$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e9fe2190-1bbc-3158-ac33-3a29ba432e2e.roa File: e9fe2190-1bbc-3158-ac33-3a29ba432e2e.roa (raw, json) Hash identifier: WGCs4pNHwrCgK7UxNokNnCM8uvNc/8xOC5+1IslAaeg= Subject key identifier: 04:09:0F:64:5F:EB:6C:49:AA:88:63:D8:AD:F1:2C:01:0C:E6:0F:DB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D8E3D71CF5CE9B99AD8C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e9fe2190-1bbc-3158-ac33-3a29ba432e2e.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 64.89.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:8e:3d:71:cf:5c:e9:b9:9a:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=5087b227-05f9-461f-8801-ebeca7d44552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:43:de:02:3c:4c:a3:61:16:b2:e0:04:63:87: 31:ac:a5:26:61:5f:2e:42:98:7b:13:47:82:e9:1d: e1:93:00:c7:d2:34:ed:8b:5c:e4:0a:94:6b:b2:d5: d5:ef:e0:ca:90:0f:b8:70:85:b5:a5:86:17:92:63: 93:fc:af:cb:37:f4:c7:39:16:64:fe:23:07:a1:4a: ec:97:6e:de:cb:40:02:3c:7d:ba:09:f4:ab:90:d4: 9a:64:7c:c2:d3:f0:48:09:93:43:58:bf:e4:7f:b0: eb:f0:aa:a3:71:f9:68:9a:3f:92:33:ad:b8:15:9e: 60:c9:4a:69:db:c9:79:32:92:cb:12:fd:55:82:da: b5:a9:d7:8d:36:3b:be:5c:bf:71:55:46:31:1c:2f: bf:18:16:0c:4a:ff:ca:2f:3d:3b:bf:7f:c3:0d:9f: dc:d5:d6:fd:26:bb:40:ef:da:9f:48:bd:eb:bf:76: 72:23:0b:31:7e:39:7a:eb:93:dc:51:e3:7b:fc:00: f9:10:7a:70:aa:97:c7:6f:fe:51:b4:be:a3:6e:5d: 5b:c9:34:46:1f:87:6d:02:9f:b6:36:3c:10:ad:da: 12:15:4d:57:0b:c8:39:18:91:01:fb:b0:cc:61:75: a4:24:58:de:95:9e:2c:06:47:f5:f5:eb:1b:3c:fd: 25:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:09:0F:64:5F:EB:6C:49:AA:88:63:D8:AD:F1:2C:01:0C:E6:0F:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e9fe2190-1bbc-3158-ac33-3a29ba432e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.89.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a2:3e:18:7f:29:29:af:b4:2f:cb:2a:a4:71:c5:7e:a8:6b: e8:04:53:d7:d1:8f:54:67:8a:c4:18:09:b9:1b:bc:bb:1f:92: d0:f9:58:1b:20:0d:f2:32:63:33:7a:46:a7:65:b3:e0:bb:8a: 52:05:63:85:11:4c:7d:93:ce:3c:e9:cd:ef:0c:5a:44:2c:1a: 07:f1:6e:1a:3c:83:5b:34:cc:b1:99:17:78:6a:70:04:09:cc: 23:89:4f:cd:06:29:1f:d5:73:a5:55:01:eb:e9:30:b1:cb:70: 40:f7:d9:2e:ab:d2:71:56:21:53:bd:7b:34:e4:91:a6:78:1d: 0b:f2:c7:85:4d:48:24:75:7c:fc:5e:4a:f7:d7:56:74:e3:76: 80:b1:c6:10:94:ab:3d:33:f1:e9:fe:b2:ec:f1:2e:25:88:fe: 71:70:aa:99:8d:9b:cb:a8:b8:62:0c:11:aa:1c:55:21:0a:63: 45:95:3b:01:d2:ee:72:0c:16:03:14:09:79:f1:92:9f:c9:d3: cf:e5:3d:18:ea:8f:f4:03:2a:ae:d8:8d:16:4d:1c:69:75:76: d4:d1:4c:89:66:f8:f4:6e:5d:6b:45:b5:10:b3:b5:49:54:e9: e5:91:20:e3:e0:ad:62:45:fc:a4:ae:e1:1d:4a:64:89:fc:5d: 16:aa:a8:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnY49cc9c6bma2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NTA4N2IyMjctMDVmOS00NjFmLTg4MDEtZWJlY2E3ZDQ0NTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0PeAjxMo2EWsuAEY4cxrKUmYV8uQph7E0eC 6R3hkwDH0jTti1zkCpRrstXV7+DKkA+4cIW1pYYXkmOT/K/LN/THORZk/iMHoUrs l27ey0ACPH26CfSrkNSaZHzC0/BICZNDWL/kf7Dr8Kqjcflomj+SM624FZ5gyUpp 28l5MpLLEv1Vgtq1qdeNNju+XL9xVUYxHC+/GBYMSv/KLz07v3/DDZ/c1db9JrtA 79qfSL3rv3ZyIwsxfjl665PcUeN7/AD5EHpwqpfHb/5RtL6jbl1byTRGH4dtAp+2 NjwQrdoSFU1XC8g5GJEB+7DMYXWkJFjelZ4sBkf19esbPP0llQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQJD2Rf62xJqohj2K3xLAEM5g/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTlmZTIxOTAtMWJiYy0z MTU4LWFjMzMtM2EyOWJhNDMyZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQFlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+iPhh/KSmvtC/LKqRxxX6oa+gEU9fRj1RnisQYCbkbvLsfktD5WBsg DfIyYzN6Rqdls+C7ilIFY4URTH2Tzjzpze8MWkQsGgfxbho8g1s0zLGZF3hqcAQJ zCOJT80GKR/Vc6VVAevpMLHLcED32S6r0nFWIVO9ezTkkaZ4HQvyx4VNSCR1fPxe SvfXVnTjdoCxxhCUqz0z8en+suzxLiWI/nFwqpmNm8uouGIMEaocVSEKY0WVOwHS 7nIMFgMUCXnxkp/J08/lPRjqj/QDKq7YjRZNHGl1dtTRTIlm+PRuXWtFtRCztUlU 6eWRIOPgrWJF/KSu4R1KZIn8XRaqqF8= -----END CERTIFICATE-----Generated at Tue Oct 13 08:19:46 2026 by rpki-client