$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c09918d-953c-38fb-aeff-7363939b6d9a.roa File: 1c09918d-953c-38fb-aeff-7363939b6d9a.roa (raw, json) Hash identifier: p8vEOeZ/HgLayqq7aGoxGA3jYixwpK/7bRBxtAnFLAA= Subject key identifier: 09:35:A5:37:33:17:B6:AD:70:26:0B:15:5F:6D:99:6C:3B:FF:3C:10 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F4C3D71E42F8DA33963ADED40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c09918d-953c-38fb-aeff-7363939b6d9a.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 7029 IP address blocks: 67.141.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:71:e4:2f:8d:a3:39:63:ad:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=8c0aa7cb-a93b-4c92-acc1-2af773f6ed7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:68:ce:65:94:8b:63:8f:15:ab:3e:53:73:f4: 7e:87:e1:3b:be:02:24:1d:2a:38:c8:08:4a:fd:d8: d2:9c:51:ce:a3:30:9d:64:dd:bc:f8:fa:c3:e1:85: b5:32:01:bb:2c:1d:db:f7:af:17:32:06:f0:6f:3b: 9f:87:5f:a5:82:44:5f:27:c2:95:75:1c:cb:25:b3: 05:35:99:22:f9:d5:5c:e3:fd:df:83:89:51:31:cf: 1d:70:c1:ef:86:77:86:3c:f3:1d:d3:ed:43:01:ba: 9b:ba:a2:c3:57:5d:b5:f3:eb:4c:a4:31:5d:f7:20: 32:0a:7a:da:d8:bd:07:11:cf:c6:0f:78:ab:09:a9: 6f:b3:25:fb:fc:2b:74:04:f7:db:e2:46:6c:19:19: f6:4e:83:09:3a:ee:a4:ba:7d:61:b4:79:eb:c7:3c: 19:74:9c:32:8f:8f:01:e0:90:92:9e:e3:a3:a2:44: cc:33:c2:e9:04:97:ea:9e:36:d1:b1:35:44:d3:84: b7:f1:b0:b6:86:98:d7:fd:4c:ee:3f:f4:92:0f:b6: 57:00:4e:1e:cc:00:aa:18:51:b6:7a:44:61:cb:20: 00:31:50:e8:2c:1c:e8:30:f5:bd:73:75:11:8f:c7: 03:06:17:17:e6:64:39:90:45:2b:f0:16:2f:80:ba: 1e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:35:A5:37:33:17:B6:AD:70:26:0B:15:5F:6D:99:6C:3B:FF:3C:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c09918d-953c-38fb-aeff-7363939b6d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:04:1c:6b:8b:b3:c6:0b:a6:64:e8:45:d1:aa:09:d6:91:41: 16:45:30:fa:66:b4:3e:63:ce:cd:26:fc:c2:99:34:4d:85:e8: ca:ac:3b:a5:90:b3:e9:ee:38:1f:97:83:3e:84:06:9a:d5:c1: ae:e0:ae:30:02:11:79:c3:50:a3:9a:32:47:08:ae:70:bb:d9: 95:c3:19:c3:09:df:5d:78:1d:c9:ec:f8:45:a7:50:c6:42:5e: 5e:fa:e4:bc:ac:60:ca:c0:7d:51:b2:e2:cf:c3:0f:18:a3:0e: 00:55:57:f7:ac:2a:a9:52:7e:7a:ee:d0:23:d9:db:b1:a6:bf: 9e:b3:34:53:4a:a7:1a:e5:30:60:6c:92:fb:ef:69:a6:fa:c4: cc:58:83:6b:80:37:6d:7c:d5:29:a9:61:1c:50:12:c8:c0:01: 9b:7d:db:60:55:3f:a5:86:47:d4:f0:e5:79:c7:a1:eb:ef:d1: f2:c2:86:29:49:b8:19:ee:f2:4d:a8:6b:fd:ee:c4:2d:c0:4e: e7:19:78:e0:31:fb:ab:53:8d:9c:ae:6e:71:0a:cd:71:0c:f0: 98:1f:a8:41:94:04:4c:8c:e3:30:25:17:a9:a6:8c:b9:2a:36: e6:2e:93:25:de:fe:a2:80:aa:bc:ea:79:d6:b4:8b:c9:6f:9c: c4:0f:30:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPXHkL42jOWOt7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OGMwYWE3Y2ItYTkzYi00YzkyLWFjYzEtMmFmNzczZjZlZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWjOZZSLY48Vqz5Tc/R+h+E7vgIkHSo4yAhK /djSnFHOozCdZN28+PrD4YW1MgG7LB3b968XMgbwbzufh1+lgkRfJ8KVdRzLJbMF NZki+dVc4/3fg4lRMc8dcMHvhneGPPMd0+1DAbqbuqLDV1218+tMpDFd9yAyCnra 2L0HEc/GD3irCalvsyX7/Ct0BPfb4kZsGRn2ToMJOu6kun1htHnrxzwZdJwyj48B 4JCSnuOjokTMM8LpBJfqnjbRsTVE04S38bC2hpjX/UzuP/SSD7ZXAE4ezACqGFG2 ekRhyyAAMVDoLBzoMPW9c3URj8cDBhcX5mQ5kEUr8BYvgLoefQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk1pTczF7atcCYLFV9tmWw7/zwQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWMwOTkxOGQtOTUzYy0z OGZiLWFlZmYtNzM2MzkzOWI2ZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ40AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAEHGuLs8YLpmToRdGqCdaRQRZFMPpmtD5jzs0m/MKZNE2F6MqsO6WQ s+nuOB+Xgz6EBprVwa7grjACEXnDUKOaMkcIrnC72ZXDGcMJ3114Hcns+EWnUMZC Xl765LysYMrAfVGy4s/DDxijDgBVV/esKqlSfnru0CPZ27Gmv56zNFNKpxrlMGBs kvvvaab6xMxYg2uAN2181SmpYRxQEsjAAZt922BVP6WGR9Tw5XnHoevv0fLChilJ uBnu8k2oa/3uxC3ATucZeOAx+6tTjZyubnEKzXEM8JgfqEGUBEyM4zAlF6mmjLkq NuYukyXe/qKAqrzqeda0i8lvnMQPMPg= -----END CERTIFICATE-----Generated at Sun Sep 27 08:41:21 2026 by rpki-client