$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4bd299fc-c07e-300e-a619-efb8e0153620.roa File: 4bd299fc-c07e-300e-a619-efb8e0153620.roa (raw, json) Hash identifier: PvCZKXnrg+s93E3AXSE0zsxLX8N9crJUaeRm3Q193Bw= Subject key identifier: 55:CA:EC:35:56:4E:42:0B:FB:A3:36:84:6D:45:4C:BF:CA:12:E1:16 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F778324D4A0F629C628C83F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4bd299fc-c07e-300e-a619-efb8e0153620.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 162.40.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:24:d4:a0:f6:29:c6:28:c8:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=867c5e61-27d0-4efa-94b3-10a5a3ad9b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:05:22:e5:6f:cd:89:6a:7b:c1:f7:2f:c2:75: be:b6:f1:a9:64:68:3c:b9:29:d4:3f:4d:33:7b:97: 84:05:f4:41:93:a0:e9:f0:e2:0f:d9:df:ad:00:de: c3:5b:25:81:67:37:1b:0b:b8:42:46:34:41:aa:6f: 7b:b2:d4:a0:07:42:6b:19:e4:15:4e:6c:82:2e:04: ec:61:4a:9e:71:4d:7d:dd:fa:a8:6f:99:fc:d9:6a: 86:9a:66:d4:43:ad:0e:92:d2:89:6f:d7:ce:1f:01: a5:ed:19:43:39:40:6b:db:d3:5c:a5:43:12:5a:47: 4b:42:74:1b:25:39:5d:30:20:ff:b4:38:fd:68:d2: 4a:19:cf:18:81:b8:6c:b3:c2:6b:2b:89:e6:4b:e6: 42:04:3d:4f:49:4c:21:aa:61:58:50:b1:e8:e4:51: d1:54:d9:5a:52:fa:aa:6a:5c:18:1c:4e:a8:1f:7d: 7c:e9:49:2f:83:83:dd:ad:a4:0b:0d:93:0d:0d:23: ec:96:b5:4b:7a:ed:5b:80:ca:08:e0:18:b6:6d:dd: ad:13:9d:43:c5:76:66:84:28:1b:14:34:00:9e:70: 4a:d7:30:e0:22:9f:51:fc:74:f2:21:5f:29:ae:23: 22:7d:cc:52:11:72:62:16:70:98:a3:5b:3f:e0:e9: 74:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:CA:EC:35:56:4E:42:0B:FB:A3:36:84:6D:45:4C:BF:CA:12:E1:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4bd299fc-c07e-300e-a619-efb8e0153620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.40.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:aa:25:b5:40:1f:16:d8:3a:a9:c2:28:6d:3b:7c:2c:62:6b: e2:77:ff:62:40:7f:3e:7e:34:21:61:e4:af:08:3c:3c:10:6f: a2:ef:31:5b:4f:44:8e:48:16:b7:95:b2:ef:3e:c2:ac:09:d6: e4:71:ca:ec:08:14:73:a7:7f:1d:4f:cb:54:88:c5:74:12:ff: 8b:56:73:41:a3:71:eb:40:ea:a4:f7:1d:6f:3d:39:ac:ba:56: b6:33:83:5d:6f:4e:5f:32:33:b9:a9:64:4d:90:ce:56:89:26: 90:41:43:62:4c:d5:9c:b7:e3:ed:bd:c1:ba:85:f9:5f:91:0a: 96:08:c0:3f:76:af:0b:0f:e7:d9:5d:6a:12:66:21:10:16:b6: a0:60:f4:d9:0b:99:c7:74:f3:ac:7f:68:51:ea:3e:9b:f0:e2: bd:b7:8d:76:f8:fd:f6:b3:e3:32:5c:f9:0c:88:2d:54:7e:2a: e9:e3:94:66:cb:70:0c:8c:03:c9:14:6f:4f:36:ce:54:90:04: 3d:86:07:89:ff:12:8f:6b:cd:27:f3:ea:83:ad:65:29:b1:3d: 96:87:c8:08:6d:0e:0c:ab:d7:ce:56:c1:c4:91:32:84:56:a3: 49:57:48:76:54:d9:47:73:87:d5:ef:14:50:00:72:49:62:cd: 23:90:c0:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gyTUoPYpxijIPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ODY3YzVlNjEtMjdkMC00ZWZhLTk0YjMtMTBhNWEzYWQ5YjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAUi5W/NiWp7wfcvwnW+tvGpZGg8uSnUP00z e5eEBfRBk6Dp8OIP2d+tAN7DWyWBZzcbC7hCRjRBqm97stSgB0JrGeQVTmyCLgTs YUqecU193fqob5n82WqGmmbUQ60OktKJb9fOHwGl7RlDOUBr29NcpUMSWkdLQnQb JTldMCD/tDj9aNJKGc8Ygbhss8JrK4nmS+ZCBD1PSUwhqmFYULHo5FHRVNlaUvqq alwYHE6oH3186Ukvg4PdraQLDZMNDSPslrVLeu1bgMoI4Bi2bd2tE51DxXZmhCgb FDQAnnBK1zDgIp9R/HTyIV8priMifcxSEXJiFnCYo1s/4Ol0zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXK7DVWTkIL+6M2hG1FTL/KEuEWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGJkMjk5ZmMtYzA3ZS0z MDBlLWE2MTktZWZiOGUwMTUzNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoiiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASqJbVAHxbYOqnCKG07fCxia+J3/2JAfz5+NCFh5K8IPDwQb6LvMVtP RI5IFreVsu8+wqwJ1uRxyuwIFHOnfx1Py1SIxXQS/4tWc0GjcetA6qT3HW89Oay6 VrYzg11vTl8yM7mpZE2QzlaJJpBBQ2JM1Zy34+29wbqF+V+RCpYIwD92rwsP59ld ahJmIRAWtqBg9NkLmcd086x/aFHqPpvw4r23jXb4/faz4zJc+QyILVR+KunjlGbL cAyMA8kUb082zlSQBD2GB4n/Eo9rzSfz6oOtZSmxPZaHyAhtDgyr185WwcSRMoRW o0lXSHZU2Udzh9XvFFAAcklizSOQwBE= -----END CERTIFICATE-----Generated at Tue Oct 13 17:47:16 2026 by rpki-client