$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ade62d43-8160-3a6f-a892-94c41cddd2b7.roa File: ade62d43-8160-3a6f-a892-94c41cddd2b7.roa (raw, json) Hash identifier: kmBFajTl3ZcOwuy3JotXpDHl2sAUS9qXre0mL/tbuig= Subject key identifier: 43:BC:3D:60:99:34:BB:93:9F:22:CF:70:D9:1A:97:3B:4A:3C:FD:08 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D8F867FDEDCF971762840 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ade62d43-8160-3a6f-a892-94c41cddd2b7.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 66.202.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:8f:86:7f:de:dc:f9:71:76:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=357e947c-73f2-44ac-b739-512ecccbb387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0c:df:8d:dc:9f:f5:ab:cd:32:9c:c1:3a:ec: 25:29:ce:56:6f:6e:85:5e:52:30:cf:6c:34:60:ac: ee:1b:14:96:7d:fa:bb:13:48:c5:48:9f:bb:eb:bc: a6:1b:b5:97:db:9d:60:fd:45:b3:47:fb:79:26:a4: 3c:9c:c3:0e:97:ce:3b:e1:5e:d0:02:27:47:60:c7: 40:75:b2:b5:53:a0:94:5e:d6:86:67:1e:73:e1:87: 01:b1:6e:18:08:f5:c5:cf:3f:64:b5:3e:7a:15:4b: f0:ea:f5:c0:f7:95:19:06:12:4a:31:00:10:f8:01: 65:ec:45:d6:86:a2:5e:4c:2a:6a:7a:92:69:ae:d2: bb:83:81:24:e1:67:fb:35:82:57:af:7c:88:89:b9: fc:1d:9b:32:51:91:8b:34:e8:a0:73:d9:08:71:56: 86:2c:6b:81:97:14:a6:26:0f:f1:cb:e1:96:7b:ff: 3c:6c:25:17:ff:84:e4:46:57:38:ff:9a:d1:74:b1: fc:c1:21:ed:d7:f7:54:b7:cf:6a:e2:31:e5:36:7e: 95:33:fa:77:a5:5b:46:0d:a8:37:66:4a:77:35:8e: 53:0e:a7:3a:3d:cf:30:9b:40:dc:5a:9b:6d:20:c7: 5c:7a:db:79:a4:54:2b:ce:25:ee:bc:5c:78:b4:fc: a0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BC:3D:60:99:34:BB:93:9F:22:CF:70:D9:1A:97:3B:4A:3C:FD:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ade62d43-8160-3a6f-a892-94c41cddd2b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.202.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:6f:4f:91:b5:25:bf:fc:70:97:9e:c7:9c:9f:d2:26:5e:12: e7:09:1f:aa:07:c4:10:7b:80:f3:0b:45:d1:3f:7e:b1:2f:39: 4e:0d:6d:7f:79:ce:1b:90:ca:81:53:03:68:18:8e:94:60:cc: 42:12:82:af:c3:12:a5:a9:e8:b9:47:f0:06:44:4a:d4:b3:d0: 8b:3e:b0:96:c3:a3:0b:51:8d:c2:7a:39:7a:d5:ad:cf:38:7f: c8:f4:bc:0a:73:8c:9d:98:ad:1b:23:0c:e0:6e:c0:08:f5:67: a1:82:ca:dd:d2:1e:a9:11:7f:4d:86:78:3b:a9:2b:37:20:37: 28:13:e1:16:55:9d:4c:34:4c:c3:7c:c6:82:c4:d4:bb:b3:db: 9a:e6:14:a7:7a:d9:d3:6c:f5:89:d6:6b:50:d2:87:d6:ed:8c: 3e:5b:46:f4:be:82:6e:5b:5d:80:50:a5:b3:24:c6:e3:3d:72: e4:d1:1c:6f:67:01:17:81:6f:49:5a:c9:fa:06:86:48:91:8b: a6:7a:e4:bb:d3:fc:5d:3b:ab:e0:a8:5a:05:a9:0e:ac:d4:f7: eb:17:19:ff:21:c8:64:23:6f:fb:aa:3d:00:ed:24:3e:1a:24: a2:8d:47:39:bf:b0:97:b2:d3:f6:10:25:94:be:b1:45:c2:c3: 1b:d4:c8:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnY+Gf97c+XF2KEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MzU3ZTk0N2MtNzNmMi00NGFjLWI3MzktNTEyZWNjY2JiMzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgzfjdyf9avNMpzBOuwlKc5Wb26FXlIwz2w0 YKzuGxSWffq7E0jFSJ+767ymG7WX251g/UWzR/t5JqQ8nMMOl8474V7QAidHYMdA dbK1U6CUXtaGZx5z4YcBsW4YCPXFzz9ktT56FUvw6vXA95UZBhJKMQAQ+AFl7EXW hqJeTCpqepJprtK7g4Ek4Wf7NYJXr3yIibn8HZsyUZGLNOigc9kIcVaGLGuBlxSm Jg/xy+GWe/88bCUX/4TkRlc4/5rRdLH8wSHt1/dUt89q4jHlNn6VM/p3pVtGDag3 Zkp3NY5TDqc6Pc8wm0DcWpttIMdcett5pFQrziXuvFx4tPyglQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEO8PWCZNLuTnyLPcNkalztKPP0IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWRlNjJkNDMtODE2MC0z YTZmLWE4OTItOTRjNDFjZGRkMmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQsoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElvT5G1Jb/8cJeex5yf0iZeEucJH6oHxBB7gPMLRdE/frEvOU4NbX95 zhuQyoFTA2gYjpRgzEISgq/DEqWp6LlH8AZEStSz0Is+sJbDowtRjcJ6OXrVrc84 f8j0vApzjJ2YrRsjDOBuwAj1Z6GCyt3SHqkRf02GeDupKzcgNygT4RZVnUw0TMN8 xoLE1Luz25rmFKd62dNs9YnWa1DSh9btjD5bRvS+gm5bXYBQpbMkxuM9cuTRHG9n AReBb0layfoGhkiRi6Z65LvT/F07q+CoWgWpDqzU9+sXGf8hyGQjb/uqPQDtJD4a JKKNRzm/sJey0/YQJZS+sUXCwxvUyIk= -----END CERTIFICATE-----Generated at Tue Oct 13 08:15:59 2026 by rpki-client