$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d60d6d6f-aa85-3fff-9aaa-fb1f705db924.roa File: d60d6d6f-aa85-3fff-9aaa-fb1f705db924.roa (raw, json) Hash identifier: CRZ2ukmXmDbZDtAtoiYocbON3RD9QFVPKPkIJtK0ySw= Subject key identifier: F2:F4:20:D7:E0:2F:46:83:13:88:99:E5:6E:6C:75:9D:D3:FE:3E:5C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D7B361D596190639DFF00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d60d6d6f-aa85-3fff-9aaa-fb1f705db924.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 27338 IP address blocks: 66.0.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:7b:36:1d:59:61:90:63:9d:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=48a90fbf-0b7d-4243-b614-eb24222ad6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:df:a7:df:3c:4f:61:73:c4:cb:d1:0d:29:c3: 92:de:e8:a7:7c:8b:fe:c0:28:34:99:ec:7a:c4:dd: 13:04:60:ec:ca:c1:db:d7:ac:64:a0:2d:f5:d2:4c: fc:55:a9:26:62:f8:9d:ce:08:5f:d4:3a:38:5e:ee: 67:34:87:b5:1c:34:24:3a:8c:34:06:df:14:df:26: 49:69:ef:f9:b4:12:df:3b:f5:07:4b:21:b6:aa:6d: 0b:e1:83:65:48:53:e5:7b:5d:4c:7b:2f:b9:a1:63: f3:e1:06:e2:15:b1:52:69:da:4c:df:85:52:ff:5e: bd:ca:8b:92:ad:3d:4d:82:71:0a:be:60:2e:81:5d: d9:4f:96:2a:27:7c:a6:b5:58:06:56:81:31:80:c5: 6c:a8:f9:63:e6:c9:1c:85:55:d5:7c:ee:60:a3:67: 96:9d:9a:71:73:47:f2:1a:37:ad:14:e2:e5:fb:76: c0:b6:c5:b7:90:bb:58:ab:d8:c9:9b:3a:a7:10:3f: e0:03:a6:e3:64:e6:8e:ed:9c:f4:1e:c0:6d:e0:ca: 6e:fd:68:8b:7f:cf:b8:01:03:e3:50:e3:95:9a:83: 89:cf:6c:39:f6:21:2b:3c:ac:03:c0:6f:22:cb:12: d6:fe:a4:60:bb:ab:5b:79:4f:62:45:85:6b:00:3d: 62:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F4:20:D7:E0:2F:46:83:13:88:99:E5:6E:6C:75:9D:D3:FE:3E:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d60d6d6f-aa85-3fff-9aaa-fb1f705db924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.0.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:1a:5e:2e:e1:2e:00:fe:ac:fd:16:ed:94:33:a2:4d:67:d4: 38:a5:08:c1:39:83:83:d5:12:13:4e:3d:7f:9e:54:05:0a:3d: 88:09:b1:84:85:de:6e:d1:4b:5d:7b:0c:ba:6e:24:68:bc:f0: 54:48:de:39:92:07:3c:d1:2b:ed:37:8a:43:23:84:e3:7b:1d: c8:bd:a5:0c:d4:65:7f:ec:d4:69:0b:56:73:e1:75:d9:1b:4a: db:73:ae:8b:82:5e:c7:63:dd:96:d9:67:a5:94:c4:95:dc:25: 72:37:9d:55:93:8e:79:dc:31:91:67:fa:a7:9d:ef:aa:d0:ce: 71:f6:2f:99:c2:07:53:ec:2c:7f:13:97:2f:dd:a4:fc:e5:30: c6:7e:91:fe:d8:6c:6b:7f:77:38:a2:42:31:74:27:c0:d9:0a: e1:10:b0:1a:01:b0:be:87:d2:7f:fc:f9:18:b0:b1:08:45:9a: 04:44:25:71:05:94:c5:17:d3:bb:28:11:e5:b2:c1:d2:e4:2c: db:15:76:92:ea:0f:53:09:c4:e1:c3:6f:da:ab:35:3e:d9:61: d5:0c:47:97:14:32:8d:bc:42:37:96:ee:ad:4d:62:95:a4:14: f6:69:56:c3:4c:1f:4e:dc:de:67:86:61:7a:02:85:63:a7:0c: 43:f1:48:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXs2HVlhkGOd/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NDhhOTBmYmYtMGI3ZC00MjQzLWI2MTQtZWIyNDIyMmFkNmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN+n3zxPYXPEy9ENKcOS3uinfIv+wCg0mex6 xN0TBGDsysHb16xkoC310kz8VakmYvidzghf1Do4Xu5nNIe1HDQkOow0Bt8U3yZJ ae/5tBLfO/UHSyG2qm0L4YNlSFPle11Mey+5oWPz4QbiFbFSadpM34VS/169youS rT1NgnEKvmAugV3ZT5YqJ3ymtVgGVoExgMVsqPlj5skchVXVfO5go2eWnZpxc0fy GjetFOLl+3bAtsW3kLtYq9jJmzqnED/gA6bjZOaO7Zz0HsBt4Mpu/WiLf8+4AQPj UOOVmoOJz2w59iErPKwDwG8iyxLW/qRgu6tbeU9iRYVrAD1iDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPL0INfgL0aDE4iZ5W5sdZ3T/j5cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDYwZDZkNmYtYWE4NS0z ZmZmLTlhYWEtZmIxZjcwNWRiOTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQgAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAaXi7hLgD+rP0W7ZQzok1n1DilCME5g4PVEhNOPX+eVAUKPYgJsYSF 3m7RS117DLpuJGi88FRI3jmSBzzRK+03ikMjhON7Hci9pQzUZX/s1GkLVnPhddkb SttzrouCXsdj3ZbZZ6WUxJXcJXI3nVWTjnncMZFn+qed76rQznH2L5nCB1PsLH8T ly/dpPzlMMZ+kf7YbGt/dziiQjF0J8DZCuEQsBoBsL6H0n/8+RiwsQhFmgREJXEF lMUX07soEeWywdLkLNsVdpLqD1MJxOHDb9qrNT7ZYdUMR5cUMo28QjeW7q1NYpWk FPZpVsNMH07c3meGYXoChWOnDEPxSE0= -----END CERTIFICATE-----Generated at Wed Oct 14 10:06:53 2026 by rpki-client