$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5df2f705-ffef-373b-bed6-c4ebc88e9c9f.roa File: 5df2f705-ffef-373b-bed6-c4ebc88e9c9f.roa (raw, json) Hash identifier: ++QVomqNgG21Wu6ok85x9lG/otFnkRPhvVfkKcnv2IY= Subject key identifier: 19:9D:4E:CC:53:76:0B:66:59:12:42:42:01:E7:B0:6B:27:65:55:C7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D950CD844BF612F799640 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5df2f705-ffef-373b-bed6-c4ebc88e9c9f.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 208.38.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:95:0c:d8:44:bf:61:2f:79:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=44614c78-59e0-42b1-a15b-a0e1719c338a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b7:c4:4d:34:5e:29:2d:b2:a0:1b:1c:fe:68: 0b:9d:b2:a8:6b:32:07:7c:43:1d:cd:91:20:c8:da: 50:a2:4e:c6:46:3a:3d:39:29:66:09:a2:eb:27:2b: 96:94:45:07:63:bf:6d:e7:df:6e:f7:fd:77:d1:18: c3:2e:26:3c:e2:ba:47:08:3f:1e:03:34:ef:25:87: e1:16:33:ac:4a:01:d4:c3:93:7e:44:8f:a1:8a:f0: ec:69:54:11:49:de:07:37:c3:ce:1f:8b:4a:ee:76: a4:9f:23:f5:e7:11:8b:16:61:50:aa:3f:61:6b:5e: 7c:88:0b:10:45:ed:9f:40:bf:19:ff:14:cf:a0:ab: ca:8a:f2:2f:90:1f:49:0f:bc:a3:7a:fd:55:26:0b: 61:14:88:75:fc:b3:a9:93:c2:27:11:47:44:77:67: 37:c1:a2:70:fa:33:68:39:df:ce:06:de:7b:d9:0b: e2:b1:3e:68:d0:07:82:1e:9f:5b:5b:70:3c:7a:d4: ac:65:b0:78:45:5d:39:9e:e9:d5:ad:70:ab:3e:25: e2:79:f2:d1:6b:46:c8:1a:c4:a8:be:94:de:54:2c: 2f:e2:e6:d8:90:8f:c9:3a:4d:c1:80:66:1d:58:a8: 4e:da:78:a0:b8:18:23:0f:60:11:0c:f3:74:f3:fe: 3b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9D:4E:CC:53:76:0B:66:59:12:42:42:01:E7:B0:6B:27:65:55:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5df2f705-ffef-373b-bed6-c4ebc88e9c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.38.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:3c:61:bd:e7:0b:06:fb:36:f5:25:d5:3f:89:8a:aa:cb:b7: 6a:e9:0c:af:48:e2:ea:42:a4:7b:87:a0:b5:83:69:fd:63:05: ce:ad:c4:ff:66:55:c3:b8:9e:0a:f1:a3:6d:fb:8c:31:e9:28: 09:cd:75:34:47:1a:13:bb:77:52:df:07:63:93:4d:9c:10:92: f2:24:86:ae:c1:5f:50:03:b2:77:3d:59:07:54:01:da:c3:01: 86:23:c8:bd:47:85:f6:e6:bc:93:4f:82:b9:f2:66:54:3c:b2: fb:5b:13:1b:32:e6:90:9c:a1:8a:97:54:86:e7:6a:7c:13:cb: e2:b6:66:91:41:f7:3e:59:cd:26:4f:f0:5c:9d:70:8a:d0:b0: cb:3e:14:24:2c:69:6c:79:2a:b9:23:74:3c:f7:ff:e6:22:98: c4:09:37:c5:4a:30:cc:78:8a:43:95:22:72:01:87:90:24:30: 74:b0:08:59:17:89:6b:13:26:79:31:4d:db:42:9d:f0:86:a4: 5c:7c:46:c6:e5:af:4d:36:75:78:77:0f:21:67:1e:76:f0:8f: 8a:78:1b:fd:bc:f3:47:90:36:7b:61:f7:00:f5:45:e0:9d:44: 1d:3a:41:c7:36:70:42:4d:30:7c:18:df:8f:02:3a:86:28:3c: 4c:44:77:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZUM2ES/YS95lkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NDQ2MTRjNzgtNTllMC00MmIxLWExNWItYTBlMTcxOWMzMzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7fETTReKS2yoBsc/mgLnbKoazIHfEMdzZEg yNpQok7GRjo9OSlmCaLrJyuWlEUHY79t599u9/130RjDLiY84rpHCD8eAzTvJYfh FjOsSgHUw5N+RI+hivDsaVQRSd4HN8POH4tK7naknyP15xGLFmFQqj9ha158iAsQ Re2fQL8Z/xTPoKvKivIvkB9JD7yjev1VJgthFIh1/LOpk8InEUdEd2c3waJw+jNo Od/OBt572QvisT5o0AeCHp9bW3A8etSsZbB4RV05nunVrXCrPiXiefLRa0bIGsSo vpTeVCwv4ubYkI/JOk3BgGYdWKhO2niguBgjD2ARDPN08/47dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmdTsxTdgtmWRJCQgHnsGsnZVXHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWRmMmY3MDUtZmZlZi0z NzNiLWJlZDYtYzRlYmM4OGU5YzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0CZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACM8Yb3nCwb7NvUl1T+JiqrLt2rpDK9I4upCpHuHoLWDaf1jBc6txP9m VcO4ngrxo237jDHpKAnNdTRHGhO7d1LfB2OTTZwQkvIkhq7BX1ADsnc9WQdUAdrD AYYjyL1HhfbmvJNPgrnyZlQ8svtbExsy5pCcoYqXVIbnanwTy+K2ZpFB9z5ZzSZP 8FydcIrQsMs+FCQsaWx5KrkjdDz3/+YimMQJN8VKMMx4ikOVInIBh5AkMHSwCFkX iWsTJnkxTdtCnfCGpFx8Rsblr002dXh3DyFnHnbwj4p4G/2880eQNnth9wD1ReCd RB06Qcc2cEJNMHwY348COoYoPExEd0Y= -----END CERTIFICATE-----Generated at Tue Oct 13 09:13:36 2026 by rpki-client