$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2fd3424-4710-3e72-bb04-a53e2033ac6d.roa File: d2fd3424-4710-3e72-bb04-a53e2033ac6d.roa (raw, json) Hash identifier: +hnNqj0kRFv8Y8p8TFNihuZy2dTG1yYPZAhsUcUfyrs= Subject key identifier: FA:92:8B:F5:20:50:85:2D:11:6C:19:BF:3C:C6:38:52:44:59:B0:C0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D7399D3B1862CBAF1D480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2fd3424-4710-3e72-bb04-a53e2033ac6d.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 66.64.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:73:99:d3:b1:86:2c:ba:f1:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=f248d8de-6960-49a8-8a27-0a2c92ddf6be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a0:f6:3d:c0:ab:84:be:71:96:d7:87:4e:7f: 29:59:ed:17:68:88:f4:0f:da:24:3a:9e:3b:b7:c8: 98:15:9c:2c:71:47:d5:9c:3f:90:7c:04:49:9a:11: f6:39:b9:22:e3:78:d0:e2:db:64:f5:5c:df:ad:4b: b4:7f:e7:01:c4:6b:ae:88:59:f5:60:36:ae:c1:d8: 47:33:29:03:30:b6:aa:a4:f4:0b:12:2b:22:90:e9: ea:7b:e6:22:17:7c:e7:73:d8:fe:94:c2:c4:f0:e5: 4b:1c:5e:f8:d6:ad:88:50:8d:5b:78:a9:f2:be:4f: 25:53:1c:df:35:1b:ad:e3:ed:ee:60:6f:4e:d1:ba: f9:4f:e0:11:f1:65:78:a2:b5:aa:de:e7:b6:41:85: 45:f5:3f:cb:86:43:5b:c0:d2:23:d2:17:c0:00:a9: 73:42:43:3d:f1:ea:7d:2f:f6:be:4b:8b:6c:a8:d7: e3:f3:79:a1:71:9f:db:9e:ac:ca:b6:6d:3d:57:b8: aa:27:8e:91:8f:a7:77:c9:90:4f:c3:7d:48:37:64: 36:6f:ba:1c:de:cc:de:de:44:bf:32:d6:bd:e3:ac: eb:78:3d:33:2f:71:c8:0a:09:88:50:fc:a2:74:b0: 3d:ee:0b:bd:be:5d:1d:b2:57:4a:6d:9f:33:30:da: 7b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:92:8B:F5:20:50:85:2D:11:6C:19:BF:3C:C6:38:52:44:59:B0:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2fd3424-4710-3e72-bb04-a53e2033ac6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.64.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:00:86:7c:c8:73:d1:ef:f9:d1:6f:28:ad:0c:6b:e7:26:c3: 5c:cc:8f:9b:e6:21:86:53:c5:a2:46:98:35:52:23:2a:d4:a1: cd:58:a3:e0:f1:1a:6a:fb:13:26:4c:f6:f6:44:b2:f2:93:21: 58:df:71:a9:cf:95:19:24:f9:69:99:7c:96:f4:1c:33:a4:ee: 82:94:6b:fe:dc:30:88:24:73:cf:d9:6e:ae:17:32:ba:a0:9d: 22:02:e5:8e:54:42:ba:41:55:2e:f6:f2:a9:98:67:bd:20:26: ce:2d:cb:7c:5d:cf:aa:bf:22:0c:ca:f3:e6:49:c3:8e:8f:e3: f8:ce:b0:02:af:57:c2:9a:2f:e5:18:9a:70:c5:c2:33:5d:dd: 6c:f8:08:10:c3:38:52:ea:91:9e:73:4f:42:f5:b8:4a:2f:39: 05:15:8d:7a:72:cc:33:ad:34:bf:ba:6a:38:cd:b3:29:3a:71: 7e:e4:47:54:e0:3d:dc:2d:8e:7a:74:88:5f:62:54:8a:23:aa: 6b:18:59:26:d3:67:d1:58:ea:3e:24:8d:73:7f:db:3b:69:fd: 8e:7d:dc:f9:68:1e:4a:8b:d6:8d:6b:2a:ac:29:fd:ce:51:e9: 24:1f:57:d7:5a:9d:73:af:32:8a:92:3a:f8:4d:a8:5b:bf:7b: b7:5c:2d:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXOZ07GGLLrx1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZjI0OGQ4ZGUtNjk2MC00OWE4LThhMjctMGEyYzkyZGRmNmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaD2PcCrhL5xlteHTn8pWe0XaIj0D9okOp47 t8iYFZwscUfVnD+QfARJmhH2Obki43jQ4ttk9VzfrUu0f+cBxGuuiFn1YDauwdhH MykDMLaqpPQLEisikOnqe+YiF3znc9j+lMLE8OVLHF741q2IUI1beKnyvk8lUxzf NRut4+3uYG9O0br5T+AR8WV4orWq3ue2QYVF9T/LhkNbwNIj0hfAAKlzQkM98ep9 L/a+S4tsqNfj83mhcZ/bnqzKtm09V7iqJ46Rj6d3yZBPw31IN2Q2b7oc3sze3kS/ Mta946zreD0zL3HICgmIUPyidLA97gu9vl0dsldKbZ8zMNp7DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqSi/UgUIUtEWwZvzzGOFJEWbDAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDJmZDM0MjQtNDcxMC0z ZTcyLWJiMDQtYTUzZTIwMzNhYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQkCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcAhnzIc9Hv+dFvKK0Ma+cmw1zMj5vmIYZTxaJGmDVSIyrUoc1Yo+Dx Gmr7EyZM9vZEsvKTIVjfcanPlRkk+WmZfJb0HDOk7oKUa/7cMIgkc8/Zbq4XMrqg nSIC5Y5UQrpBVS728qmYZ70gJs4ty3xdz6q/IgzK8+ZJw46P4/jOsAKvV8KaL+UY mnDFwjNd3Wz4CBDDOFLqkZ5zT0L1uEovOQUVjXpyzDOtNL+6ajjNsyk6cX7kR1Tg Pdwtjnp0iF9iVIojqmsYWSbTZ9FY6j4kjXN/2ztp/Y593PloHkqL1o1rKqwp/c5R 6SQfV9danXOvMoqSOvhNqFu/e7dcLVs= -----END CERTIFICATE-----Generated at Tue Oct 13 08:18:27 2026 by rpki-client