$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43f8cb3f-62e0-3298-875e-eb95d7be4fdf.roa File: 43f8cb3f-62e0-3298-875e-eb95d7be4fdf.roa (raw, json) Hash identifier: 2Wpf6JhNnernKxqWXCbEIEaHGfpiD1YYacYyFhk2D88= Subject key identifier: B3:7A:36:C9:8F:1F:76:A2:9B:C3:26:21:BC:06:CD:CE:9F:B6:A2:CD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D7360E6360FCD75D885C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43f8cb3f-62e0-3298-875e-eb95d7be4fdf.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 64.206.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:73:60:e6:36:0f:cd:75:d8:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=2efa9186-13ec-4466-9201-f2c076755450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b0:09:37:d0:6b:1c:02:e7:ea:ee:c3:76:64: 47:ca:9c:56:7b:19:45:ef:b9:48:24:82:05:34:8e: 14:17:49:09:14:2d:5c:32:07:9c:41:63:91:96:1c: 81:ea:60:4c:51:b0:ae:8f:10:d5:e2:4f:08:02:d8: 2d:1b:10:21:61:c6:bd:c7:93:2b:cd:18:ff:54:73: 98:54:9e:69:64:e6:f8:04:6b:26:7d:47:0d:01:c2: 85:9a:ac:01:68:f2:d4:fa:89:89:fa:52:cb:17:a6: f2:3a:24:9e:58:90:9c:20:13:72:1c:f9:5c:3a:db: f3:25:a6:d8:31:a6:12:db:54:86:bc:8d:4f:47:9b: 97:5d:a9:0c:91:ad:9a:2e:25:bc:95:4e:dc:5f:8f: ac:3f:93:50:05:6f:cb:a7:48:f5:f8:07:ff:d5:39: 26:f4:04:f9:83:c0:ec:82:6b:76:b9:cd:9d:44:e9: f4:e4:87:ef:7c:6a:94:70:d2:2c:a9:74:fa:b5:7c: c2:86:1b:96:b7:dc:3e:66:dc:79:12:85:53:66:06: a8:60:e9:f9:dc:1d:8c:91:08:07:2d:0f:9a:cb:75: 25:b9:88:0c:f5:90:27:6a:88:81:22:fa:a2:a8:36: d8:f9:c0:8a:f5:bc:7a:2a:b2:56:5e:37:6e:78:4c: 0c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7A:36:C9:8F:1F:76:A2:9B:C3:26:21:BC:06:CD:CE:9F:B6:A2:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43f8cb3f-62e0-3298-875e-eb95d7be4fdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.206.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:eb:fe:1f:87:60:d8:4d:3b:17:39:7d:38:c6:88:61:6e:4d: 26:de:60:bc:ca:dc:b7:12:70:3a:1b:97:6b:7f:c3:9a:fb:3d: 4b:21:60:d4:49:b9:cc:5a:c7:ec:c6:af:02:7b:bc:74:68:cb: 10:96:c3:63:5e:44:64:76:3f:60:74:5e:3f:1d:a1:6a:b8:52: 1a:c8:df:54:81:e9:01:e1:f4:ac:a3:3c:fc:82:fe:97:ab:aa: 39:3c:bf:a9:23:8a:a6:e8:24:16:ba:38:ac:16:49:e4:c0:70: 63:e4:5d:29:6a:df:16:a4:ba:99:df:e0:a0:2f:34:97:29:57: d5:62:a8:b2:92:b9:68:ae:61:93:6b:bd:be:3c:71:92:19:04: 12:1a:08:37:c5:6a:0b:d4:7a:f1:0e:11:c4:73:da:ee:e8:0b: 5f:13:73:ae:97:3a:02:02:e0:12:86:49:a2:e2:ba:35:41:05: 2f:c0:d0:07:63:75:39:e5:8e:33:95:63:1c:e2:ae:39:fc:92: f1:a7:1f:5a:5e:9e:28:22:75:bb:78:08:9c:a1:10:2b:3d:8d: 9f:09:68:be:fc:50:3d:24:32:42:7d:53:58:14:02:fa:42:1d: 08:ea:d1:5a:4c:ca:ba:a3:ad:5b:97:28:b6:10:32:7c:3b:ed: 92:bc:c3:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXNg5jYPzXXYhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MmVmYTkxODYtMTNlYy00NDY2LTkyMDEtZjJjMDc2NzU1NDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLAJN9BrHALn6u7DdmRHypxWexlF77lIJIIF NI4UF0kJFC1cMgecQWORlhyB6mBMUbCujxDV4k8IAtgtGxAhYca9x5MrzRj/VHOY VJ5pZOb4BGsmfUcNAcKFmqwBaPLU+omJ+lLLF6byOiSeWJCcIBNyHPlcOtvzJabY MaYS21SGvI1PR5uXXakMka2aLiW8lU7cX4+sP5NQBW/Lp0j1+Af/1Tkm9AT5g8Ds gmt2uc2dROn05IfvfGqUcNIsqXT6tXzChhuWt9w+Ztx5EoVTZgaoYOn53B2MkQgH LQ+ay3UluYgM9ZAnaoiBIvqiqDbY+cCK9bx6KrJWXjdueEwMjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLN6NsmPH3aim8MmIbwGzc6ftqLNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDNmOGNiM2YtNjJlMC0z Mjk4LTg3NWUtZWI5NWQ3YmU0ZmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM7fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/r/h+HYNhNOxc5fTjGiGFuTSbeYLzK3LcScDobl2t/w5r7PUshYNRJ ucxax+zGrwJ7vHRoyxCWw2NeRGR2P2B0Xj8doWq4UhrI31SB6QHh9KyjPPyC/per qjk8v6kjiqboJBa6OKwWSeTAcGPkXSlq3xakupnf4KAvNJcpV9ViqLKSuWiuYZNr vb48cZIZBBIaCDfFagvUevEOEcRz2u7oC18Tc66XOgIC4BKGSaLiujVBBS/A0Adj dTnljjOVYxzirjn8kvGnH1penigidbt4CJyhECs9jZ8JaL78UD0kMkJ9U1gUAvpC HQjq0VpMyrqjrVuXKLYQMnw77ZK8w9U= -----END CERTIFICATE-----Generated at Tue Oct 13 13:07:12 2026 by rpki-client