$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f978b1c-66fa-38cb-9c96-90bfca20f11a.roa File: 2f978b1c-66fa-38cb-9c96-90bfca20f11a.roa (raw, json) Hash identifier: anAzXhnLgj7ImKj2LE6eil23nOfiw3QvxeXQJLbUX9U= Subject key identifier: E6:9B:44:10:57:55:51:6D:56:09:8A:6A:25:14:F2:D4:09:69:61:92 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F78E82AA80CB1F1BB17546E40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f978b1c-66fa-38cb-9c96-90bfca20f11a.roa Signing time: Mon 12 Oct 2026 01:00:13 +0000 ROA not before: Mon 12 Oct 2026 01:00:13 +0000 ROA not after: Sun 10 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 67.141.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:78:e8:2a:a8:0c:b1:f1:bb:17:54:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 01:00:13 2026 GMT Not After : Jan 10 02:00:13 2027 GMT Subject: CN=987bb88b-b600-4bd0-b1c4-9f9e1ed3a1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e9:1f:7b:89:4a:0f:84:75:4a:9d:24:af:2a: f1:c3:08:80:8d:31:3e:3f:91:cd:60:c8:92:8c:5f: 65:ba:9e:f9:64:2a:fd:a5:d3:f1:82:f5:7d:a8:51: 16:37:29:69:a8:fc:4a:6b:bf:a7:f0:b8:a9:d2:1c: cb:8b:e9:1b:5c:e6:41:45:97:ac:7a:ce:ec:73:01: 14:cf:38:5d:20:5b:e6:4a:1d:da:bf:0c:f8:f5:96: 4a:af:c6:33:2f:03:be:5d:e1:cc:ca:ac:70:cd:dc: d2:df:60:93:14:50:a2:6f:aa:b1:6b:6b:5c:42:36: c5:73:34:67:02:4d:94:84:86:07:84:50:9c:b9:86: 51:ef:a6:01:8b:8d:93:3d:d4:5f:b3:cb:73:6c:d8: 53:f3:6a:9d:ed:f5:d3:1d:6c:44:eb:7e:c8:9f:12: 22:8a:e3:18:0e:54:b2:e4:33:c4:84:0d:29:51:58: 6a:41:48:65:f2:56:ae:38:85:6d:3d:9c:20:7a:2c: ec:45:51:08:9f:a9:5a:af:06:3a:7b:5e:c9:42:cf: 7e:c7:56:de:4c:58:84:67:98:a2:4c:cc:a6:99:29: 43:ef:c8:6b:96:c7:9f:15:8a:a1:0f:c1:1c:ce:8f: 52:1f:65:24:76:9f:90:5b:b0:65:19:5b:e3:70:9c: af:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9B:44:10:57:55:51:6D:56:09:8A:6A:25:14:F2:D4:09:69:61:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f978b1c-66fa-38cb-9c96-90bfca20f11a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:18:c0:d9:40:fa:2c:b4:e0:67:ed:4d:e6:54:33:ed:71:2b: 8b:29:90:1f:d0:b5:a2:6a:b3:4d:f6:3f:10:71:45:93:3f:2e: 6f:c8:f3:91:f2:25:d5:2e:25:87:85:42:39:f4:2c:d0:ba:99: ba:e3:17:43:b9:76:27:77:f5:b1:fc:58:1f:f7:c9:c5:52:1f: 42:b0:14:b6:39:2a:38:fc:7a:c7:cd:87:f1:11:85:11:90:31: 55:56:05:86:4c:03:8c:f8:91:23:ae:c5:25:4f:ce:01:f1:c1: d4:8c:3e:81:28:00:2e:89:2c:4e:14:1b:81:20:69:e2:5c:58: 5d:2e:73:e6:64:59:26:4a:bb:65:5c:96:5a:52:a3:9f:16:3c: 2c:ad:f2:6d:87:40:a9:ed:55:5f:bc:81:1a:1c:5e:4b:0a:e0: 72:a4:ae:da:2e:ee:b4:57:e7:2d:82:01:85:54:b4:54:95:aa: 88:11:10:c1:1f:9d:88:66:39:94:62:a9:ce:7f:64:f4:60:fe: ae:d2:ad:e4:ab:c3:07:98:36:3a:4a:23:b2:04:15:4a:c3:8f: c0:2f:35:cf:46:00:54:bd:9e:cc:6d:64:68:eb:fa:f6:f4:13: 98:b4:f0:61:d9:7d:4b:3d:6c:f3:44:12:08:00:97:3e:a3:6b: 01:ae:72:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE946CqoDLHxuxdUbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMjAxMDAxM1oXDTI3MDExMDAyMDAxM1owLzEtMCsGA1UEAxMk OTg3YmI4OGItYjYwMC00YmQwLWIxYzQtOWY5ZTFlZDNhMWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Okfe4lKD4R1Sp0kryrxwwiAjTE+P5HNYMiS jF9lup75ZCr9pdPxgvV9qFEWNylpqPxKa7+n8Lip0hzLi+kbXOZBRZeses7scwEU zzhdIFvmSh3avwz49ZZKr8YzLwO+XeHMyqxwzdzS32CTFFCib6qxa2tcQjbFczRn Ak2UhIYHhFCcuYZR76YBi42TPdRfs8tzbNhT82qd7fXTHWxE637InxIiiuMYDlSy 5DPEhA0pUVhqQUhl8lauOIVtPZwgeizsRVEIn6larwY6e17JQs9+x1beTFiEZ5ii TMymmSlD78hrlsefFYqhD8Eczo9SH2Ukdp+QW7BlGVvjcJyv/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOabRBBXVVFtVgmKaiUU8tQJaWGSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmY5NzhiMWMtNjZmYS0z OGNiLTljOTYtOTBiZmNhMjBmMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ43WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsYwNlA+iy04GftTeZUM+1xK4spkB/QtaJqs032PxBxRZM/Lm/I85Hy JdUuJYeFQjn0LNC6mbrjF0O5did39bH8WB/3ycVSH0KwFLY5Kjj8esfNh/ERhRGQ MVVWBYZMA4z4kSOuxSVPzgHxwdSMPoEoAC6JLE4UG4EgaeJcWF0uc+ZkWSZKu2Vc llpSo58WPCyt8m2HQKntVV+8gRocXksK4HKkrtou7rRX5y2CAYVUtFSVqogREMEf nYhmOZRiqc5/ZPRg/q7SreSrwweYNjpKI7IEFUrDj8AvNc9GAFS9nsxtZGjr+vb0 E5i08GHZfUs9bPNEEggAlz6jawGucpI= -----END CERTIFICATE-----Generated at Tue Oct 13 17:38:10 2026 by rpki-client