$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b16799ef-15f8-3e2b-9ad2-8a067e176fb4.roa File: b16799ef-15f8-3e2b-9ad2-8a067e176fb4.roa (raw, json) Hash identifier: YdnfMKCkbbof4qmhTAdYH/vyomA0GrRtrIjJFcnLNew= Subject key identifier: 49:8A:E8:32:8D:BD:BE:BF:0E:BC:7A:9D:DC:52:8E:6A:4D:D5:29:A3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7A4E3D03E86F3A7D43DE0200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b16799ef-15f8-3e2b-9ad2-8a067e176fb4.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 69.66.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:3d:03:e8:6f:3a:7d:43:de:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=6d6eab72-d1a7-4e8f-9833-d46104cf1219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6a:34:e5:9c:47:e3:2f:6e:b9:8b:15:e2:7e: 6e:64:23:43:f3:73:59:f9:04:61:96:f8:04:92:87: f0:0e:56:cc:84:d5:ca:6f:82:82:ec:7d:11:23:0e: 18:dc:98:a3:ae:78:f0:43:75:bf:2e:24:fb:09:ec: 15:fd:e5:9e:1f:ac:e0:42:6b:50:a8:07:a9:c1:02: 22:34:78:fb:11:90:94:b4:93:f9:40:6b:4d:a6:0b: b9:5a:b3:b2:5c:9b:ce:ed:99:6b:36:f9:1b:94:d0: f4:20:2e:d6:63:79:b1:d3:f1:ea:09:fa:61:7e:94: 5f:c9:38:c4:79:53:63:17:b5:1e:35:bc:03:88:9c: e0:87:64:c2:1d:8a:f9:a2:93:3f:58:9f:4b:11:42: 89:08:c9:57:a7:4f:52:b3:ee:7a:bb:56:6a:6d:c8: 14:4f:f6:3a:84:67:25:7d:1e:93:70:0e:c1:00:9f: df:02:9e:a3:88:be:b5:eb:e7:ea:02:70:8f:52:89: 29:55:c8:19:1c:f5:f1:a1:f2:28:ce:7f:b9:7a:4c: c8:1f:23:e0:f5:40:99:25:b4:2c:c5:cd:36:97:2f: e4:2f:67:1f:bf:e5:40:fd:0f:d3:95:79:7a:3d:13: 1e:34:51:9f:f9:fa:c2:99:fe:39:82:7b:c9:f3:57: 65:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8A:E8:32:8D:BD:BE:BF:0E:BC:7A:9D:DC:52:8E:6A:4D:D5:29:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b16799ef-15f8-3e2b-9ad2-8a067e176fb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:a1:0d:8f:f4:d3:e0:36:e8:3a:b5:3a:35:1a:d9:3a:36:72: 73:dd:7c:79:29:f8:f7:9a:88:ed:de:dd:97:0e:00:bb:81:dd: 71:24:84:79:59:f9:be:c9:b5:20:0a:51:7d:cc:5b:7c:08:02: 5e:e3:ec:65:bc:45:28:89:5b:54:30:2b:ba:a3:08:3e:10:62: a6:6c:9c:9b:82:13:04:89:4b:e2:35:09:31:16:8a:aa:c8:aa: dc:40:95:a2:b6:e7:ee:e5:bf:26:0b:a1:3e:d3:67:5e:a0:f8: 27:f0:96:56:19:20:e8:a9:ef:e5:08:96:14:db:52:0d:df:5f: 62:e1:8b:13:03:b7:01:66:be:e7:28:6e:08:d8:08:ed:2b:85: 66:24:6a:ee:23:10:de:19:e8:ee:a2:a4:bb:b6:3a:c0:fa:e6: 38:8c:ee:37:cc:c7:b3:49:44:92:2e:bb:18:de:01:2b:ca:a3: 60:b6:c2:6a:6b:fa:7d:72:9b:d8:89:f6:84:d6:f8:e0:36:30: 72:4f:97:2c:5e:a9:d8:3c:e0:a6:4f:03:c3:fa:35:84:6b:e6: 36:6c:e4:4a:ea:ac:f3:92:c8:df:7f:71:ed:55:58:fa:68:9e: c3:14:8d:e2:3f:93:e6:84:b0:04:ee:d6:cd:a1:f8:a1:74:8a: 70:37:08:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96Tj0D6G86fUPeAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NmQ2ZWFiNzItZDFhNy00ZThmLTk4MzMtZDQ2MTA0Y2YxMjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWo05ZxH4y9uuYsV4n5uZCND83NZ+QRhlvgE kofwDlbMhNXKb4KC7H0RIw4Y3JijrnjwQ3W/LiT7CewV/eWeH6zgQmtQqAepwQIi NHj7EZCUtJP5QGtNpgu5WrOyXJvO7ZlrNvkblND0IC7WY3mx0/HqCfphfpRfyTjE eVNjF7UeNbwDiJzgh2TCHYr5opM/WJ9LEUKJCMlXp09Ss+56u1ZqbcgUT/Y6hGcl fR6TcA7BAJ/fAp6jiL616+fqAnCPUokpVcgZHPXxofIozn+5ekzIHyPg9UCZJbQs xc02ly/kL2cfv+VA/Q/TlXl6PRMeNFGf+frCmf45gnvJ81dljQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmK6DKNvb6/Drx6ndxSjmpN1SmjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjE2Nzk5ZWYtMTVmOC0z ZTJiLTlhZDItOGEwNjdlMTc2ZmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRULwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKhDY/00+A26Dq1OjUa2To2cnPdfHkp+PeaiO3e3ZcOALuB3XEkhHlZ +b7JtSAKUX3MW3wIAl7j7GW8RSiJW1QwK7qjCD4QYqZsnJuCEwSJS+I1CTEWiqrI qtxAlaK25+7lvyYLoT7TZ16g+CfwllYZIOip7+UIlhTbUg3fX2LhixMDtwFmvuco bgjYCO0rhWYkau4jEN4Z6O6ipLu2OsD65jiM7jfMx7NJRJIuuxjeASvKo2C2wmpr +n1ym9iJ9oTW+OA2MHJPlyxeqdg84KZPA8P6NYRr5jZs5ErqrPOSyN9/ce1VWPpo nsMUjeI/k+aEsATu1s2h+KF0inA3COk= -----END CERTIFICATE-----Generated at Tue Oct 13 17:38:09 2026 by rpki-client