$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc21eb04-605a-3ce0-9da3-f124f6e2ae6b.roa File: fc21eb04-605a-3ce0-9da3-f124f6e2ae6b.roa (raw, json) Hash identifier: BvEDPS/ZQmAObRU58BHZVlZKu0TDIkDdvJo9/sl+GK8= Subject key identifier: 9A:1A:4C:24:72:35:93:92:31:E8:8B:8C:BD:7F:D6:61:FC:71:37:EF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA78723389617236427C2EC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc21eb04-605a-3ce0-9da3-f124f6e2ae6b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 67.140.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:23:38:96:17:23:64:27:c2:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=85bef29a-04d0-492b-8c9a-dcd5c75eddde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e6:00:c6:90:b5:d5:30:59:48:17:c4:57:4b: f1:91:62:9e:28:1a:07:ff:5d:f0:da:93:f7:f9:95: ad:3e:5d:68:3f:2d:f5:db:82:58:29:69:3b:3a:18: a5:fe:9c:49:f1:cf:98:7c:10:45:95:f9:ba:2d:1b: 9b:d5:d7:56:59:34:56:80:a1:1b:e9:39:cf:45:c3: 32:d6:5f:d1:da:d1:b4:b2:6b:d9:47:0a:bb:ab:8f: 3b:ca:23:f6:ce:9b:af:9b:a7:ae:06:e2:f4:51:83: 10:28:19:7e:f0:68:31:80:20:c0:f9:be:a3:32:51: ba:2b:02:f8:bc:67:b2:f6:13:54:58:51:25:7e:c3: f9:11:ac:9f:fe:b3:1e:d1:2c:3a:d4:51:20:40:ac: d7:1f:57:52:c0:0d:7a:9c:95:19:2e:93:30:fb:05: 74:57:70:70:c7:14:cf:31:5c:71:9b:a3:f7:38:32: 9d:d6:dd:d7:fd:3f:11:68:69:a4:05:b7:45:e8:9a: d8:b7:4e:fc:e3:b5:ea:5a:27:4f:fa:1c:b0:e6:a7: b8:ac:e0:fa:38:17:c3:19:5d:da:46:4a:36:a1:c9: cc:bd:1e:32:83:6c:89:b2:67:2d:5e:51:64:d5:8c: e9:f9:b1:fe:4f:b9:77:39:ae:fd:ae:3f:c4:61:de: d1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1A:4C:24:72:35:93:92:31:E8:8B:8C:BD:7F:D6:61:FC:71:37:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc21eb04-605a-3ce0-9da3-f124f6e2ae6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:57:0b:85:8a:bb:5d:56:a9:65:ee:4f:14:64:ff:cf:21:f4: 33:4c:05:c9:fd:62:cd:de:34:36:97:15:2c:10:ed:b3:77:71: 64:c7:3b:e4:d8:26:6f:b7:31:b3:05:e5:1c:6e:3c:11:aa:e9: 66:9c:69:e3:01:51:c0:55:1e:43:f6:bf:2f:6f:37:15:1f:6f: 74:54:e2:35:47:19:64:ef:2c:0b:ca:6c:db:07:06:ff:3c:54: 0f:e4:ab:4a:39:d0:c2:58:78:cc:ac:13:1c:19:9c:a1:9c:41: 40:b3:f9:e0:90:27:ca:45:99:44:e6:5b:ba:f4:dc:c9:2f:46: 57:13:97:e1:8a:35:03:f6:9e:97:70:b9:69:9d:bc:75:42:ef: 44:fa:46:af:5d:e0:51:8b:d5:45:0d:37:52:98:bc:e4:7d:49: 17:a7:94:b2:95:a8:0a:dc:40:55:2c:07:07:37:fc:07:d9:49: 61:e0:09:86:41:9e:f1:ec:ef:c6:02:23:a5:69:7b:e1:55:ec: bf:11:59:30:01:2e:4c:7b:2a:98:bc:2e:4f:cf:6c:71:84:3c: 02:12:33:11:e8:1c:b4:68:a2:b2:84:c7:dd:15:37:09:a6:72: 64:21:12:64:e9:d4:53:19:5d:d8:ec:f6:90:53:d6:b3:9b:eb: 9e:24:bc:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhyM4lhcjZCfC7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODViZWYyOWEtMDRkMC00OTJiLThjOWEtZGNkNWM3NWVkZGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+YAxpC11TBZSBfEV0vxkWKeKBoH/13w2pP3 +ZWtPl1oPy3124JYKWk7Ohil/pxJ8c+YfBBFlfm6LRub1ddWWTRWgKEb6TnPRcMy 1l/R2tG0smvZRwq7q487yiP2zpuvm6euBuL0UYMQKBl+8GgxgCDA+b6jMlG6KwL4 vGey9hNUWFElfsP5Eayf/rMe0Sw61FEgQKzXH1dSwA16nJUZLpMw+wV0V3BwxxTP MVxxm6P3ODKd1t3X/T8RaGmkBbdF6JrYt07847XqWidP+hyw5qe4rOD6OBfDGV3a Rko2ocnMvR4yg2yJsmctXlFk1Yzp+bH+T7l3Oa79rj/EYd7RiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoaTCRyNZOSMeiLjL1/1mH8cTfvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmMyMWViMDQtNjA1YS0z Y2UwLTlkYTMtZjEyNGY2ZTJhZTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ4waMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFXC4WKu11WqWXuTxRk/88h9DNMBcn9Ys3eNDaXFSwQ7bN3cWTHO+TY Jm+3MbMF5RxuPBGq6WacaeMBUcBVHkP2vy9vNxUfb3RU4jVHGWTvLAvKbNsHBv88 VA/kq0o50MJYeMysExwZnKGcQUCz+eCQJ8pFmUTmW7r03MkvRlcTl+GKNQP2npdw uWmdvHVC70T6Rq9d4FGL1UUNN1KYvOR9SRenlLKVqArcQFUsBwc3/AfZSWHgCYZB nvHs78YCI6Vpe+FV7L8RWTABLkx7Kpi8Lk/PbHGEPAISMxHoHLRoorKEx90VNwmm cmQhEmTp1FMZXdjs9pBT1rOb654kvLE= -----END CERTIFICATE-----Generated at Thu Aug 27 11:37:40 2026 by rpki-client