$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f04df3d1-94fd-3e86-ab03-8b0df74d0fab.roa File: f04df3d1-94fd-3e86-ab03-8b0df74d0fab.roa (raw, json) Hash identifier: ps5ejrc4QbdImcdvO7w9OK7RA2KKGZdm+3Nhme98xe8= Subject key identifier: A6:F5:D3:C3:9B:8E:4B:55:C9:CD:21:A0:A7:B1:C5:A9:0C:AD:34:E3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D79B05AF7DC1869EAD040 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f04df3d1-94fd-3e86-ab03-8b0df74d0fab.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 216.153.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:79:b0:5a:f7:dc:18:69:ea:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=ad312201-dd1d-41d1-866a-e378a1f3c4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4c:b3:5c:6c:ab:f6:70:40:a1:92:c6:1c:b2: c6:09:be:74:31:83:d6:10:d1:ae:6f:67:d6:c8:59: 23:c5:b9:dd:fc:26:a2:a4:b3:5e:93:00:df:1e:11: 55:39:a2:c8:79:32:61:c6:d6:36:bd:fb:f0:5d:e7: e8:dc:2d:b4:f9:7f:c5:be:fe:cc:dd:1d:73:c8:76: 2e:39:54:47:da:ae:8b:b7:8f:d8:bf:ac:0c:34:a6: ed:45:c4:bc:ac:8b:26:fa:c9:53:1f:74:0b:85:e6: 0a:ee:e6:51:07:8e:de:c4:9b:7c:9b:01:29:da:f6: 26:a5:98:b8:1a:20:d0:e8:47:8c:49:78:2f:42:5f: c8:bf:ac:f3:d1:07:3e:77:4c:e6:59:1d:ed:a5:51: ce:1d:c8:f5:66:88:bd:33:a3:bc:74:31:e8:f7:b0: 43:0f:f3:eb:e4:d4:22:c1:fe:20:df:3b:de:bc:5d: fd:7e:02:58:b1:00:e3:99:b0:0e:39:9a:f9:d1:2f: e8:3c:0a:00:4a:58:e1:03:36:69:72:96:a2:18:68: ae:62:18:58:e3:ee:6a:8d:a1:63:3b:54:0c:18:10: f9:35:1f:71:0d:11:40:7d:32:11:5f:39:67:0e:21: 56:d9:be:7c:05:a3:0f:70:f5:62:6a:8c:3b:2a:d4: e0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F5:D3:C3:9B:8E:4B:55:C9:CD:21:A0:A7:B1:C5:A9:0C:AD:34:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f04df3d1-94fd-3e86-ab03-8b0df74d0fab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.153.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e8:92:94:cd:7b:56:0e:bd:e2:20:cf:f1:d0:b7:be:08:93: da:e0:fb:c1:da:b5:00:d5:9b:d2:d6:63:98:44:22:02:80:e2: c8:45:6f:a4:ee:af:24:ca:c8:0f:5c:9d:e2:30:be:94:32:e5: 8a:60:ce:ea:7f:f4:ae:ff:78:43:7e:60:57:bb:b8:e1:4f:d0: b0:3d:42:58:b8:e4:ca:9b:f1:a8:2e:f9:f8:26:7d:49:0e:ef: c4:6b:56:93:0d:77:7a:3c:83:54:85:62:31:bd:51:d3:08:dc: 57:47:24:23:c0:39:70:7b:7f:64:26:d0:7c:43:0f:07:53:50: 10:dc:cd:10:c3:b7:d1:61:7e:d1:f7:d7:ee:f2:d4:c0:4d:11: 07:9a:ce:e1:fd:70:65:ef:23:46:c3:df:a8:48:30:6c:57:60: 1f:54:87:55:48:60:dc:b6:11:14:d0:22:18:4f:04:f8:8f:2f: c0:17:d0:3a:28:46:88:66:bb:a0:71:b2:88:77:77:c2:a9:35: 38:ff:ca:94:ba:a9:4c:61:02:09:1f:28:88:70:d4:1b:11:4f: 6e:3a:33:71:67:c4:b5:2f:01:28:49:52:5f:f5:56:6f:5f:71: c5:05:f0:c0:4f:05:e9:48:ca:e0:4c:24:82:1e:66:98:96:1d: 5c:e9:4f:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXmwWvfcGGnq0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YWQzMTIyMDEtZGQxZC00MWQxLTg2NmEtZTM3OGExZjNjNGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEyzXGyr9nBAoZLGHLLGCb50MYPWENGub2fW yFkjxbnd/CaipLNekwDfHhFVOaLIeTJhxtY2vfvwXefo3C20+X/Fvv7M3R1zyHYu OVRH2q6Lt4/Yv6wMNKbtRcS8rIsm+slTH3QLheYK7uZRB47exJt8mwEp2vYmpZi4 GiDQ6EeMSXgvQl/Iv6zz0Qc+d0zmWR3tpVHOHcj1Zoi9M6O8dDHo97BDD/Pr5NQi wf4g3zvevF39fgJYsQDjmbAOOZr50S/oPAoASljhAzZpcpaiGGiuYhhY4+5qjaFj O1QMGBD5NR9xDRFAfTIRXzlnDiFW2b58BaMPcPViaow7KtTguQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKb108ObjktVyc0hoKexxakMrTTjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjA0ZGYzZDEtOTRmZC0z ZTg2LWFiMDMtOGIwZGY3NGQwZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2JmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzokpTNe1YOveIgz/HQt74Ik9rg+8HatQDVm9LWY5hEIgKA4shFb6Tu ryTKyA9cneIwvpQy5Ypgzup/9K7/eEN+YFe7uOFP0LA9Qli45Mqb8agu+fgmfUkO 78RrVpMNd3o8g1SFYjG9UdMI3FdHJCPAOXB7f2Qm0HxDDwdTUBDczRDDt9FhftH3 1+7y1MBNEQeazuH9cGXvI0bD36hIMGxXYB9Uh1VIYNy2ERTQIhhPBPiPL8AX0Doo Rohmu6Bxsoh3d8KpNTj/ypS6qUxhAgkfKIhw1BsRT246M3FnxLUvAShJUl/1Vm9f ccUF8MBPBelIyuBMJIIeZpiWHVzpT5Y= -----END CERTIFICATE-----Generated at Tue Oct 13 16:00:57 2026 by rpki-client