$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/687ce29b-9dc4-30b4-9f75-33f20b098794.roa File: 687ce29b-9dc4-30b4-9f75-33f20b098794.roa (raw, json) Hash identifier: IvvP8meo/w1a1UdXQfKgaXRrKlIcJy7lSHagGMb0tC4= Subject key identifier: 01:C5:C0:6E:4B:DD:63:DC:5D:4A:07:E6:01:AE:52:F4:E1:ED:81:30 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EE17495E025E0AD850B2AFAC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/687ce29b-9dc4-30b4-9f75-33f20b098794.roa Signing time: Tue 18 Aug 2026 19:00:18 +0000 ROA not before: Tue 18 Aug 2026 19:00:18 +0000 ROA not after: Mon 16 Nov 2026 20:00:18 +0000 asID: 7029 IP address blocks: 67.140.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e1:74:95:e0:25:e0:ad:85:0b:2a:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 18 19:00:18 2026 GMT Not After : Nov 16 20:00:18 2026 GMT Subject: CN=f93d8487-466d-4f42-8995-464dca0d6371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:14:dd:d5:91:03:59:1f:e6:05:b4:a3:c2:f6: d1:bc:26:b4:87:e9:3f:f3:37:a4:c1:d6:3e:83:59: 1a:af:76:de:1d:21:5c:c0:48:6c:36:11:91:58:60: a5:6d:58:1f:31:d5:63:93:cb:43:d2:d3:20:5a:70: 41:ba:43:a3:08:58:5f:00:78:f4:c1:47:76:1b:e7: 61:33:48:59:0a:cc:01:67:98:13:1a:25:71:0c:96: a6:36:7e:57:72:40:28:5d:a8:01:43:fb:8c:f0:aa: 4a:f2:24:d4:b2:d6:15:45:92:0a:f6:c4:f3:0c:6d: f1:e3:b9:6e:bc:9b:b1:09:3e:c1:88:00:09:6a:c5: f0:0a:1c:2d:d3:08:bf:fb:22:3e:88:bc:59:2e:38: ce:e4:53:ef:50:6e:f6:d0:d7:9f:a5:55:68:83:ba: 27:eb:41:2f:8e:ca:0c:d5:f0:be:57:9d:9f:47:7d: f8:97:21:5b:63:11:d0:ca:6d:b5:33:f3:ad:6e:0b: f7:d3:66:65:8b:16:f2:fb:6c:39:87:53:15:ab:a9: 3e:ac:1c:e8:a5:41:2e:57:5e:79:90:c6:52:1c:b9: 77:ab:ea:7d:37:6a:6a:e8:b0:5a:a2:10:45:8b:0a: 5f:5e:a2:13:b3:f3:4c:30:b8:9d:1f:55:e3:fb:ba: 22:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C5:C0:6E:4B:DD:63:DC:5D:4A:07:E6:01:AE:52:F4:E1:ED:81:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/687ce29b-9dc4-30b4-9f75-33f20b098794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:21:4a:8c:27:f0:68:92:b3:13:40:ac:cc:8a:5a:95:7b:ca: c1:76:7b:27:c4:d5:28:6b:43:2f:ec:cb:32:01:c5:8e:7e:4f: d3:b6:7e:a6:67:b6:e6:bf:7a:e8:31:1f:f5:34:ef:26:b7:9b: 18:6f:b6:cb:40:db:96:34:06:b0:0e:08:43:01:4b:85:e6:37: 0b:af:c3:bf:f5:52:68:70:47:04:2d:cf:bb:0c:6f:4c:13:28: 55:52:62:8f:1d:f8:d5:40:54:36:0c:95:df:f7:4d:da:24:91: 93:3e:4f:8d:5f:fb:cf:f8:6d:2c:77:81:db:50:5c:4d:d8:3e: 7e:05:ed:2f:01:b4:7d:1a:0f:44:08:6f:6a:93:c0:b1:f3:2a: 83:35:81:b1:a2:a8:b3:71:ed:0e:22:e9:68:82:7c:e3:1d:ac: 76:48:11:53:6c:77:cb:d2:1f:1c:a2:79:4f:84:e5:c9:15:c8: 62:56:34:71:d4:9b:96:0d:e5:68:3d:66:31:77:10:79:4a:79: d5:a0:98:2e:d9:39:e8:e4:3d:0d:bc:28:ed:ec:79:1b:62:28: f6:1d:7e:0d:fb:75:3f:4d:4b:77:4b:e4:04:07:a0:1c:d7:31: 75:a4:75:bd:8a:19:e8:c9:ca:05:a4:78:e7:b6:55:8f:97:db: cf:eb:2f:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7hdJXgJeCthQsq+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxODE5MDAxOFoXDTI2MTExNjIwMDAxOFowLzEtMCsGA1UEAxMk ZjkzZDg0ODctNDY2ZC00ZjQyLTg5OTUtNDY0ZGNhMGQ2MzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxTd1ZEDWR/mBbSjwvbRvCa0h+k/8zekwdY+ g1kar3beHSFcwEhsNhGRWGClbVgfMdVjk8tD0tMgWnBBukOjCFhfAHj0wUd2G+dh M0hZCswBZ5gTGiVxDJamNn5XckAoXagBQ/uM8KpK8iTUstYVRZIK9sTzDG3x47lu vJuxCT7BiAAJasXwChwt0wi/+yI+iLxZLjjO5FPvUG720NefpVVog7on60EvjsoM 1fC+V52fR334lyFbYxHQym21M/Otbgv302Zlixby+2w5h1MVq6k+rBzopUEuV155 kMZSHLl3q+p9N2pq6LBaohBFiwpfXqITs/NMMLidH1Xj+7oizQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHFwG5L3WPcXUoH5gGuUvTh7YEwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjg3Y2UyOWItOWRjNC0z MGI0LTlmNzUtMzNmMjBiMDk4Nzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ4wkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADshSown8GiSsxNArMyKWpV7ysF2eyfE1ShrQy/syzIBxY5+T9O2fqZn tua/eugxH/U07ya3mxhvtstA25Y0BrAOCEMBS4XmNwuvw7/1UmhwRwQtz7sMb0wT KFVSYo8d+NVAVDYMld/3TdokkZM+T41f+8/4bSx3gdtQXE3YPn4F7S8BtH0aD0QI b2qTwLHzKoM1gbGiqLNx7Q4i6WiCfOMdrHZIEVNsd8vSHxyieU+E5ckVyGJWNHHU m5YN5Wg9ZjF3EHlKedWgmC7ZOejkPQ28KO3seRtiKPYdfg37dT9NS3dL5AQHoBzX MXWkdb2KGejJygWkeOe2VY+X28/rL0M= -----END CERTIFICATE-----Generated at Thu Aug 27 09:46:54 2026 by rpki-client