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1pBNOl6Qt3nkip4GMBpEmgcaCfysXm9wUm6 5CkqjxftFTjz/WNH0A3wTqcRl+os5xwY9z061tkGKdhIRCtxDcC/TRQLv64VuUQW LL+JJeGv2LjZiGNyndUfR+zs5gwVDJ+Dj+01DzlzaYbkow9hLLng6SH8aKh6nOF2 olzCfjBp524I4TntnhBxhG/4/Qe5YNj0Bsn/8txLRcCM/jRpE6AhsD7UM+q2NSKs uDAmhqoPc8BhqffrWVf+eWqpsCLdWjSYiGT47eUBuwUhy4p4DYWUATVmFa5jl1Ht XMoj6R+y/FWf3gTlCTvAV5mdkiyx3C377SdMgZx9WuX5Lwd8uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFglEJM60xwFixrlb7wcMOeYM0LAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2ZkYWI0NTItMzBjZS0z M2Q4LWIwOTItMTg4NzgyNzQyYTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx5GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDfQ4nESKldk81YCjnwREfCwGAPOjVjetHaZkkEUWCW3SJ038sqkkSY w0z1S/ZRHKxqDEIcMjvk3vEJIRj/N3vEzIFd6FQKWtTXTd932j1DQgYNin1HUcnF G6YKrbcWMxPTHkKYqZSYxTeIjEzTWjFCF8iz8MnV963XeZEx3LjfyY+FnbkrC0+A YcTZdfDGGhF9Ia3VDafHpkgS9VrarLjVItSTNpp2q+O91GY1WXCMp6huinDxjGZu CPUCy4bwiHDxT1i/gmKou1v+Cufy/6mdI2aA3Ew44nfAF3aCKImaLPcuFskvcppV rAQ+MMPllGCz8GjXv/5gE3+HeqqTCco= -----END CERTIFICATE-----Generated at Wed Oct 14 13:08:34 2026 by rpki-client