$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36ae05ca-1685-3b04-877b-765a67c8b22a.roa File: 36ae05ca-1685-3b04-877b-765a67c8b22a.roa (raw, json) Hash identifier: D/w4dBBfoiL5xHZNkKAgmDnKow6GyRQX80koISs150Y= Subject key identifier: 2F:C1:F7:6D:F6:6D:A4:42:C3:C8:FA:5D:5D:CD:E7:60:A4:DD:FE:23 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D8F634AF3D924FD91EC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36ae05ca-1685-3b04-877b-765a67c8b22a.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 66.148.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:8f:63:4a:f3:d9:24:fd:91:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=8ce593d7-bf89-4a9d-b81b-a97d72b162f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:71:67:e2:77:ec:01:a6:9b:9a:a6:3c:c0:a4: 3b:9f:0d:62:47:a2:c9:ac:89:ba:ed:9f:f2:20:da: 7f:89:c2:65:34:fa:8f:14:65:25:ed:d4:b2:33:dd: 2b:6f:91:a7:53:c5:73:6d:a6:67:f8:7c:67:ea:b8: 52:a4:5d:2d:39:cf:6e:56:ad:69:d6:1e:c9:75:29: 9c:a8:1b:79:f0:9c:50:73:89:95:e8:4f:cd:cf:19: 9d:bf:07:fc:d8:4f:43:14:ee:d4:d4:6f:85:6b:be: b7:17:80:ef:af:36:be:e7:5a:71:af:e6:2c:61:6b: 65:d6:be:d8:2f:e1:7c:fb:e0:b6:d1:e3:69:fd:56: f1:a8:ff:3a:a0:23:91:b2:1a:cf:89:b6:77:0f:02: bd:77:0f:57:40:40:54:0b:d5:4c:30:e3:e5:d6:4e: 81:0c:81:7c:be:94:12:06:f7:d9:78:12:95:86:6f: 7b:cf:2f:bb:5b:e4:75:32:cc:2b:9a:97:8b:48:6e: ec:27:3c:e1:b9:28:1f:74:c0:3d:4b:76:61:75:9c: 16:ed:c5:0d:52:9f:bd:e2:56:0a:50:18:f4:3d:b4: e5:84:02:b8:90:02:ad:70:29:96:d2:b8:ed:af:44: 89:a8:cb:1b:38:31:bf:9a:e6:29:2c:a1:b1:6c:0c: de:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C1:F7:6D:F6:6D:A4:42:C3:C8:FA:5D:5D:CD:E7:60:A4:DD:FE:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36ae05ca-1685-3b04-877b-765a67c8b22a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.148.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ba:22:7c:0a:84:3e:be:2c:6b:99:31:2a:54:69:b7:c5:a0: cf:dd:73:c9:4d:39:49:70:21:7c:e2:f7:4c:1a:70:e5:99:56: bb:cb:67:7f:85:df:f5:8f:64:94:67:06:c2:50:0f:c2:49:28: 16:54:dc:1b:f4:3e:3a:03:e7:04:a2:ea:b6:45:ee:97:ef:d5: d4:3a:0b:14:90:97:eb:61:ef:04:62:fc:6b:ee:8a:ed:55:7e: 43:1e:57:a6:c1:dc:28:4b:e4:44:1d:c1:b8:d1:fc:e7:f1:b5: 11:b6:95:a5:5f:13:b9:50:31:24:dc:85:43:3e:33:0f:eb:eb: c3:85:ec:1a:70:7d:c1:86:f0:6c:c8:ed:6c:ca:0b:d3:e7:0a: 0c:f6:c7:de:85:90:08:cd:86:24:1c:17:ca:62:79:6f:38:bf: b4:64:d3:c7:f0:f5:5d:67:16:1b:22:2d:9b:cc:50:4b:a4:0a: 32:17:e1:d0:0c:d2:a1:de:4c:03:ef:52:bb:f6:7f:19:e0:23: d3:3f:f5:ca:cf:fc:a7:65:c1:1f:21:98:bd:e2:3b:cf:44:34: 06:72:da:b5:71:c7:ff:62:96:2e:f3:05:cc:a3:44:75:70:69: 8d:e9:c7:af:e6:25:15:6a:18:90:e5:2b:56:c6:92:f3:6a:98: 1a:2b:43:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnY9jSvPZJP2R7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OGNlNTkzZDctYmY4OS00YTlkLWI4MWItYTk3ZDcyYjE2MmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3Fn4nfsAaabmqY8wKQ7nw1iR6LJrIm67Z/y INp/icJlNPqPFGUl7dSyM90rb5GnU8VzbaZn+Hxn6rhSpF0tOc9uVq1p1h7JdSmc qBt58JxQc4mV6E/Nzxmdvwf82E9DFO7U1G+Fa763F4Dvrza+51pxr+YsYWtl1r7Y L+F8++C20eNp/VbxqP86oCORshrPibZ3DwK9dw9XQEBUC9VMMOPl1k6BDIF8vpQS BvfZeBKVhm97zy+7W+R1MswrmpeLSG7sJzzhuSgfdMA9S3ZhdZwW7cUNUp+94lYK UBj0PbTlhAK4kAKtcCmW0rjtr0SJqMsbODG/muYpLKGxbAze9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/B9232baRCw8j6XV3N52Ck3f4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzZhZTA1Y2EtMTY4NS0z YjA0LTg3N2ItNzY1YTY3YzhiMjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQpSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHK6InwKhD6+LGuZMSpUabfFoM/dc8lNOUlwIXzi90wacOWZVrvLZ3+F 3/WPZJRnBsJQD8JJKBZU3Bv0PjoD5wSi6rZF7pfv1dQ6CxSQl+th7wRi/Gvuiu1V fkMeV6bB3ChL5EQdwbjR/OfxtRG2laVfE7lQMSTchUM+Mw/r68OF7BpwfcGG8GzI 7WzKC9PnCgz2x96FkAjNhiQcF8pieW84v7Rk08fw9V1nFhsiLZvMUEukCjIX4dAM 0qHeTAPvUrv2fxngI9M/9crP/KdlwR8hmL3iO89ENAZy2rVxx/9ili7zBcyjRHVw aY3px6/mJRVqGJDlK1bGkvNqmBorQ64= -----END CERTIFICATE-----Generated at Tue Oct 13 16:01:26 2026 by rpki-client