$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca680b6f-d40e-316c-b986-e0c0fb556767.roa File: ca680b6f-d40e-316c-b986-e0c0fb556767.roa (raw, json) Hash identifier: gfCxTVxfNUA7+i5S1vwikVn7ujgE23mWXIPM2XK8z4w= Subject key identifier: 56:D3:29:86:82:CE:FA:7D:C1:03:DB:10:F0:55:FF:FB:10:18:2F:CD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F71ED764FB29F510D379FF800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca680b6f-d40e-316c-b986-e0c0fb556767.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 216.96.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:76:4f:b2:9f:51:0d:37:9f:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=487a1fcf-555d-4b8c-b0e5-e8670cf7f815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3f:1d:fe:e8:ab:c8:bc:77:3d:a9:83:e5:76: 83:8b:e7:3b:4e:9e:6c:37:a4:aa:c6:6c:ba:59:9c: 3e:bb:f3:ad:54:59:57:71:2e:a6:cb:b7:d3:38:e6: cb:f6:ad:8a:3d:fb:de:cf:d6:45:6c:18:12:ec:c8: 1b:31:68:59:48:95:8b:e3:09:8a:14:6e:91:05:aa: fe:70:59:3a:25:42:70:ea:35:be:d7:3f:79:0d:63: b8:e6:8a:2e:8c:f6:e3:15:50:40:d9:06:c7:96:57: 90:bf:c8:09:99:23:f7:ce:3e:f0:41:14:90:44:59: 8e:18:c9:53:3c:42:ca:c8:3d:59:15:7e:49:cd:2e: ed:9a:4a:34:63:c2:93:81:04:2d:4c:9b:14:59:45: d5:21:70:e2:77:28:5c:65:fe:51:b6:46:c8:82:78: 2f:e5:f1:6c:3a:d1:24:4e:91:0f:87:b3:46:37:40: 99:e4:d9:74:ef:09:7c:71:6f:1d:38:9d:01:07:5b: db:9e:9d:2b:53:f6:47:db:15:8d:17:d7:65:5c:fd: 28:32:83:22:6f:0c:32:e0:4b:90:2a:10:b1:f2:21: 99:06:91:0a:9d:20:96:1a:13:ea:e5:5f:34:bc:aa: 4d:1a:ba:8c:cf:76:ca:d2:72:0d:82:db:15:31:4f: da:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D3:29:86:82:CE:FA:7D:C1:03:DB:10:F0:55:FF:FB:10:18:2F:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca680b6f-d40e-316c-b986-e0c0fb556767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:fd:05:83:66:36:fc:25:d0:62:ac:bb:8f:c7:27:2f:44:27: 88:86:5b:91:ef:d2:01:96:f8:38:32:50:d5:54:59:89:0c:dc: dc:2d:6f:49:7a:90:d9:7f:ce:46:28:f8:d2:d0:ea:00:82:3f: 13:ff:26:4d:3a:dc:ed:d2:fa:82:8d:b6:38:07:6b:9b:ca:c6: 1b:28:5b:bc:d0:8a:2f:9c:50:0b:8c:cc:81:ab:10:b4:dc:1a: 69:f4:7a:52:e6:45:d3:a6:53:41:10:d8:3e:bf:72:84:22:6b: 43:fe:0e:98:69:2a:a5:38:ec:28:81:80:89:a5:b3:5d:9f:0d: 19:95:e1:69:95:f7:7a:6d:61:a9:8f:11:c4:c0:ec:f7:58:8d: 00:de:05:a2:a7:27:e3:db:f5:ee:dd:a8:57:90:be:dd:de:98: 75:7b:34:1c:7c:eb:5e:b3:2b:3f:61:ed:bb:32:84:c5:d5:34: 05:49:11:38:36:7c:53:cc:29:3a:62:3c:92:fb:06:a7:18:4b: 44:63:80:47:4f:a7:2e:6a:b8:00:af:52:23:ba:61:67:d9:e3: ee:e5:e3:ca:44:bb:46:5e:5f:de:d6:d8:cd:71:3e:f6:0f:48: 88:5e:05:38:4a:d1:c1:69:0a:06:88:bb:28:ac:17:a3:af:f6: 1a:fe:c6:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7XZPsp9RDTef+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NDg3YTFmY2YtNTU1ZC00YjhjLWIwZTUtZTg2NzBjZjdmODE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj8d/uiryLx3PamD5XaDi+c7Tp5sN6Sqxmy6 WZw+u/OtVFlXcS6my7fTOObL9q2KPfvez9ZFbBgS7MgbMWhZSJWL4wmKFG6RBar+ cFk6JUJw6jW+1z95DWO45ooujPbjFVBA2QbHlleQv8gJmSP3zj7wQRSQRFmOGMlT PELKyD1ZFX5JzS7tmko0Y8KTgQQtTJsUWUXVIXDidyhcZf5RtkbIgngv5fFsOtEk TpEPh7NGN0CZ5Nl07wl8cW8dOJ0BB1vbnp0rU/ZH2xWNF9dlXP0oMoMibwwy4EuQ KhCx8iGZBpEKnSCWGhPq5V80vKpNGrqMz3bK0nINgtsVMU/aRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbTKYaCzvp9wQPbEPBV//sQGC/NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2E2ODBiNmYtZDQwZS0z MTZjLWI5ODYtZTBjMGZiNTU2NzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GA2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAn9BYNmNvwl0GKsu4/HJy9EJ4iGW5Hv0gGW+DgyUNVUWYkM3Nwtb0l6 kNl/zkYo+NLQ6gCCPxP/Jk063O3S+oKNtjgHa5vKxhsoW7zQii+cUAuMzIGrELTc Gmn0elLmRdOmU0EQ2D6/coQia0P+DphpKqU47CiBgImls12fDRmV4WmV93ptYamP EcTA7PdYjQDeBaKnJ+Pb9e7dqFeQvt3emHV7NBx8616zKz9h7bsyhMXVNAVJETg2 fFPMKTpiPJL7BqcYS0RjgEdPpy5quACvUiO6YWfZ4+7l48pEu0ZeX97W2M1xPvYP SIheBThK0cFpCgaIuyisF6Ov9hr+xik= -----END CERTIFICATE-----Generated at Wed Oct 14 07:54:55 2026 by rpki-client