$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f6b7ca3-8281-3da3-be27-54175315d8a3.roa File: 4f6b7ca3-8281-3da3-be27-54175315d8a3.roa (raw, json) Hash identifier: PHe3fzaMHT5gaioc9nyzuv4nrII5P9oE7eGiLXjFmWM= Subject key identifier: 46:4D:01:A6:DA:40:3B:57:2E:26:73:D6:61:DB:1F:02:60:82:DD:65 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED432232B30A92EE37B86FB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f6b7ca3-8281-3da3-be27-54175315d8a3.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 7029 IP address blocks: 67.140.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:23:2b:30:a9:2e:e3:7b:86:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=3236c91b-2e8a-472c-8411-64592f94d53b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6d:54:a6:01:e2:34:79:bb:86:67:69:5d:4d: eb:f8:8c:0f:46:dc:a3:86:d3:83:b3:8f:22:b7:72: 0f:3b:82:04:3c:69:bc:5b:50:46:88:87:1d:ef:b2: 24:99:65:d6:68:22:ee:24:c1:58:53:a6:e8:2b:a0: 67:11:f1:5b:e1:b0:1c:6a:56:85:e6:55:bd:5f:9f: aa:4f:00:30:50:1b:ac:42:bb:b4:b4:92:b8:ad:27: d5:99:15:2f:cc:4d:da:f7:e4:d1:08:b0:7d:c8:13: 13:e4:e3:a1:bd:97:bf:46:5f:c0:8b:b8:02:69:55: 97:ea:f9:59:71:64:d4:d5:70:4e:57:14:9e:7c:04: 04:24:16:43:29:00:50:e8:1e:14:aa:ff:f6:c0:ee: 24:80:d8:e8:f0:3d:91:8e:b3:e9:42:3f:c0:ab:25: 16:0e:11:6e:08:23:f5:12:f8:65:5f:96:1c:f3:f9: a4:25:43:26:a3:a6:78:e5:b7:24:8f:47:24:a7:4c: 62:36:bd:c7:83:ef:53:90:23:75:17:72:19:27:d0: 4c:09:34:3f:77:ba:80:67:35:9e:48:6c:cf:56:f4: 63:21:0f:84:69:c7:c0:0d:43:2f:48:f8:dd:bb:87: 4f:be:ff:5d:02:95:e3:06:d3:22:ed:b0:7a:85:f2: 41:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:4D:01:A6:DA:40:3B:57:2E:26:73:D6:61:DB:1F:02:60:82:DD:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f6b7ca3-8281-3da3-be27-54175315d8a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:3f:46:4d:a2:23:6e:de:d5:e0:fb:ba:e4:f6:4c:72:0e:48: fe:0e:64:88:73:75:62:e2:17:dc:9b:e2:4f:8d:3d:a1:7d:3b: b3:43:b8:77:48:d5:89:29:1f:4f:a2:ce:51:1d:6a:a7:ad:ad: 67:24:93:57:cd:01:58:fb:e8:b5:d9:50:3c:59:34:33:50:cb: 72:e8:93:f8:df:a5:bb:58:a5:c8:91:92:02:04:b1:06:ce:62: ae:e8:51:95:21:55:e6:73:13:b2:27:4b:7d:5d:8f:ad:e2:0b: bc:96:ea:a0:ed:ac:dc:6d:e5:e1:b4:4a:28:21:69:06:ba:f2: ab:c0:28:92:db:15:3e:fa:05:71:ce:49:93:98:73:fc:77:f7: a7:13:93:a6:f4:b0:d3:b4:62:f0:6e:2c:08:c3:9f:49:5a:67: 66:97:64:63:f7:1c:31:ce:ba:3e:37:b9:0d:10:3d:52:18:9b: 92:e4:46:a3:cd:8c:df:a3:61:b2:ab:ab:14:8e:20:01:9d:c5: 45:cc:57:91:d1:01:19:b5:b9:1c:99:4e:87:82:64:9c:bf:6d: 14:6e:65:fd:61:98:8e:08:63:6f:b5:aa:5a:60:a8:d0:35:8b: 36:39:c2:ca:df:22:79:7e:8e:e2:aa:9b:1d:5d:ca:7d:d3:e7: 00:c2:f3:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMiMrMKku43uG+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk MzIzNmM5MWItMmU4YS00NzJjLTg0MTEtNjQ1OTJmOTRkNTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW1UpgHiNHm7hmdpXU3r+IwPRtyjhtODs48i t3IPO4IEPGm8W1BGiIcd77IkmWXWaCLuJMFYU6boK6BnEfFb4bAcalaF5lW9X5+q TwAwUBusQru0tJK4rSfVmRUvzE3a9+TRCLB9yBMT5OOhvZe/Rl/Ai7gCaVWX6vlZ cWTU1XBOVxSefAQEJBZDKQBQ6B4Uqv/2wO4kgNjo8D2RjrPpQj/AqyUWDhFuCCP1 EvhlX5Yc8/mkJUMmo6Z45bckj0ckp0xiNr3Hg+9TkCN1F3IZJ9BMCTQ/d7qAZzWe SGzPVvRjIQ+EacfADUMvSPjdu4dPvv9dApXjBtMi7bB6hfJBMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZNAabaQDtXLiZz1mHbHwJggt1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGY2YjdjYTMtODI4MS0z ZGEzLWJlMjctNTQxNzUzMTVkOGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ4zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4/Rk2iI27e1eD7uuT2THIOSP4OZIhzdWLiF9yb4k+NPaF9O7NDuHdI 1YkpH0+izlEdaqetrWckk1fNAVj76LXZUDxZNDNQy3Lok/jfpbtYpciRkgIEsQbO Yq7oUZUhVeZzE7InS31dj63iC7yW6qDtrNxt5eG0SighaQa68qvAKJLbFT76BXHO SZOYc/x396cTk6b0sNO0YvBuLAjDn0laZ2aXZGP3HDHOuj43uQ0QPVIYm5LkRqPN jN+jYbKrqxSOIAGdxUXMV5HRARm1uRyZToeCZJy/bRRuZf1hmI4IY2+1qlpgqNA1 izY5wsrfInl+juKqmx1dyn3T5wDC8wY= -----END CERTIFICATE-----Generated at Thu Aug 27 12:28:10 2026 by rpki-client