$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cff704e6-6037-3379-841b-631795dec5ac.roa File: cff704e6-6037-3379-841b-631795dec5ac.roa (raw, json) Hash identifier: E18zD4FWYBImVUg7YDVkQgaT+ALbhdKgoMCQBwv6fZU= Subject key identifier: BF:44:31:B4:5A:C3:80:02:EB:34:B4:DF:EF:ED:D4:F6:2A:62:ED:2A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B28F9B0D23846A333280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cff704e6-6037-3379-841b-631795dec5ac.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 67.140.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b2:8f:9b:0d:23:84:6a:33:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=be8b36a4-20a4-4f4a-9bf9-bce036233d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b2:a9:f6:de:d8:51:7e:ba:3d:f9:9a:f5:94: 4c:c7:7f:bb:0a:16:bf:00:be:c6:9a:98:1f:ae:61: 4e:51:34:53:6b:c2:4a:6d:c8:ab:53:7d:e5:4d:5d: 0b:97:18:03:93:28:ef:ce:51:f3:2d:8b:af:91:14: df:1b:de:b8:68:80:47:0f:5c:90:5b:17:d3:37:73: 79:5c:c5:0f:47:9b:f8:10:10:56:cc:93:cd:15:ee: 36:6a:1a:9b:41:f7:f7:11:16:89:fa:9c:1f:f5:66: 0d:7a:76:e9:6c:42:5a:bf:32:81:6f:4e:d9:de:a1: 84:d6:1e:cb:eb:18:d8:41:70:01:93:67:70:99:95: b8:b8:a8:6a:cd:80:09:1e:2f:3d:bb:e8:31:78:e2: 59:d6:0f:b4:57:8f:af:06:bb:86:7f:36:8e:64:8a: bb:67:f2:a0:d6:3b:a4:2d:11:a2:31:a4:ab:41:b3: 0b:55:f8:9c:f0:d4:ff:01:64:d2:06:c1:af:be:e2: 9b:32:62:12:ad:ab:d2:3a:88:cf:df:47:97:91:c7: c6:88:59:07:40:4c:ae:6a:f8:7c:5e:2b:29:cb:a6: ce:d0:80:e4:d0:0e:b8:34:47:38:83:19:f3:81:7d: 4b:c5:06:29:54:3d:7f:3c:cf:0b:bc:13:38:a6:de: 58:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:44:31:B4:5A:C3:80:02:EB:34:B4:DF:EF:ED:D4:F6:2A:62:ED:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cff704e6-6037-3379-841b-631795dec5ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:4f:16:6b:8f:9c:92:cc:6a:f1:26:85:87:af:0d:d9:ab:58: b3:1b:04:a9:eb:01:6a:a1:58:07:16:fe:1f:b6:98:1d:75:ae: 0f:57:9e:2b:94:3c:6c:16:b4:46:98:42:30:f2:99:16:69:b8: d6:ad:54:76:5b:08:e4:92:7b:2d:cd:1c:11:d6:7f:61:7e:0a: 74:c0:5d:0a:72:c1:a8:4a:85:b0:3e:0f:02:f9:37:48:76:07: 69:81:8d:f4:db:5e:40:2b:55:2e:9b:f5:08:7f:af:32:79:00: 8c:58:25:a1:f5:5c:c3:e3:70:84:08:96:a4:e4:90:3a:ba:02: be:2e:90:ed:ff:88:e1:6f:dc:5a:da:32:44:54:52:11:7f:91: d3:1d:5c:f0:3c:61:6d:49:90:21:22:7a:89:17:34:cd:82:39: f9:9a:f4:08:52:12:70:bb:a4:5d:57:a5:33:1e:6c:18:0e:98: 73:78:a7:10:9b:ed:8c:82:d3:79:17:da:b6:57:75:b3:0d:08: 8f:c9:22:6b:07:80:b5:19:ff:42:6f:54:d3:c2:5e:17:e9:e0: fa:ae:a3:1a:11:b8:63:5d:d2:4f:d5:0e:ce:33:a2:96:c2:ba: 93:34:90:0c:3b:3d:26:a2:99:dd:38:9d:8e:cb:f3:6f:45:0d: 09:23:55:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rKPmw0jhGozMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk YmU4YjM2YTQtMjBhNC00ZjRhLTliZjktYmNlMDM2MjMzZDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rKp9t7YUX66Pfma9ZRMx3+7Cha/AL7Gmpgf rmFOUTRTa8JKbcirU33lTV0LlxgDkyjvzlHzLYuvkRTfG964aIBHD1yQWxfTN3N5 XMUPR5v4EBBWzJPNFe42ahqbQff3ERaJ+pwf9WYNenbpbEJavzKBb07Z3qGE1h7L 6xjYQXABk2dwmZW4uKhqzYAJHi89u+gxeOJZ1g+0V4+vBruGfzaOZIq7Z/Kg1juk LRGiMaSrQbMLVfic8NT/AWTSBsGvvuKbMmISravSOojP30eXkcfGiFkHQEyuavh8 Xispy6bO0IDk0A64NEc4gxnzgX1LxQYpVD1/PM8LvBM4pt5YywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9EMbRaw4AC6zS03+/t1PYqYu0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2ZmNzA0ZTYtNjAzNy0z Mzc5LTg0MWItNjMxNzk1ZGVjNWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4w4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlPFmuPnJLMavEmhYevDdmrWLMbBKnrAWqhWAcW/h+2mB11rg9XniuU PGwWtEaYQjDymRZpuNatVHZbCOSSey3NHBHWf2F+CnTAXQpywahKhbA+DwL5N0h2 B2mBjfTbXkArVS6b9Qh/rzJ5AIxYJaH1XMPjcIQIlqTkkDq6Ar4ukO3/iOFv3Fra MkRUUhF/kdMdXPA8YW1JkCEieokXNM2COfma9AhSEnC7pF1XpTMebBgOmHN4pxCb 7YyC03kX2rZXdbMNCI/JImsHgLUZ/0JvVNPCXhfp4PquoxoRuGNd0k/VDs4zopbC upM0kAw7PSaimd04nY7L829FDQkjVR0= -----END CERTIFICATE-----Generated at Tue Oct 13 17:45:02 2026 by rpki-client