$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa File: a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa (raw, json) Hash identifier: P3cChVTqzWMINMXVZS6enhqC8MaOGXfcFcZzKWNz9pw= Subject key identifier: 47:3D:BE:EF:CB:17:55:68:27:0B:52:4C:9B:95:DD:43:B0:23:C2:2B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B6A4C48D94FCF6EB2F88 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 67.140.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b6:a4:c4:8d:94:fc:f6:eb:2f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=f689302f-d7c7-4114-a340-186d0e4deee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fe:4d:01:49:06:d2:69:01:f4:18:2d:c5:f4: 26:90:c0:db:ae:e1:ef:e8:4f:98:9c:26:0c:84:2b: 34:ea:5e:00:73:13:98:12:ba:51:49:55:e1:af:23: 44:69:13:d6:c5:b3:47:0f:c5:40:58:0a:ce:4e:bf: ef:0d:c6:9f:42:53:9f:6d:09:5f:d6:a1:f4:0d:b1: 24:e4:46:98:52:a5:c0:2e:a5:6c:4f:5d:26:9f:76: c5:f6:df:7d:53:79:c2:84:10:bf:2e:c5:e1:40:b7: 80:be:5f:b0:7e:b3:1b:ba:ae:79:a5:8a:ab:59:7d: 64:26:fe:d7:af:9c:0f:59:8c:70:74:71:96:c3:b3: 8a:72:c2:88:e2:32:e0:a9:47:76:19:6e:2b:46:e8: 05:67:bf:3a:95:ca:06:87:4a:2f:b6:ec:be:eb:5a: ef:41:f1:57:1c:e9:52:1e:26:30:68:53:3a:44:09: fd:43:1e:ee:33:d1:b6:e0:06:c7:e6:37:c0:36:87: 88:d9:7c:d9:b2:61:d8:47:d9:8d:d0:ee:d7:77:4e: b5:e5:c7:9d:e9:db:f2:3f:05:ab:70:9c:c2:24:ca: 3a:03:4e:f0:27:84:bb:5d:87:97:02:09:9d:c3:9e: d3:07:fd:9b:ca:a8:d8:d9:ae:6a:5d:f6:e3:ab:4a: 1b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3D:BE:EF:CB:17:55:68:27:0B:52:4C:9B:95:DD:43:B0:23:C2:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:1b:21:2b:5e:b0:b1:a9:b6:25:ab:64:85:91:89:62:ff:65: 48:5a:64:89:c0:57:cf:d0:a6:f4:e2:15:6f:42:47:f0:66:d0: 65:a5:22:26:95:17:0a:2a:5e:68:7e:22:2c:88:3c:61:d4:fa: fb:ee:7a:d3:17:c5:b4:0b:de:23:db:2f:fe:c3:4a:a4:34:a7: 4a:72:14:97:f4:1c:1d:44:f6:80:25:94:85:33:bd:9b:8f:b4: ab:78:46:05:6c:05:fb:71:ce:1c:60:fd:f7:3c:66:36:d1:06: 6d:f1:6e:a3:28:78:01:f6:3a:7e:5c:58:6c:35:4e:13:8b:cb: 3d:58:82:db:11:85:19:d9:77:ec:0b:f0:3e:93:9b:8b:b5:c2: 4b:84:af:e9:46:8c:07:5a:ec:bd:6b:aa:e5:e8:84:41:d4:c1: 67:66:23:1e:16:99:09:a9:38:19:c6:ad:77:8b:e9:db:b4:69: 2f:a1:85:d9:45:73:c4:ca:91:c1:dd:d2:d9:fc:27:0b:f5:25: c7:85:8e:7f:6c:d5:f4:42:2b:2a:24:56:f8:8c:d6:8a:9a:47: fc:ad:88:83:36:16:22:39:03:1d:5e:6e:6a:80:95:b9:59:6c: 61:8f:c4:a6:de:17:4d:c7:cb:cc:f4:04:a7:c9:33:7e:6e:85: 5e:ab:81:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rakxI2U/PbrL4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk ZjY4OTMwMmYtZDdjNy00MTE0LWEzNDAtMTg2ZDBlNGRlZWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP5NAUkG0mkB9BgtxfQmkMDbruHv6E+YnCYM hCs06l4AcxOYErpRSVXhryNEaRPWxbNHD8VAWArOTr/vDcafQlOfbQlf1qH0DbEk 5EaYUqXALqVsT10mn3bF9t99U3nChBC/LsXhQLeAvl+wfrMbuq55pYqrWX1kJv7X r5wPWYxwdHGWw7OKcsKI4jLgqUd2GW4rRugFZ786lcoGh0ovtuy+61rvQfFXHOlS HiYwaFM6RAn9Qx7uM9G24AbH5jfANoeI2XzZsmHYR9mN0O7Xd0615ced6dvyPwWr cJzCJMo6A07wJ4S7XYeXAgmdw57TB/2byqjY2a5qXfbjq0obgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEc9vu/LF1VoJwtSTJuV3UOwI8IrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTE5YjhkMWMtZmQwOS0z ZWY2LWFlNWYtZTZjZjBhNDZlNWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4xYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUbIStesLGptiWrZIWRiWL/ZUhaZInAV8/QpvTiFW9CR/Bm0GWlIiaV FwoqXmh+IiyIPGHU+vvuetMXxbQL3iPbL/7DSqQ0p0pyFJf0HB1E9oAllIUzvZuP tKt4RgVsBftxzhxg/fc8ZjbRBm3xbqMoeAH2On5cWGw1ThOLyz1YgtsRhRnZd+wL 8D6Tm4u1wkuEr+lGjAda7L1rquXohEHUwWdmIx4WmQmpOBnGrXeL6du0aS+hhdlF c8TKkcHd0tn8Jwv1JceFjn9s1fRCKyokVviM1oqaR/ytiIM2FiI5Ax1ebmqAlblZ bGGPxKbeF03Hy8z0BKfJM35uhV6rgfs= -----END CERTIFICATE-----Generated at Wed Oct 14 17:47:20 2026 by rpki-client