$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecfb9210-26d0-385b-979e-e9e75e5f5103.roa File: ecfb9210-26d0-385b-979e-e9e75e5f5103.roa (raw, json) Hash identifier: P2NpazfnYT5KjDWduLO1QH0XMIbNLHTkP+8uqbitZL0= Subject key identifier: DF:6D:1A:70:16:8A:CB:97:76:DD:87:38:39:63:BB:51:43:A4:F0:60 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F6292F94393A3095CCA511FC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecfb9210-26d0-385b-979e-e9e75e5f5103.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 67.214.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f9:43:93:a3:09:5c:ca:51:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=e00b83ee-7f07-4693-8fad-f30575682d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e4:48:6e:76:3f:b8:4b:4a:23:54:31:49:b5: dc:8a:0c:ec:f0:c0:14:c3:db:96:eb:1d:d2:51:8f: f0:b2:3e:20:13:34:f2:0a:11:18:b2:ee:9d:50:13: aa:ae:e0:e1:95:7a:6b:98:4c:b0:e8:db:d4:58:b6: 6e:4a:b6:66:e7:57:b0:08:5b:16:eb:bf:21:46:2b: 8d:40:20:17:07:14:bc:a4:34:f0:95:a8:eb:ad:68: b7:fb:cc:9f:bc:be:d2:82:58:e6:5d:b2:43:a6:91: 8e:79:8f:7b:8e:93:8d:a1:61:94:3b:42:49:43:64: a1:ab:d7:d6:95:a2:3c:34:4c:24:4f:69:79:6a:cf: 8a:d0:69:18:13:ed:48:ac:d4:34:a8:05:fa:fa:bb: bf:42:e2:c4:8a:a6:22:02:ba:37:a0:29:f9:dc:ae: f1:82:ee:9e:6b:a0:8d:39:01:4d:66:14:5f:8d:88: 32:27:07:c8:bd:60:f0:12:b2:db:2c:53:8d:1a:d7: 3e:c7:68:03:54:e4:6b:ca:b7:fc:d6:a9:3d:c5:80: 20:89:c1:f1:c2:f3:dd:9c:80:a8:de:62:f1:69:52: 31:66:87:3e:dd:2b:23:43:8b:b4:a5:2f:a5:5c:f5: 82:7a:6d:aa:98:48:25:64:08:ab:c3:93:99:e9:1d: db:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6D:1A:70:16:8A:CB:97:76:DD:87:38:39:63:BB:51:43:A4:F0:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecfb9210-26d0-385b-979e-e9e75e5f5103.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.214.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:6f:b2:79:51:5f:5d:d7:70:44:0b:f3:2d:79:6a:0f:5c:07: 2d:e2:99:bd:02:4b:90:a8:66:45:e3:c6:fc:19:01:8d:36:66: c5:26:99:a2:2e:d4:71:9d:b0:19:23:9a:a5:bf:94:de:15:bc: f3:f2:98:c9:54:eb:cf:63:3a:8a:9d:db:a8:41:4b:34:a4:ec: f0:3b:73:1d:6e:73:90:9b:2e:be:57:f4:e0:c4:fe:aa:66:66: 37:4a:a7:d4:17:98:96:91:ce:2c:32:60:43:1c:d0:c0:67:42: c1:26:5b:13:ce:fb:c8:44:42:60:3b:dc:7f:87:4c:fa:21:7b: 09:6a:4a:59:6e:d2:68:7c:7d:96:fb:38:e4:b3:fc:8e:63:37: 07:7c:10:7b:96:85:03:e9:d6:2d:df:ab:06:99:d6:a7:01:cd: d0:b1:bc:13:9b:54:3e:53:77:25:16:f9:e5:d2:fc:72:70:82: 42:f2:86:9f:39:68:93:91:c7:50:ff:a2:fe:e2:da:b3:29:cf: 34:37:33:51:69:cd:aa:f9:41:4e:45:0b:dc:a3:69:06:e7:d4: 41:2a:71:3c:ea:35:4f:2b:b8:7b:20:9d:ea:ee:ec:ea:c0:04: a3:99:b7:69:ef:fa:d3:b6:14:fd:d3:e2:7e:b0:4f:6c:5f:05: 55:80:b6:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikvlDk6MJXMpRH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZTAwYjgzZWUtN2YwNy00NjkzLThmYWQtZjMwNTc1NjgyZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeRIbnY/uEtKI1QxSbXcigzs8MAUw9uW6x3S UY/wsj4gEzTyChEYsu6dUBOqruDhlXprmEyw6NvUWLZuSrZm51ewCFsW678hRiuN QCAXBxS8pDTwlajrrWi3+8yfvL7SgljmXbJDppGOeY97jpONoWGUO0JJQ2Shq9fW laI8NEwkT2l5as+K0GkYE+1IrNQ0qAX6+ru/QuLEiqYiAro3oCn53K7xgu6ea6CN OQFNZhRfjYgyJwfIvWDwErLbLFONGtc+x2gDVORryrf81qk9xYAgicHxwvPdnICo 3mLxaVIxZoc+3SsjQ4u0pS+lXPWCem2qmEglZAirw5OZ6R3bwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9tGnAWisuXdt2HODlju1FDpPBgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWNmYjkyMTAtMjZkMC0z ODViLTk3OWUtZTllNzVlNWY1MTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9YAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZvsnlRX13XcEQL8y15ag9cBy3imb0CS5CoZkXjxvwZAY02ZsUmmaIu 1HGdsBkjmqW/lN4VvPPymMlU689jOoqd26hBSzSk7PA7cx1uc5CbLr5X9ODE/qpm ZjdKp9QXmJaRziwyYEMc0MBnQsEmWxPO+8hEQmA73H+HTPohewlqSllu0mh8fZb7 OOSz/I5jNwd8EHuWhQPp1i3fqwaZ1qcBzdCxvBObVD5TdyUW+eXS/HJwgkLyhp85 aJORx1D/ov7i2rMpzzQ3M1Fpzar5QU5FC9yjaQbn1EEqcTzqNU8ruHsgneru7OrA BKOZt2nv+tO2FP3T4n6wT2xfBVWAtvo= -----END CERTIFICATE-----Generated at Tue Oct 13 09:12:59 2026 by rpki-client