$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dad1fc82-f0ec-3e75-b6ac-dbf795bd0bca.roa File: dad1fc82-f0ec-3e75-b6ac-dbf795bd0bca.roa (raw, json) Hash identifier: AUKXgYCu5Vhjv1CPP2xvvXwE8Lsg3Luhv8C0j00R2LY= Subject key identifier: 65:AB:75:B9:5C:24:3C:BF:48:79:73:01:0E:88:7A:16:05:96:E0:D4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7A4F703F266ED75300BFB3A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dad1fc82-f0ec-3e75-b6ac-dbf795bd0bca.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 67.224.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:70:3f:26:6e:d7:53:00:bf:b3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=b0cecd42-fc0f-456e-b6f9-b8f3cc3e7d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8b:f9:82:33:68:88:ce:01:c7:c5:ed:7f:29: a4:cb:f3:df:86:1a:4f:2e:53:d6:2e:49:28:91:6e: 82:1a:85:94:84:1d:2a:81:f5:6f:0c:46:88:75:28: f0:34:dd:ff:0d:e0:81:f1:7b:8c:4d:ff:53:14:01: 17:93:49:9e:67:78:ff:2d:bf:a6:c0:a7:8f:c8:16: e1:f1:5f:f7:a5:ff:9e:ab:37:4a:28:78:54:0a:ed: 61:8b:4f:fc:29:81:22:0a:ae:d4:05:e8:2f:c5:56: 4b:ed:08:4b:03:6b:74:fb:4a:04:85:94:ea:17:be: 33:c7:ef:0f:7a:aa:65:4c:11:01:06:5d:a0:21:37: a8:41:e8:1c:2d:45:ff:3d:01:ca:2d:76:1f:8a:4c: 10:db:f9:13:97:65:00:b4:81:8c:79:c6:38:0f:3d: e6:4a:31:89:a1:5c:69:c7:fc:f0:c5:3b:10:cf:73: ec:81:de:6b:21:69:84:c6:49:3e:4f:6c:90:07:9f: 52:22:25:93:e4:64:96:13:6c:19:1a:bd:3a:1a:11: 5d:43:ad:98:2a:c3:a8:06:37:fe:b4:f8:47:95:e1: 40:8a:2d:5a:a0:4a:2a:e2:4d:dc:6e:7b:69:68:fb: 06:0c:4b:f5:86:34:b2:ae:af:f3:7e:2a:ee:d4:e9: a4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AB:75:B9:5C:24:3C:BF:48:79:73:01:0E:88:7A:16:05:96:E0:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dad1fc82-f0ec-3e75-b6ac-dbf795bd0bca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.224.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:31:b5:52:3a:a0:d3:91:0a:1e:9b:53:77:cd:30:37:20:23: fb:ff:4c:09:45:82:1b:2e:37:0c:36:94:d3:3b:ca:91:89:8b: 85:8c:a2:20:93:30:74:74:ca:ca:58:1a:b8:08:38:3d:90:8d: 0b:79:c9:00:4e:e8:4c:f3:8b:06:a4:da:f5:ef:f8:02:cb:2d: c1:67:77:f2:9d:51:3d:e5:0a:8e:7c:d0:3b:a2:0a:e0:e7:25: ed:e5:d6:6d:03:be:f3:a6:a9:f0:4b:0e:3c:4a:53:13:4f:9c: a2:de:99:d6:c9:5a:68:1b:80:f0:a3:cf:65:99:6e:77:3f:63: bb:ad:80:78:aa:63:e6:8d:8e:4d:d3:23:0c:a7:d4:92:79:66: c3:07:f7:40:c7:f9:94:3c:56:e9:15:1a:3f:65:a4:aa:7c:a2: 99:24:fb:65:aa:88:a2:54:19:20:a4:54:7f:c8:96:6f:68:bb: f1:52:e8:c7:fb:9f:ba:4f:a9:04:89:12:c8:71:fa:1c:5b:66: d3:78:65:d5:f8:59:0e:55:1b:b6:9c:97:1e:70:bc:2d:72:ae: 6f:29:03:3c:c5:eb:72:c8:25:d9:ec:dc:6b:47:17:be:61:95: 62:ce:bb:66:96:62:11:0d:aa:86:9c:e1:ee:f2:00:0c:db:81: e5:dc:8d:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T3A/Jm7XUwC/s6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YjBjZWNkNDItZmMwZi00NTZlLWI2ZjktYjhmM2NjM2U3ZDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIv5gjNoiM4Bx8Xtfymky/PfhhpPLlPWLkko kW6CGoWUhB0qgfVvDEaIdSjwNN3/DeCB8XuMTf9TFAEXk0meZ3j/Lb+mwKePyBbh 8V/3pf+eqzdKKHhUCu1hi0/8KYEiCq7UBegvxVZL7QhLA2t0+0oEhZTqF74zx+8P eqplTBEBBl2gITeoQegcLUX/PQHKLXYfikwQ2/kTl2UAtIGMecY4Dz3mSjGJoVxp x/zwxTsQz3Psgd5rIWmExkk+T2yQB59SIiWT5GSWE2wZGr06GhFdQ62YKsOoBjf+ tPhHleFAii1aoEoq4k3cbntpaPsGDEv1hjSyrq/zfiru1OmkTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWrdblcJDy/SHlzAQ6IehYFluDUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGFkMWZjODItZjBlYy0z ZTc1LWI2YWMtZGJmNzk1YmQwYmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ+AwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsxtVI6oNORCh6bU3fNMDcgI/v/TAlFghsuNww2lNM7ypGJi4WMoiCT MHR0yspYGrgIOD2QjQt5yQBO6Ezziwak2vXv+ALLLcFnd/KdUT3lCo580DuiCuDn Je3l1m0DvvOmqfBLDjxKUxNPnKLemdbJWmgbgPCjz2WZbnc/Y7utgHiqY+aNjk3T Iwyn1JJ5ZsMH90DH+ZQ8VukVGj9lpKp8opkk+2WqiKJUGSCkVH/Ilm9ou/FS6Mf7 n7pPqQSJEshx+hxbZtN4ZdX4WQ5VG7aclx5wvC1yrm8pAzzF63LIJdns3GtHF75h lWLOu2aWYhENqoac4e7yAAzbgeXcjQ4= -----END CERTIFICATE-----Generated at Tue Oct 13 19:28:27 2026 by rpki-client