$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28691860-7dc6-3bba-bc74-2a2791eb58ca.roa File: 28691860-7dc6-3bba-bc74-2a2791eb58ca.roa (raw, json) Hash identifier: M+KZKl73Is+EVcwNkU7XkQQI/Httak93fdy7rz6aHuk= Subject key identifier: 1A:11:81:D1:F5:DE:F3:15:C2:46:D6:1D:0F:2E:D5:9D:97:85:9D:CE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D806DE25B81776BDAC880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28691860-7dc6-3bba-bc74-2a2791eb58ca.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 62583 IP address blocks: 66.32.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:80:6d:e2:5b:81:77:6b:da:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=2fa31a7a-494e-4616-9fe7-48d85dca7f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e0:8c:68:e1:ba:40:d8:af:bb:d9:eb:5d:9d: 68:79:ab:06:14:d9:18:74:02:e7:b0:8a:08:bd:12: c3:06:59:99:e2:70:71:39:d3:2b:2a:83:77:7d:d1: e8:68:10:36:40:e1:98:74:64:26:09:78:be:e1:68: 74:31:1a:65:70:67:32:98:0d:d5:d2:c6:b3:f8:85: b1:e5:6d:c3:62:67:24:d9:b8:7e:70:cc:b4:14:51: ce:bc:3e:dc:18:73:81:4a:89:62:33:c3:f5:9f:a0: a3:7b:35:22:ba:a1:3d:a3:fe:8a:87:d9:12:28:ee: 00:26:d4:b0:dc:6a:6d:2a:c3:09:97:5d:7d:dd:1a: e5:1a:af:06:51:33:da:62:79:04:f2:54:4b:75:4f: 22:6e:de:3a:05:41:eb:2e:33:89:d1:36:29:f4:11: c8:a5:33:6c:72:64:30:58:c2:78:da:11:a9:d3:d1: 5f:72:70:2e:96:e0:28:2c:7d:40:86:08:26:15:a4: 38:7b:d9:fc:fe:34:ac:e6:0d:4f:4a:36:22:36:3e: 36:8b:50:d2:9b:2f:89:83:15:56:5b:74:eb:5e:a9: 89:a2:70:f6:0e:59:b1:57:cd:9a:6b:9e:fa:01:d0: 18:58:1d:3e:54:4f:c9:7c:a0:75:bb:bb:ce:79:c1: 48:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:11:81:D1:F5:DE:F3:15:C2:46:D6:1D:0F:2E:D5:9D:97:85:9D:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28691860-7dc6-3bba-bc74-2a2791eb58ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.32.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:cc:b4:52:9c:80:24:23:a1:d8:8f:25:0b:fe:80:69:19:a3: dd:53:c6:0a:63:35:28:62:4b:72:26:83:bc:8a:4f:ba:93:73: 5f:e3:f9:b8:84:4a:69:26:c6:e5:7c:04:46:63:a7:c6:86:7d: 65:d4:39:ff:4f:a8:82:ac:be:a9:1c:11:bf:ce:d8:bb:8d:e5: 50:f5:f2:6b:f9:88:86:0a:da:3a:b2:a1:ab:32:a1:ee:f7:76: 83:85:0b:ea:fa:9f:e3:f0:be:21:99:a7:0e:87:ed:15:70:a7: 91:10:bd:fc:03:16:df:91:46:dd:28:f7:d6:19:f4:22:e2:00: 34:31:fb:09:91:bc:46:82:d8:fb:a2:e9:20:4c:21:b3:31:f9: 8e:66:33:37:e2:d3:38:09:de:9c:82:ff:50:da:06:c9:4d:2e: ca:7e:35:40:5c:e4:e0:c2:01:f2:70:f9:ee:5e:a7:49:91:ea: 26:2b:e9:d9:87:6f:f1:0f:b8:83:6d:f7:77:1f:39:28:6c:65: b4:4a:31:07:66:72:17:ca:46:a3:4f:91:18:30:42:c7:8b:ee: c7:0a:f2:ae:a1:c7:3b:5f:99:c7:32:5e:e0:53:4b:57:46:eb: a9:19:f9:e3:3d:0c:14:64:e6:50:84:3b:11:35:d2:e5:af:cb: 4b:a4:e8:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnYBt4luBd2vayIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MmZhMzFhN2EtNDk0ZS00NjE2LTlmZTctNDhkODVkY2E3Zjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+CMaOG6QNivu9nrXZ1oeasGFNkYdALnsIoI vRLDBlmZ4nBxOdMrKoN3fdHoaBA2QOGYdGQmCXi+4Wh0MRplcGcymA3V0saz+IWx 5W3DYmck2bh+cMy0FFHOvD7cGHOBSoliM8P1n6CjezUiuqE9o/6Kh9kSKO4AJtSw 3GptKsMJl1193RrlGq8GUTPaYnkE8lRLdU8ibt46BUHrLjOJ0TYp9BHIpTNscmQw WMJ42hGp09FfcnAuluAoLH1AhggmFaQ4e9n8/jSs5g1PSjYiNj42i1DSmy+JgxVW W3TrXqmJonD2DlmxV82aa576AdAYWB0+VE/JfKB1u7vOecFIVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoRgdH13vMVwkbWHQ8u1Z2XhZ3OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjg2OTE4NjAtN2RjNi0z YmJhLWJjNzQtMmEyNzkxZWI1OGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiBlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3MtFKcgCQjodiPJQv+gGkZo91TxgpjNShiS3Img7yKT7qTc1/j+biE SmkmxuV8BEZjp8aGfWXUOf9PqIKsvqkcEb/O2LuN5VD18mv5iIYK2jqyoasyoe73 doOFC+r6n+PwviGZpw6H7RVwp5EQvfwDFt+RRt0o99YZ9CLiADQx+wmRvEaC2Pui 6SBMIbMx+Y5mMzfi0zgJ3pyC/1DaBslNLsp+NUBc5ODCAfJw+e5ep0mR6iYr6dmH b/EPuINt93cfOShsZbRKMQdmchfKRqNPkRgwQseL7scK8q6hxztfmccyXuBTS1dG 66kZ+eM9DBRk5lCEOxE10uWvy0uk6NU= -----END CERTIFICATE-----Generated at Tue Oct 13 16:04:33 2026 by rpki-client