$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/66a3b706-eb8a-3b61-a47b-e699f19ff60a.roa File: 66a3b706-eb8a-3b61-a47b-e699f19ff60a.roa (raw, json) Hash identifier: nRd9oaxqx7em1LcTlHe6WAhWRPQXvtyS1GR62qCWpCo= Subject key identifier: 74:D2:42:1E:C9:DA:65:26:AF:40:5F:BD:10:02:ED:A6:10:9D:19:44 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B3A64562E2198DD8D300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/66a3b706-eb8a-3b61-a47b-e699f19ff60a.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 75.91.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b3:a6:45:62:e2:19:8d:d8:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=ebde1026-f6e4-4d8f-8515-f42231542e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fb:55:c3:01:91:65:f1:f3:35:a5:fb:10:4d: c5:8c:be:0d:ca:f1:27:d9:a9:19:8a:52:0c:5f:8a: 55:98:3d:a4:a4:0c:29:a6:7f:c0:49:2d:d7:f9:81: 61:1a:2c:e2:0e:8f:60:f8:96:81:52:f4:3d:d4:ea: d3:2b:fe:a4:e5:5d:09:78:ac:81:75:b8:55:c0:b8: d4:39:1d:24:28:5e:a0:b7:59:83:32:f6:a5:52:f8: 92:00:ec:fa:96:28:69:04:02:6d:e1:44:2b:85:04: 3f:84:43:bd:81:0c:91:dc:db:d0:d7:8f:1a:7b:17: 34:14:51:f4:94:1c:2f:76:2b:f0:a7:cf:7f:38:e1: 4c:b3:f3:2b:ad:de:eb:49:62:02:5d:63:8a:85:8e: f7:43:eb:f5:a9:f9:17:08:b6:08:c1:d3:c4:cb:cb: 2b:63:56:22:cf:da:b2:d3:bb:26:82:7a:3f:9a:53: 70:4c:6d:97:71:66:46:08:e7:59:c5:c0:c8:98:87: 5e:45:6e:da:50:e2:d3:fb:a3:d4:78:ae:00:56:1f: 33:3c:4e:a4:91:81:ff:37:6a:5f:0f:85:ba:00:f7: 25:58:81:5c:0f:46:eb:88:8d:72:c2:1b:48:95:7e: a9:65:b5:e0:5d:33:1a:c5:42:4a:b6:9c:35:ef:2d: 8d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D2:42:1E:C9:DA:65:26:AF:40:5F:BD:10:02:ED:A6:10:9D:19:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/66a3b706-eb8a-3b61-a47b-e699f19ff60a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d0:37:b9:1c:c5:ee:ac:72:25:f6:cb:1e:ce:ac:cb:d4:f1: 9b:25:83:8c:5a:19:1a:95:6a:92:da:8c:77:f0:d0:44:2f:34: 71:bf:bc:39:e0:80:2f:c5:7d:3f:5f:4a:ef:8d:0a:a8:0a:da: e1:7c:22:8c:69:b2:26:b2:f8:db:05:a2:10:ba:5f:af:62:44: 31:23:d8:0f:20:ce:aa:11:06:29:2d:3f:93:26:2f:8c:0f:b2: 67:bf:fc:84:ca:2a:d8:96:05:71:d3:66:a9:18:d0:29:14:a7: 65:bd:62:6f:c3:c3:3a:f5:4e:f5:ee:a6:03:2d:e2:d7:fe:55: 22:4f:72:7b:fb:a9:fb:63:74:ef:5c:c3:de:da:18:91:22:fc: 5c:38:c5:0c:16:15:5d:9e:89:66:c4:85:d1:33:23:80:39:bc: b2:40:c1:e1:ab:d0:d6:80:46:03:1d:42:fd:5b:ea:01:73:9f: 12:86:b9:02:71:2f:62:01:db:59:cb:4c:80:8b:68:63:76:ae: 93:80:de:85:85:4e:a7:bf:4c:7d:7b:13:d0:e9:5b:1c:a0:4b: 01:94:70:15:5b:66:ea:b6:02:9f:e9:d3:bf:04:c9:d1:09:b5: e5:63:1d:3d:b9:a6:32:e3:22:dc:1b:d4:3b:b7:54:c9:0d:d7: e5:d0:0d:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rOmRWLiGY3Y0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk ZWJkZTEwMjYtZjZlNC00ZDhmLTg1MTUtZjQyMjMxNTQyZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/tVwwGRZfHzNaX7EE3FjL4NyvEn2akZilIM X4pVmD2kpAwppn/ASS3X+YFhGiziDo9g+JaBUvQ91OrTK/6k5V0JeKyBdbhVwLjU OR0kKF6gt1mDMvalUviSAOz6lihpBAJt4UQrhQQ/hEO9gQyR3NvQ148aexc0FFH0 lBwvdivwp89/OOFMs/Mrrd7rSWICXWOKhY73Q+v1qfkXCLYIwdPEy8srY1Yiz9qy 07smgno/mlNwTG2XcWZGCOdZxcDImIdeRW7aUOLT+6PUeK4AVh8zPE6kkYH/N2pf D4W6APclWIFcD0briI1ywhtIlX6pZbXgXTMaxUJKtpw17y2NsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTSQh7J2mUmr0BfvRAC7aYQnRlEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjZhM2I3MDYtZWI4YS0z YjYxLWE0N2ItZTY5OWYxOWZmNjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1vAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHQN7kcxe6sciX2yx7OrMvU8Zslg4xaGRqVapLajHfw0EQvNHG/vDng gC/FfT9fSu+NCqgK2uF8Ioxpsiay+NsFohC6X69iRDEj2A8gzqoRBiktP5MmL4wP sme//ITKKtiWBXHTZqkY0CkUp2W9Ym/Dwzr1TvXupgMt4tf+VSJPcnv7qftjdO9c w97aGJEi/Fw4xQwWFV2eiWbEhdEzI4A5vLJAweGr0NaARgMdQv1b6gFznxKGuQJx L2IB21nLTICLaGN2rpOA3oWFTqe/TH17E9DpWxygSwGUcBVbZuq2Ap/p078EydEJ teVjHT25pjLjItwb1Du3VMkN1+XQDYQ= -----END CERTIFICATE-----Generated at Tue Oct 13 04:13:37 2026 by rpki-client