$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bcebc1f1-ce75-39d6-a362-c8b67e0322f3.roa File: bcebc1f1-ce75-39d6-a362-c8b67e0322f3.roa (raw, json) Hash identifier: Gx+/T0Yjt7f5KewNRZQEEe7m1vnBoFJuQWl1t3T108Y= Subject key identifier: FE:4A:A8:AC:F5:80:68:6D:B9:4D:47:D1:EE:E2:30:14:04:01:82:A2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D73D71043D690293EAE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bcebc1f1-ce75-39d6-a362-c8b67e0322f3.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 66.251.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:73:d7:10:43:d6:90:29:3e:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=24b60b41-59a2-4b20-a48b-1e9154ff7225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2c:4a:62:cc:c3:cf:d4:8e:a3:f9:53:b9:93: 20:26:34:c9:7b:dc:c7:ab:e0:f9:da:0f:2f:1f:c6: 30:9e:6c:25:df:d7:c7:a9:ae:7d:b7:43:12:ec:66: c3:f6:01:00:75:9d:03:6c:49:a8:27:c5:5c:88:63: 6d:c1:ec:6c:d7:84:be:b3:9c:a6:f3:05:59:6b:cf: e9:99:48:9c:3f:81:37:0d:e4:24:38:1e:74:c2:5d: 1b:76:b2:af:8e:5a:56:69:58:b6:62:af:29:b8:cf: e1:de:41:8e:b2:25:d3:3b:95:80:36:f0:3d:f4:62: a5:b7:f3:e8:50:ff:b5:1f:03:68:a0:8b:10:f2:91: 9e:89:02:dd:8c:75:06:cb:e0:d1:a4:aa:30:4c:04: a2:76:bf:b6:b0:ca:ec:d8:73:2e:18:ec:71:b9:23: 63:39:d1:6d:92:b7:05:2c:65:f1:fc:e3:0c:21:d5: b1:17:7b:00:f2:bf:39:d3:df:99:2c:56:db:ac:b3: 2b:71:ff:01:25:5b:64:0e:05:55:b0:a7:88:37:39: 82:e3:3f:fc:8a:38:9d:40:e8:67:4e:70:03:1c:b9: 1a:d5:11:09:1c:7a:e1:5c:3e:c6:5a:27:78:33:80: be:d5:17:2b:af:a7:1d:53:0e:9b:6f:14:fa:bb:be: 48:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4A:A8:AC:F5:80:68:6D:B9:4D:47:D1:EE:E2:30:14:04:01:82:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bcebc1f1-ce75-39d6-a362-c8b67e0322f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.251.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:5e:76:87:52:b5:42:7d:9c:aa:ac:e6:c1:a1:7d:35:e4:c8: 5b:2a:10:ed:27:d3:8d:65:1c:5f:14:0c:11:c4:16:a6:f4:42: 11:7f:bf:c4:9b:f8:f2:8d:32:7d:0f:1e:ed:36:87:b4:a6:0b: 5c:c2:16:4a:5b:b8:d2:e5:8d:83:db:e0:cd:be:2e:c1:ab:75: b7:5f:80:79:ff:b0:f6:ee:4b:0a:bc:1c:8d:1e:b1:85:88:fe: f4:9e:b0:36:13:a7:ad:0f:11:64:6f:01:67:98:bd:e7:ea:d3: 8a:22:fc:10:25:e2:36:3f:cb:49:2f:45:ec:0a:1c:e8:b3:3c: ec:5d:a7:7c:e6:20:a3:6a:15:40:fd:a9:cd:b8:3d:5a:d0:ea: 37:a3:a5:1e:0a:97:2e:96:3d:7b:ff:73:70:44:e5:9d:32:48: 0d:b1:6d:9f:6b:e1:09:10:26:13:40:d7:1a:08:fe:45:3c:8c: 97:0e:67:d0:cc:8f:45:63:60:4d:45:32:f5:0a:bf:66:58:ed: 79:b9:8c:11:08:d4:85:9c:3a:f4:3d:78:7d:3d:cd:30:d6:c6: c9:3c:0a:1a:8c:98:73:66:cf:40:94:5e:c6:97:88:b6:af:ba: bd:dc:d4:36:d7:57:16:f1:3b:e3:d5:99:74:e6:7e:74:67:2a: ba:e0:83:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXPXEEPWkCk+rgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MjRiNjBiNDEtNTlhMi00YjIwLWE0OGItMWU5MTU0ZmY3MjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyxKYszDz9SOo/lTuZMgJjTJe9zHq+D52g8v H8Ywnmwl39fHqa59t0MS7GbD9gEAdZ0DbEmoJ8VciGNtwexs14S+s5ym8wVZa8/p mUicP4E3DeQkOB50wl0bdrKvjlpWaVi2Yq8puM/h3kGOsiXTO5WANvA99GKlt/Po UP+1HwNooIsQ8pGeiQLdjHUGy+DRpKowTASidr+2sMrs2HMuGOxxuSNjOdFtkrcF LGXx/OMMIdWxF3sA8r8509+ZLFbbrLMrcf8BJVtkDgVVsKeINzmC4z/8ijidQOhn TnADHLka1REJHHrhXD7GWid4M4C+1Rcrr6cdUw6bbxT6u75INwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5KqKz1gGhtuU1H0e7iMBQEAYKiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmNlYmMxZjEtY2U3NS0z OWQ2LWEzNjItYzhiNjdlMDMyMmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQvsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZedodStUJ9nKqs5sGhfTXkyFsqEO0n041lHF8UDBHEFqb0QhF/v8Sb +PKNMn0PHu02h7SmC1zCFkpbuNLljYPb4M2+LsGrdbdfgHn/sPbuSwq8HI0esYWI /vSesDYTp60PEWRvAWeYvefq04oi/BAl4jY/y0kvRewKHOizPOxdp3zmIKNqFUD9 qc24PVrQ6jejpR4Kly6WPXv/c3BE5Z0ySA2xbZ9r4QkQJhNA1xoI/kU8jJcOZ9DM j0VjYE1FMvUKv2ZY7Xm5jBEI1IWcOvQ9eH09zTDWxsk8ChqMmHNmz0CUXsaXiLav ur3c1DbXVxbxO+PVmXTmfnRnKrrgg1s= -----END CERTIFICATE-----Generated at Wed Oct 14 07:53:02 2026 by rpki-client