$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1582a278-a9a0-34ec-b9a0-508aef382872.roa File: 1582a278-a9a0-34ec-b9a0-508aef382872.roa (raw, json) Hash identifier: Sg1J0rvS6DyN3JR1Ta3vgwon1TSGolUnBg1bGsoBWDI= Subject key identifier: 14:FF:7F:F8:A9:4F:98:19:66:AA:BE:12:EE:0A:DF:A7:CE:D5:78:D3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F778323BD719D71C774D20780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1582a278-a9a0-34ec-b9a0-508aef382872.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 67.140.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:23:bd:71:9d:71:c7:74:d2:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=0d88d060-899f-4a9b-9f40-8915c18cb281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:42:b6:e9:ea:78:6d:3e:0a:b7:03:55:ed:ca: 43:00:cc:25:b2:6c:14:33:9a:ea:87:1e:da:c5:7a: 56:47:5b:b0:a2:0d:7b:88:84:31:2e:cc:d7:99:9c: a2:24:99:a0:b9:ac:f5:19:0d:58:89:2e:32:b0:78: d1:0d:da:9a:ad:d0:d5:88:33:ef:98:ea:69:81:d2: 30:1e:c9:9c:05:09:ea:9e:13:12:71:a8:72:d1:0b: 12:22:51:d4:35:13:9d:4e:ab:bb:b6:a5:79:01:21: 64:9d:8d:3a:88:25:d3:e8:e2:8e:17:ad:1b:71:e7: a1:a1:1a:d0:15:ed:7d:39:99:12:ec:e9:82:9c:bc: 37:0f:e8:a2:19:e6:6c:6c:f6:bc:36:3d:b3:92:dd: 06:71:29:2a:14:c3:d8:1b:2e:e2:0f:3e:56:62:3a: 6f:ad:65:6c:03:96:0f:50:a5:64:76:e2:6f:1e:4c: b5:85:a0:a9:60:2c:78:76:67:ea:03:15:67:13:10: 19:54:f0:be:64:12:21:47:b9:f9:d5:4c:06:28:aa: 5f:83:2c:bf:8e:da:50:38:22:c1:c0:b7:29:4e:85: d2:a1:fe:f9:30:a2:de:31:b9:64:26:7e:bf:03:af: fe:dd:03:72:60:a8:d3:a2:e9:8a:cd:61:7a:16:89: 46:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FF:7F:F8:A9:4F:98:19:66:AA:BE:12:EE:0A:DF:A7:CE:D5:78:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1582a278-a9a0-34ec-b9a0-508aef382872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:eb:a7:47:4e:3b:5e:b3:bc:ef:b6:5a:85:38:b2:d3:7c:3e: d8:b6:f9:1b:fd:22:f2:63:96:74:0b:97:97:06:b8:ce:b2:38: 54:f1:9d:28:71:29:9b:6c:a7:d0:eb:64:3f:a5:8b:9f:f4:ef: 78:63:e0:2f:4b:7c:b9:07:70:b0:92:31:a1:1f:2d:30:5f:43: fb:b9:f6:55:2c:4a:0e:d0:8e:88:6d:0c:d6:0d:84:fc:1c:7a: db:15:fb:60:5c:0a:80:11:f4:63:65:27:b9:4b:58:24:73:ab: e5:c5:43:04:b1:cd:e2:53:97:29:0f:81:9c:ef:d4:1a:44:d8: 0c:e3:b6:0b:20:26:e6:02:6b:f2:a0:e2:ed:10:83:a8:31:e0: 4c:84:02:7f:76:c9:e3:58:b4:aa:8e:d7:cc:dd:58:4c:91:ae: 6e:31:71:23:05:bf:14:a4:3b:e7:cd:a9:7d:0b:24:c3:07:e4: 11:18:c9:4c:d1:16:03:45:41:69:cf:a6:6c:ec:7f:1d:ec:fe: 54:01:7c:ef:ce:e8:87:8a:7c:91:3d:f9:c5:c4:e2:f9:37:b4: 06:fb:5e:80:a6:59:37:51:b9:c6:49:64:12:18:2c:5b:17:b0: ee:7a:1f:eb:e8:91:4f:be:8b:a5:2c:1f:38:52:23:1a:55:fc: 99:1c:8a:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gyO9cZ1xx3TSB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk MGQ4OGQwNjAtODk5Zi00YTliLTlmNDAtODkxNWMxOGNiMjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0K26ep4bT4KtwNV7cpDAMwlsmwUM5rqhx7a xXpWR1uwog17iIQxLszXmZyiJJmguaz1GQ1YiS4ysHjRDdqardDViDPvmOppgdIw HsmcBQnqnhMScahy0QsSIlHUNROdTqu7tqV5ASFknY06iCXT6OKOF60bceehoRrQ Fe19OZkS7OmCnLw3D+iiGeZsbPa8Nj2zkt0GcSkqFMPYGy7iDz5WYjpvrWVsA5YP UKVkduJvHky1haCpYCx4dmfqAxVnExAZVPC+ZBIhR7n51UwGKKpfgyy/jtpQOCLB wLcpToXSof75MKLeMblkJn6/A6/+3QNyYKjToumKzWF6FolGLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBT/f/ipT5gZZqq+Eu4K36fO1XjTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTU4MmEyNzgtYTlhMC0z NGVjLWI5YTAtNTA4YWVmMzgyODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ4xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTrp0dOO16zvO+2WoU4stN8Pti2+Rv9IvJjlnQLl5cGuM6yOFTxnShx KZtsp9DrZD+li5/073hj4C9LfLkHcLCSMaEfLTBfQ/u59lUsSg7QjohtDNYNhPwc etsV+2BcCoAR9GNlJ7lLWCRzq+XFQwSxzeJTlykPgZzv1BpE2AzjtgsgJuYCa/Kg 4u0Qg6gx4EyEAn92yeNYtKqO18zdWEyRrm4xcSMFvxSkO+fNqX0LJMMH5BEYyUzR FgNFQWnPpmzsfx3s/lQBfO/O6IeKfJE9+cXE4vk3tAb7XoCmWTdRucZJZBIYLFsX sO56H+vokU++i6UsHzhSIxpV/JkcirI= -----END CERTIFICATE-----Generated at Tue Oct 13 19:30:23 2026 by rpki-client