$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3706bb21-2627-3a2a-a5cd-e8b9d122595c.roa File: 3706bb21-2627-3a2a-a5cd-e8b9d122595c.roa (raw, json) Hash identifier: dQdAkuJ6Xver9n6j4jkqPXoPFANhPPmiPp55sHs7XSI= Subject key identifier: B5:CE:32:D4:C7:19:B3:2D:CB:EF:00:59:CD:76:6E:53:73:06:C0:4C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7783245EF751DBEF272B1080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3706bb21-2627-3a2a-a5cd-e8b9d122595c.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 67.141.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:24:5e:f7:51:db:ef:27:2b:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=5c7b5cb0-d65b-4c64-8c10-98b6e6fd9042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:22:93:8d:71:8d:34:99:60:c3:ac:03:49:11: ca:ed:ad:ea:64:16:ad:b2:cd:52:54:49:2d:a4:2f: f1:e3:a7:78:7f:05:1c:f6:52:d8:29:22:50:47:18: ac:82:c1:a4:3d:94:03:7d:4f:bb:05:db:24:4a:29: 74:e2:d8:3e:09:97:cb:57:0e:41:ef:de:8a:7f:d0: b0:fa:4a:1c:02:5a:70:80:7e:b1:f9:c5:c9:b5:0d: bc:e9:a0:7e:76:83:32:3e:da:6e:95:c4:6d:53:08: 84:2c:48:b2:70:71:0f:06:ef:a9:3d:73:40:a0:f7: 06:a8:7f:77:77:c9:e3:1a:03:2a:89:dd:46:83:ad: 4c:78:cf:39:69:1c:02:53:fd:5d:8b:24:3c:33:47: cc:6c:69:55:06:a6:c4:43:f0:1f:73:9e:db:ed:da: 27:2e:b5:52:bb:f7:3a:a4:71:75:f2:3c:cf:c6:81: 7c:08:e6:83:7b:31:97:ea:b3:d5:c8:23:f8:a2:57: b0:83:18:ed:c3:96:47:c1:be:37:eb:a4:70:92:9f: ea:86:52:92:8d:b8:05:ea:15:7c:c8:2e:ff:91:c6: cb:71:14:f0:8f:cd:02:37:6b:3c:82:97:a0:01:2c: 4f:31:cb:39:2d:9c:9f:17:7b:80:aa:f6:6e:9e:ed: 17:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CE:32:D4:C7:19:B3:2D:CB:EF:00:59:CD:76:6E:53:73:06:C0:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3706bb21-2627-3a2a-a5cd-e8b9d122595c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:4c:a9:59:a3:a2:a1:d5:57:bd:52:20:f5:12:5e:a1:83:80: 90:73:b6:01:c7:e8:a4:5d:3d:a4:35:26:f8:69:56:bd:ca:36: 9e:6c:ee:19:a3:01:53:1f:13:9c:fc:f8:c2:83:1b:ea:70:ed: f2:67:47:39:af:8a:b8:bb:69:ac:57:54:c6:6c:4b:24:21:9e: 95:e9:ff:45:65:99:88:c8:d8:12:46:93:20:45:d9:cf:6c:9f: 66:d9:36:d3:ec:c6:d0:06:dc:73:9a:59:de:ab:de:57:82:39: 75:4b:d5:c0:e8:c8:dd:96:4f:1b:68:99:b2:83:3c:c3:07:e9: 14:f6:58:01:4b:dc:d0:20:4d:5b:09:57:ff:35:02:7e:85:5d: e9:9f:88:9b:ae:41:15:f2:41:21:11:73:44:e0:bf:93:e6:b9: a5:18:61:a8:e7:1a:df:93:62:ed:ad:c6:a0:b7:49:fb:15:2a: df:c6:f5:98:37:28:b0:0e:e7:f6:50:cb:7e:fc:4b:56:2b:cb: 7d:7c:ee:10:75:b6:da:fb:8d:89:6d:5f:dd:7b:3c:3b:74:d5: 62:bb:fa:66:d5:60:e4:b6:83:fd:9d:dc:a0:16:96:af:99:3a: 0a:81:84:c1:02:69:3b:ac:00:8a:06:84:42:9f:74:7d:06:d2: 65:c4:2a:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gyRe91Hb7ycrEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk NWM3YjVjYjAtZDY1Yi00YzY0LThjMTAtOThiNmU2ZmQ5MDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiKTjXGNNJlgw6wDSRHK7a3qZBatss1SVEkt pC/x46d4fwUc9lLYKSJQRxisgsGkPZQDfU+7BdskSil04tg+CZfLVw5B796Kf9Cw +kocAlpwgH6x+cXJtQ286aB+doMyPtpulcRtUwiELEiycHEPBu+pPXNAoPcGqH93 d8njGgMqid1Gg61MeM85aRwCU/1diyQ8M0fMbGlVBqbEQ/Afc57b7donLrVSu/c6 pHF18jzPxoF8COaDezGX6rPVyCP4olewgxjtw5ZHwb4366Rwkp/qhlKSjbgF6hV8 yC7/kcbLcRTwj80CN2s8gpegASxPMcs5LZyfF3uAqvZunu0X7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXOMtTHGbMty+8AWc12blNzBsBMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzcwNmJiMjEtMjYyNy0z YTJhLWE1Y2QtZThiOWQxMjI1OTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ43fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJMqVmjoqHVV71SIPUSXqGDgJBztgHH6KRdPaQ1JvhpVr3KNp5s7hmj AVMfE5z8+MKDG+pw7fJnRzmviri7aaxXVMZsSyQhnpXp/0VlmYjI2BJGkyBF2c9s n2bZNtPsxtAG3HOaWd6r3leCOXVL1cDoyN2WTxtombKDPMMH6RT2WAFL3NAgTVsJ V/81An6FXemfiJuuQRXyQSERc0Tgv5PmuaUYYajnGt+TYu2txqC3SfsVKt/G9Zg3 KLAO5/ZQy378S1Yry3187hB1ttr7jYltX917PDt01WK7+mbVYOS2g/2d3KAWlq+Z OgqBhMECaTusAIoGhEKfdH0G0mXEKtI= -----END CERTIFICATE-----Generated at Wed Oct 14 07:53:07 2026 by rpki-client