$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dcb90c79-5ca5-3cc4-a7d5-f785d0b3cd37.roa File: dcb90c79-5ca5-3cc4-a7d5-f785d0b3cd37.roa (raw, json) Hash identifier: jVyR3bzv2rBA+ue/JxP3qa9+Uojzq0lL/jeqzrJrBOQ= Subject key identifier: E2:BC:7C:BE:8A:E3:A8:FE:98:C0:21:0D:67:34:6F:D5:EE:E8:43:AC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D96C2DB97A7DDF607E5C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dcb90c79-5ca5-3cc4-a7d5-f785d0b3cd37.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 14125 IP address blocks: 63.254.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:96:c2:db:97:a7:dd:f6:07:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=db2b8186-ccf5-4476-be74-556a470a9e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:82:43:ac:38:23:35:2c:c5:a7:2c:2e:20:38: 49:09:63:ea:cc:bb:e4:d9:ba:fe:e8:91:94:3c:0e: 85:d4:5c:34:32:4a:ec:38:2c:fc:69:6c:a7:16:bc: 72:d9:40:45:e8:dd:6e:cc:6e:b6:66:53:bb:9e:59: d6:0d:76:22:fe:10:7d:46:70:5a:6f:45:17:37:be: 28:70:57:ee:0d:a7:f6:59:f7:b6:c8:7e:f8:3c:af: d3:b4:cd:6f:b1:8e:7b:96:6f:b9:7d:47:80:d3:34: 54:5b:9a:57:b8:c6:1b:32:50:24:08:35:db:aa:be: be:19:5a:58:85:50:03:c9:38:c7:d7:31:b0:3d:29: f7:ae:79:9d:f2:62:25:87:df:d3:fd:8d:6a:95:4d: 43:ee:66:79:a9:8e:6b:61:96:24:c4:61:00:15:36: 07:e3:b2:f8:8d:3e:da:3e:7f:e8:23:35:4a:96:2f: 09:78:7f:eb:14:cb:23:34:3d:39:e0:8c:5b:0d:be: d0:20:4e:5a:8a:8d:67:39:80:59:68:ed:d4:8e:50: 9e:01:a7:f1:4c:0e:3a:4e:ca:70:80:95:10:c2:b0: 03:69:00:d0:21:19:33:46:51:99:e3:91:61:41:c9: 0c:63:81:32:36:87:98:67:cb:0c:a1:13:c3:d3:1e: 7c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BC:7C:BE:8A:E3:A8:FE:98:C0:21:0D:67:34:6F:D5:EE:E8:43:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dcb90c79-5ca5-3cc4-a7d5-f785d0b3cd37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.254.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:9c:bd:ad:1b:02:87:d6:d5:e4:29:bc:58:24:de:58:98:d1: 18:fc:fa:c4:6e:38:6e:6b:cb:b3:4d:77:a1:11:dc:70:2f:8c: e3:fd:bf:cf:92:b8:cd:fe:b4:26:1a:55:d6:5b:11:a5:30:9d: 67:91:1e:35:d5:3f:26:db:d2:61:bf:26:e8:c8:6b:e7:93:a6: b7:e4:c0:d8:ba:f2:af:67:56:b6:57:78:b4:3e:de:0c:e9:0e: a5:a1:cd:d7:16:bb:d6:fd:0c:b0:c9:f7:11:23:af:1b:41:be: 74:25:17:c4:80:b2:01:70:05:52:7d:31:bb:fa:36:d8:94:1c: fe:14:ee:7b:1a:fd:43:93:78:65:7c:24:a9:b4:1b:85:97:af: 34:02:8a:52:fc:ce:bc:20:5d:ec:0a:ef:7a:37:a0:54:e4:c6: be:c9:11:ec:82:ea:ac:ab:29:ca:5e:48:65:3e:d4:07:f5:bf: 7d:69:c6:01:b7:fe:f6:a9:26:41:a6:1e:90:66:80:3e:79:17: 14:fd:1e:51:7e:70:d5:49:76:43:95:d2:6f:80:cf:dd:19:4d: d8:2a:e5:f0:cc:8d:ad:c7:cd:a1:b8:33:d5:e1:b2:bf:f5:81: c9:de:55:cb:28:82:36:1a:9a:3e:7c:8a:c3:5a:74:33:97:63: 4d:4a:80:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZbC25en3fYH5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZGIyYjgxODYtY2NmNS00NDc2LWJlNzQtNTU2YTQ3MGE5ZTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44JDrDgjNSzFpywuIDhJCWPqzLvk2br+6JGU PA6F1Fw0MkrsOCz8aWynFrxy2UBF6N1uzG62ZlO7nlnWDXYi/hB9RnBab0UXN74o cFfuDaf2Wfe2yH74PK/TtM1vsY57lm+5fUeA0zRUW5pXuMYbMlAkCDXbqr6+GVpY hVADyTjH1zGwPSn3rnmd8mIlh9/T/Y1qlU1D7mZ5qY5rYZYkxGEAFTYH47L4jT7a Pn/oIzVKli8JeH/rFMsjND054IxbDb7QIE5aio1nOYBZaO3UjlCeAafxTA46Tspw gJUQwrADaQDQIRkzRlGZ45FhQckMY4EyNoeYZ8sMoRPD0x58UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOK8fL6K46j+mMAhDWc0b9Xu6EOsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGNiOTBjNzktNWNhNS0z Y2M0LWE3ZDUtZjc4NWQwYjNjZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/4aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGcva0bAofW1eQpvFgk3liY0Rj8+sRuOG5ry7NNd6ER3HAvjOP9v8+S uM3+tCYaVdZbEaUwnWeRHjXVPybb0mG/JujIa+eTprfkwNi68q9nVrZXeLQ+3gzp DqWhzdcWu9b9DLDJ9xEjrxtBvnQlF8SAsgFwBVJ9Mbv6NtiUHP4U7nsa/UOTeGV8 JKm0G4WXrzQCilL8zrwgXewK73o3oFTkxr7JEeyC6qyrKcpeSGU+1Af1v31pxgG3 /vapJkGmHpBmgD55FxT9HlF+cNVJdkOV0m+Az90ZTdgq5fDMja3HzaG4M9Xhsr/1 gcneVcsogjYamj58isNadDOXY01KgN4= -----END CERTIFICATE-----Generated at Tue Oct 13 18:40:14 2026 by rpki-client