$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fadf732c-1c74-3619-a8d9-0787e2f898e1.roa File: fadf732c-1c74-3619-a8d9-0787e2f898e1.roa (raw, json) Hash identifier: BxODkpj8zNC0CKl4hqYa/0eIc7EjzrE2X3rlBDMf+ds= Subject key identifier: 67:7D:5A:EC:A7:11:08:25:41:AF:97:53:3A:DA:F6:37:23:A0:75:9B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D8F1EF9E5A994B2232500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fadf732c-1c74-3619-a8d9-0787e2f898e1.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 66.49.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:8f:1e:f9:e5:a9:94:b2:23:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=c4d1ed91-b51c-412f-9391-196d4be7d7da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a1:2a:26:45:17:48:21:8d:54:b7:11:32:26: 5a:50:e8:28:08:b1:29:a0:16:c6:c0:8b:2d:fa:31: 57:63:df:42:9a:9e:19:b4:a8:62:8c:9e:f1:c7:4d: 3b:2c:02:b2:d9:b9:fe:94:6c:fe:3d:a3:cc:39:9f: dc:74:4b:15:27:87:4d:47:6b:50:60:94:b3:29:8e: 86:3f:34:48:ce:9b:0d:d5:32:8d:3c:68:64:ca:76: 36:04:85:80:fc:1f:47:b2:89:63:80:ad:cb:7b:78: ed:19:3a:71:7f:bc:75:db:48:9d:68:a0:0d:e5:8f: 61:f7:85:0b:c0:2b:d4:b3:9e:7a:51:fb:33:fd:e5: 5b:31:bd:6f:ea:50:ab:02:b6:7b:5d:53:4b:d4:17: 7d:5a:93:e9:d4:06:0c:35:03:e6:be:c7:53:7b:ea: ee:28:f1:b3:74:a2:63:70:0a:cb:23:1c:68:12:82: 43:6c:42:80:89:88:7c:ec:2e:45:47:6d:be:59:99: 17:33:2d:fa:fe:ff:0b:52:54:76:b2:96:9b:aa:f1: 4c:fa:73:52:91:14:1d:af:e2:a9:98:9f:b8:65:47: 27:b1:b3:f6:d4:55:a2:3a:64:0a:93:3c:8f:39:33: e1:62:d6:e1:36:24:15:b2:a3:16:77:72:92:db:2c: 86:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7D:5A:EC:A7:11:08:25:41:AF:97:53:3A:DA:F6:37:23:A0:75:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fadf732c-1c74-3619-a8d9-0787e2f898e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.49.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:06:11:4f:6b:96:34:ca:ea:db:54:1b:36:7c:25:85:dc:36: 88:1d:e6:2f:b7:52:be:ab:35:bd:12:df:4f:e4:f5:24:51:11: 64:1b:85:95:16:72:c3:a9:29:61:ee:56:47:b3:5d:d6:ed:dc: 89:f3:63:25:6c:c8:2a:68:d1:b0:e0:79:2e:15:d1:00:f9:c3: db:0a:08:7e:3c:79:d2:10:54:39:57:db:f9:2f:47:08:eb:ca: e3:26:6e:b1:6f:b0:74:c2:67:15:b6:25:2f:b4:7b:c8:82:65: d8:cb:9a:40:a0:47:4e:34:4c:c1:c7:9e:a3:67:d2:3a:3a:c1: f6:e5:ce:76:4d:93:2a:e3:44:20:2e:8b:f8:9c:f1:71:22:fe: 9e:c6:10:19:3a:9b:e4:95:84:f9:ad:dd:c0:0c:e9:58:4c:ad: 78:70:5e:4d:8d:0e:14:fa:c5:37:a3:7c:41:c3:58:ac:68:93: 8b:78:05:cb:3c:7d:d0:27:93:9b:af:f7:46:a8:c5:d3:39:ee: 5b:00:0a:36:c3:c1:e3:95:fe:a2:a1:34:90:dd:a4:71:96:c6: 4d:67:96:ae:81:c4:a3:f2:66:fd:7a:f3:a6:28:2b:9b:80:0c: fd:41:ff:83:36:25:f2:61:db:6a:e0:73:c1:2f:8b:a0:4f:07: 7c:a5:5d:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnY8e+eWplLIjJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YzRkMWVkOTEtYjUxYy00MTJmLTkzOTEtMTk2ZDRiZTdkN2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqEqJkUXSCGNVLcRMiZaUOgoCLEpoBbGwIst +jFXY99Cmp4ZtKhijJ7xx007LAKy2bn+lGz+PaPMOZ/cdEsVJ4dNR2tQYJSzKY6G PzRIzpsN1TKNPGhkynY2BIWA/B9HsoljgK3Le3jtGTpxf7x120idaKAN5Y9h94UL wCvUs556Ufsz/eVbMb1v6lCrArZ7XVNL1Bd9WpPp1AYMNQPmvsdTe+ruKPGzdKJj cArLIxxoEoJDbEKAiYh87C5FR22+WZkXMy36/v8LUlR2spabqvFM+nNSkRQdr+Kp mJ+4ZUcnsbP21FWiOmQKkzyPOTPhYtbhNiQVsqMWd3KS2yyGNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGd9WuynEQglQa+XUzra9jcjoHWbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmFkZjczMmMtMWM3NC0z NjE5LWE4ZDktMDc4N2UyZjg5OGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQjEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQGEU9rljTK6ttUGzZ8JYXcNogd5i+3Ur6rNb0S30/k9SRREWQbhZUW csOpKWHuVkezXdbt3InzYyVsyCpo0bDgeS4V0QD5w9sKCH48edIQVDlX2/kvRwjr yuMmbrFvsHTCZxW2JS+0e8iCZdjLmkCgR040TMHHnqNn0jo6wfblznZNkyrjRCAu i/ic8XEi/p7GEBk6m+SVhPmt3cAM6VhMrXhwXk2NDhT6xTejfEHDWKxok4t4Bcs8 fdAnk5uv90aoxdM57lsACjbDweOV/qKhNJDdpHGWxk1nlq6BxKPyZv1686YoK5uA DP1B/4M2JfJh22rgc8Evi6BPB3ylXbo= -----END CERTIFICATE-----Generated at Tue Oct 13 16:03:20 2026 by rpki-client