$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c34d568-8571-3ff8-a588-bb5e82d5fa88.roa File: 4c34d568-8571-3ff8-a588-bb5e82d5fa88.roa (raw, json) Hash identifier: fWxDGQ4U1DGYt/ebvvhT/x1+p11e72eoUbqKxNTNJXk= Subject key identifier: 68:5D:C3:E5:F4:5B:58:8F:F2:BC:25:17:D9:CC:F6:A5:E4:CE:69:2C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D989030CEF58707925900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c34d568-8571-3ff8-a588-bb5e82d5fa88.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 36124 IP address blocks: 107.7.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:98:90:30:ce:f5:87:07:92:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=5aeedf0e-98ec-4e53-9204-6bf5c0c4ae68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:17:ef:c1:28:81:e8:37:04:18:ed:2d:77:ff: 70:bb:6d:40:ff:34:ac:d2:a2:7e:d8:e7:52:19:e4: 1e:53:c3:0d:00:e1:f6:d4:80:2f:23:81:9a:e4:3a: a6:96:a9:22:16:29:ad:fa:49:ac:04:1e:f0:de:8a: 1d:c8:89:bf:4a:6a:c5:57:85:fa:12:9e:39:85:79: 3f:da:63:bb:a5:7f:2d:03:6d:6d:70:4d:f5:7d:56: 7f:f5:18:c8:80:9e:97:3e:e1:49:11:a2:21:cf:d1: a3:4f:2a:f3:66:44:1d:30:99:4e:4c:b9:87:ea:d1: 96:fe:2c:e2:b1:13:52:fd:a0:3c:7a:05:71:f1:a8: 22:69:65:99:c6:0b:a5:1d:db:03:ec:77:e3:64:4e: 19:6e:07:5b:c0:89:9e:35:09:e7:22:56:54:f7:ca: cf:43:d2:e9:7a:22:fc:ea:93:f5:ea:72:4e:17:38: c3:e0:d0:6a:b0:ce:b2:56:29:ea:1e:a1:2d:39:38: 4f:39:ce:d1:d9:cd:27:8d:f3:4d:70:45:10:6a:1b: 6b:d9:fc:dd:b4:b8:a9:b8:b1:91:3a:26:da:15:7a: 18:99:13:99:d2:45:48:24:83:fe:02:09:ce:77:e9: ff:55:01:87:e7:c9:19:2c:1e:b2:d8:fe:12:6b:98: 2a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5D:C3:E5:F4:5B:58:8F:F2:BC:25:17:D9:CC:F6:A5:E4:CE:69:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c34d568-8571-3ff8-a588-bb5e82d5fa88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 107.7.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:a7:55:d7:4d:18:72:b6:7e:8e:b5:2b:1e:d2:93:49:78:08: 80:a3:ef:57:f7:0c:c9:42:9f:41:b8:40:da:9e:7c:83:da:51: c7:7d:37:33:74:0a:ba:19:82:f8:b5:33:46:61:bd:dd:0f:65: dc:bb:cd:53:fe:73:10:ea:df:44:57:3b:ab:e4:84:bc:a6:45: ac:d3:75:dd:46:b8:7e:82:ed:77:1f:9d:06:49:a3:a4:6b:62: 7b:67:5a:6e:f1:49:c7:8c:0f:79:4a:18:b4:fd:9c:ae:d0:73: 4b:d8:8f:d3:5d:b4:f3:d0:cd:34:3a:3d:d2:2a:28:aa:73:2a: 60:b8:30:78:6b:b2:6d:9e:1b:47:a2:a4:d1:9e:88:3d:1b:db: 06:af:dd:6e:f2:46:20:2f:4f:e6:f3:6e:6a:f0:3d:70:5e:b4: 86:62:63:82:70:5f:76:7a:41:bf:b8:7d:e7:90:75:ac:57:ce: 72:53:a1:7a:47:47:e3:14:e7:c1:0b:8f:54:ed:c7:18:e0:bf: 8c:44:e8:64:c2:7d:86:f0:eb:7d:0c:40:60:9f:2b:bb:95:56: ae:8b:4d:6d:89:4b:28:28:59:d6:c4:d1:b5:c7:60:e4:9b:4d: df:e9:2b:67:b0:31:a1:db:bf:d6:a3:cd:f6:84:f2:6d:19:eb: 70:4e:31:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZiQMM71hweSWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NWFlZWRmMGUtOThlYy00ZTUzLTkyMDQtNmJmNWMwYzRhZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBfvwSiB6DcEGO0td/9wu21A/zSs0qJ+2OdS GeQeU8MNAOH21IAvI4Ga5DqmlqkiFimt+kmsBB7w3oodyIm/SmrFV4X6Ep45hXk/ 2mO7pX8tA21tcE31fVZ/9RjIgJ6XPuFJEaIhz9GjTyrzZkQdMJlOTLmH6tGW/izi sRNS/aA8egVx8agiaWWZxgulHdsD7HfjZE4ZbgdbwImeNQnnIlZU98rPQ9LpeiL8 6pP16nJOFzjD4NBqsM6yVinqHqEtOThPOc7R2c0njfNNcEUQahtr2fzdtLipuLGR OibaFXoYmROZ0kVIJIP+AgnOd+n/VQGH58kZLB6y2P4Sa5gqlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhdw+X0W1iP8rwlF9nM9qXkzmksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGMzNGQ1NjgtODU3MS0z ZmY4LWE1ODgtYmI1ZTgyZDVmYTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBawfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWnVddNGHK2fo61Kx7Sk0l4CICj71f3DMlCn0G4QNqefIPaUcd9NzN0 CroZgvi1M0Zhvd0PZdy7zVP+cxDq30RXO6vkhLymRazTdd1GuH6C7XcfnQZJo6Rr YntnWm7xSceMD3lKGLT9nK7Qc0vYj9NdtPPQzTQ6PdIqKKpzKmC4MHhrsm2eG0ei pNGeiD0b2wav3W7yRiAvT+bzbmrwPXBetIZiY4JwX3Z6Qb+4feeQdaxXznJToXpH R+MU58ELj1Ttxxjgv4xE6GTCfYbw630MQGCfK7uVVq6LTW2JSygoWdbE0bXHYOSb Td/pK2ewMaHbv9ajzfaE8m0Z63BOMXA= -----END CERTIFICATE-----Generated at Tue Oct 13 17:44:55 2026 by rpki-client