$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c09918d-953c-38fb-aeff-7363939b6d9a.roa File: 1c09918d-953c-38fb-aeff-7363939b6d9a.roa (raw, json) Hash identifier: MU0JDmx16TaDuK0RriQ4svS7iAYpNvyh1Kj9IPrDAxY= Subject key identifier: 0D:1E:BA:1B:5E:01:14:FC:3F:18:93:33:AF:99:DC:D3:3D:BD:37:6C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAA519B862C58E465C21FF200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c09918d-953c-38fb-aeff-7363939b6d9a.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 67.141.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:9b:86:2c:58:e4:65:c2:1f:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=8cf4d8a2-d996-4be0-8f2f-66e20cea552d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3d:4e:74:ca:03:43:0a:7c:77:2d:35:12:94: 48:71:92:36:b2:04:9d:8f:54:f5:b8:12:ab:bb:24: b3:9a:ea:03:4e:cd:83:e3:54:b8:0f:c5:9e:13:03: 39:74:2d:37:71:ec:24:53:c4:8e:79:d3:6c:c5:6d: aa:eb:6d:15:c8:11:ec:48:5e:30:0d:fc:1b:e3:64: 60:4c:96:15:7b:c3:6f:b3:d2:92:45:92:91:4a:bf: 92:c0:32:cd:88:e3:c3:10:35:38:50:1b:17:59:7f: 40:12:2f:0f:1b:31:19:ca:73:1f:54:f6:55:b1:97: 12:cb:fb:1b:cd:c1:aa:55:75:e6:cf:dd:83:b4:60: 3f:a3:5a:3f:bf:de:f6:33:ec:42:bc:71:e3:c8:11: d3:0b:ac:c9:0e:6f:95:02:75:98:5d:5f:4f:25:21: 96:23:d9:9d:72:87:db:3d:8e:2c:dd:85:9b:3c:4f: fe:2f:b5:22:5e:21:19:dd:ab:ca:4a:8d:06:a5:10: 2c:74:5d:a0:e6:98:ae:1a:af:43:fb:e5:b7:15:ff: 49:80:72:8d:d3:9e:66:3f:2e:13:f9:e3:94:be:bb: d5:6e:fc:6d:ea:7c:0a:81:27:55:7a:c6:db:22:64: 91:69:5e:fb:3e:90:fe:19:fd:8a:39:a4:2e:06:71: b3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1E:BA:1B:5E:01:14:FC:3F:18:93:33:AF:99:DC:D3:3D:BD:37:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c09918d-953c-38fb-aeff-7363939b6d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ce:44:cf:b1:26:de:7e:c8:67:69:26:dd:44:c9:55:71:41: 36:c0:ed:7c:0e:51:3b:d3:90:10:25:8a:06:17:71:76:f8:eb: e7:e7:29:3d:19:02:a6:3f:35:c6:28:5f:d1:9c:43:1b:38:2a: 13:f4:fe:07:fc:d6:c9:a4:7b:b2:db:2e:a7:8a:60:83:14:02: 59:7f:e2:1c:12:3c:e3:f4:a6:21:a5:7f:85:5f:f1:08:98:be: a9:3f:6c:41:62:2b:03:86:0e:ad:ce:89:37:94:ee:0f:1f:74: f4:c4:d3:65:1a:2e:38:43:49:80:bf:93:f8:f5:17:9c:9f:18: e8:da:9c:af:33:3a:af:ad:c9:4e:54:0e:11:a2:2e:df:81:23: 30:7c:01:3a:cf:ed:35:3b:de:3f:ca:3a:55:38:36:92:5a:f4: e5:89:1b:e9:82:32:de:33:cd:e8:2f:df:cd:bb:46:40:44:ec: d6:cf:e0:6b:28:91:21:47:8c:12:57:a2:3d:f6:95:7b:09:0f: a9:7e:2f:e8:7e:d4:68:8f:e5:5b:ab:c0:17:e0:f3:d5:7f:d0: 79:20:a4:00:de:67:46:cd:6e:ad:3a:77:79:7d:b1:57:01:94: 83:86:d7:3b:f2:45:c6:9d:56:e2:23:03:56:0f:fb:47:e9:be: 0f:9f:0c:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUZuGLFjkZcIf8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk OGNmNGQ4YTItZDk5Ni00YmUwLThmMmYtNjZlMjBjZWE1NTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z1OdMoDQwp8dy01EpRIcZI2sgSdj1T1uBKr uySzmuoDTs2D41S4D8WeEwM5dC03cewkU8SOedNsxW2q620VyBHsSF4wDfwb42Rg TJYVe8Nvs9KSRZKRSr+SwDLNiOPDEDU4UBsXWX9AEi8PGzEZynMfVPZVsZcSy/sb zcGqVXXmz92DtGA/o1o/v972M+xCvHHjyBHTC6zJDm+VAnWYXV9PJSGWI9mdcofb PY4s3YWbPE/+L7UiXiEZ3avKSo0GpRAsdF2g5piuGq9D++W3Ff9JgHKN055mPy4T +eOUvrvVbvxt6nwKgSdVesbbImSRaV77PpD+Gf2KOaQuBnGzxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0euhteART8PxiTM6+Z3NM9vTdsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWMwOTkxOGQtOTUzYy0z OGZiLWFlZmYtNzM2MzkzOWI2ZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ40AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3ORM+xJt5+yGdpJt1EyVVxQTbA7XwOUTvTkBAligYXcXb46+fnKT0Z AqY/NcYoX9GcQxs4KhP0/gf81smke7LbLqeKYIMUAll/4hwSPOP0piGlf4Vf8QiY vqk/bEFiKwOGDq3OiTeU7g8fdPTE02UaLjhDSYC/k/j1F5yfGOjanK8zOq+tyU5U DhGiLt+BIzB8ATrP7TU73j/KOlU4NpJa9OWJG+mCMt4zzegv3827RkBE7NbP4Gso kSFHjBJXoj32lXsJD6l+L+h+1GiP5VurwBfg89V/0HkgpADeZ0bNbq06d3l9sVcB lIOG1zvyRcadVuIjA1YP+0fpvg+fDNc= -----END CERTIFICATE-----Generated at Thu Aug 27 15:21:18 2026 by rpki-client