$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c406f707-442e-31b7-a3ad-0e158a7f1148.roa File: c406f707-442e-31b7-a3ad-0e158a7f1148.roa (raw, json) Hash identifier: 8SyX1IJMA7XOeGEltV1Wr5NLTvaZjhpHLHVWgMJgTUw= Subject key identifier: 89:64:4F:F0:25:D2:05:D9:5C:9D:49:9F:D5:41:8B:84:53:74:1E:12 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D7B4CE16453BD3394D560 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c406f707-442e-31b7-a3ad-0e158a7f1148.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 27338 IP address blocks: 66.0.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:7b:4c:e1:64:53:bd:33:94:d5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=bdec9cbb-f585-445d-a96f-b69fec519ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:87:58:6e:e6:4d:fe:5f:e1:07:33:60:98:9d: 2d:21:fb:0c:d2:fe:59:7e:85:4b:fc:0e:6d:7e:1a: 20:c0:9c:9b:a4:6c:59:54:82:83:a4:03:91:5e:ca: 93:6b:54:86:3f:77:66:22:4b:0d:d0:64:28:94:86: 2b:2e:f8:e7:f1:22:cf:3e:f8:f6:d0:89:a4:6e:32: f7:0c:d3:a4:bd:a9:e0:e7:fc:1c:e2:87:59:27:d6: f5:cc:82:54:a5:7b:59:c1:cf:2e:2e:75:c2:0f:50: c3:45:51:10:5f:df:8c:c6:f5:b7:11:6e:ad:68:95: 94:9e:0c:7d:a9:12:bd:99:cc:9c:23:60:56:1b:55: 1c:30:fd:60:6e:fe:ee:06:39:6f:c3:4b:ad:ae:c9: 69:17:74:f5:11:e6:f5:ba:df:d4:34:ed:7a:1f:ad: 5d:68:b5:eb:02:a8:3d:cc:6d:bf:b7:9a:1a:50:ed: 74:91:b5:8a:70:cd:43:10:68:9c:bc:34:7f:b4:f1: 9d:58:9f:c8:cf:eb:dc:14:5c:88:d4:32:4e:5f:32: 55:3b:ee:f6:2e:d5:f6:a3:79:c6:47:5a:4b:20:f5: 0e:98:37:4a:59:b4:0f:00:0e:16:1b:a3:bd:5f:d2: 46:2c:6f:13:ba:1d:2a:d8:9c:de:ff:f0:fc:6d:e1: dc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:64:4F:F0:25:D2:05:D9:5C:9D:49:9F:D5:41:8B:84:53:74:1E:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c406f707-442e-31b7-a3ad-0e158a7f1148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.0.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:1b:50:03:8c:cf:94:64:78:03:d3:57:a4:c6:d8:2f:57:7f: 18:7f:88:c2:cb:e6:36:58:6f:f2:f8:ef:d8:c3:59:dc:ec:27: 3a:a7:5b:7d:4f:2d:3f:43:36:a1:63:69:97:5a:56:9e:45:8a: 55:5a:c3:90:e0:c3:ef:5b:a5:80:9f:ba:d3:a9:79:99:c6:cc: be:70:ea:27:92:0a:a7:02:ae:94:74:11:17:30:c2:e0:6a:91: 22:fd:d0:ed:34:41:93:81:f0:f1:e7:3d:d2:cf:9f:d8:9c:b7: 27:86:90:d6:7f:86:f4:46:a8:42:84:3e:26:f4:e0:04:b2:be: 91:a4:d3:1b:08:76:d5:89:57:ff:31:0a:d2:3b:5e:a0:40:a6: 34:05:54:b6:cb:c6:5b:3a:ed:6c:d3:0f:18:39:3d:c7:3b:72: e0:4b:40:15:ca:f5:ef:50:d2:0b:71:d1:ba:8f:4e:5e:46:82: 6a:c1:1f:0a:af:4e:46:8b:26:34:ad:6f:b1:1e:ad:9f:01:4a: e7:7e:fb:7c:47:2e:ce:7d:97:a3:be:be:8a:4e:f1:86:00:e5: 52:5e:7f:65:d1:2d:cd:ce:9c:37:3b:ec:9f:c4:c5:fb:2f:37: 94:cb:ea:a3:fa:23:70:f5:f9:84:a3:de:3c:19:4b:36:95:48: 79:6b:2b:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXtM4WRTvTOU1WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YmRlYzljYmItZjU4NS00NDVkLWE5NmYtYjY5ZmVjNTE5ZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIdYbuZN/l/hBzNgmJ0tIfsM0v5ZfoVL/A5t fhogwJybpGxZVIKDpAORXsqTa1SGP3dmIksN0GQolIYrLvjn8SLPPvj20ImkbjL3 DNOkvang5/wc4odZJ9b1zIJUpXtZwc8uLnXCD1DDRVEQX9+MxvW3EW6taJWUngx9 qRK9mcycI2BWG1UcMP1gbv7uBjlvw0utrslpF3T1Eeb1ut/UNO16H61daLXrAqg9 zG2/t5oaUO10kbWKcM1DEGicvDR/tPGdWJ/Iz+vcFFyI1DJOXzJVO+72LtX2o3nG R1pLIPUOmDdKWbQPAA4WG6O9X9JGLG8Tuh0q2Jze//D8beHcjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlkT/Al0gXZXJ1Jn9VBi4RTdB4SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzQwNmY3MDctNDQyZS0z MWI3LWEzYWQtMGUxNThhN2YxMTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQgBGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAbUAOMz5RkeAPTV6TG2C9Xfxh/iMLL5jZYb/L479jDWdzsJzqnW31P LT9DNqFjaZdaVp5FilVaw5Dgw+9bpYCfutOpeZnGzL5w6ieSCqcCrpR0ERcwwuBq kSL90O00QZOB8PHnPdLPn9ictyeGkNZ/hvRGqEKEPib04ASyvpGk0xsIdtWJV/8x CtI7XqBApjQFVLbLxls67WzTDxg5Pcc7cuBLQBXK9e9Q0gtx0bqPTl5GgmrBHwqv TkaLJjStb7EerZ8BSud++3xHLs59l6O+vopO8YYA5VJef2XRLc3OnDc77J/Exfsv N5TL6qP6I3D1+YSj3jwZSzaVSHlrK/Y= -----END CERTIFICATE-----Generated at Tue Oct 13 17:48:18 2026 by rpki-client