$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4dcc5a4-6a15-328f-a323-99a1d1204df4.roa File: d4dcc5a4-6a15-328f-a323-99a1d1204df4.roa (raw, json) Hash identifier: Euhk3A1L3o6DJsc04iHzo3P+/pz+/+nVdg+AiAVpD1U= Subject key identifier: AA:F1:47:0C:80:6F:7F:9B:1B:B9:8C:E8:A0:1B:47:09:E0:7F:E8:57 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EBB11C10113C513CFA1768AC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4dcc5a4-6a15-328f-a323-99a1d1204df4.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 7029 IP address blocks: 71.28.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:c1:01:13:c5:13:cf:a1:76:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=0b80ec28-3b51-4a2f-898b-c6ef5a5e8a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c6:f8:8e:44:6a:ea:61:42:8f:27:72:21:ae: 87:37:5f:61:9d:b6:00:fd:c7:cd:a8:41:4f:9e:4c: a0:73:24:43:3f:04:ba:4b:58:67:e1:ff:22:97:9a: 99:8c:37:bc:8f:f5:ab:49:2f:8d:9d:54:fb:12:41: 05:ec:f3:01:28:8e:c5:78:fc:f5:6b:6d:b0:83:5e: e9:e9:d3:7c:c1:5c:75:54:da:25:b4:e7:43:93:a5: 79:6d:6a:81:f0:dc:b2:8f:8d:03:92:e2:a2:b2:46: 6e:bc:7f:c7:f2:75:3c:7a:69:6f:25:d1:d5:a0:50: 02:aa:9a:16:da:14:13:94:10:51:c9:67:f6:56:4f: 5f:53:67:ba:62:d2:1f:1a:8a:2c:d9:aa:37:fd:d7: f0:b7:41:24:58:df:84:ec:61:62:fb:b7:c5:5d:39: db:f5:6a:cf:e2:c1:a3:7d:41:90:04:05:19:2d:26: 69:91:2c:e5:f3:28:d4:94:65:f7:36:57:f5:ac:07: 99:10:3b:8d:c4:a0:74:4e:d2:04:bc:ed:42:ea:0a: 15:b0:24:6b:95:ba:3b:7f:30:05:75:6f:73:71:2e: 8a:d8:44:6e:a6:e6:c8:ae:97:47:1b:ca:64:b7:58: 39:0e:29:9a:bc:fe:5a:14:55:5e:53:57:01:21:d7: ea:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F1:47:0C:80:6F:7F:9B:1B:B9:8C:E8:A0:1B:47:09:E0:7F:E8:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4dcc5a4-6a15-328f-a323-99a1d1204df4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:9a:14:b4:6d:65:b7:27:2e:99:5f:eb:1f:b8:6b:81:35:96: d8:b2:2b:50:51:a5:e1:a7:00:ef:a0:d7:3b:98:9e:91:99:70: 96:50:15:b2:78:14:af:5c:a2:75:4e:3c:8f:2b:28:ec:b3:3e: b8:bb:45:79:8a:b8:28:6c:75:39:c9:60:d8:ee:af:58:55:bc: 83:17:c5:b6:13:09:8c:e4:15:ad:1c:67:16:30:8b:a4:7f:df: ce:d7:05:cb:8f:87:38:81:ba:ed:c1:e9:62:aa:05:46:f4:d9: 40:cd:31:72:6b:89:be:fe:d3:88:e4:79:be:11:06:ba:2f:b2: 95:20:6b:29:12:51:9e:dc:f3:92:0f:a8:ca:dd:2e:0d:c5:89: 7f:1a:97:b6:7b:a1:c8:c8:4c:2f:e1:ad:88:ff:23:43:07:15: e8:53:6c:4a:8f:99:81:4d:b2:ba:39:13:a7:f9:50:2c:23:11: 05:01:c4:32:05:5f:7c:e1:3b:da:67:f7:f4:50:34:e7:ab:e3: af:27:ab:07:b6:49:0e:fc:78:24:19:8d:1f:ee:41:35:96:f8: 5d:80:08:61:38:50:08:d2:63:ee:27:0b:62:b7:37:d6:fa:8d: 53:0e:bf:d8:1a:25:3a:51:b3:46:ce:9b:24:d0:fa:14:77:d4: e7:d6:74:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EcEBE8UTz6F2isAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk MGI4MGVjMjgtM2I1MS00YTJmLTg5OGItYzZlZjVhNWU4YTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcb4jkRq6mFCjydyIa6HN19hnbYA/cfNqEFP nkygcyRDPwS6S1hn4f8il5qZjDe8j/WrSS+NnVT7EkEF7PMBKI7FePz1a22wg17p 6dN8wVx1VNoltOdDk6V5bWqB8Nyyj40DkuKiskZuvH/H8nU8emlvJdHVoFACqpoW 2hQTlBBRyWf2Vk9fU2e6YtIfGoos2ao3/dfwt0EkWN+E7GFi+7fFXTnb9WrP4sGj fUGQBAUZLSZpkSzl8yjUlGX3Nlf1rAeZEDuNxKB0TtIEvO1C6goVsCRrlbo7fzAF dW9zcS6K2ERupubIrpdHG8pkt1g5DimavP5aFFVeU1cBIdfqPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrxRwyAb3+bG7mM6KAbRwngf+hXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDRkY2M1YTQtNmExNS0z MjhmLWEzMjMtOTlhMWQxMjA0ZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiaFLRtZbcnLplf6x+4a4E1ltiyK1BRpeGnAO+g1zuYnpGZcJZQFbJ4 FK9conVOPI8rKOyzPri7RXmKuChsdTnJYNjur1hVvIMXxbYTCYzkFa0cZxYwi6R/ 387XBcuPhziBuu3B6WKqBUb02UDNMXJrib7+04jkeb4RBrovspUgaykSUZ7c85IP qMrdLg3FiX8al7Z7ocjITC/hrYj/I0MHFehTbEqPmYFNsro5E6f5UCwjEQUBxDIF X3zhO9pn9/RQNOer468nqwe2SQ78eCQZjR/uQTWW+F2ACGE4UAjSY+4nC2K3N9b6 jVMOv9gaJTpRs0bOmyTQ+hR31OfWdJw= -----END CERTIFICATE-----Generated at Thu Aug 27 13:19:20 2026 by rpki-client