$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7eceef15-8b56-31df-bce1-bd77dd6ce043.roa File: 7eceef15-8b56-31df-bce1-bd77dd6ce043.roa (raw, json) Hash identifier: iYhVlDsbqf2Ypks+xsFlUKzpWjVuDkDWtfQlfKYTCyo= Subject key identifier: 96:65:CD:4B:C2:CB:0F:18:61:D4:AF:E0:D7:73:33:64:78:9B:63:71 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED8648A1E7E0117EBEC8ED400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7eceef15-8b56-31df-bce1-bd77dd6ce043.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 67.141.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:64:8a:1e:7e:01:17:eb:ec:8e:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=a491f909-da47-4e8c-a80e-80320c49fcd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2b:bd:b9:d8:e8:ae:a2:97:e0:6e:f9:35:1a: 3b:3d:f1:b5:b8:98:59:28:6f:e3:d5:0c:8c:7e:6b: 75:06:9d:4a:32:d7:8e:a4:18:a3:79:95:1c:55:98: 04:b4:85:43:1d:9b:07:00:be:d7:d9:cb:10:a5:fe: 73:37:5b:34:b2:a6:97:60:77:ef:a5:4a:e7:96:db: f4:3f:4f:1c:ab:88:6b:df:4d:bb:ee:04:42:cf:86: 18:31:58:fc:26:90:f7:c3:73:94:a7:c6:df:83:3b: 5b:53:e2:be:bd:8c:76:8a:30:e2:c8:52:a5:95:dc: ca:99:d8:82:d2:24:4c:4d:b8:6d:9d:e7:26:91:3e: dc:a2:b1:0b:27:30:df:33:42:45:a3:1b:de:1e:88: 09:39:80:a3:80:a3:dc:c7:9a:b8:c6:51:31:df:e3: 4d:1c:25:4b:b1:7e:c4:16:19:1f:18:b2:43:83:87: 55:dd:02:cb:e5:da:c1:03:5c:be:5e:e5:ee:1c:f0: e1:a4:74:34:90:ee:4f:c3:7b:b3:fa:58:b0:61:f3: 4e:ee:2e:86:fb:d1:47:be:a6:b4:9e:73:64:54:99: 33:d0:42:c1:6f:bd:24:e3:09:59:55:05:86:6a:7b: 55:7b:06:43:27:84:cb:be:f1:9d:f4:59:9a:b8:df: 69:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:65:CD:4B:C2:CB:0F:18:61:D4:AF:E0:D7:73:33:64:78:9B:63:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7eceef15-8b56-31df-bce1-bd77dd6ce043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ee:a9:36:39:fb:12:5e:94:73:4c:9f:2f:a3:d6:0d:9f:c6: 3d:9e:05:09:88:b4:ea:1f:45:2d:64:ab:79:20:fa:78:cb:68: f4:72:dd:2f:14:da:4e:cc:19:7b:b8:7a:5c:76:8c:0c:8d:26: 91:b2:2e:ba:9a:5b:b3:54:d5:13:d2:d4:3b:e9:85:2f:f9:f8: b0:59:5b:af:15:03:d6:b0:92:93:55:03:9f:23:16:5f:05:79: 35:68:ca:75:53:84:80:e4:da:77:4b:ba:0f:70:ec:bc:3a:97: a7:dd:48:f5:c9:1a:11:67:30:ac:2f:6b:47:5a:a9:ec:38:fe: 3f:cd:e6:c0:c1:c3:ce:84:2c:97:50:dd:c2:12:20:7c:f1:c4: 8f:61:e7:84:24:f2:65:0d:c7:49:bb:26:7e:10:9c:b1:d7:4a: 51:56:9e:cd:90:28:e3:b8:c9:0d:d3:22:29:d1:0f:85:08:99: fd:bf:7f:49:10:7d:68:ff:90:c9:5b:aa:b5:40:57:0f:58:76: 89:40:a6:43:6a:42:16:ac:33:14:8c:74:fd:b6:73:12:e3:de: 52:68:2d:b7:b7:be:c8:ce:e4:25:0c:66:b9:33:76:9f:f8:2e: 76:44:2e:35:37:79:6c:9c:25:bc:90:b6:89:35:40:3e:10:b1: 9f:fe:2d:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YZIoefgEX6+yO1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk YTQ5MWY5MDktZGE0Ny00ZThjLWE4MGUtODAzMjBjNDlmY2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCu9udjorqKX4G75NRo7PfG1uJhZKG/j1QyM fmt1Bp1KMteOpBijeZUcVZgEtIVDHZsHAL7X2csQpf5zN1s0sqaXYHfvpUrnltv0 P08cq4hr30277gRCz4YYMVj8JpD3w3OUp8bfgztbU+K+vYx2ijDiyFKlldzKmdiC 0iRMTbhtnecmkT7corELJzDfM0JFoxveHogJOYCjgKPcx5q4xlEx3+NNHCVLsX7E FhkfGLJDg4dV3QLL5drBA1y+XuXuHPDhpHQ0kO5Pw3uz+liwYfNO7i6G+9FHvqa0 nnNkVJkz0ELBb70k4wlZVQWGantVewZDJ4TLvvGd9FmauN9pcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZlzUvCyw8YYdSv4NdzM2R4m2NxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2VjZWVmMTUtOGI1Ni0z MWRmLWJjZTEtYmQ3N2RkNmNlMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ43wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvuqTY5+xJelHNMny+j1g2fxj2eBQmItOofRS1kq3kg+njLaPRy3S8U 2k7MGXu4elx2jAyNJpGyLrqaW7NU1RPS1DvphS/5+LBZW68VA9awkpNVA58jFl8F eTVoynVThIDk2ndLug9w7Lw6l6fdSPXJGhFnMKwva0daqew4/j/N5sDBw86ELJdQ 3cISIHzxxI9h54Qk8mUNx0m7Jn4QnLHXSlFWns2QKOO4yQ3TIinRD4UImf2/f0kQ fWj/kMlbqrVAVw9YdolApkNqQhasMxSMdP22cxLj3lJoLbe3vsjO5CUMZrkzdp/4 LnZELjU3eWycJbyQtok1QD4QsZ/+LQQ= -----END CERTIFICATE-----Generated at Thu Aug 27 14:17:45 2026 by rpki-client