$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73447f3c-6fe6-3499-a823-f0af45b9a228.roa File: 73447f3c-6fe6-3499-a823-f0af45b9a228.roa (raw, json) Hash identifier: PfTZV3kQolcfGq8YR/TJtWIWBGLk2ovC5yzX6eBuYD4= Subject key identifier: 69:6C:E2:2E:5D:36:30:E2:C8:83:FD:B1:2B:3A:23:88:D2:A0:AA:9A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D79BBC11E949D25F24880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73447f3c-6fe6-3499-a823-f0af45b9a228.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 216.169.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:79:bb:c1:1e:94:9d:25:f2:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=a0b3a2c2-ee69-4281-a4ab-3c0960478377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4c:af:8a:4e:53:d9:d3:62:72:d6:7c:f0:ad: 20:fe:91:36:47:04:5d:e7:3b:d3:5b:2d:76:e2:4b: ea:3f:b3:d4:86:e4:c0:6f:ef:03:df:d7:99:c8:3b: c4:30:fd:a8:bd:bd:36:73:3b:8c:3a:02:36:92:e3: ff:b2:e6:a4:ba:ed:3d:52:f0:16:48:cd:ef:af:88: 67:57:e1:c0:9c:93:c2:7f:62:4c:80:80:64:42:23: 77:7d:10:45:98:ce:f1:df:77:09:48:ae:61:21:28: e0:e4:d4:01:66:34:59:22:60:c6:d5:97:7f:b3:36: ee:46:eb:24:67:4a:d0:7a:6a:f9:d9:77:17:d0:56: 5d:f7:14:81:c2:e4:16:f2:75:84:54:c4:06:ac:a0: 19:13:75:c1:7e:96:22:ad:05:25:02:52:29:2d:ca: e0:7e:05:81:7d:e3:87:51:49:96:d7:47:17:6d:e1: 39:46:eb:87:80:5e:a7:ad:22:12:bc:fb:92:9f:c4: 12:18:df:05:87:1e:fe:e4:83:9a:db:05:34:cf:13: c1:dc:39:8c:34:f3:32:07:e8:2d:48:f1:84:d2:ee: 9f:68:92:f1:13:60:1a:37:b3:57:7a:f4:6b:e9:db: ec:b9:cf:00:3f:a8:e5:f6:ed:00:26:b2:0b:e6:e6: 75:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6C:E2:2E:5D:36:30:E2:C8:83:FD:B1:2B:3A:23:88:D2:A0:AA:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73447f3c-6fe6-3499-a823-f0af45b9a228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.169.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f3:33:66:d5:64:e1:f0:ab:7e:92:b9:a0:68:38:b3:30:06: 92:86:99:7a:b4:b2:42:2d:e5:d4:21:b7:1f:36:d4:10:0a:af: 3f:97:f5:54:f4:18:8e:47:be:fd:e1:80:05:52:ad:2e:8c:72: 5b:92:af:41:a4:88:a1:ca:1c:54:4a:d8:a0:e1:19:fa:85:0a: 06:64:36:13:3e:83:e2:0a:3f:38:79:db:a7:11:ea:e7:40:2f: fa:ac:cc:b5:02:ec:1f:1c:05:0f:28:dd:23:af:f5:8f:de:d9: ee:99:bc:ac:d1:81:0d:c3:17:86:e8:0a:96:57:a0:91:cf:7a: 44:95:57:ff:cb:f8:8a:b9:eb:e9:e7:a5:63:1f:21:29:49:5a: a0:19:b9:f7:80:e8:42:93:81:3c:e5:18:65:51:dc:3f:60:88: ba:04:ed:10:96:3f:e7:2e:35:6e:fe:72:4a:7d:44:52:81:87: ed:2a:87:15:1d:ef:1c:3b:8f:66:6a:9b:85:33:61:89:81:a4: dc:52:aa:92:4e:5b:39:f9:86:21:85:0e:5c:8a:74:84:58:39: ed:bf:a7:a1:5a:5d:df:ff:f0:68:b1:d6:17:ea:5c:80:85:8c: 34:29:ea:f0:73:3f:b6:b0:6a:55:13:c3:30:54:be:f5:d1:b1: 15:22:46:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXm7wR6UnSXySIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YTBiM2EyYzItZWU2OS00MjgxLWE0YWItM2MwOTYwNDc4Mzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUyvik5T2dNictZ88K0g/pE2RwRd5zvTWy12 4kvqP7PUhuTAb+8D39eZyDvEMP2ovb02czuMOgI2kuP/suakuu09UvAWSM3vr4hn V+HAnJPCf2JMgIBkQiN3fRBFmM7x33cJSK5hISjg5NQBZjRZImDG1Zd/szbuRusk Z0rQemr52XcX0FZd9xSBwuQW8nWEVMQGrKAZE3XBfpYirQUlAlIpLcrgfgWBfeOH UUmW10cXbeE5RuuHgF6nrSISvPuSn8QSGN8Fhx7+5IOa2wU0zxPB3DmMNPMyB+gt SPGE0u6faJLxE2AaN7NXevRr6dvsuc8AP6jl9u0AJrIL5uZ1WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGls4i5dNjDiyIP9sSs6I4jSoKqaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzM0NDdmM2MtNmZlNi0z NDk5LWE4MjMtZjBhZjQ1YjlhMjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2KmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLzM2bVZOHwq36SuaBoOLMwBpKGmXq0skIt5dQhtx821BAKrz+X9VT0 GI5Hvv3hgAVSrS6McluSr0GkiKHKHFRK2KDhGfqFCgZkNhM+g+IKPzh526cR6udA L/qszLUC7B8cBQ8o3SOv9Y/e2e6ZvKzRgQ3DF4boCpZXoJHPekSVV//L+Iq56+nn pWMfISlJWqAZufeA6EKTgTzlGGVR3D9giLoE7RCWP+cuNW7+ckp9RFKBh+0qhxUd 7xw7j2Zqm4UzYYmBpNxSqpJOWzn5hiGFDlyKdIRYOe2/p6FaXd//8Gix1hfqXICF jDQp6vBzP7awalUTwzBUvvXRsRUiRn0= -----END CERTIFICATE-----Generated at Tue Oct 13 14:19:18 2026 by rpki-client