$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa File: 1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa (raw, json) Hash identifier: 0IIc7UxM2fGXDlVH2OYTTPOAf15ujIv0AZJZYD7MStM= Subject key identifier: AA:DA:89:8D:34:AA:7C:97:01:4F:F8:5F:BB:CD:78:2D:18:52:B9:A7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D8FBEDEC1ADDA1BCEEFA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 67.217.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:8f:be:de:c1:ad:da:1b:ce:ef:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=8e20d597-3de3-4469-ba38-2b8665549529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:32:3e:5a:c9:37:f1:28:9b:e4:b8:77:a0: e5:a2:dd:36:74:d2:92:b3:8c:42:91:3e:00:e4:35: 7b:8f:dd:20:b6:4c:dc:fa:d5:20:b0:ca:5d:20:08: 0c:44:43:dc:b1:5f:b8:d9:fb:ef:bc:64:4d:22:f2: ec:c1:17:d8:4a:a8:63:da:bb:ab:10:b5:62:a6:dc: 24:61:12:4a:03:a9:4b:e1:56:29:c7:20:66:e2:8c: 9b:58:33:ff:55:51:80:68:9d:a2:79:0d:80:34:32: 2e:0d:f3:f3:5e:0b:13:80:44:a7:4e:36:44:84:6f: 9f:43:9c:3e:bb:5f:13:72:b0:db:35:ab:86:82:5b: 91:b6:24:8c:c5:dd:d2:0b:3f:bd:26:ed:33:b4:eb: 15:ec:3c:a5:d8:70:e3:ae:f7:84:4d:7b:af:11:c4: cf:d8:ad:db:86:80:2a:25:ed:da:d8:8a:42:de:e9: 6e:78:85:e1:72:20:2d:7c:4b:bb:7e:44:0e:07:40: 10:1d:14:4c:73:14:61:8d:a9:4b:c9:64:ef:1c:87: b3:51:95:da:6a:0b:94:bc:a2:46:70:52:90:f5:de: 45:61:97:74:49:8a:37:6c:80:c6:81:d3:3c:89:78: 93:72:b4:f9:42:2f:d5:75:28:5b:38:33:77:5e:f1: 43:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DA:89:8D:34:AA:7C:97:01:4F:F8:5F:BB:CD:78:2D:18:52:B9:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.217.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:dc:cb:83:97:74:b6:b6:d3:8a:d5:7c:ab:f2:ea:e4:6d:92: 02:98:05:9b:a0:ae:b6:b8:f0:f9:d1:34:4f:7a:d0:24:dc:5a: 07:6c:98:b7:00:17:a1:0a:39:62:e6:4c:2f:d4:65:b7:0c:64: 88:73:3a:2a:df:87:31:6f:ab:03:44:85:7a:df:d1:ae:9e:4c: 25:52:b7:cd:a9:3f:46:ac:51:79:13:15:80:27:76:b6:87:cb: b9:66:09:0b:33:fc:a9:96:35:f2:bb:36:fc:7e:2c:8c:d6:5a: ad:f0:c2:4d:87:7c:1b:3e:da:9b:2e:ec:6d:cf:a4:a4:f8:41: 50:4b:e8:27:d6:6e:82:20:ab:50:fc:bb:d7:d1:f6:e0:8f:0b: 2d:4a:94:36:f4:c1:64:e9:05:3b:2f:c5:32:06:50:89:25:ed: 3b:e8:8d:d0:ac:1f:02:2d:84:e2:bf:eb:71:c3:f1:f9:0b:67: 3e:99:2c:2e:3a:e5:f3:2e:d7:94:16:fd:c3:04:55:c9:ff:54: 67:c7:4c:7e:f4:1c:8b:4a:ac:3b:0b:1f:58:1a:08:c1:87:ae: 35:49:de:99:95:e8:ce:d2:d5:ca:ac:1d:40:73:14:dc:61:40: 1a:60:22:2b:0a:41:ca:1a:7c:80:f5:a1:47:f6:64:69:38:65: be:53:a3:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnY++3sGt2hvO76AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OGUyMGQ1OTctM2RlMy00NDY5LWJhMzgtMmI4NjY1NTQ5NTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM8yPlrJN/Eom+S4d6Dlot02dNKSs4xCkT4A 5DV7j90gtkzc+tUgsMpdIAgMREPcsV+42fvvvGRNIvLswRfYSqhj2rurELViptwk YRJKA6lL4VYpxyBm4oybWDP/VVGAaJ2ieQ2ANDIuDfPzXgsTgESnTjZEhG+fQ5w+ u18TcrDbNauGgluRtiSMxd3SCz+9Ju0ztOsV7Dyl2HDjrveETXuvEcTP2K3bhoAq Je3a2IpC3ulueIXhciAtfEu7fkQOB0AQHRRMcxRhjalLyWTvHIezUZXaaguUvKJG cFKQ9d5FYZd0SYo3bIDGgdM8iXiTcrT5Qi/VdShbODN3XvFDoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKraiY00qnyXAU/4X7vNeC0YUrmnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTA0NWJhNTgtNTgzMC0z ZWQxLWEyYjAtMGYzZmRlNGVmZGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjcy4OXdLa204rVfKvy6uRtkgKYBZugrra48PnRNE960CTcWgdsmLcA F6EKOWLmTC/UZbcMZIhzOirfhzFvqwNEhXrf0a6eTCVSt82pP0asUXkTFYAndraH y7lmCQsz/KmWNfK7Nvx+LIzWWq3wwk2HfBs+2psu7G3PpKT4QVBL6CfWboIgq1D8 u9fR9uCPCy1KlDb0wWTpBTsvxTIGUIkl7TvojdCsHwIthOK/63HD8fkLZz6ZLC46 5fMu15QW/cMEVcn/VGfHTH70HItKrDsLH1gaCMGHrjVJ3pmV6M7S1cqsHUBzFNxh QBpgIisKQcoafID1oUf2ZGk4Zb5Toyk= -----END CERTIFICATE-----Generated at Tue Oct 13 06:20:36 2026 by rpki-client