$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0423614b-9ba5-3454-9f69-13330d5e26bc.roa File: 0423614b-9ba5-3454-9f69-13330d5e26bc.roa (raw, json) Hash identifier: PhAkZcPX5D8kHiiiLKdoUTatuRiCQz8bNc35r0nVlm8= Subject key identifier: 48:BC:2B:B8:B5:4B:5A:1D:A0:7B:0C:67:61:85:46:19:74:FA:59:EC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7783576BF732BD5C78B31680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0423614b-9ba5-3454-9f69-13330d5e26bc.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 67.141.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:57:6b:f7:32:bd:5c:78:b3:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=d289c4b5-071b-45e5-a739-94d8c6e8c727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:51:50:4f:7a:d9:ea:a5:4a:87:b6:c9:19:f2: c0:1c:fd:3e:60:b5:7a:7d:aa:a2:d1:f2:87:93:3d: f6:cb:0f:2b:4d:e3:ca:0e:ee:f9:99:f7:48:5c:7d: 16:55:56:1e:4f:c2:a1:08:72:3f:cc:83:af:f7:fa: 3f:25:2a:c2:9f:c0:85:e3:c9:c4:1b:1b:cd:f2:66: 4b:5a:c3:bc:b2:a3:d1:be:75:88:af:94:63:09:dc: 4d:0f:0d:06:82:75:9c:d8:99:2c:55:11:a2:56:be: 4b:75:a1:0a:a7:9d:60:90:d1:d4:49:66:11:82:dd: 80:f5:5d:3c:03:7a:3a:66:79:af:fd:8d:cd:85:8a: 99:8b:99:d4:52:f8:63:8e:34:ec:85:2e:73:e0:d2: df:14:40:4c:94:d3:34:dd:e5:7e:5e:0b:78:e1:ef: 31:ac:38:6a:1f:2e:8a:e5:db:d1:11:c5:80:0d:39: cb:0e:95:63:0a:83:37:45:e8:9f:84:80:0e:4a:06: 53:d3:43:7d:18:f3:a2:14:e7:13:07:f4:27:24:73: 8d:b0:bf:cb:ca:13:5c:85:b6:45:8c:71:72:17:b6: cb:69:f2:b3:7d:14:47:57:35:8b:f0:49:6b:fe:52: 21:46:c9:55:72:62:3c:94:f6:2d:33:36:bd:9f:f0: 02:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BC:2B:B8:B5:4B:5A:1D:A0:7B:0C:67:61:85:46:19:74:FA:59:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0423614b-9ba5-3454-9f69-13330d5e26bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c0:8a:d3:f5:46:e3:0f:33:03:73:a8:63:c0:50:3b:52:60: e8:2f:15:a3:81:d8:73:37:a8:be:13:8b:e8:50:8e:8f:98:9d: 93:08:24:3b:d1:7b:80:2f:7b:33:25:d6:d1:05:b3:5e:ef:58: 3f:0e:29:cf:a6:c1:fb:a0:b8:60:2a:6a:3c:ae:4e:45:ff:ab: 7a:8a:b9:7c:0c:70:25:b0:58:ed:3d:bf:42:0a:f8:ee:58:52: 39:ad:bd:28:2e:fa:bc:93:a1:48:55:e5:35:53:84:1a:20:62: 05:37:67:9f:b5:ca:bc:c3:88:6c:dc:62:54:f7:c9:be:24:b9: 9f:4e:dd:a4:98:06:e3:6e:39:e3:2e:ce:af:f3:c4:7d:2f:82: 74:3a:9f:55:97:8e:57:fc:63:73:05:a7:85:2c:7c:88:f7:f6: 79:5a:b8:e9:b7:b8:6c:41:07:a8:3a:2c:09:a9:f4:f0:2d:0a: 48:0d:22:63:0d:21:b0:60:39:c8:32:3a:fe:08:d1:38:2c:22: 46:c4:c6:be:15:74:89:9f:ff:fe:28:5f:27:f3:96:17:37:6d: bb:44:68:16:a9:9c:14:f7:c9:85:95:8b:2d:20:a3:e6:12:8b: 0c:21:12:f3:5a:9c:cd:91:4d:e5:f4:74:56:03:8b:80:55:48: 9e:5f:31:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g1dr9zK9XHizFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZDI4OWM0YjUtMDcxYi00NWU1LWE3MzktOTRkOGM2ZThjNzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVFQT3rZ6qVKh7bJGfLAHP0+YLV6faqi0fKH kz32yw8rTePKDu75mfdIXH0WVVYeT8KhCHI/zIOv9/o/JSrCn8CF48nEGxvN8mZL WsO8sqPRvnWIr5RjCdxNDw0GgnWc2JksVRGiVr5LdaEKp51gkNHUSWYRgt2A9V08 A3o6Znmv/Y3NhYqZi5nUUvhjjjTshS5z4NLfFEBMlNM03eV+Xgt44e8xrDhqHy6K 5dvREcWADTnLDpVjCoM3ReifhIAOSgZT00N9GPOiFOcTB/QnJHONsL/LyhNchbZF jHFyF7bLafKzfRRHVzWL8Elr/lIhRslVcmI8lPYtMza9n/AC8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEi8K7i1S1odoHsMZ2GFRhl0+lnsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDQyMzYxNGItOWJhNS0z NDU0LTlmNjktMTMzMzBkNWUyNmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ41kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7AitP1RuMPMwNzqGPAUDtSYOgvFaOB2HM3qL4Ti+hQjo+YnZMIJDvR e4AvezMl1tEFs17vWD8OKc+mwfuguGAqajyuTkX/q3qKuXwMcCWwWO09v0IK+O5Y UjmtvSgu+ryToUhV5TVThBogYgU3Z5+1yrzDiGzcYlT3yb4kuZ9O3aSYBuNuOeMu zq/zxH0vgnQ6n1WXjlf8Y3MFp4UsfIj39nlauOm3uGxBB6g6LAmp9PAtCkgNImMN IbBgOcgyOv4I0TgsIkbExr4VdImf//4oXyfzlhc3bbtEaBapnBT3yYWViy0go+YS iwwhEvNanM2RTeX0dFYDi4BVSJ5fMd8= -----END CERTIFICATE-----Generated at Tue Oct 13 10:26:28 2026 by rpki-client