$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3ce979c3-5559-33b5-8de3-b6b3a98643bd.roa File: 3ce979c3-5559-33b5-8de3-b6b3a98643bd.roa (raw, json) Hash identifier: Yd3bUH8Bg5k7LYLawyNlv1fUVxE0PbGoylm+1wZO/XA= Subject key identifier: 33:E8:86:D2:42:75:E8:18:F6:12:B4:B1:9B:2C:5D:79:36:E9:3C:95 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D9A57884EA58AD9C5CF30 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3ce979c3-5559-33b5-8de3-b6b3a98643bd.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 69.40.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:9a:57:88:4e:a5:8a:d9:c5:cf:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=ed30278f-475b-4158-95be-2c81e804c0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e4:59:71:d1:95:c8:91:0e:49:7c:13:e5:88: fb:f4:92:7b:34:d8:44:ef:c7:4c:7c:b2:1f:86:1b: 41:68:a0:3e:7a:17:f7:f7:8d:53:be:e4:a3:3e:2f: f9:ec:b0:bf:39:48:78:63:f0:d7:78:08:01:a4:8f: 86:2a:da:ba:1c:f9:33:e0:e5:7c:a2:90:72:fd:f1: 66:dc:ac:1b:d1:09:ea:14:3d:70:30:04:c1:a7:61: d2:e7:84:c4:eb:5c:da:68:31:49:fc:f9:07:ff:90: 4f:e7:c9:7e:e2:21:ce:4a:d1:02:4a:99:ee:d1:ca: 51:98:14:79:22:ab:68:df:6c:66:97:ef:be:bf:13: 97:a4:0a:c7:79:f9:41:8a:80:61:66:2d:bf:f7:d4: 09:86:ad:f6:63:8f:fc:ae:26:71:8e:ff:cf:e6:c6: d6:35:7d:db:33:7d:05:9e:d5:e8:81:7f:18:5f:d3: e4:7a:81:51:a7:15:67:37:8f:42:85:ed:d5:82:b5: 69:80:b1:95:75:9a:c6:46:63:fe:ea:16:cb:23:f2: d9:55:70:54:01:3b:ee:bb:5f:78:0c:c4:f0:f1:34: e2:cf:46:d6:b3:36:ce:46:fb:0f:e7:fc:a4:a3:1e: 36:4e:fb:d6:31:cc:31:79:2d:77:fa:55:97:b4:85: 2d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E8:86:D2:42:75:E8:18:F6:12:B4:B1:9B:2C:5D:79:36:E9:3C:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3ce979c3-5559-33b5-8de3-b6b3a98643bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:0f:28:fd:26:26:f8:73:47:e9:ce:3a:c7:e6:76:0e:da:e5: 3c:cc:2f:22:16:7b:4f:ef:83:7b:81:06:25:90:e2:1d:73:2d: 29:d7:ff:d1:63:f5:30:68:87:92:5f:48:3b:95:9e:db:c8:52: 67:c3:ca:35:e7:1e:a4:59:2e:22:ee:ed:0e:c2:f4:5e:f5:5d: 51:8f:5a:8c:38:f4:d3:27:e0:ed:7c:cc:ac:f5:f6:06:66:0d: da:f0:59:55:96:0d:51:02:a0:6e:91:f8:d0:fe:cc:ce:b4:bf: ea:9f:42:a5:6f:67:77:10:03:c9:38:69:b8:f0:f2:46:6f:77: 86:86:37:29:62:27:83:04:cf:51:4b:b2:3c:1b:4f:2d:84:a9: 64:f3:f3:1c:08:38:fc:4b:bc:6d:6c:ba:32:2d:e9:41:e5:2e: 78:7b:f4:4c:93:4c:9d:f6:dd:ba:e9:e1:83:f9:d6:e5:43:25: 6b:cf:75:25:fb:20:92:05:17:e0:fe:1f:aa:0f:6b:6f:17:0c: 2d:b8:55:c3:cd:4a:57:17:4b:30:5f:54:a5:e6:89:6a:ef:bb: a3:65:92:7d:53:e7:d5:e3:77:19:ae:62:58:e6:6c:00:b9:e5: 96:d6:53:0f:53:87:cd:06:7b:6c:fd:92:dd:1d:f5:c2:e6:7d: 91:3d:18:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZpXiE6litnFzzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZWQzMDI3OGYtNDc1Yi00MTU4LTk1YmUtMmM4MWU4MDRjMGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuORZcdGVyJEOSXwT5Yj79JJ7NNhE78dMfLIf hhtBaKA+ehf3941TvuSjPi/57LC/OUh4Y/DXeAgBpI+GKtq6HPkz4OV8opBy/fFm 3Kwb0QnqFD1wMATBp2HS54TE61zaaDFJ/PkH/5BP58l+4iHOStECSpnu0cpRmBR5 Iqto32xml+++vxOXpArHeflBioBhZi2/99QJhq32Y4/8riZxjv/P5sbWNX3bM30F ntXogX8YX9PkeoFRpxVnN49Che3VgrVpgLGVdZrGRmP+6hbLI/LZVXBUATvuu194 DMTw8TTiz0bWszbORvsP5/ykox42TvvWMcwxeS13+lWXtIUt4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPohtJCdegY9hK0sZssXXk26TyVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2NlOTc5YzMtNTU1OS0z M2I1LThkZTMtYjZiM2E5ODY0M2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRSh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIPKP0mJvhzR+nOOsfmdg7a5TzMLyIWe0/vg3uBBiWQ4h1zLSnX/9Fj 9TBoh5JfSDuVntvIUmfDyjXnHqRZLiLu7Q7C9F71XVGPWow49NMn4O18zKz19gZm DdrwWVWWDVECoG6R+ND+zM60v+qfQqVvZ3cQA8k4abjw8kZvd4aGNyliJ4MEz1FL sjwbTy2EqWTz8xwIOPxLvG1sujIt6UHlLnh79EyTTJ323brp4YP51uVDJWvPdSX7 IJIFF+D+H6oPa28XDC24VcPNSlcXSzBfVKXmiWrvu6Nlkn1T59XjdxmuYljmbAC5 5ZbWUw9Th80Ge2z9kt0d9cLmfZE9GLo= -----END CERTIFICATE-----Generated at Tue Oct 13 18:38:29 2026 by rpki-client