$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4135ce-e5e5-373e-b171-86440096c4bb.roa File: 2a4135ce-e5e5-373e-b171-86440096c4bb.roa (raw, json) Hash identifier: sgjoh7NQGU67IPoxhcLEj5tKuK5PPmIgws6hvVwLMOA= Subject key identifier: 54:A0:A1:0E:14:1C:4D:E3:0F:64:0A:30:2A:CB:A4:6F:BF:77:5B:CE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D734A241A0CCE2FF26E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4135ce-e5e5-373e-b171-86440096c4bb.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 64.196.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:73:4a:24:1a:0c:ce:2f:f2:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=5d535727-983d-4c74-ad28-0fe0e0450271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5a:5d:3b:a6:ec:f9:fa:51:a7:2f:89:46:89: 0a:61:b7:bb:06:9c:9f:c8:b5:b6:9a:b7:d9:b6:f0: 5a:79:70:cf:a2:2b:d2:52:09:8a:4a:94:00:80:db: e8:a8:b6:52:26:fd:4d:0a:ee:bf:73:51:a6:b3:47: a4:17:25:d3:50:ff:9f:c7:50:ed:fd:dd:67:28:f2: 42:28:c0:19:24:8a:b8:fe:e5:71:4c:e1:c3:02:94: 68:82:12:8b:cd:c3:a9:4b:50:cf:a2:d1:d8:9f:cb: 90:07:66:d9:d1:0b:3d:fd:9d:e2:1d:b0:ef:54:fb: 3f:0c:df:37:0c:91:64:47:5d:74:6e:81:53:87:43: c3:29:e4:a7:5b:56:70:d3:05:b1:80:ae:0d:04:79: ea:aa:3f:75:53:0f:11:fc:1b:b1:1d:04:d4:8f:1e: 5e:ce:65:4c:ac:13:5d:5c:44:ee:47:05:92:74:e9: 08:2a:f2:cf:b8:16:b7:a4:a8:6e:26:b4:de:9c:65: c3:ae:76:eb:ca:80:3e:63:ce:f9:b4:e5:b3:cf:f4: aa:66:e5:d3:ea:3b:0a:04:2c:dc:8b:46:82:31:43: 0e:da:6c:49:83:c8:c3:8a:d0:70:55:76:5c:13:72: aa:a0:2f:d3:e2:8c:e4:88:a4:17:96:07:93:c3:b8: 3b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A0:A1:0E:14:1C:4D:E3:0F:64:0A:30:2A:CB:A4:6F:BF:77:5B:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4135ce-e5e5-373e-b171-86440096c4bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.196.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:9f:4f:31:f7:52:fa:53:47:85:3e:ed:3e:d1:a3:f8:7f:6f: ab:11:18:0d:f5:4a:15:4c:a4:83:22:ed:88:d7:3f:e1:b7:34: 7c:25:a2:44:98:14:0d:7a:0e:0f:a6:58:0f:06:62:61:e3:f0: af:92:40:1e:02:27:d9:20:fb:61:f9:ff:28:d0:44:72:de:e2: fa:c6:81:97:eb:a0:66:57:84:0c:11:8e:fd:f2:ec:98:b4:85: 3c:a7:eb:17:18:85:9e:44:32:78:da:9e:ef:98:03:99:f3:c9: b8:ac:cd:ee:d1:cb:9e:3b:2e:10:9b:47:77:72:e0:9e:83:b9: ee:03:56:1c:86:85:cf:a6:c9:d0:f9:28:ba:aa:d4:5c:c9:12: 7e:32:b2:2d:e8:01:4c:6c:43:e0:25:14:a7:9c:9c:ed:3e:85: ad:96:db:0c:56:d4:61:05:e1:e7:57:0b:f9:d6:aa:c7:1d:e9: 58:2c:4d:5c:f8:7a:7e:3e:62:51:ae:8b:a0:02:87:3b:47:32: 93:fc:21:23:6d:db:0d:bb:4a:77:8a:11:b3:b7:c2:b9:07:e7: 59:c6:90:fe:bc:b9:c3:da:79:44:c6:d8:1c:9c:f5:15:66:84: 8f:8c:23:02:94:f0:02:4c:a5:2e:66:28:0f:aa:c0:6b:53:9c: f9:56:67:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXNKJBoMzi/yboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NWQ1MzU3MjctOTgzZC00Yzc0LWFkMjgtMGZlMGUwNDUwMjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFpdO6bs+fpRpy+JRokKYbe7BpyfyLW2mrfZ tvBaeXDPoivSUgmKSpQAgNvoqLZSJv1NCu6/c1Gms0ekFyXTUP+fx1Dt/d1nKPJC KMAZJIq4/uVxTOHDApRoghKLzcOpS1DPotHYn8uQB2bZ0Qs9/Z3iHbDvVPs/DN83 DJFkR110boFTh0PDKeSnW1Zw0wWxgK4NBHnqqj91Uw8R/BuxHQTUjx5ezmVMrBNd XETuRwWSdOkIKvLPuBa3pKhuJrTenGXDrnbryoA+Y875tOWzz/SqZuXT6jsKBCzc i0aCMUMO2mxJg8jDitBwVXZcE3KqoC/T4ozkiKQXlgeTw7g7XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSgoQ4UHE3jD2QKMCrLpG+/d1vOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmE0MTM1Y2UtZTVlNS0z NzNlLWIxNzEtODY0NDAwOTZjNGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqfTzH3UvpTR4U+7T7Ro/h/b6sRGA31ShVMpIMi7YjXP+G3NHwlokSY FA16Dg+mWA8GYmHj8K+SQB4CJ9kg+2H5/yjQRHLe4vrGgZfroGZXhAwRjv3y7Ji0 hTyn6xcYhZ5EMnjanu+YA5nzybisze7Ry547LhCbR3dy4J6Due4DVhyGhc+mydD5 KLqq1FzJEn4ysi3oAUxsQ+AlFKecnO0+ha2W2wxW1GEF4edXC/nWqscd6VgsTVz4 en4+YlGui6AChztHMpP8ISNt2w27SneKEbO3wrkH51nGkP68ucPaeUTG2Byc9RVm hI+MIwKU8AJMpS5mKA+qwGtTnPlWZ4Y= -----END CERTIFICATE-----Generated at Tue Oct 13 16:01:02 2026 by rpki-client