$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11e7b337-02b9-3773-b8d3-007a653255a7.roa File: 11e7b337-02b9-3773-b8d3-007a653255a7.roa (raw, json) Hash identifier: mDTLf7IBLlb+59KXFiz1pCAVtZfOc01QGl7v5UDIgbM= Subject key identifier: CB:65:C7:E5:C2:41:02:F1:51:B5:3A:41:C3:7A:18:1D:F1:2F:C3:F1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7783246A61F0FBEA788A1600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11e7b337-02b9-3773-b8d3-007a653255a7.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 67.141.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:24:6a:61:f0:fb:ea:78:8a:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=4c06e8a7-f0f7-4831-9fa5-6a91a58b7669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9c:60:df:91:da:ce:02:d2:e8:8d:de:a7:c4: 46:27:b6:5a:df:52:ec:a0:f2:47:af:62:2d:fe:e9: 6e:07:2d:5a:c1:fb:6a:3a:c5:ac:c8:77:42:81:bc: 78:99:75:5d:ff:00:44:ec:62:c1:4b:ed:23:01:65: 8e:51:a8:ed:7d:92:c1:38:a7:50:9e:ed:2b:d0:f6: 6e:44:1b:95:45:e0:5a:4c:0e:c7:cf:d0:73:b0:09: fd:af:34:9f:74:a0:33:7e:e0:7f:16:20:0b:0e:a9: f4:fc:0e:cc:af:2d:68:e3:61:94:30:4d:b7:3c:a9: f1:07:02:7f:c0:61:0c:cd:d4:d1:d3:cb:57:6a:ab: 42:6d:36:53:93:8b:fc:32:07:e6:30:7e:77:b9:87: bc:b7:de:15:a1:eb:8c:37:78:ba:64:4c:81:da:3e: b3:b5:1e:bb:a9:b3:47:7a:e3:79:2c:2c:f9:0a:9c: 9a:4d:b4:c1:1e:24:ae:b8:d6:bb:b5:2d:fd:50:40: d2:75:4e:bc:6c:9b:ec:20:b5:ed:57:d6:78:7c:69: 45:a8:cc:57:ea:a5:45:c6:57:cc:c4:f2:ef:d0:7d: dc:9a:ef:bd:54:54:af:f4:9d:1c:8d:36:db:14:76: d1:44:68:19:38:3f:87:b5:ef:b9:f0:40:38:33:ae: c4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:65:C7:E5:C2:41:02:F1:51:B5:3A:41:C3:7A:18:1D:F1:2F:C3:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11e7b337-02b9-3773-b8d3-007a653255a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:9e:f3:df:3f:ad:cb:0c:77:cc:c7:9e:63:89:0b:b4:ad:54: c5:32:3c:23:2e:51:78:fb:52:76:02:89:55:eb:54:52:7a:5b: 9c:27:14:e0:62:30:22:73:bb:46:ab:81:36:88:da:a1:b2:e9: 81:57:9d:bc:fb:2b:b9:35:59:0a:e1:46:0a:2a:ac:c1:66:59: fc:da:be:11:1e:43:ed:9f:dd:8c:ca:28:cc:c2:23:9e:07:55: 8a:23:9c:65:88:86:75:3c:71:ae:8f:01:34:3a:4f:90:73:92: 37:9d:eb:99:4e:b3:31:b5:17:7f:ca:d7:d4:f1:10:3b:fd:be: 79:ef:43:7e:8c:ac:51:d7:50:09:01:4c:5b:c5:c9:bf:cc:8b: 38:75:47:92:44:98:9f:64:ff:f7:40:89:b2:ca:b0:73:61:6d: 82:45:05:c6:48:5f:b0:6e:b4:f8:94:f8:df:f8:fb:43:71:49: ee:38:b1:ef:70:2a:e8:a4:61:27:b5:81:84:ae:88:c3:d7:05: bb:42:1a:56:5b:c7:bf:31:a9:7f:3b:18:9a:b0:90:75:a1:f1: 44:93:b5:5e:c3:30:79:2e:20:62:b4:b0:fe:7d:05:e0:62:12: ed:10:12:24:77:7f:f1:02:34:3b:5f:74:26:4c:68:fc:5a:99: b5:51:ad:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gyRqYfD76niKFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk NGMwNmU4YTctZjBmNy00ODMxLTlmYTUtNmE5MWE1OGI3NjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJxg35HazgLS6I3ep8RGJ7Za31LsoPJHr2It /uluBy1awftqOsWsyHdCgbx4mXVd/wBE7GLBS+0jAWWOUajtfZLBOKdQnu0r0PZu RBuVReBaTA7Hz9BzsAn9rzSfdKAzfuB/FiALDqn0/A7Mry1o42GUME23PKnxBwJ/ wGEMzdTR08tXaqtCbTZTk4v8MgfmMH53uYe8t94VoeuMN3i6ZEyB2j6ztR67qbNH euN5LCz5CpyaTbTBHiSuuNa7tS39UEDSdU68bJvsILXtV9Z4fGlFqMxX6qVFxlfM xPLv0H3cmu+9VFSv9J0cjTbbFHbRRGgZOD+Hte+58EA4M67EhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtlx+XCQQLxUbU6QcN6GB3xL8PxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTFlN2IzMzctMDJiOS0z NzczLWI4ZDMtMDA3YTY1MzI1NWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ438MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+e898/rcsMd8zHnmOJC7StVMUyPCMuUXj7UnYCiVXrVFJ6W5wnFOBi MCJzu0argTaI2qGy6YFXnbz7K7k1WQrhRgoqrMFmWfzavhEeQ+2f3YzKKMzCI54H VYojnGWIhnU8ca6PATQ6T5Bzkjed65lOszG1F3/K19TxEDv9vnnvQ36MrFHXUAkB TFvFyb/Mizh1R5JEmJ9k//dAibLKsHNhbYJFBcZIX7ButPiU+N/4+0NxSe44se9w KuikYSe1gYSuiMPXBbtCGlZbx78xqX87GJqwkHWh8USTtV7DMHkuIGK0sP59BeBi Eu0QEiR3f/ECNDtfdCZMaPxambVRrcE= -----END CERTIFICATE-----Generated at Tue Oct 13 04:16:24 2026 by rpki-client