$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afbd72a2-a1c5-3aac-aa05-7b34f2ce8b61.roa File: afbd72a2-a1c5-3aac-aa05-7b34f2ce8b61.roa (raw, json) Hash identifier: 2HpPR35U3H4FDZm3cWyRWycn+wMyp8SemuyBuBb0+GE= Subject key identifier: 8B:C3:91:F5:E7:2D:45:C4:06:E6:F7:F0:5B:BF:D8:C3:54:FD:FE:DD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D8DA40A85C02CCFFB5600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afbd72a2-a1c5-3aac-aa05-7b34f2ce8b61.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 63.246.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:8d:a4:0a:85:c0:2c:cf:fb:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=42b01fff-5660-4f10-844f-ba89129120d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cd:a1:f0:cf:4d:48:49:8d:59:a8:1b:4a:7d: 46:f5:bc:f4:8f:6d:73:c0:3f:26:ee:86:52:9d:d3: e5:ab:54:82:26:03:dd:ad:a3:5c:a2:7c:03:bb:39: c7:54:44:c7:b4:00:86:4b:b6:d4:79:7b:34:c4:7d: 04:a4:53:77:af:a3:1e:6f:ed:98:6e:9d:d1:b7:c6: 10:b0:ea:e2:da:00:5a:31:fb:40:4f:8a:46:a9:75: 5a:c2:da:3c:50:d6:c6:bd:a4:f9:92:26:79:0a:9b: 1c:de:50:1a:d2:a7:06:24:cf:83:82:3b:ee:f9:91: 64:c3:3d:fa:dc:4a:90:74:fb:a8:22:db:d6:b7:52: 93:20:e6:09:24:a7:eb:55:f1:0e:f4:7f:da:d6:25: 41:5a:9b:e4:7c:a1:cc:75:74:a1:e0:05:26:1b:32: 56:9d:c6:97:3f:7a:dd:87:84:8e:4b:72:86:64:c1: 20:89:01:c6:e5:4a:c3:35:29:d5:93:e1:05:d2:4b: 20:ef:fc:e0:e5:0c:b4:94:73:d1:d0:31:66:67:de: 55:02:3b:9b:bf:8a:fa:0d:39:14:18:8d:d8:98:2a: a9:4a:d6:68:d3:2d:3b:cd:88:6a:1f:6e:38:9a:9e: 6c:33:3d:bd:c0:81:43:26:f4:19:70:aa:e1:a4:3d: a5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C3:91:F5:E7:2D:45:C4:06:E6:F7:F0:5B:BF:D8:C3:54:FD:FE:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afbd72a2-a1c5-3aac-aa05-7b34f2ce8b61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.246.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:26:cd:09:e1:61:e8:f2:07:e6:f7:02:52:5d:0e:dc:66:2b: 04:2a:a3:ac:65:1d:ef:44:fb:a7:d0:56:cc:c6:5e:b9:1a:3d: 4f:cb:43:e4:ab:3e:a5:98:ab:e2:d7:14:28:11:90:dd:3d:9d: 42:46:44:40:24:5d:e4:ca:bb:c2:14:ae:12:05:41:f4:22:5f: 6c:13:cb:10:b1:59:ec:59:28:4f:9d:30:9d:6d:d7:cb:92:a4: 00:5b:f4:0e:08:74:33:87:44:d9:37:0b:92:8e:c5:bf:1c:73: 50:51:70:17:0d:a3:f9:c5:db:c9:f8:8d:2c:88:11:22:d0:70: a0:08:c7:3f:93:92:86:7e:ad:c9:c9:f9:14:54:3f:12:63:fb: 68:ef:8d:03:31:d9:21:95:2e:ac:91:f5:bb:aa:00:c3:1e:4a: 39:ba:0b:09:77:c1:42:48:4d:21:88:6d:da:58:2c:b7:c6:a2: 03:aa:e2:a6:4b:47:df:73:e2:a3:6f:17:aa:63:53:3a:13:d3: 9c:64:41:f8:7c:42:dc:5b:9f:9d:ab:98:c3:1c:f0:0b:eb:1f: 4c:71:bd:86:28:aa:53:93:00:c3:1c:33:41:a1:5c:f2:14:1d: cd:00:05:45:5c:5c:68:93:f5:ee:7a:04:ba:5a:40:58:10:97: d6:07:6e:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnY2kCoXALM/7VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NDJiMDFmZmYtNTY2MC00ZjEwLTg0NGYtYmE4OTEyOTEyMGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4c2h8M9NSEmNWagbSn1G9bz0j21zwD8m7oZS ndPlq1SCJgPdraNconwDuznHVETHtACGS7bUeXs0xH0EpFN3r6Meb+2Ybp3Rt8YQ sOri2gBaMftAT4pGqXVawto8UNbGvaT5kiZ5Cpsc3lAa0qcGJM+Dgjvu+ZFkwz36 3EqQdPuoItvWt1KTIOYJJKfrVfEO9H/a1iVBWpvkfKHMdXSh4AUmGzJWncaXP3rd h4SOS3KGZMEgiQHG5UrDNSnVk+EF0ksg7/zg5Qy0lHPR0DFmZ95VAjubv4r6DTkU GI3YmCqpStZo0y07zYhqH244mp5sMz29wIFDJvQZcKrhpD2liwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvDkfXnLUXEBub38Fu/2MNU/f7dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWZiZDcyYTItYTFjNS0z YWFjLWFhMDUtN2IzNGYyY2U4YjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFP/ZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMmzQnhYejyB+b3AlJdDtxmKwQqo6xlHe9E+6fQVszGXrkaPU/LQ+Sr PqWYq+LXFCgRkN09nUJGREAkXeTKu8IUrhIFQfQiX2wTyxCxWexZKE+dMJ1t18uS pABb9A4IdDOHRNk3C5KOxb8cc1BRcBcNo/nF28n4jSyIESLQcKAIxz+TkoZ+rcnJ +RRUPxJj+2jvjQMx2SGVLqyR9buqAMMeSjm6Cwl3wUJITSGIbdpYLLfGogOq4qZL R99z4qNvF6pjUzoT05xkQfh8Qtxbn52rmMMc8AvrH0xxvYYoqlOTAMMcM0GhXPIU Hc0ABUVcXGiT9e56BLpaQFgQl9YHbr0= -----END CERTIFICATE-----Generated at Tue Oct 13 09:14:06 2026 by rpki-client