$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1b55f89-5ffd-3a4b-8e48-37e825835068.roa File: d1b55f89-5ffd-3a4b-8e48-37e825835068.roa (raw, json) Hash identifier: /H+hiSy2YHhz+SmEFtbKWX27GDb6ApuKTVi0pPgDh9A= Subject key identifier: F5:A7:3D:5E:D5:E0:C2:EF:78:E5:38:05:8C:80:B1:63:67:3D:4C:59 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAFE6FA3D790A965B037F2700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1b55f89-5ffd-3a4b-8e48-37e825835068.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 71.30.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:fa:3d:79:0a:96:5b:03:7f:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=71dc55e0-05dc-4bae-926b-ba04419ed7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3d:43:cf:4f:ca:94:06:16:f0:67:1f:6b:04: c6:eb:c9:e5:50:36:b2:66:c4:43:e6:0f:53:7e:5a: 86:1e:e1:fb:41:18:62:fa:7e:2e:df:29:d7:3c:89: 94:21:d7:cd:e1:95:eb:df:2d:d6:5f:27:f8:6c:53: 7b:2e:37:60:fd:cc:c6:7d:57:a5:3d:66:d9:68:cc: 70:e8:98:41:ec:bf:95:b0:fb:7c:3d:b5:22:a1:11: 6c:18:3a:ab:23:11:ad:3a:c9:52:9d:2a:84:3d:bc: 5e:67:59:72:b6:aa:31:49:26:84:15:fb:87:07:e0: 42:d9:e5:00:8b:1c:d5:87:aa:fd:0b:36:0c:4e:47: 85:d1:8c:66:e9:e1:e1:47:9a:f7:d5:c3:a0:b1:61: 04:13:d0:ff:f5:78:31:23:06:df:5e:e2:ee:93:b3: f4:9b:33:01:26:09:82:69:2a:bc:ab:73:ed:fc:e0: 20:85:ee:43:43:ef:a3:a3:9e:42:c7:da:29:7c:3b: 45:38:f2:d0:88:b0:a7:a8:e3:33:1a:e4:28:cd:26: 8d:d2:d9:f4:ff:e5:6d:e2:9a:87:f6:a1:11:41:45: 43:89:c2:0a:70:1c:b4:f4:8d:91:00:23:d2:8c:79: 80:58:2f:6b:73:da:f3:f1:44:5a:61:9d:bc:21:cd: f7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A7:3D:5E:D5:E0:C2:EF:78:E5:38:05:8C:80:B1:63:67:3D:4C:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1b55f89-5ffd-3a4b-8e48-37e825835068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:0c:34:c3:bb:26:72:4d:9d:80:e4:94:51:52:4c:89:3e:39: a8:a6:85:ba:cd:02:11:30:ef:23:66:c1:40:df:80:13:55:91: ce:2d:c2:86:eb:2d:38:88:a5:7b:d4:db:20:b1:ed:8d:f7:58: 3f:fe:e6:83:db:cc:6d:ce:06:a5:8b:bc:90:f8:1b:71:c2:ce: 59:9a:e3:e2:5a:a0:78:1e:02:28:53:27:cd:ce:fa:13:f9:77: 99:8d:47:35:a3:44:d3:57:6d:ab:b8:9a:cb:ba:aa:bc:d8:2f: de:83:14:da:2a:10:3d:14:08:1b:17:5a:01:27:f9:d0:71:d4: 19:8f:24:62:7a:71:93:85:82:ed:b0:4e:70:16:45:d7:06:d1: 9d:ad:38:c8:4d:2e:7a:1a:03:a9:37:c7:44:23:ad:1d:f2:11: ad:b1:b1:0d:e3:47:5b:79:5f:51:72:64:64:5e:44:82:19:14: b3:4f:85:f1:39:36:1e:b9:46:ac:dc:46:ed:e6:d1:d8:04:68: e4:9e:3e:60:85:1e:ae:fb:fb:9d:de:6e:53:37:2d:b7:8b:1a: e0:5f:63:77:59:7c:6f:4a:a0:e8:f3:21:4d:8a:db:10:61:c0: cd:f7:b3:12:97:d7:76:7a:bf:e0:b9:f4:dc:b6:dc:f8:a5:53: 1e:49:79:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5vo9eQqWWwN/JwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk NzFkYzU1ZTAtMDVkYy00YmFlLTkyNmItYmEwNDQxOWVkN2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz1Dz0/KlAYW8GcfawTG68nlUDayZsRD5g9T flqGHuH7QRhi+n4u3ynXPImUIdfN4ZXr3y3WXyf4bFN7Ljdg/czGfVelPWbZaMxw 6JhB7L+VsPt8PbUioRFsGDqrIxGtOslSnSqEPbxeZ1lytqoxSSaEFfuHB+BC2eUA ixzVh6r9CzYMTkeF0Yxm6eHhR5r31cOgsWEEE9D/9XgxIwbfXuLuk7P0mzMBJgmC aSq8q3Pt/OAghe5DQ++jo55Cx9opfDtFOPLQiLCnqOMzGuQozSaN0tn0/+Vt4pqH 9qERQUVDicIKcBy09I2RACPSjHmAWC9rc9rz8URaYZ28Ic33MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWnPV7V4MLveOU4BYyAsWNnPUxZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDFiNTVmODktNWZmZC0z YTRiLThlNDgtMzdlODI1ODM1MDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMMNMO7JnJNnYDklFFSTIk+OaimhbrNAhEw7yNmwUDfgBNVkc4twobr LTiIpXvU2yCx7Y33WD/+5oPbzG3OBqWLvJD4G3HCzlma4+JaoHgeAihTJ83O+hP5 d5mNRzWjRNNXbau4msu6qrzYL96DFNoqED0UCBsXWgEn+dBx1BmPJGJ6cZOFgu2w TnAWRdcG0Z2tOMhNLnoaA6k3x0QjrR3yEa2xsQ3jR1t5X1FyZGReRIIZFLNPhfE5 Nh65RqzcRu3m0dgEaOSePmCFHq77+53eblM3LbeLGuBfY3dZfG9KoOjzIU2K2xBh wM33sxKX13Z6v+C59Ny23PilUx5JeeI= -----END CERTIFICATE-----Generated at Thu Aug 27 12:30:25 2026 by rpki-client