$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ce51fdf-53e5-3aba-a0b1-a4757b3ebcf7.roa File: 6ce51fdf-53e5-3aba-a0b1-a4757b3ebcf7.roa (raw, json) Hash identifier: TtF+xgtRoVcGhiXNEg3F5VkAgH1fWfxpKeS2PF2YYKc= Subject key identifier: 09:03:2C:9A:23:89:FE:0D:0D:7A:06:1D:20:D6:C7:30:D8:70:82:81 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F5E62C84603F1BCBE03F59200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ce51fdf-53e5-3aba-a0b1-a4757b3ebcf7.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 7029 IP address blocks: 67.141.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c8:46:03:f1:bc:be:03:f5:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=6a33e719-0a97-4e85-8665-a2fa6e5778c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6f:a0:82:71:67:2e:7f:c2:a2:ea:0e:7d:6a: 59:80:54:a5:ed:e2:39:43:7f:56:20:3a:49:91:2a: b2:ce:67:22:53:1b:ac:d8:9d:13:3d:43:20:d2:04: be:4b:d5:4a:5a:b9:0f:f0:2a:e2:c8:5d:bd:0c:d3: 71:ae:c1:34:4d:4d:71:b1:c9:0f:04:b2:5f:c5:97: 25:f4:23:fc:67:95:76:83:72:db:d4:95:91:16:7d: a0:2f:4f:6d:3f:f2:33:0b:0a:f5:07:0e:cf:84:5c: e4:c0:d3:52:da:34:6a:a2:41:0e:22:b9:af:b2:ad: 36:f2:c6:c5:c6:76:d9:83:07:46:52:aa:a1:d7:2a: b5:9d:44:0e:12:79:0a:b0:a8:58:14:4b:0f:80:eb: 1e:35:4a:7e:69:1d:3e:c8:da:3f:08:a2:3a:fa:29: 68:0d:34:28:22:b9:28:68:36:d4:0b:f6:17:5b:b6: 95:b7:32:79:bd:7d:99:cc:57:11:ca:43:9b:cb:aa: 4c:f1:64:2e:bd:1f:94:34:9a:ef:e7:b7:59:e4:ae: 8a:90:04:a2:a1:ab:e2:2b:4e:6d:1a:3b:36:3a:ff: bd:3c:5c:1f:23:29:9b:9e:df:07:cc:5b:60:65:b6: 9f:86:4c:88:b6:a3:1c:00:4c:ac:d5:27:aa:ab:91: 7c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:03:2C:9A:23:89:FE:0D:0D:7A:06:1D:20:D6:C7:30:D8:70:82:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ce51fdf-53e5-3aba-a0b1-a4757b3ebcf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:cd:42:34:8f:fc:1a:ee:63:41:ca:9c:32:58:a3:a7:6c:84: 77:c4:93:fe:94:74:49:18:c7:37:29:71:9b:55:4d:3c:3b:30: 38:78:f5:54:9f:24:8d:e7:f1:77:f7:e8:47:01:f8:f2:51:63: a0:b0:56:9c:dd:51:7a:3c:24:f5:67:be:37:8a:c5:39:cc:48: 37:01:41:6b:b6:63:4f:1e:4c:e0:6b:f8:ed:c4:61:38:48:82: f2:77:ff:3e:6f:69:d7:8b:22:70:4d:ae:3a:2f:d0:62:54:cc: 9d:b8:c3:7b:43:43:73:05:ad:b4:74:7e:7d:bc:c9:87:19:45: 96:f2:a4:75:91:18:c4:45:7d:1c:a1:39:e4:89:97:71:ae:84: d4:bc:1e:0e:f0:e9:1c:a7:84:0e:6f:c1:42:42:c8:e2:97:8a: c8:05:66:06:63:4d:70:e6:23:a6:1f:2e:03:a3:c6:4b:47:a2: 0a:16:2d:d0:25:f1:30:61:27:61:9a:d8:8e:4e:92:07:ec:2a: 42:47:c5:33:80:b9:e4:8c:a6:53:ca:3d:85:4e:84:1c:1f:e9: cb:af:3a:1c:c8:85:7e:f9:28:15:20:14:b2:10:d9:61:59:ed: 5d:c3:27:0d:8d:5d:dd:b5:b1:2a:56:f7:ad:1c:96:f9:06:f4: c4:7a:6d:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYshGA/G8vgP1kgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NmEzM2U3MTktMGE5Ny00ZTg1LTg2NjUtYTJmYTZlNTc3OGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW+ggnFnLn/CouoOfWpZgFSl7eI5Q39WIDpJ kSqyzmciUxus2J0TPUMg0gS+S9VKWrkP8CriyF29DNNxrsE0TU1xsckPBLJfxZcl 9CP8Z5V2g3Lb1JWRFn2gL09tP/IzCwr1Bw7PhFzkwNNS2jRqokEOIrmvsq028sbF xnbZgwdGUqqh1yq1nUQOEnkKsKhYFEsPgOseNUp+aR0+yNo/CKI6+iloDTQoIrko aDbUC/YXW7aVtzJ5vX2ZzFcRykOby6pM8WQuvR+UNJrv57dZ5K6KkASioaviK05t Gjs2Ov+9PFwfIymbnt8HzFtgZbafhkyItqMcAEys1Seqq5F8vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkDLJojif4NDXoGHSDWxzDYcIKBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmNlNTFmZGYtNTNlNS0z YWJhLWEwYjEtYTQ3NTdiM2ViY2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ42AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3NQjSP/BruY0HKnDJYo6dshHfEk/6UdEkYxzcpcZtVTTw7MDh49VSf JI3n8Xf36EcB+PJRY6CwVpzdUXo8JPVnvjeKxTnMSDcBQWu2Y08eTOBr+O3EYThI gvJ3/z5vadeLInBNrjov0GJUzJ24w3tDQ3MFrbR0fn28yYcZRZbypHWRGMRFfRyh OeSJl3GuhNS8Hg7w6RynhA5vwUJCyOKXisgFZgZjTXDmI6YfLgOjxktHogoWLdAl 8TBhJ2Ga2I5OkgfsKkJHxTOAueSMplPKPYVOhBwf6cuvOhzIhX75KBUgFLIQ2WFZ 7V3DJw2NXd21sSpW960clvkG9MR6bXs= -----END CERTIFICATE-----Generated at Wed Oct 14 07:52:36 2026 by rpki-client