$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa File: 35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa (raw, json) Hash identifier: Os2uGNNnctRmZjTR3Mmxu6GY7XvP4g2ZgxwTCmBdqew= Subject key identifier: 82:EE:7B:34:27:CA:C5:43:EB:FC:2F:0E:90:CA:07:12:6C:C6:DC:78 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D943403F79FE985412E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 2001:4988::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:94:34:03:f7:9f:e9:85:41:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=d4f68936-f355-4d47-b843-2c440dbac5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:82:98:2a:da:6d:ea:95:a1:d0:39:2d:e1:95: 48:b7:2b:ab:43:ef:3c:fd:ea:2a:7c:c0:c3:b5:08: 07:1f:d4:ca:58:65:8c:63:24:2a:b7:1f:81:dc:52: 8e:9a:b5:8e:cd:68:74:2e:20:77:7c:1a:de:d7:a1: 3c:53:38:4f:06:b7:84:23:6d:31:c1:b4:78:85:05: 1e:f3:46:2d:08:d4:19:ad:e7:e7:2c:b3:42:b5:70: 7c:a4:02:83:8c:c9:78:d0:78:22:e9:e5:88:4e:fa: 72:95:7c:4f:43:22:b8:e3:ca:9a:9d:50:b6:46:f7: 23:1e:ef:0a:9c:20:be:18:d6:c5:37:44:73:89:61: 1f:3a:a0:bd:10:c9:04:00:22:c1:f1:92:65:68:b3: ad:20:19:a1:6f:70:83:ad:66:27:fb:6b:80:d1:8a: e0:36:4e:a3:53:f4:d4:0b:71:cf:d3:2e:f5:eb:b2: 47:fe:e2:35:31:41:fa:51:0e:e2:34:0e:74:ce:bd: ba:c1:6f:e1:a2:ae:27:a2:b9:50:d0:2d:da:eb:7d: 03:05:1d:37:3f:e4:52:e2:2b:9a:8c:4c:6c:86:8b: 21:5c:11:97:bc:4b:af:26:2c:f2:dd:3b:f7:60:79: 0e:a5:78:b4:86:f9:3c:c3:23:fe:27:1b:94:4c:d2: 3a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EE:7B:34:27:CA:C5:43:EB:FC:2F:0E:90:CA:07:12:6C:C6:DC:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:4988::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:5b:70:0d:ac:46:ca:e9:06:cf:e1:1c:c0:ba:88:5e:a1:d1: cb:81:83:c2:ae:92:b8:b4:a5:b0:ba:85:c9:23:ed:a7:a3:e8: 24:19:e3:a4:77:e5:61:8e:45:68:dc:6f:e3:8e:7a:2e:de:6d: 43:93:f6:89:a2:52:45:78:79:74:79:fc:12:65:44:c4:bb:36: e5:55:c4:a8:e9:c6:93:f2:e7:dc:31:c2:9a:a0:66:ae:65:bc: d6:ae:3e:6f:ae:32:87:0c:ab:0d:f6:16:02:89:27:89:21:c3: 63:48:5b:ea:e9:20:77:0f:a8:4f:11:dc:0b:64:b4:1f:b8:fc: 6d:32:32:8b:02:11:96:40:68:b3:76:85:88:91:f2:b4:19:71: 5b:59:50:0b:cc:4b:3f:e8:37:37:a3:d9:4f:b0:68:9b:6f:ac: 83:6f:21:8b:27:6f:d9:38:64:45:64:38:a5:3c:d0:0c:59:ad: a0:9a:a3:f6:a6:91:b4:e9:12:94:be:f0:de:aa:dd:dc:0a:ad: 71:00:27:88:30:f2:2a:2b:7d:ab:ca:de:a4:0d:06:de:c0:cc: 63:db:bd:f1:9e:7e:e8:5e:6a:cb:c2:47:b3:a8:85:42:40:d5: b8:e0:17:1f:52:c2:0f:2a:16:17:bb:2f:58:4a:de:ad:87:99: 4f:d5:88:06 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9UnZQ0A/ef6YVBLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZDRmNjg5MzYtZjM1NS00ZDQ3LWI4NDMtMmM0NDBkYmFjNWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYKYKtpt6pWh0Dkt4ZVItyurQ+88/eoqfMDD tQgHH9TKWGWMYyQqtx+B3FKOmrWOzWh0LiB3fBre16E8UzhPBreEI20xwbR4hQUe 80YtCNQZrefnLLNCtXB8pAKDjMl40Hgi6eWITvpylXxPQyK448qanVC2RvcjHu8K nCC+GNbFN0RziWEfOqC9EMkEACLB8ZJlaLOtIBmhb3CDrWYn+2uA0YrgNk6jU/TU C3HP0y7167JH/uI1MUH6UQ7iNA50zr26wW/hoq4norlQ0C3a630DBR03P+RS4iua jExshoshXBGXvEuvJizy3Tv3YHkOpXi0hvk8wyP+JxuUTNI6RwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFILuezQnysVD6/wvDpDKBxJsxtx4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzVlNWM1M2UtYzUzNi0z ZjcwLThmNGQtMTlhZThhMjg4NmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFJiDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBSW3ANrEbK6QbP4RzAuoheodHLgYPCrpK4tKWwuoXJI+2no+gkGeOk d+VhjkVo3G/jjnou3m1Dk/aJolJFeHl0efwSZUTEuzblVcSo6caT8ufcMcKaoGau ZbzWrj5vrjKHDKsN9hYCiSeJIcNjSFvq6SB3D6hPEdwLZLQfuPxtMjKLAhGWQGiz doWIkfK0GXFbWVALzEs/6Dc3o9lPsGibb6yDbyGLJ2/ZOGRFZDilPNAMWa2gmqP2 ppG06RKUvvDeqt3cCq1xACeIMPIqK32ryt6kDQbewMxj273xnn7oXmrLwkezqIVC QNW44BcfUsIPKhYXuy9YSt6th5lP1YgG -----END CERTIFICATE-----Generated at Tue Oct 13 16:02:05 2026 by rpki-client