$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0bb8f54c-a9db-3f18-b509-943041573b1a.roa File: 0bb8f54c-a9db-3f18-b509-943041573b1a.roa (raw, json) Hash identifier: iYhC0Bl1HrynviDaWMx+hRy642hdRM9KKMo+8dJCDRU= Subject key identifier: 27:DA:88:77:24:BE:20:45:06:61:23:AB:53:92:6F:F7:62:77:D0:3D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B49A393EC633F7FA7480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0bb8f54c-a9db-3f18-b509-943041573b1a.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 69.40.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b4:9a:39:3e:c6:33:f7:fa:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=81210d20-8926-4d53-b27c-76d379f40c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:07:23:01:3c:b7:d4:6c:2e:d4:2b:ae:4f:fa: fb:07:2b:82:1c:c1:95:c1:56:00:2d:7a:33:42:c8: 6e:bd:67:be:01:4c:81:de:1e:50:1b:a6:11:08:c9: b8:7a:e9:d4:b7:9a:b5:4b:21:52:f2:37:f2:55:46: 83:40:b2:ce:80:2a:88:82:21:af:58:b5:38:fe:83: 21:a3:32:25:bc:2d:07:f5:67:26:6d:24:c0:97:f2: 68:5f:01:5f:4a:e4:09:16:5c:f9:6f:ba:d1:cd:8c: 9e:65:7e:f3:39:d5:eb:47:52:56:da:d0:cc:0b:47: 4b:bc:fa:cf:43:10:80:52:bb:83:dc:f7:66:a0:e4: 93:a4:54:a0:e5:8e:f1:3c:73:e9:0a:e6:c2:f8:14: c4:f1:6b:bc:e3:3d:d5:19:5f:2f:58:67:02:83:2d: 67:aa:72:66:b0:d4:9a:43:17:ab:00:0f:87:e1:0a: d1:a7:46:d7:ea:67:4e:77:93:59:b4:51:83:50:77: 4a:82:ba:6d:89:89:eb:a4:30:b1:8b:c0:a6:ec:28: c3:bd:35:32:9d:6f:f8:04:0c:f7:29:12:ed:11:4a: ec:3b:6f:69:51:c9:a7:9b:75:6e:66:49:e5:5e:5d: 39:25:06:24:e1:a3:b2:b5:07:f1:60:71:77:f5:b3: 72:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DA:88:77:24:BE:20:45:06:61:23:AB:53:92:6F:F7:62:77:D0:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0bb8f54c-a9db-3f18-b509-943041573b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:6c:bf:26:3f:3b:f6:ef:b6:eb:89:35:82:b1:47:3c:c3:74: 6c:7b:ea:de:94:47:2a:8b:b6:cd:ee:99:91:3d:79:a6:71:57: 3d:72:83:1a:1a:7c:b9:20:ea:54:02:aa:32:1b:c6:8e:c6:f8: 55:af:27:f9:c3:9a:75:69:ee:7b:bc:85:12:92:04:5d:ed:f2: 5b:b2:41:29:3d:c5:fc:ba:97:be:b9:01:ad:bc:fb:dd:c5:e7: 8a:83:54:e5:1d:a3:88:2b:c2:d5:db:ea:e5:6d:75:4f:a0:5f: f8:b7:02:1e:8f:da:a0:8b:10:b1:77:c3:7f:ee:81:0b:20:12: ea:fd:d5:ea:e2:6c:de:91:81:fb:55:c3:c6:0c:a3:a2:3d:e8: 48:da:07:67:f1:8a:ae:11:e7:a1:fb:28:bb:8d:dd:01:d2:4d: 9a:37:53:6f:d8:16:6b:01:4e:6a:c2:41:03:65:00:29:49:5e: 5c:7f:86:7e:fb:19:45:b8:22:29:18:45:80:ca:32:9b:40:ab: 76:7b:6e:50:9b:e7:43:12:c6:69:3c:9d:b5:7d:b2:83:d2:9b: 77:dd:32:24:66:a6:07:05:5c:35:4d:ea:8d:f5:81:1e:94:63: 01:da:e0:07:a4:25:45:bb:85:7e:45:07:51:fa:52:9b:00:ed: aa:23:17:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rSaOT7GM/f6dIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk ODEyMTBkMjAtODkyNi00ZDUzLWIyN2MtNzZkMzc5ZjQwYzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQcjATy31Gwu1CuuT/r7ByuCHMGVwVYALXoz QshuvWe+AUyB3h5QG6YRCMm4eunUt5q1SyFS8jfyVUaDQLLOgCqIgiGvWLU4/oMh ozIlvC0H9WcmbSTAl/JoXwFfSuQJFlz5b7rRzYyeZX7zOdXrR1JW2tDMC0dLvPrP QxCAUruD3PdmoOSTpFSg5Y7xPHPpCubC+BTE8Wu84z3VGV8vWGcCgy1nqnJmsNSa QxerAA+H4QrRp0bX6mdOd5NZtFGDUHdKgrptiYnrpDCxi8Cm7CjDvTUynW/4BAz3 KRLtEUrsO29pUcmnm3VuZknlXl05JQYk4aOytQfxYHF39bNyZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfaiHckviBFBmEjq1OSb/did9A9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGJiOGY1NGMtYTlkYi0z ZjE4LWI1MDktOTQzMDQxNTczYjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERSiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpsvyY/O/bvtuuJNYKxRzzDdGx76t6URyqLts3umZE9eaZxVz1ygxoa fLkg6lQCqjIbxo7G+FWvJ/nDmnVp7nu8hRKSBF3t8luyQSk9xfy6l765Aa28+93F 54qDVOUdo4grwtXb6uVtdU+gX/i3Ah6P2qCLELF3w3/ugQsgEur91eribN6RgftV w8YMo6I96EjaB2fxiq4R56H7KLuN3QHSTZo3U2/YFmsBTmrCQQNlAClJXlx/hn77 GUW4IikYRYDKMptAq3Z7blCb50MSxmk8nbV9soPSm3fdMiRmpgcFXDVN6o31gR6U YwHa4AekJUW7hX5FB1H6UpsA7aojF+c= -----END CERTIFICATE-----Generated at Thu Oct 1 13:47:14 2026 by rpki-client