$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7b1b955-d897-33a4-a84d-92c3f9b2bd07.roa File: b7b1b955-d897-33a4-a84d-92c3f9b2bd07.roa (raw, json) Hash identifier: y9GWgBgCbv41B2trWnSFBYifcfa534QllzLqo1Dp0v8= Subject key identifier: 36:41:C0:09:4F:EF:9B:F9:A0:C1:8C:95:F4:6A:77:92:4F:FE:5A:73 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D76DC206F9F159914A800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7b1b955-d897-33a4-a84d-92c3f9b2bd07.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 162.40.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:76:dc:20:6f:9f:15:99:14:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=2ab7efae-dd63-49aa-9833-1c58eeba2db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f9:45:e4:2d:1c:fc:96:e8:bb:be:63:35:9c: 73:38:45:b1:d2:da:ba:27:19:a6:2e:1e:b1:04:09: b3:a2:05:0b:cb:d1:e4:ec:34:d8:70:18:ed:71:d4: d2:bc:9d:06:ac:ba:52:34:e0:01:8e:49:4f:6f:04: 6a:81:39:36:3d:e5:cd:1e:f3:da:59:52:e0:b8:a0: eb:12:84:63:19:b5:1c:82:ba:13:5f:1b:54:2b:7c: b1:17:f2:df:1b:bb:e5:7d:5e:4a:2d:32:5a:d1:93: 90:55:72:f6:f8:c6:f6:37:32:b5:b7:2d:ac:bb:42: 14:84:51:48:43:e2:5d:eb:81:2f:d4:68:e6:97:c1: e3:14:d7:bb:79:6d:ac:cb:2a:10:e9:0f:11:3d:a7: c5:62:29:23:d2:79:3f:be:f7:59:88:f1:ee:e8:82: 07:69:58:a6:f2:8f:5f:03:ba:28:4a:4f:7c:02:16: 8c:fb:8a:cf:29:7c:e0:7e:93:df:95:59:b5:8b:97: fa:d5:e9:d0:4c:9b:b5:d2:38:e1:95:87:1d:50:a5: 9b:5c:86:e3:5e:8a:14:31:10:1e:92:68:e4:32:c1: 97:2b:0b:46:55:26:a3:55:15:21:7c:33:a1:d5:e8: 15:70:5c:ca:26:c5:50:e3:21:5b:6b:1c:37:74:74: 7c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:41:C0:09:4F:EF:9B:F9:A0:C1:8C:95:F4:6A:77:92:4F:FE:5A:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7b1b955-d897-33a4-a84d-92c3f9b2bd07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.40.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:25:61:b5:eb:9d:f3:ca:78:9b:82:ee:ef:a4:ca:ab:80:87: c7:56:a5:d7:af:60:db:54:66:c1:e6:4a:ec:5d:e9:e2:0c:fb: 8b:e7:80:a3:f9:11:48:e7:e5:bc:76:15:17:bc:f0:e9:43:e3: 92:5b:34:a7:1a:1d:56:32:c5:29:7d:c9:f4:9d:69:d2:ae:51: 1e:dd:ba:dc:e2:f9:ba:80:5e:26:4f:cf:86:8a:0f:d7:62:d5: 2e:1c:32:f7:80:d2:ed:5b:aa:66:d9:ca:10:c9:e2:0a:7a:22: 00:97:9e:f3:e8:0b:99:b5:71:4e:bc:a7:d5:26:71:69:a2:b3: 13:7a:a5:3c:fc:cd:ae:09:05:03:72:fd:78:0b:52:87:52:35: ce:ac:58:cd:21:96:83:a5:58:23:b7:19:21:0c:3a:23:49:81: 52:dd:54:b5:2e:ec:ca:39:71:19:e2:12:ca:c3:75:8a:24:cf: 01:8a:ea:6d:fc:b4:8c:d1:70:8c:be:5e:1e:21:b8:85:72:34: 9c:d9:f0:51:c4:0a:c3:a4:11:58:04:05:b2:1b:fb:06:1e:12: bd:fe:da:cd:41:32:2a:f8:49:ff:76:41:ef:d3:5b:bb:20:16: ad:4e:83:5e:66:bc:04:45:a9:0b:59:49:d6:03:0b:96:0c:72: 3a:25:09:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXbcIG+fFZkUqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MmFiN2VmYWUtZGQ2My00OWFhLTk4MzMtMWM1OGVlYmEyZGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/lF5C0c/Jbou75jNZxzOEWx0tq6JxmmLh6x BAmzogULy9Hk7DTYcBjtcdTSvJ0GrLpSNOABjklPbwRqgTk2PeXNHvPaWVLguKDr EoRjGbUcgroTXxtUK3yxF/LfG7vlfV5KLTJa0ZOQVXL2+Mb2NzK1ty2su0IUhFFI Q+Jd64Ev1Gjml8HjFNe7eW2syyoQ6Q8RPafFYikj0nk/vvdZiPHu6IIHaVim8o9f A7ooSk98AhaM+4rPKXzgfpPflVm1i5f61enQTJu10jjhlYcdUKWbXIbjXooUMRAe kmjkMsGXKwtGVSajVRUhfDOh1egVcFzKJsVQ4yFbaxw3dHR8ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZBwAlP75v5oMGMlfRqd5JP/lpzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjdiMWI5NTUtZDg5Ny0z M2E0LWE4NGQtOTJjM2Y5YjJiZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoigAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwlYbXrnfPKeJuC7u+kyquAh8dWpdevYNtUZsHmSuxd6eIM+4vngKP5 EUjn5bx2FRe88OlD45JbNKcaHVYyxSl9yfSdadKuUR7dutzi+bqAXiZPz4aKD9di 1S4cMveA0u1bqmbZyhDJ4gp6IgCXnvPoC5m1cU68p9UmcWmisxN6pTz8za4JBQNy /XgLUodSNc6sWM0hloOlWCO3GSEMOiNJgVLdVLUu7Mo5cRniEsrDdYokzwGK6m38 tIzRcIy+Xh4huIVyNJzZ8FHECsOkEVgEBbIb+wYeEr3+2s1BMir4Sf92Qe/TW7sg Fq1Og15mvARFqQtZSdYDC5YMcjolCU4= -----END CERTIFICATE-----Generated at Tue Oct 13 17:39:04 2026 by rpki-client