$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8af95620-011e-3ede-9167-cda01e18c471.roa File: 8af95620-011e-3ede-9167-cda01e18c471.roa (raw, json) Hash identifier: GIB63rzZxtfm/3+4WXdT54y9ob9H6TLrhytap2lms+c= Subject key identifier: DE:4A:D5:48:62:B4:CF:9B:48:80:7A:46:AB:CA:C8:6D:3D:33:5B:52 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F5E62C85EED4E6BCCBF2ABB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8af95620-011e-3ede-9167-cda01e18c471.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 7029 IP address blocks: 69.40.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c8:5e:ed:4e:6b:cc:bf:2a:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=5829a150-7123-4604-97e7-b972909714c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b2:9e:34:a0:a7:f3:98:c2:d6:3a:57:e3:fe: 40:8c:72:27:b9:7c:ba:71:bf:e9:cb:bd:4b:71:96: 8e:1e:3f:7c:74:61:9e:55:22:cf:5d:c8:c1:6c:13: 0e:d4:a1:9f:44:19:76:1e:8e:c7:d0:35:ac:9e:cd: e2:c4:03:6a:fe:a2:37:a0:cf:b3:29:35:52:5e:7a: 48:63:91:09:02:0e:8f:e0:8d:5b:2a:b9:14:f8:b2: c0:58:60:d9:7c:3f:1e:0a:23:de:da:e3:91:b3:13: f8:d9:27:5d:33:1e:6d:cd:47:e6:c3:cc:0e:57:2d: 13:61:4a:86:52:8b:73:c9:c0:b4:1f:17:d0:77:fa: 84:b8:d3:f6:91:33:bf:29:ed:fb:11:dc:cc:50:07: f9:29:85:bb:ba:12:84:af:e7:9a:4b:ee:52:5e:7e: f2:43:8c:9b:c4:83:1b:33:c4:8b:21:e1:a3:6f:c8: 63:0e:29:76:12:b7:ee:70:0e:ab:5c:63:de:47:06: 93:fd:87:14:9d:b9:49:fe:5e:b3:9f:80:d3:e8:34: 0d:e4:9c:4e:35:2d:67:18:37:7b:ee:c3:ed:d7:07: 7d:b5:79:1a:2c:41:3a:8f:b6:5e:c9:c1:99:cb:fd: 60:ff:b3:5f:fa:68:1b:9c:33:af:12:26:35:71:4a: 83:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4A:D5:48:62:B4:CF:9B:48:80:7A:46:AB:CA:C8:6D:3D:33:5B:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8af95620-011e-3ede-9167-cda01e18c471.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ee:ec:ed:ae:7e:72:c4:bf:ca:17:0b:a8:32:a0:58:64:c0: b0:79:9d:3a:ae:1a:11:f5:fe:88:5e:1e:56:a0:49:f8:94:72: a4:93:ba:b7:e7:fe:28:0f:2e:b7:92:57:65:44:17:7f:18:99: 78:18:d1:f8:31:96:4c:ef:96:d8:d2:bc:b0:43:33:38:c0:e5: 66:bd:58:61:59:3e:7b:d9:17:cd:27:4c:7b:ff:eb:8e:b7:69: 0d:8b:6f:d6:a3:91:05:7f:1c:bb:ac:37:ec:0d:cc:9e:f5:70: c2:26:29:fd:39:f0:f7:09:9d:8b:ba:8d:dd:7f:6f:1b:4d:c9: 93:b5:ae:fa:57:db:66:33:79:a2:97:3c:9b:34:dd:88:eb:41: be:18:6a:1d:e9:8a:83:c2:b7:f7:da:75:c2:6e:1a:12:74:46: 44:41:76:a2:79:40:19:f5:f6:bc:c3:23:24:66:fb:28:14:cc: db:db:c4:8c:61:29:58:ac:73:c7:7e:c8:a0:bd:b1:7f:16:9e: c9:d9:30:c8:99:45:e3:86:f2:de:2f:73:08:9d:7a:8c:3b:73: 2d:a2:66:dd:92:a3:10:5c:93:35:69:0e:ff:24:25:97:f0:3c: a7:0d:ac:81:b6:e8:c4:4e:c4:95:f6:c1:32:c0:a4:c3:08:b8: 69:e9:c3:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYshe7U5rzL8qu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NTgyOWExNTAtNzEyMy00NjA0LTk3ZTctYjk3MjkwOTcxNGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLKeNKCn85jC1jpX4/5AjHInuXy6cb/py71L cZaOHj98dGGeVSLPXcjBbBMO1KGfRBl2Ho7H0DWsns3ixANq/qI3oM+zKTVSXnpI Y5EJAg6P4I1bKrkU+LLAWGDZfD8eCiPe2uORsxP42SddMx5tzUfmw8wOVy0TYUqG UotzycC0HxfQd/qEuNP2kTO/Ke37EdzMUAf5KYW7uhKEr+eaS+5SXn7yQ4ybxIMb M8SLIeGjb8hjDil2ErfucA6rXGPeRwaT/YcUnblJ/l6zn4DT6DQN5JxONS1nGDd7 7sPt1wd9tXkaLEE6j7ZeycGZy/1g/7Nf+mgbnDOvEiY1cUqDtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5K1UhitM+bSIB6RqvKyG09M1tSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGFmOTU2MjAtMDExZS0z ZWRlLTkxNjctY2RhMDFlMThjNDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRShYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvu7O2ufnLEv8oXC6gyoFhkwLB5nTquGhH1/oheHlagSfiUcqSTurfn /igPLreSV2VEF38YmXgY0fgxlkzvltjSvLBDMzjA5Wa9WGFZPnvZF80nTHv/6463 aQ2Lb9ajkQV/HLusN+wNzJ71cMImKf058PcJnYu6jd1/bxtNyZO1rvpX22YzeaKX PJs03YjrQb4Yah3pioPCt/fadcJuGhJ0RkRBdqJ5QBn19rzDIyRm+ygUzNvbxIxh KVisc8d+yKC9sX8WnsnZMMiZReOG8t4vcwideow7cy2iZt2SoxBckzVpDv8kJZfw PKcNrIG26MROxJX2wTLApMMIuGnpwz0= -----END CERTIFICATE-----Generated at Tue Oct 13 10:27:22 2026 by rpki-client