$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ef01a4-f6bc-372e-94e6-7036094f5449.roa File: 08ef01a4-f6bc-372e-94e6-7036094f5449.roa (raw, json) Hash identifier: tTbAJU7FlNVYrT9OqpjxtjEOZ2LO0zKkcne7GTXQYE8= Subject key identifier: AF:DF:3E:17:28:D0:DD:D5:B9:79:E6:D1:52:EB:D9:10:D7:6B:7C:51 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D90BD1F4D9864E93D8FC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ef01a4-f6bc-372e-94e6-7036094f5449.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 72.248.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:90:bd:1f:4d:98:64:e9:3d:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=b7609eaf-dbfb-4e75-9dfc-266700127184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ab:df:02:15:94:fd:f5:b8:0a:1d:25:4d:3b: b0:6b:76:a0:20:e2:5f:b6:d4:b2:69:9a:a4:3a:ed: 4b:5b:8e:73:37:1b:e0:5d:5f:6b:86:fc:1e:f6:ec: 6c:26:5c:6f:0e:d7:f6:29:49:fe:be:e3:6a:ab:69: 89:14:32:62:05:3b:80:3b:dd:01:12:7f:8b:51:e8: 39:ed:f6:96:36:79:9e:db:cf:fb:e5:db:e9:0d:7c: 14:6e:8d:57:20:b5:fb:37:dd:cb:ce:7f:1d:55:4a: 3a:32:26:90:6a:06:a3:3e:dc:ad:d4:b3:ad:ea:92: d1:fa:e5:ba:0b:04:4e:14:f9:fe:f2:9c:b1:79:11: b2:12:f1:85:f0:90:6e:dd:34:37:89:81:13:95:83: 90:cd:b0:2b:49:b8:93:4d:07:72:4d:a3:12:d1:60: e3:00:22:b1:9a:58:b6:b5:12:f8:6e:0e:3a:ca:ad: de:e2:7a:df:21:3b:ee:83:b5:ae:4a:64:03:80:86: b7:43:80:b8:32:be:38:91:9f:59:67:e9:a2:2c:9c: c9:03:73:9b:ff:b6:ba:53:76:21:ff:1f:ea:b3:1a: 11:4a:2f:63:37:53:03:45:d7:34:13:ac:69:6c:08: fa:50:e1:21:07:e4:c5:d3:58:ba:07:46:73:08:28: 94:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DF:3E:17:28:D0:DD:D5:B9:79:E6:D1:52:EB:D9:10:D7:6B:7C:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ef01a4-f6bc-372e-94e6-7036094f5449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.248.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d0:b9:c9:ae:9f:b8:c5:fe:a6:ca:20:8b:68:a9:f8:37:77: 8a:f0:8b:aa:f5:af:b0:5f:65:c3:81:f7:24:db:7f:a9:ac:fc: 66:c2:ca:bd:12:d3:70:40:d0:53:2c:1e:94:f6:2e:a5:13:95: 33:a9:eb:e8:ed:5c:74:8c:91:28:7b:28:54:82:f2:03:85:63: 66:3b:be:e4:f9:03:58:be:68:7f:c5:87:6d:b7:75:49:24:34: af:6a:64:7c:4c:6a:51:0e:a7:0a:97:00:7b:b6:f9:d8:57:e0: bd:8b:04:9d:c7:d8:e8:f3:0f:58:77:19:5b:92:2d:fe:00:b8: ec:88:9b:f3:7a:9a:64:ff:df:16:b3:01:71:91:91:78:9d:bc: 5a:19:6a:6f:39:fc:0d:19:22:56:7f:8d:89:a0:9c:3b:6d:5b: bd:34:51:6c:2a:16:c7:2e:ae:6d:21:e3:ca:a7:1c:55:dd:0f: a8:86:13:cd:5c:05:b8:98:a8:0c:e8:d3:6a:d1:4c:ea:c9:61: 34:51:bf:c3:5b:06:54:79:ee:d0:6a:57:a1:b8:d3:61:06:e5: a0:02:91:67:23:5a:6b:bb:7e:b2:f8:ae:1e:79:37:44:33:20: 08:7a:7e:e7:d2:86:ae:be:f0:49:e8:c7:8f:fb:32:04:ea:2a: 0b:60:78:8b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9UnZC9H02YZOk9j8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk Yjc2MDllYWYtZGJmYi00ZTc1LTlkZmMtMjY2NzAwMTI3MTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnavfAhWU/fW4Ch0lTTuwa3agIOJfttSyaZqk Ou1LW45zNxvgXV9rhvwe9uxsJlxvDtf2KUn+vuNqq2mJFDJiBTuAO90BEn+LUeg5 7faWNnme28/75dvpDXwUbo1XILX7N93Lzn8dVUo6MiaQagajPtyt1LOt6pLR+uW6 CwROFPn+8pyxeRGyEvGF8JBu3TQ3iYETlYOQzbArSbiTTQdyTaMS0WDjACKxmli2 tRL4bg46yq3e4nrfITvug7WuSmQDgIa3Q4C4Mr44kZ9ZZ+miLJzJA3Ob/7a6U3Yh /x/qsxoRSi9jN1MDRdc0E6xpbAj6UOEhB+TF01i6B0ZzCCiU8wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFK/fPhco0N3VuXnm0VLr2RDXa3xRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDhlZjAxYTQtZjZiYy0z NzJlLTk0ZTYtNzAzNjA5NGY1NDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASPgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAQdC5ya6fuMX+psogi2ip+Dd3ivCLqvWvsF9lw4H3JNt/qaz8ZsLKvRLT cEDQUywelPYupROVM6nr6O1cdIyRKHsoVILyA4VjZju+5PkDWL5of8WHbbd1SSQ0 r2pkfExqUQ6nCpcAe7b52FfgvYsEncfY6PMPWHcZW5It/gC47Iib83qaZP/fFrMB cZGReJ28Whlqbzn8DRkiVn+NiaCcO21bvTRRbCoWxy6ubSHjyqccVd0PqIYTzVwF uJioDOjTatFM6slhNFG/w1sGVHnu0GpXobjTYQbloAKRZyNaa7t+sviuHnk3RDMg CHp+59KGrr7wSejHj/syBOoqC2B4iw== -----END CERTIFICATE-----Generated at Mon Oct 12 14:08:57 2026 by rpki-client