$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8c08e04-7262-3bf8-a350-4441ff806c02.roa File: d8c08e04-7262-3bf8-a350-4441ff806c02.roa (raw, json) Hash identifier: Jt//m+ZfILt6xmPCz+qXwcqVlPxDLZryeUr/UW+CAQQ= Subject key identifier: FD:84:86:A7:37:7D:B6:7E:BE:F7:67:36:CC:A6:1C:71:3C:BA:3A:60 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7A4E3C943DE5F83F78D51580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8c08e04-7262-3bf8-a350-4441ff806c02.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 69.66.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:3c:94:3d:e5:f8:3f:78:d5:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=4b61535f-c60e-40ef-ba3e-2fe75cd0e0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d3:6d:62:a7:e2:24:8c:c2:6a:3c:a9:14:45: 36:6d:a5:b3:be:13:59:71:0a:c0:c4:fd:ce:5d:30: 70:43:c0:27:41:2c:c6:4c:ef:7e:ee:26:e7:01:01: 44:38:2b:31:eb:a7:c6:d0:5f:36:35:af:ee:38:cb: 47:df:2c:45:09:e7:c4:5f:10:71:a6:cf:82:b9:ea: f9:b3:64:96:dc:2e:0c:5f:af:db:6f:bf:d2:71:e1: 90:68:20:b0:14:81:5a:c3:05:18:4e:81:73:51:48: 66:c1:1b:9a:fb:29:df:ce:af:2f:69:5f:12:bb:59: 41:ac:57:78:ac:7d:e4:ae:5f:2d:9a:54:c9:b5:ea: f6:89:a6:58:98:c8:0d:9a:f7:0f:00:e5:52:a4:d6: 8b:46:cd:dc:7c:c9:98:2e:91:d1:8b:df:41:34:14: ae:99:c5:a5:b4:f6:9c:a8:14:f0:89:06:28:66:59: 6e:40:ef:d5:d6:61:95:b6:80:4d:6c:16:d4:6f:05: ca:30:ef:0b:cf:91:e8:2f:50:da:6e:0a:b1:32:65: e6:00:6d:a5:95:5c:9f:ec:fe:1a:28:8e:70:c7:b7: b6:cb:42:af:d5:72:4e:e9:49:c5:a2:0e:c6:2e:5e: 76:71:fc:8d:a3:ad:6e:20:19:b1:00:cd:c5:46:6a: f3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:84:86:A7:37:7D:B6:7E:BE:F7:67:36:CC:A6:1C:71:3C:BA:3A:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8c08e04-7262-3bf8-a350-4441ff806c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:9c:b4:bb:f5:1a:74:e7:b0:b1:cb:7b:f1:62:02:30:14:ca: ce:31:87:c4:2c:75:1c:ca:47:4e:5d:e0:89:73:34:ee:26:8f: 11:73:24:58:cf:f1:e9:72:d4:21:23:78:00:e7:4f:01:a4:68: 36:c5:11:55:4d:66:b9:cf:03:0d:b8:65:86:df:45:5b:de:df: b2:da:cb:95:5d:8d:0c:b0:41:aa:20:e1:b8:46:1d:37:fd:f1: d3:59:d2:9a:dc:e6:99:d5:46:ab:89:d9:ad:9f:54:c1:fd:47: 78:5a:0e:88:41:02:b9:db:2a:55:17:96:c4:09:07:2a:2d:60: 25:06:ea:4e:15:f7:b4:c2:68:da:2e:c1:b3:fb:06:c2:21:31: 56:61:1c:7d:2e:5d:64:57:39:28:b2:af:bd:9e:f7:24:23:f7: 18:8a:89:64:78:4c:b9:69:1b:9c:f8:2a:5f:56:d7:b8:8b:64: 40:7d:ad:89:d3:bc:04:9f:91:11:14:b8:cc:ce:89:b6:1e:f5: 03:d3:f7:e5:a4:a9:c1:08:a4:ac:26:f9:58:63:a4:94:02:72: 94:71:0a:90:06:da:29:b9:b7:86:10:4e:36:bc:61:31:1d:34: 0c:a2:11:44:c9:4a:6f:03:6f:ee:f9:ec:89:49:83:b6:7a:c1: 04:1f:fd:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TjyUPeX4P3jVFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NGI2MTUzNWYtYzYwZS00MGVmLWJhM2UtMmZlNzVjZDBlMGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtNtYqfiJIzCajypFEU2baWzvhNZcQrAxP3O XTBwQ8AnQSzGTO9+7ibnAQFEOCsx66fG0F82Na/uOMtH3yxFCefEXxBxps+Cuer5 s2SW3C4MX6/bb7/SceGQaCCwFIFawwUYToFzUUhmwRua+ynfzq8vaV8Su1lBrFd4 rH3krl8tmlTJter2iaZYmMgNmvcPAOVSpNaLRs3cfMmYLpHRi99BNBSumcWltPac qBTwiQYoZlluQO/V1mGVtoBNbBbUbwXKMO8Lz5HoL1DabgqxMmXmAG2llVyf7P4a KI5wx7e2y0Kv1XJO6UnFog7GLl52cfyNo61uIBmxAM3FRmrzLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2Ehqc3fbZ+vvdnNsymHHE8ujpgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDhjMDhlMDQtNzI2Mi0z YmY4LWEzNTAtNDQ0MWZmODA2YzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUKOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuctLv1GnTnsLHLe/FiAjAUys4xh8QsdRzKR05d4IlzNO4mjxFzJFjP 8ely1CEjeADnTwGkaDbFEVVNZrnPAw24ZYbfRVve37Lay5VdjQywQaog4bhGHTf9 8dNZ0prc5pnVRquJ2a2fVMH9R3haDohBArnbKlUXlsQJByotYCUG6k4V97TCaNou wbP7BsIhMVZhHH0uXWRXOSiyr72e9yQj9xiKiWR4TLlpG5z4Kl9W17iLZEB9rYnT vASfkREUuMzOibYe9QPT9+WkqcEIpKwm+VhjpJQCcpRxCpAG2im5t4YQTja8YTEd NAyiEUTJSm8Db+757IlJg7Z6wQQf/WM= -----END CERTIFICATE-----Generated at Tue Oct 13 10:26:34 2026 by rpki-client