$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0aceaa06-2a51-3a36-be8a-d1b45e35b570.roa File: 0aceaa06-2a51-3a36-be8a-d1b45e35b570.roa (raw, json) Hash identifier: cQJRv9RR06SWVJM2JMXWmMFHA3edJenH2uji0zJ1j/Q= Subject key identifier: 56:80:53:27:B7:9E:28:A8:BF:46:B0:87:98:BD:63:CC:92:C7:EB:2C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7A4D94938F213E7A0C599C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0aceaa06-2a51-3a36-be8a-d1b45e35b570.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 67.141.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:94:93:8f:21:3e:7a:0c:59:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=d1cd16d0-6817-4cb6-bcd5-7be55e042a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:da:ea:cf:d2:47:24:f5:4a:76:91:2d:eb:da: d9:24:f5:82:6c:2a:6c:2a:cf:ba:60:54:e4:74:52: 24:ef:d5:a5:ee:0a:70:28:21:ec:bd:75:8c:40:ac: 76:b7:b2:dc:a9:bb:1a:33:19:a6:b8:dc:86:d5:8e: 7c:7d:1b:be:db:2d:1d:48:8b:e5:1a:b0:d3:2e:5a: 7b:18:0c:ae:27:75:66:03:e0:07:2f:15:40:d7:a2: 98:ca:66:58:5c:6b:27:e7:cf:30:78:5a:9a:6d:58: 09:21:29:d1:2c:e1:c1:f3:88:73:1c:67:12:ee:5a: e3:36:57:97:04:a0:85:2a:6a:3a:fb:8b:d3:10:2e: e1:00:98:42:e5:5a:cd:ed:f3:98:b3:cf:ee:0a:91: d5:ea:56:4b:5f:9c:33:6a:0a:0e:65:d8:0a:86:c9: 26:1c:9d:fb:98:f5:b7:4b:d4:df:c9:a8:f1:68:6f: e1:f8:ef:52:81:cf:fc:72:35:20:df:6f:b2:7f:3b: cb:15:dd:ae:d4:21:4c:9b:5b:d4:4d:c4:60:bc:7b: 8d:f5:76:bb:0c:bf:92:fe:70:44:4e:dc:75:e6:ab: 25:42:e7:e9:0d:4b:57:b4:e1:2f:8f:18:a2:73:47: 52:1c:1b:43:82:e7:28:b3:ec:ab:11:9f:97:e6:f1: 20:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:80:53:27:B7:9E:28:A8:BF:46:B0:87:98:BD:63:CC:92:C7:EB:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0aceaa06-2a51-3a36-be8a-d1b45e35b570.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:df:08:c5:20:20:a4:21:8a:ba:5f:a2:e9:5a:20:c4:9e:28: f6:93:4c:66:25:18:c6:d8:96:67:89:ab:2f:8f:f7:2a:f0:83: a2:70:d2:48:13:2f:c3:27:b4:88:b7:25:4b:a9:8b:1d:6f:79: a3:e6:d0:1e:41:3a:22:a1:08:bd:fe:3e:f7:3c:41:20:80:cd: 59:16:70:26:e4:30:b6:7d:17:f2:ba:85:f4:d9:75:fb:75:25: 04:bb:2d:e4:df:a5:87:02:aa:f8:86:f5:0f:a5:77:98:9c:c7: 07:e2:71:e1:53:19:ad:3f:cc:88:05:bd:b2:9a:45:2f:c4:af: fa:05:80:3b:df:42:02:cf:57:c9:1d:d4:60:8a:19:b9:71:a2: 6e:9d:8d:3c:17:86:4e:a1:76:e4:f3:c4:c0:73:b2:ea:4d:1d: db:82:b0:15:3d:e8:be:8a:2e:60:fc:1e:d2:9e:0f:a4:8f:90: ba:d0:e3:fe:4f:86:8e:42:e1:9a:8f:ca:9a:dd:bd:d0:1f:fd: 56:3a:67:16:28:d8:5b:d4:36:51:18:e5:9b:34:23:1e:df:87: 5f:dd:67:39:7c:8c:1e:1d:ca:2b:7a:95:58:8d:8d:03:a1:f3: 96:ed:56:5d:63:ce:eb:f7:ed:53:08:77:de:54:e4:94:7c:c2: b3:dc:ee:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TZSTjyE+egxZnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZDFjZDE2ZDAtNjgxNy00Y2I2LWJjZDUtN2JlNTVlMDQyYThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotrqz9JHJPVKdpEt69rZJPWCbCpsKs+6YFTk dFIk79Wl7gpwKCHsvXWMQKx2t7LcqbsaMxmmuNyG1Y58fRu+2y0dSIvlGrDTLlp7 GAyuJ3VmA+AHLxVA16KYymZYXGsn588weFqabVgJISnRLOHB84hzHGcS7lrjNleX BKCFKmo6+4vTEC7hAJhC5VrN7fOYs8/uCpHV6lZLX5wzagoOZdgKhskmHJ37mPW3 S9TfyajxaG/h+O9Sgc/8cjUg32+yfzvLFd2u1CFMm1vUTcRgvHuN9Xa7DL+S/nBE Ttx15qslQufpDUtXtOEvjxiic0dSHBtDgucos+yrEZ+X5vEgQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaAUye3niiov0awh5i9Y8ySx+ssMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGFjZWFhMDYtMmE1MS0z YTM2LWJlOGEtZDFiNDVlMzViNTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ42gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPfCMUgIKQhirpfoulaIMSeKPaTTGYlGMbYlmeJqy+P9yrwg6Jw0kgT L8MntIi3JUupix1veaPm0B5BOiKhCL3+Pvc8QSCAzVkWcCbkMLZ9F/K6hfTZdft1 JQS7LeTfpYcCqviG9Q+ld5icxwficeFTGa0/zIgFvbKaRS/Er/oFgDvfQgLPV8kd 1GCKGblxom6djTwXhk6hduTzxMBzsupNHduCsBU96L6KLmD8HtKeD6SPkLrQ4/5P ho5C4ZqPyprdvdAf/VY6ZxYo2FvUNlEY5Zs0Ix7fh1/dZzl8jB4dyit6lViNjQOh 85btVl1jzuv37VMId95U5JR8wrPc7lE= -----END CERTIFICATE-----Generated at Tue Oct 13 18:37:31 2026 by rpki-client