$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43adf4ae-1ad5-39d1-b1c1-d89946043504.roa File: 43adf4ae-1ad5-39d1-b1c1-d89946043504.roa (raw, json) Hash identifier: HoUbIMBgfRFDXFm9EPKBpXaJhetxFPNn/80wGxednW4= Subject key identifier: 64:82:3F:32:57:C4:D0:0A:40:8A:B0:CE:4B:72:F1:E5:02:22:E0:06 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7A4D8553DBC4018D1181A860 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43adf4ae-1ad5-39d1-b1c1-d89946043504.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 69.40.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:85:53:db:c4:01:8d:11:81:a8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=6c57e1f4-dfeb-4fc2-9f11-01c4cd0d412d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:24:8d:61:8e:b0:c1:bb:79:51:ba:d7:15:93: 96:c6:5a:8f:59:b7:b7:24:60:cb:30:36:c1:a0:cf: 70:6f:19:c9:77:31:4e:2e:a6:89:6a:42:bf:86:76: ff:7c:23:c7:ac:34:94:11:11:ec:ad:09:65:cf:b4: 02:48:e7:61:28:fa:17:98:37:95:0f:cf:5a:9f:07: 4d:52:61:ab:39:6f:4b:e7:b1:b3:a5:0f:19:a9:c4: 85:bc:12:8a:c3:e4:99:87:dd:bc:a3:e6:96:8f:ab: b5:4b:47:37:5f:76:7e:fb:29:bc:48:37:85:59:37: 87:9c:81:e3:8e:4b:2c:0b:fd:07:bf:d7:25:a9:9d: 9e:4e:bd:e3:ba:25:b4:a5:81:8a:a3:6f:7d:cc:50: 58:c0:b1:ec:b9:30:8f:55:03:3e:95:17:4c:44:fa: 6f:47:8a:f9:d6:d2:46:5a:32:1a:2e:a0:e3:1c:de: 4b:ed:4e:e1:74:29:fa:d5:b7:2b:56:b0:31:18:45: dd:e5:8b:21:ff:2e:f2:0b:69:d0:db:46:ea:10:93: ab:a9:2d:42:4b:d3:a2:c8:6a:01:87:51:ae:83:3e: 90:db:20:90:8d:99:91:4b:11:6b:89:eb:59:d7:da: 15:1c:c3:b9:15:db:18:da:53:61:76:45:74:a8:47: 97:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:82:3F:32:57:C4:D0:0A:40:8A:B0:CE:4B:72:F1:E5:02:22:E0:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43adf4ae-1ad5-39d1-b1c1-d89946043504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:cd:c9:a3:b9:c6:94:e0:81:7b:23:45:97:0a:db:c2:cb:23: fd:66:d9:d9:e9:a8:58:9e:4e:bd:6d:d6:c7:43:88:a8:ef:eb: ca:b5:f2:13:6d:65:32:eb:f2:c1:93:e2:32:29:c4:18:c4:e3: b0:44:15:c1:0c:0d:9f:03:e0:6c:c2:fb:df:db:05:ea:63:97: b0:d1:fd:e3:19:88:36:5c:6c:7e:a6:86:2f:4b:d1:6d:ab:64: 79:10:e3:4e:97:66:6d:6e:13:eb:29:09:d3:13:56:0f:c1:1b: 99:6e:33:3a:e2:37:1e:67:d2:21:45:75:94:90:3e:d3:e1:32: 93:da:ef:a2:15:5a:a3:5e:ad:a6:77:2d:84:38:60:29:5b:4d: 06:ea:fb:79:07:55:64:67:8d:0f:4b:e4:e2:4f:d4:5d:f7:e5: 8e:05:52:58:93:82:33:8f:0d:e5:35:65:09:b9:d7:e6:99:2d: a6:a2:60:d1:9f:12:7c:14:cd:a1:72:52:99:51:54:1e:a6:83: 60:44:06:cc:08:14:f5:86:88:40:ff:b6:78:88:cb:62:bc:17: e2:09:48:5f:a8:d3:fa:80:b2:e4:63:a7:d5:26:47:5a:a8:09: 75:8b:67:e3:21:0c:61:b2:39:58:0a:86:9a:f0:e4:f1:ec:e5: 07:36:88:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TYVT28QBjRGBqGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NmM1N2UxZjQtZGZlYi00ZmMyLTlmMTEtMDFjNGNkMGQ0MTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiSNYY6wwbt5UbrXFZOWxlqPWbe3JGDLMDbB oM9wbxnJdzFOLqaJakK/hnb/fCPHrDSUERHsrQllz7QCSOdhKPoXmDeVD89anwdN UmGrOW9L57GzpQ8ZqcSFvBKKw+SZh928o+aWj6u1S0c3X3Z++ym8SDeFWTeHnIHj jkssC/0Hv9clqZ2eTr3juiW0pYGKo299zFBYwLHsuTCPVQM+lRdMRPpvR4r51tJG WjIaLqDjHN5L7U7hdCn61bcrVrAxGEXd5Ysh/y7yC2nQ20bqEJOrqS1CS9OiyGoB h1Gugz6Q2yCQjZmRSxFrietZ19oVHMO5FdsY2lNhdkV0qEeXBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSCPzJXxNAKQIqwzkty8eUCIuAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDNhZGY0YWUtMWFkNS0z OWQxLWIxYzEtZDg5OTQ2MDQzNTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRSgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3NyaO5xpTggXsjRZcK28LLI/1m2dnpqFieTr1t1sdDiKjv68q18hNt ZTLr8sGT4jIpxBjE47BEFcEMDZ8D4GzC+9/bBepjl7DR/eMZiDZcbH6mhi9L0W2r ZHkQ406XZm1uE+spCdMTVg/BG5luMzriNx5n0iFFdZSQPtPhMpPa76IVWqNeraZ3 LYQ4YClbTQbq+3kHVWRnjQ9L5OJP1F335Y4FUliTgjOPDeU1ZQm51+aZLaaiYNGf EnwUzaFyUplRVB6mg2BEBswIFPWGiED/tniIy2K8F+IJSF+o0/qAsuRjp9UmR1qo CXWLZ+MhDGGyOVgKhprw5PHs5Qc2iLo= -----END CERTIFICATE-----Generated at Tue Oct 13 22:55:06 2026 by rpki-client