$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0430e892-ed00-375a-8409-05d4300aae9e.roa File: 0430e892-ed00-375a-8409-05d4300aae9e.roa (raw, json) Hash identifier: BQx8Apl2djbsznrhvRdhVWUQcZsszykA9s1698mWPGA= Subject key identifier: 80:D5:58:43:9E:6B:1C:50:C8:73:98:10:DF:F6:3B:C1:CA:EB:78:6A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F938B689B0564F87EC6DED480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0430e892-ed00-375a-8409-05d4300aae9e.roa Signing time: Wed 21 Oct 2026 14:00:10 +0000 ROA not before: Wed 21 Oct 2026 14:00:10 +0000 ROA not after: Tue 19 Jan 2027 15:00:10 +0000 asID: 7029 IP address blocks: 162.40.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:93:8b:68:9b:05:64:f8:7e:c6:de:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 21 14:00:10 2026 GMT Not After : Jan 19 15:00:10 2027 GMT Subject: CN=8a68da48-eae1-4693-b283-9522cab2ac71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a3:7c:4a:82:32:44:c9:d2:bb:e2:74:92:b5: cf:d6:0d:96:24:d0:e1:21:8e:d8:4f:bc:8c:bd:13: 19:3f:26:0a:e4:0a:cb:77:14:6f:84:26:5d:c8:33: fd:6f:e8:4a:fa:69:f0:f9:9b:d0:da:92:f9:0e:20: 94:a4:df:b1:40:69:5c:ee:38:ea:d1:23:c3:a7:3b: 40:ce:d8:3f:c1:09:46:55:12:91:2c:35:22:f4:04: ad:49:8f:eb:33:0b:8a:2f:3c:fc:2c:a0:93:f5:55: ea:42:94:b5:5f:41:da:5f:5a:99:01:b2:94:83:2e: 45:74:20:78:17:42:33:3a:3a:a4:5f:28:b2:78:4f: f6:bc:1e:72:51:3e:13:8a:8e:3c:8f:26:7d:87:0f: 6c:b4:42:31:60:04:07:34:e0:28:2a:bb:b0:b0:9f: 37:eb:2a:45:35:a1:d1:9a:7c:75:53:d7:57:2b:a1: cf:c9:9f:02:94:ce:98:7a:8f:79:e3:9c:0f:6f:cb: a6:e9:b7:08:2b:ab:6a:d8:dd:4e:77:27:6d:d5:48: 90:01:25:cb:bd:5d:22:2c:40:a2:d6:22:c6:3b:c9: a7:1e:29:a4:04:37:f4:e8:99:49:84:4f:b1:60:e3: f5:48:43:61:bb:0f:64:43:de:ed:3e:2d:87:22:31: 8a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D5:58:43:9E:6B:1C:50:C8:73:98:10:DF:F6:3B:C1:CA:EB:78:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0430e892-ed00-375a-8409-05d4300aae9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.40.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:cc:0f:62:ae:53:84:41:6a:ba:71:69:00:5b:d5:bd:ba:95: b2:f4:b4:cb:17:75:ee:e5:ee:ca:9d:22:9c:4e:97:0a:83:0e: 12:df:88:7b:3a:d2:fa:1a:84:2e:61:2c:30:33:0f:cb:b7:be: 25:73:d4:c6:ac:8d:e8:98:24:71:79:c3:be:cb:e3:4f:43:f5: d2:a7:71:d2:df:3e:9b:9b:01:52:75:33:6c:1f:70:b5:2a:aa: 37:f1:4d:9f:1b:19:5d:5f:9b:75:87:7d:6c:8f:8a:9a:99:fa: 0f:78:0a:cc:6b:8a:d4:47:83:53:ec:b0:29:44:8d:f1:78:68: e0:cb:28:45:cd:f1:d7:27:f1:48:2b:35:2b:e0:95:58:bd:f9: d3:9b:43:6d:94:1c:81:b0:8c:3a:c2:a1:86:23:7a:1f:10:c3: 5d:ba:4c:49:d8:bd:6f:72:c1:73:a0:d0:e9:29:67:de:ac:cf: 19:83:4c:e4:e4:88:97:56:3b:82:2f:d9:fa:80:04:6e:7a:eb: 7e:de:f1:dc:94:0d:4e:fa:ea:d7:38:1e:0e:a3:81:d9:ef:54: d7:64:42:05:06:5a:3c:c5:eb:4f:1c:91:15:ec:23:d8:8f:e4: 3b:66:19:cb:18:31:ef:c3:17:4d:c6:85:0e:3c:35:b3:e9:55: 28:4d:ad:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Ti2ibBWT4fsbe1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAyMTE0MDAxMFoXDTI3MDExOTE1MDAxMFowLzEtMCsGA1UEAxMk OGE2OGRhNDgtZWFlMS00NjkzLWIyODMtOTUyMmNhYjJhYzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6N8SoIyRMnSu+J0krXP1g2WJNDhIY7YT7yM vRMZPyYK5ArLdxRvhCZdyDP9b+hK+mnw+ZvQ2pL5DiCUpN+xQGlc7jjq0SPDpztA ztg/wQlGVRKRLDUi9AStSY/rMwuKLzz8LKCT9VXqQpS1X0HaX1qZAbKUgy5FdCB4 F0IzOjqkXyiyeE/2vB5yUT4Tio48jyZ9hw9stEIxYAQHNOAoKruwsJ836ypFNaHR mnx1U9dXK6HPyZ8ClM6Yeo9545wPb8um6bcIK6tq2N1Odydt1UiQASXLvV0iLECi 1iLGO8mnHimkBDf06JlJhE+xYOP1SENhuw9kQ97tPi2HIjGKawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDVWEOeaxxQyHOYEN/2O8HK63hqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDQzMGU4OTItZWQwMC0z NzVhLTg0MDktMDVkNDMwMGFhZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoijEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3MD2KuU4RBarpxaQBb1b26lbL0tMsXde7l7sqdIpxOlwqDDhLfiHs6 0voahC5hLDAzD8u3viVz1MasjeiYJHF5w77L409D9dKncdLfPpubAVJ1M2wfcLUq qjfxTZ8bGV1fm3WHfWyPipqZ+g94CsxritRHg1PssClEjfF4aODLKEXN8dcn8Ugr NSvglVi9+dObQ22UHIGwjDrCoYYjeh8Qw126TEnYvW9ywXOg0OkpZ96szxmDTOTk iJdWO4Iv2fqABG56637e8dyUDU766tc4Hg6jgdnvVNdkQgUGWjzF608ckRXsI9iP 5DtmGcsYMe/DF03GhQ48NbPpVShNrVg= -----END CERTIFICATE-----Generated at Sun Nov 15 22:10:42 2026 by rpki-client