$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1b65b21-a0ee-3518-b321-6ac02803b6f8.roa File: a1b65b21-a0ee-3518-b321-6ac02803b6f8.roa (raw, json) Hash identifier: MNrpQNdPZHGOTCHmdYUzqFrgTfmK9Y1ipOJKRgQAxJg= Subject key identifier: 21:5A:47:C5:A6:8E:DD:14:2A:0A:67:CE:84:0A:DE:A5:18:C6:54:0E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F62930AFC6DBE5C7D3DFF48C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1b65b21-a0ee-3518-b321-6ac02803b6f8.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 66.16.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:0a:fc:6d:be:5c:7d:3d:ff:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=4a0cc02c-3e5e-4245-9454-e1dd9ee24db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:25:89:37:46:6a:96:9b:a9:d1:cb:71:da:5a: f3:9b:34:cb:b8:83:0e:00:07:a4:c2:9b:74:56:62: 47:30:bf:43:75:6f:ab:95:ca:ae:d0:70:7e:bf:0a: 94:d8:33:72:b3:d3:a5:39:3b:d4:e0:28:d3:87:4f: d5:f5:df:1c:c0:38:c1:a0:88:3c:cb:a0:62:99:33: 91:ac:ab:e7:e2:c2:fd:57:a7:00:2d:ec:fa:7f:20: cf:0f:ff:72:0b:55:7c:fe:0c:b1:26:a8:89:f4:67: 64:ec:9e:83:73:fd:e4:c8:98:25:6c:b6:91:94:a5: 63:24:56:ec:fc:66:26:dd:c0:fb:df:01:d5:3e:48: 6b:fd:bf:f0:9a:69:35:17:4c:60:0a:43:39:41:ac: fc:bd:e5:38:0b:b1:a2:e7:d7:0b:ee:64:ef:1f:90: 95:f0:60:8e:12:fd:28:da:08:b8:07:e3:eb:35:2b: 97:f9:f0:24:a5:85:cc:bb:6d:98:0e:9d:ae:a6:cf: 22:be:37:6c:6c:50:4c:9a:3a:ed:ab:b8:6c:03:54: be:cc:f0:5e:d3:21:49:09:22:e7:d8:38:ba:4e:2a: 39:b4:c3:b8:39:ed:a6:7d:c6:30:a7:ef:f1:dc:fb: df:03:3d:d8:c4:a6:63:1b:58:a3:20:41:aa:e0:06: c6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5A:47:C5:A6:8E:DD:14:2A:0A:67:CE:84:0A:DE:A5:18:C6:54:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1b65b21-a0ee-3518-b321-6ac02803b6f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.16.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:6b:e8:f7:f2:b6:a0:4a:f6:56:5a:d8:68:d1:08:88:5a:82: 23:8c:01:cb:08:ea:ae:a4:e1:06:c2:3b:a4:c3:cc:a8:d4:13: a5:92:bb:42:2f:f1:4e:77:84:df:ed:2b:33:23:a4:f1:52:33: 67:ac:92:6d:23:39:9f:61:0f:cb:97:6f:a5:d0:1a:67:cd:91: 33:05:9c:a2:8a:1f:8f:af:71:25:bb:fd:7b:6b:48:be:92:9b: 34:93:ee:4f:0a:40:f3:ee:46:ac:6b:a7:e6:fb:af:33:bb:51: 90:f6:a0:ae:b4:43:36:c2:42:f3:7b:19:da:af:83:14:21:15: a8:40:95:ee:08:fa:6b:c8:9c:7b:70:73:0c:80:72:12:b9:a0: 58:30:fc:dc:9b:d1:63:fc:de:e6:3e:8d:b7:e8:89:72:df:d7: 95:89:b0:4c:57:f8:4e:18:92:1e:db:fb:00:b5:7d:71:e1:04: 03:96:a1:e0:fc:49:db:9c:cb:a7:0f:f4:69:c5:ca:52:ef:0f: 82:f3:49:92:c4:f7:02:59:e3:8a:a0:40:8d:ee:3e:d9:b9:bc: 77:3b:6e:0c:91:eb:9f:c5:4e:37:60:66:40:50:97:1e:13:aa: c0:d9:23:c3:25:53:8c:40:72:4b:f8:0f:94:22:93:08:6c:92: fe:59:e9:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwr8bb5cfT3/SMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NGEwY2MwMmMtM2U1ZS00MjQ1LTk0NTQtZTFkZDllZTI0ZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniWJN0Zqlpup0ctx2lrzmzTLuIMOAAekwpt0 VmJHML9DdW+rlcqu0HB+vwqU2DNys9OlOTvU4CjTh0/V9d8cwDjBoIg8y6BimTOR rKvn4sL9V6cALez6fyDPD/9yC1V8/gyxJqiJ9Gdk7J6Dc/3kyJglbLaRlKVjJFbs /GYm3cD73wHVPkhr/b/wmmk1F0xgCkM5Qaz8veU4C7Gi59cL7mTvH5CV8GCOEv0o 2gi4B+PrNSuX+fAkpYXMu22YDp2ups8ivjdsbFBMmjrtq7hsA1S+zPBe0yFJCSLn 2Di6Tio5tMO4Oe2mfcYwp+/x3PvfAz3YxKZjG1ijIEGq4AbGJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFaR8Wmjt0UKgpnzoQK3qUYxlQOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTFiNjViMjEtYTBlZS0z NTE4LWIzMjEtNmFjMDI4MDNiNmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhBDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxr6PfytqBK9lZa2GjRCIhagiOMAcsI6q6k4QbCO6TDzKjUE6WSu0Iv 8U53hN/tKzMjpPFSM2eskm0jOZ9hD8uXb6XQGmfNkTMFnKKKH4+vcSW7/XtrSL6S mzST7k8KQPPuRqxrp+b7rzO7UZD2oK60QzbCQvN7GdqvgxQhFahAle4I+mvInHtw cwyAchK5oFgw/Nyb0WP83uY+jbfoiXLf15WJsExX+E4Ykh7b+wC1fXHhBAOWoeD8 Sducy6cP9GnFylLvD4LzSZLE9wJZ44qgQI3uPtm5vHc7bgyR65/FTjdgZkBQlx4T qsDZI8MlU4xAckv4D5Qikwhskv5Z6VY= -----END CERTIFICATE-----Generated at Tue Oct 13 10:26:08 2026 by rpki-client