$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d68e4f8f-a57d-3259-a6de-a47dab3fe003.roa File: d68e4f8f-a57d-3259-a6de-a47dab3fe003.roa (raw, json) Hash identifier: X1NA0YakjbYc0BtOvvimLhlifPf7lqkZ1LBgEMylW20= Subject key identifier: EF:C4:E9:28:97:87:8B:2B:E0:C9:EF:E3:E4:82:42:78:64:68:3A:42 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D8E273C33FCA645393300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d68e4f8f-a57d-3259-a6de-a47dab3fe003.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 64.61.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:8e:27:3c:33:fc:a6:45:39:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=9e32841a-77e0-472e-80e1-6f7c32830e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a2:67:93:86:a9:75:e2:4e:2e:60:7f:fe:b8: 81:a0:96:07:d6:5d:f5:b4:5f:82:1e:36:06:6d:5f: 20:24:90:3f:f6:93:0c:ae:2c:fd:0d:38:70:1c:73: 93:e3:be:03:4b:a6:a0:df:a2:49:b6:a5:cd:4c:9f: 6a:5e:d4:16:b1:d1:fd:31:59:b8:85:58:50:da:0c: 97:99:77:eb:96:be:e9:ce:d5:aa:f4:5f:8c:fa:c5: bb:fa:4b:9c:41:ae:f3:85:0a:07:3d:cc:3b:39:7e: e7:4e:64:7b:be:7c:b6:54:75:31:59:89:9c:76:ee: 9f:c8:a9:b2:10:66:45:fa:29:91:cb:fd:a2:81:65: 84:c6:57:cf:fc:4b:88:3d:4a:a5:14:09:a6:f4:13: 62:e7:8c:90:2f:42:fc:cd:60:47:f8:b7:89:15:00: 7e:44:30:65:29:18:54:75:8b:b5:59:29:0d:8d:b8: fa:0f:ce:dd:ad:86:ad:da:5d:74:f0:62:fa:98:a7: dd:3c:49:a4:6b:19:27:ec:92:63:4c:02:ac:05:d3: 86:08:df:32:6d:a3:74:01:f7:46:39:30:79:1d:e5: a7:56:84:9d:c5:48:38:1f:66:94:a2:fa:e6:5f:dd: 69:9b:87:16:3f:3b:96:3a:3f:c8:93:f4:dc:0a:0a: 3a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C4:E9:28:97:87:8B:2B:E0:C9:EF:E3:E4:82:42:78:64:68:3A:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d68e4f8f-a57d-3259-a6de-a47dab3fe003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.61.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:18:90:d2:04:ed:23:ba:2c:58:67:d1:0b:dd:7d:9a:0d:a7: 91:42:77:4c:a9:00:d5:4d:af:73:30:e7:75:a5:af:69:b8:14: 34:b7:2c:c9:a6:92:77:b9:2a:26:8e:9c:c0:00:a7:06:28:d5: 09:e0:c9:b8:65:eb:34:59:1c:b0:86:a9:7a:d1:96:e7:37:14: d0:b9:2d:03:bc:7a:6a:d4:5f:c2:76:f4:3f:d6:9c:15:e0:bb: 6c:28:31:9f:96:2a:d4:8e:74:f8:27:0b:f9:52:e9:90:d0:c0: cf:c3:e3:b2:4b:c2:99:31:90:23:9f:e4:7d:7e:29:76:68:41: 31:26:8b:cc:2b:5e:e8:19:51:1b:7f:9b:05:e2:ca:b0:98:8e: 8f:30:f2:f4:f9:ef:0c:ab:de:0f:85:c2:19:bb:46:40:26:b5: ff:3c:70:61:0c:88:a9:e5:5b:c0:2f:b4:06:4b:55:f1:38:21: ee:c9:1a:c2:19:42:1f:c2:6f:0d:1b:b8:eb:52:c3:86:0e:2e: cf:39:d9:d7:69:0a:ce:56:ca:6d:ae:49:a6:0e:a1:73:9f:dc: 63:0f:b9:e1:00:22:ea:e1:3d:b3:2d:d4:aa:dd:23:c9:e0:42: 41:74:e4:38:34:95:4d:20:b3:f5:60:57:2f:f6:31:3a:a2:b2: 02:69:95:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnY4nPDP8pkU5MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OWUzMjg0MWEtNzdlMC00NzJlLTgwZTEtNmY3YzMyODMwZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6Jnk4apdeJOLmB//riBoJYH1l31tF+CHjYG bV8gJJA/9pMMriz9DThwHHOT474DS6ag36JJtqXNTJ9qXtQWsdH9MVm4hVhQ2gyX mXfrlr7pztWq9F+M+sW7+kucQa7zhQoHPcw7OX7nTmR7vny2VHUxWYmcdu6fyKmy EGZF+imRy/2igWWExlfP/EuIPUqlFAmm9BNi54yQL0L8zWBH+LeJFQB+RDBlKRhU dYu1WSkNjbj6D87drYat2l108GL6mKfdPEmkaxkn7JJjTAKsBdOGCN8ybaN0AfdG OTB5HeWnVoSdxUg4H2aUovrmX91pm4cWPzuWOj/Ik/TcCgo6EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/E6SiXh4sr4Mnv4+SCQnhkaDpCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDY4ZTRmOGYtYTU3ZC0z MjU5LWE2ZGUtYTQ3ZGFiM2ZlMDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQD2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQYkNIE7SO6LFhn0QvdfZoNp5FCd0ypANVNr3Mw53Wlr2m4FDS3LMmm kne5KiaOnMAApwYo1Qngybhl6zRZHLCGqXrRluc3FNC5LQO8emrUX8J29D/WnBXg u2woMZ+WKtSOdPgnC/lS6ZDQwM/D47JLwpkxkCOf5H1+KXZoQTEmi8wrXugZURt/ mwXiyrCYjo8w8vT57wyr3g+Fwhm7RkAmtf88cGEMiKnlW8AvtAZLVfE4Ie7JGsIZ Qh/Cbw0buOtSw4YOLs852ddpCs5Wym2uSaYOoXOf3GMPueEAIurhPbMt1KrdI8ng QkF05Dg0lU0gs/VgVy/2MTqisgJplYs= -----END CERTIFICATE-----Generated at Tue Oct 13 04:16:15 2026 by rpki-client