$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e393bd-b58d-3a5c-b1bb-8ef6e61b9a40.roa File: 37e393bd-b58d-3a5c-b1bb-8ef6e61b9a40.roa (raw, json) Hash identifier: R8dqsQbMoD/nd2LL6mRt0aNLFqk+31hVERip4ARdAlU= Subject key identifier: FC:D3:65:E4:14:8C:7E:82:E1:2E:CD:0A:2B:15:E3:D3:E3:10:E2:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B6DC1250E32056F8EA40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e393bd-b58d-3a5c-b1bb-8ef6e61b9a40.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 67.140.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b6:dc:12:50:e3:20:56:f8:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=b1f5583b-f18c-48f4-bded-79c30dab9f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e0:3c:9b:3a:00:bd:e8:dd:9f:fe:aa:c2:73: f5:46:9a:db:c8:31:a0:a3:de:68:28:4d:36:61:88: 08:4a:01:b0:5b:2e:da:10:36:76:e0:b9:af:83:f5: 21:b5:8b:50:8c:4c:66:f7:ba:96:bc:b6:22:6d:13: 7d:3a:82:2b:c5:9d:64:3c:94:1e:03:ec:f3:30:b0: 14:8d:75:6e:f8:16:1b:59:28:fe:01:45:bd:2b:a8: eb:83:63:1a:38:5b:67:fc:0f:ca:a5:c1:d5:c6:06: 4b:db:69:78:70:f0:b1:46:8e:18:f8:e2:b8:46:bc: 05:94:99:7d:fd:55:55:b1:82:7f:f7:89:3a:7e:06: 00:16:36:49:8f:51:4d:94:4b:50:75:0e:5f:b0:7f: fa:2d:b2:3e:7e:3f:5f:ca:2d:d7:ac:3e:eb:cf:61: 1d:63:e5:f1:00:49:68:dd:54:85:c3:4b:54:b3:42: 79:8e:80:5b:e4:fb:38:8f:82:25:36:d2:b5:84:48: 01:20:c9:39:32:09:80:65:b6:1b:11:b7:0f:22:db: 0b:0b:a1:cd:6b:02:7a:b3:09:01:76:2d:18:89:6b: 33:e0:a1:0b:d1:2c:e4:c8:03:b4:d3:bf:d7:55:f2: c2:a0:65:7c:37:09:ed:c8:58:60:5c:fd:58:97:f9: bc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D3:65:E4:14:8C:7E:82:E1:2E:CD:0A:2B:15:E3:D3:E3:10:E2:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e393bd-b58d-3a5c-b1bb-8ef6e61b9a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ef:c2:86:d1:08:0e:3e:3a:a4:61:09:66:32:2a:d8:88:05: 1e:15:4b:0e:c9:90:ec:7b:f6:fd:1c:86:25:a7:ac:bd:c2:b2: 5e:de:c9:b0:c7:f4:1b:fc:ec:b8:3b:c4:3b:13:a8:fa:30:2d: 90:a3:d5:ee:8d:36:3e:d9:01:52:70:a9:c1:8d:5f:2e:6c:d6: f1:0d:2e:0a:53:32:c2:91:06:4e:cf:36:69:dc:3b:04:95:7b: 56:df:b3:34:ba:46:55:bf:dc:d7:28:c1:4f:76:28:43:77:0d: 79:e7:2f:86:c0:4e:e1:08:79:d1:9d:0b:1b:5c:4b:d6:f1:19: c7:ed:52:f7:f9:99:59:7b:92:a7:1a:17:98:90:f4:e6:fa:f9: e0:fa:e4:9e:de:6a:7a:67:e5:74:97:6a:7a:05:e1:63:5e:6a: 8b:b6:37:5a:6f:15:7f:84:cf:fd:e7:31:5d:35:cc:f9:32:72: a0:18:0b:22:29:ac:0e:c1:87:bb:ac:67:e9:1e:f3:fd:6a:a4: 27:2e:71:10:b7:ee:25:1f:5e:a9:87:dd:53:01:fd:9a:43:05: 8b:24:80:7b:35:43:20:bf:fc:3b:82:37:80:69:1f:ba:fa:23: 8d:ac:26:60:dc:94:0b:4f:30:37:bc:da:17:66:29:d2:50:96: cd:43:4b:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rbcElDjIFb46kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk YjFmNTU4M2ItZjE4Yy00OGY0LWJkZWQtNzljMzBkYWI5ZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuA8mzoAvejdn/6qwnP1RprbyDGgo95oKE02 YYgISgGwWy7aEDZ24Lmvg/UhtYtQjExm97qWvLYibRN9OoIrxZ1kPJQeA+zzMLAU jXVu+BYbWSj+AUW9K6jrg2MaOFtn/A/KpcHVxgZL22l4cPCxRo4Y+OK4RrwFlJl9 /VVVsYJ/94k6fgYAFjZJj1FNlEtQdQ5fsH/6LbI+fj9fyi3XrD7rz2EdY+XxAElo 3VSFw0tUs0J5joBb5Ps4j4IlNtK1hEgBIMk5MgmAZbYbEbcPItsLC6HNawJ6swkB di0YiWsz4KEL0SzkyAO007/XVfLCoGV8NwntyFhgXP1Yl/m89QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzTZeQUjH6C4S7NCisV49PjEOJbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzdlMzkzYmQtYjU4ZC0z YTVjLWIxYmItOGVmNmU2MWI5YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ4xsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3vwobRCA4+OqRhCWYyKtiIBR4VSw7JkOx79v0chiWnrL3Csl7eybDH 9Bv87Lg7xDsTqPowLZCj1e6NNj7ZAVJwqcGNXy5s1vENLgpTMsKRBk7PNmncOwSV e1bfszS6RlW/3NcowU92KEN3DXnnL4bATuEIedGdCxtcS9bxGcftUvf5mVl7kqca F5iQ9Ob6+eD65J7eanpn5XSXanoF4WNeaou2N1pvFX+Ez/3nMV01zPkycqAYCyIp rA7Bh7usZ+ke8/1qpCcucRC37iUfXqmH3VMB/ZpDBYskgHs1QyC//DuCN4BpH7r6 I42sJmDclAtPMDe82hdmKdJQls1DS7o= -----END CERTIFICATE-----Generated at Tue Oct 13 16:03:12 2026 by rpki-client