$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ae65a0f-129d-37c4-a319-054ad82dc81a.roa File: 9ae65a0f-129d-37c4-a319-054ad82dc81a.roa (raw, json) Hash identifier: aFUHGAMI7mUVH42peHr3cK6cfYPvrYgdkMUbwNxVzjY= Subject key identifier: 95:25:48:89:FE:67:B6:25:70:09:3B:0B:9B:5E:13:2C:E6:AD:56:22 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F5E62C9F1BF0820652739CC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ae65a0f-129d-37c4-a319-054ad82dc81a.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 7029 IP address blocks: 67.140.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c9:f1:bf:08:20:65:27:39:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=ad29974d-bef8-4267-a18e-e5cfe3eb6a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cd:d2:2a:a2:81:26:d9:8e:55:42:40:47:92: 3b:5c:de:ed:b5:13:6c:e2:c2:1e:2d:0d:43:aa:c1: 86:4e:74:74:c0:2a:84:e4:f8:24:e2:77:b5:b6:d8: 67:61:c3:90:db:16:6e:a9:4a:3c:03:40:a1:42:29: cf:b1:c9:18:4f:66:de:01:56:ee:e0:44:d3:c4:a4: be:54:c2:35:29:c0:77:4b:95:40:1c:5f:83:1c:a6: 4e:f3:d1:70:18:ef:49:49:3d:28:87:0c:47:f9:c5: 87:8d:7c:72:0b:b7:d0:91:64:a4:52:10:20:0a:b4: 60:78:c2:2c:0a:f1:af:9a:6a:f9:e8:e1:91:c8:3f: d2:3a:74:89:a5:01:48:d5:c5:5f:1a:eb:6e:17:ac: ef:34:ab:e9:58:2e:f3:33:bd:ac:1f:0e:c7:48:0f: d4:c4:94:7c:ba:9b:37:8b:a3:a0:27:15:c5:af:fe: f1:ad:a6:c2:ca:68:aa:b3:90:66:9f:c3:23:ef:5e: fe:b5:ca:c9:e0:83:66:4f:e2:30:39:0d:67:9d:bf: f3:1a:f1:f0:c9:b3:d4:34:55:35:37:c9:81:02:0d: ed:a1:41:03:9b:d9:1d:e6:29:f9:12:b5:3b:cb:62: 31:48:64:5d:84:13:1c:5a:2d:e6:c0:13:2b:09:21: f5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:25:48:89:FE:67:B6:25:70:09:3B:0B:9B:5E:13:2C:E6:AD:56:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ae65a0f-129d-37c4-a319-054ad82dc81a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:d8:2b:f3:f4:ca:fb:29:b5:a5:6a:1d:46:ed:cd:48:54:67: 2a:c0:0a:83:7f:9b:76:17:7c:2d:1d:b1:4c:f3:4b:87:de:a9: 3d:f2:63:2e:ad:4f:4a:6d:1b:b7:9d:c0:15:f6:30:87:ea:c1: a2:20:a3:2e:40:67:28:bd:fb:17:7e:e6:79:66:e5:de:ab:c3: ec:da:10:d0:94:ae:1d:a9:79:bb:84:a5:4e:8b:19:e5:90:4b: 4a:27:a1:d5:51:48:56:b3:d1:d9:89:df:83:1c:2e:fd:10:85: 42:aa:93:f6:55:a3:ea:5a:9a:31:90:9f:ff:ba:28:b9:93:3e: 7c:17:8b:dc:38:bb:5a:39:54:10:01:d2:df:24:00:93:23:0f: de:6e:31:2a:72:63:df:b6:bc:a3:df:f6:93:5b:19:3b:e1:d9: d3:2e:45:f1:c3:bd:94:1b:f6:1f:04:21:27:b9:c0:8b:c1:5e: 82:6a:39:19:09:74:6e:aa:5a:12:9b:5e:35:33:28:45:33:02: a7:6b:6b:10:d6:b4:87:db:d4:db:19:46:ab:e4:f3:4f:b8:74: 93:12:6f:21:ca:6f:0d:34:e7:7e:a6:83:bb:b6:b5:b0:db:35: f5:bd:c7:65:8a:3a:b1:87:51:66:0a:fe:7d:d9:69:17:41:88: cf:9b:63:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYsnxvwggZSc5zAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk YWQyOTk3NGQtYmVmOC00MjY3LWExOGUtZTVjZmUzZWI2YTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc3SKqKBJtmOVUJAR5I7XN7ttRNs4sIeLQ1D qsGGTnR0wCqE5Pgk4ne1tthnYcOQ2xZuqUo8A0ChQinPsckYT2beAVbu4ETTxKS+ VMI1KcB3S5VAHF+DHKZO89FwGO9JST0ohwxH+cWHjXxyC7fQkWSkUhAgCrRgeMIs CvGvmmr56OGRyD/SOnSJpQFI1cVfGutuF6zvNKvpWC7zM72sHw7HSA/UxJR8ups3 i6OgJxXFr/7xrabCymiqs5Bmn8Mj717+tcrJ4INmT+IwOQ1nnb/zGvHwybPUNFU1 N8mBAg3toUEDm9kd5in5ErU7y2IxSGRdhBMcWi3mwBMrCSH1GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUlSIn+Z7YlcAk7C5teEyzmrVYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWFlNjVhMGYtMTI5ZC0z N2M0LWEzMTktMDU0YWQ4MmRjODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4wwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPYK/P0yvsptaVqHUbtzUhUZyrACoN/m3YXfC0dsUzzS4feqT3yYy6t T0ptG7edwBX2MIfqwaIgoy5AZyi9+xd+5nlm5d6rw+zaENCUrh2pebuEpU6LGeWQ S0onodVRSFaz0dmJ34McLv0QhUKqk/ZVo+pamjGQn/+6KLmTPnwXi9w4u1o5VBAB 0t8kAJMjD95uMSpyY9+2vKPf9pNbGTvh2dMuRfHDvZQb9h8EISe5wIvBXoJqORkJ dG6qWhKbXjUzKEUzAqdraxDWtIfb1NsZRqvk80+4dJMSbyHKbw00536mg7u2tbDb NfW9x2WKOrGHUWYK/n3ZaRdBiM+bY/k= -----END CERTIFICATE-----Generated at Tue Oct 13 17:48:04 2026 by rpki-client