$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/304cd21a-1b5e-3dbf-b5a5-e1f18578bc5d.roa File: 304cd21a-1b5e-3dbf-b5a5-e1f18578bc5d.roa (raw, json) Hash identifier: wKg4fdrBzcTr1vyCXHfMqUEFVVD5ywdIWhepR5pp9lU= Subject key identifier: B2:D4:37:17:63:D9:CB:CD:44:56:36:75:C7:B6:9F:76:6C:62:A8:24 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7A4E66848487252AFE4B8440 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/304cd21a-1b5e-3dbf-b5a5-e1f18578bc5d.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 69.66.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:66:84:84:87:25:2a:fe:4b:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=47d2a90e-bcf1-406b-a620-2da3209fb0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:08:5c:23:2d:e2:fe:95:9e:66:ac:e5:b4:b4: 6e:c6:73:64:46:d8:8b:34:43:f7:29:27:c2:05:33: 05:ca:47:7c:a5:6f:c3:c3:88:9d:6d:e8:85:49:61: aa:8f:87:d6:b7:b3:e5:bb:0d:bf:9a:1e:c4:58:6d: e7:df:5b:52:46:33:42:a5:b7:8e:3c:af:d5:02:4a: 30:28:16:31:84:e7:d7:07:19:ee:97:28:ce:53:6c: 6c:67:70:65:08:08:b7:e4:f3:6e:c1:49:14:75:ef: d9:f7:7b:f5:29:13:e4:77:d3:5b:26:be:bb:8e:22: ad:70:18:8d:bd:57:46:9f:96:37:74:14:a5:c3:d6: d0:e2:52:10:fb:1e:10:19:d6:8f:88:8a:db:90:e8: 2d:03:ec:ef:a0:09:53:ff:10:d7:8e:12:4f:8d:50: ea:d2:91:15:00:64:96:02:44:58:8c:cf:28:48:f6: 34:b4:c1:99:f4:5a:a8:bb:c7:2d:4c:ca:64:fe:02: e6:be:ed:b2:c7:06:52:13:ed:65:7a:5f:69:83:fc: c8:be:0a:81:6c:9d:1c:ec:4d:a4:c3:d3:d4:71:7f: f9:7f:d1:a4:7d:48:88:4e:89:51:ea:8e:0f:bc:da: 17:e7:42:24:fc:f5:34:cb:40:d1:23:0c:16:84:55: 9d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D4:37:17:63:D9:CB:CD:44:56:36:75:C7:B6:9F:76:6C:62:A8:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/304cd21a-1b5e-3dbf-b5a5-e1f18578bc5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:5d:0f:13:67:c1:8d:73:cc:d1:38:07:77:96:aa:6e:82:f4: be:dc:87:d6:b8:bd:c5:3c:cf:d6:91:7e:fd:c8:ca:15:3b:9b: 20:94:c6:5f:cc:d1:97:ac:62:8e:9c:4c:bc:56:0d:11:90:36: a7:ae:02:62:78:3a:47:6c:20:a6:db:09:03:0e:b2:53:71:24: 2a:4a:8a:d9:90:68:28:4f:0f:c0:82:f7:6c:c9:6d:d9:ac:a6: c0:75:fb:0b:55:09:48:b8:f0:6a:18:60:cc:ca:1d:60:fa:d3: 34:a1:be:d1:3f:55:1d:e8:35:dc:73:af:a8:76:6e:7b:f7:5d: 99:06:2f:6f:0c:23:c7:b9:2d:64:6f:cb:a6:41:15:45:9d:a9: 19:07:c9:7d:60:6c:62:c7:ce:ad:d6:09:bb:87:30:ca:b9:43: 01:b0:ae:87:45:96:fc:32:d5:65:96:6e:f5:14:eb:fc:87:e7: 95:3c:bc:0f:60:ce:a8:b9:ca:8a:46:46:13:d7:35:69:49:d7: e9:4a:f7:b7:9f:27:15:de:54:6f:bd:4e:ff:b8:2e:3a:1d:61: ab:0a:db:be:0b:59:cb:ac:a5:82:88:e4:91:4b:9c:90:2e:85: 56:ee:90:18:f8:5b:27:01:8a:e5:80:1f:34:61:6f:02:19:c5: 02:d3:f8:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TmaEhIclKv5LhEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NDdkMmE5MGUtYmNmMS00MDZiLWE2MjAtMmRhMzIwOWZiMGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+QhcIy3i/pWeZqzltLRuxnNkRtiLNEP3KSfC BTMFykd8pW/Dw4idbeiFSWGqj4fWt7Pluw2/mh7EWG3n31tSRjNCpbeOPK/VAkow KBYxhOfXBxnulyjOU2xsZ3BlCAi35PNuwUkUde/Z93v1KRPkd9NbJr67jiKtcBiN vVdGn5Y3dBSlw9bQ4lIQ+x4QGdaPiIrbkOgtA+zvoAlT/xDXjhJPjVDq0pEVAGSW AkRYjM8oSPY0tMGZ9Fqou8ctTMpk/gLmvu2yxwZSE+1lel9pg/zIvgqBbJ0c7E2k w9PUcX/5f9GkfUiITolR6o4PvNoX50Ik/PU0y0DRIwwWhFWd6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLUNxdj2cvNRFY2dce2n3ZsYqgkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzA0Y2QyMWEtMWI1ZS0z ZGJmLWI1YTUtZTFmMTg1NzhiYzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUKeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9dDxNnwY1zzNE4B3eWqm6C9L7ch9a4vcU8z9aRfv3IyhU7myCUxl/M 0ZesYo6cTLxWDRGQNqeuAmJ4OkdsIKbbCQMOslNxJCpKitmQaChPD8CC92zJbdms psB1+wtVCUi48GoYYMzKHWD60zShvtE/VR3oNdxzr6h2bnv3XZkGL28MI8e5LWRv y6ZBFUWdqRkHyX1gbGLHzq3WCbuHMMq5QwGwrodFlvwy1WWWbvUU6/yH55U8vA9g zqi5yopGRhPXNWlJ1+lK97efJxXeVG+9Tv+4LjodYasK274LWcuspYKI5JFLnJAu hVbukBj4WycBiuWAHzRhbwIZxQLT+DY= -----END CERTIFICATE-----Generated at Tue Oct 13 09:12:52 2026 by rpki-client