$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4258c8d9-1bab-31b4-8618-6b310b05ca7c.roa File: 4258c8d9-1bab-31b4-8618-6b310b05ca7c.roa (raw, json) Hash identifier: aKvD90hCZTyJdBoeLdODIm0aJvTSCGQK1vLPagVC2JQ= Subject key identifier: 00:29:B8:01:1A:43:8C:3E:4A:5D:51:D8:B4:FD:79:11:52:E4:2E:4F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7BB2DDC7076A0CEE85DBEB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4258c8d9-1bab-31b4-8618-6b310b05ca7c.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 7029 IP address blocks: 216.96.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:dd:c7:07:6a:0c:ee:85:db:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=21b620d4-f347-4ae6-bc5f-95087904729d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1f:02:3c:46:79:0b:58:10:45:b5:ce:7f:5f: c8:ce:2a:19:50:2d:c5:51:98:fc:9a:10:3c:d5:db: ba:ab:37:54:4f:0a:10:33:43:41:18:c8:c1:42:7e: 0d:76:21:e9:75:44:c8:a7:f9:ff:4d:f0:4d:f2:fc: 7b:fb:ff:59:37:f8:8e:fb:04:e6:31:f4:27:1a:a8: 0b:db:fa:9b:6b:f6:e0:e9:70:2a:24:87:2b:3e:91: 63:1c:ce:48:2e:fe:c9:92:9c:e3:5a:2d:42:64:82: e2:69:ba:87:2b:29:7b:54:c0:2f:18:95:dd:b6:06: 4d:96:e6:ce:66:8d:41:94:cc:9f:f4:fd:e7:0a:99: c7:3c:1d:fc:3a:6f:30:dc:3c:5b:25:ac:01:b8:37: 9c:00:7d:aa:57:21:cc:95:b7:1a:84:20:10:0c:1c: 19:a2:55:ac:4d:d4:dc:3d:0e:7b:39:35:dc:88:71: fc:5b:4a:e8:fe:16:f9:82:c4:28:01:9d:ef:29:ec: 9c:67:c5:7d:51:e1:fc:a8:04:23:4d:84:a4:8c:24: 78:fc:2b:30:85:ce:c1:dc:b9:02:99:03:24:70:88: 69:be:34:80:9b:f0:d9:65:b2:8e:7e:65:f4:76:c9: 60:ab:7c:54:1e:b2:c8:6a:41:0f:37:87:14:a9:c9: 2b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:29:B8:01:1A:43:8C:3E:4A:5D:51:D8:B4:FD:79:11:52:E4:2E:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4258c8d9-1bab-31b4-8618-6b310b05ca7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:5d:04:11:9c:a5:89:bb:b3:03:dd:9e:5a:ed:f5:80:0d:3e: 47:01:6b:89:f4:54:20:cb:d8:e9:46:71:62:0d:5a:b9:c9:c5: 04:f4:79:b8:e3:32:80:72:67:2e:f4:72:6a:f4:29:3e:b7:e6: 0d:ed:41:f3:27:cd:af:b1:77:20:ab:c1:ab:c3:08:32:34:a4: 9c:14:53:3c:9a:7e:99:2b:30:83:a2:09:cc:e4:61:1d:71:7a: 16:7f:0d:23:a4:58:4e:25:91:f7:81:eb:4b:b9:ca:13:11:de: e1:33:f0:81:00:c2:b2:e4:e6:43:65:d8:27:90:a1:07:a7:82: 90:50:d0:9f:f6:5f:f1:40:7b:41:7b:8b:81:b6:13:54:f1:86: c3:b3:71:23:7e:46:85:e6:be:33:cf:96:d6:e3:61:62:4a:19: 91:6a:38:d2:39:78:df:ee:d6:cf:5c:2b:36:cb:4b:a5:cb:25: 26:98:fc:86:27:4d:32:12:e3:5f:fa:94:62:69:5d:8c:58:ee: b8:15:23:a5:95:04:bb:ed:0f:3e:84:61:03:8b:f8:b8:a3:9e: 08:fa:cf:8e:37:9f:30:00:b8:3d:c2:6e:6e:e9:fd:0f:06:6b: e8:55:d0:36:10:c4:b2:62:c0:86:2b:c5:e0:9c:bb:ba:a0:cf: d1:95:e8:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97st3HB2oM7oXb64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk MjFiNjIwZDQtZjM0Ny00YWU2LWJjNWYtOTUwODc5MDQ3MjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR8CPEZ5C1gQRbXOf1/IzioZUC3FUZj8mhA8 1du6qzdUTwoQM0NBGMjBQn4NdiHpdUTIp/n/TfBN8vx7+/9ZN/iO+wTmMfQnGqgL 2/qba/bg6XAqJIcrPpFjHM5ILv7JkpzjWi1CZILiabqHKyl7VMAvGJXdtgZNlubO Zo1BlMyf9P3nCpnHPB38Om8w3DxbJawBuDecAH2qVyHMlbcahCAQDBwZolWsTdTc PQ57OTXciHH8W0ro/hb5gsQoAZ3vKeycZ8V9UeH8qAQjTYSkjCR4/Cswhc7B3LkC mQMkcIhpvjSAm/DZZbKOfmX0dslgq3xUHrLIakEPN4cUqckrkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAApuAEaQ4w+Sl1R2LT9eRFS5C5PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDI1OGM4ZDktMWJhYi0z MWI0LTg2MTgtNmIzMTBiMDVjYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GBJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxdBBGcpYm7swPdnlrt9YANPkcBa4n0VCDL2OlGcWINWrnJxQT0ebjj MoByZy70cmr0KT635g3tQfMnza+xdyCrwavDCDI0pJwUUzyafpkrMIOiCczkYR1x ehZ/DSOkWE4lkfeB60u5yhMR3uEz8IEAwrLk5kNl2CeQoQengpBQ0J/2X/FAe0F7 i4G2E1TxhsOzcSN+RoXmvjPPltbjYWJKGZFqONI5eN/u1s9cKzbLS6XLJSaY/IYn TTIS41/6lGJpXYxY7rgVI6WVBLvtDz6EYQOL+Lijngj6z443nzAAuD3Cbm7p/Q8G a+hV0DYQxLJiwIYrxeCcu7qgz9GV6PM= -----END CERTIFICATE-----Generated at Tue Oct 13 16:01:48 2026 by rpki-client