$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fa4d735-21ff-3fab-860f-e2f02e2af107.roa File: 1fa4d735-21ff-3fab-860f-e2f02e2af107.roa (raw, json) Hash identifier: awL3H3pGE/yqHc/TM7V1YN5+lXSuZzJ8IJysPnFB8r0= Subject key identifier: 94:B7:99:FC:3A:72:BD:08:C8:5E:29:3F:A6:9F:43:67:50:17:B5:68 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584FA42DE78181F872E297319E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fa4d735-21ff-3fab-860f-e2f02e2af107.roa Signing time: Tue 27 Oct 2026 13:00:13 +0000 ROA not before: Tue 27 Oct 2026 13:00:13 +0000 ROA not after: Mon 25 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 69.66.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a4:2d:e7:81:81:f8:72:e2:97:31:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 27 13:00:13 2026 GMT Not After : Jan 25 14:00:13 2027 GMT Subject: CN=48fd8a6c-ae87-4f5b-a371-8aa4d847d38d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:47:0a:85:fb:ce:7a:d0:ea:d5:72:4d:65: 12:91:b9:50:81:8c:5c:b0:4d:df:a1:dc:0c:c8:b5: 65:86:c5:06:76:4b:d4:d2:2e:ba:94:22:c4:96:54: 6c:d9:b8:8d:46:23:4d:be:2f:f2:81:ae:87:57:d8: 91:d1:7f:6e:6e:29:6c:48:d4:49:52:67:57:0e:b3: 6e:30:de:28:01:c8:cd:d5:71:68:01:98:19:3e:c9: 93:1b:6b:61:02:81:c9:b1:85:5b:6a:c4:f2:47:2d: 88:3f:bd:1f:92:c8:74:f2:d2:43:4d:09:e5:e0:a6: f7:0e:be:8b:91:80:be:ca:a8:fb:50:67:64:c0:47: 41:6d:83:02:6d:1a:29:1b:7f:49:50:c8:03:44:4a: c0:95:51:94:64:60:87:fd:cb:dc:11:51:98:bd:4a: 81:bb:39:f8:7d:33:50:aa:18:d2:72:a7:6d:87:cc: 6c:d4:37:a4:ba:b7:16:b1:46:0d:f5:f5:a4:5e:cd: d6:42:eb:03:b0:e5:52:91:86:a9:80:25:5f:40:90: 12:74:31:e2:c5:09:53:f2:c3:d8:54:60:90:22:dc: 0b:50:3f:c8:45:b0:a1:ff:4a:01:f9:e9:c6:36:88: cb:32:3a:90:c8:e8:9e:25:12:08:fa:be:6d:e2:be: 96:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B7:99:FC:3A:72:BD:08:C8:5E:29:3F:A6:9F:43:67:50:17:B5:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fa4d735-21ff-3fab-860f-e2f02e2af107.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:3f:62:97:8f:5c:7c:fc:5a:76:05:bf:5a:9a:40:df:88:b9: fe:c1:98:19:fb:98:18:a2:37:88:94:6f:29:1b:02:2b:71:36: ec:04:33:83:0b:aa:57:1b:56:a2:89:7f:28:44:d8:84:bd:1c: 5e:88:ef:d5:14:71:7d:51:eb:e3:45:30:20:77:7f:b5:eb:ee: 69:71:2e:d4:d2:b2:34:fc:b2:4a:76:9e:79:36:b7:a3:3d:ee: e0:34:61:2c:dd:4a:3e:9a:81:e5:58:c4:96:9a:5d:76:e3:f1: 6f:c6:c2:d6:cd:41:c9:2a:d2:71:8e:93:6d:60:3b:6a:d1:41: a6:d3:e7:73:a2:0a:26:2e:fb:8a:95:2f:3d:c9:e5:f0:56:7f: cd:78:64:75:71:0b:9b:6e:61:f6:09:03:fa:cb:83:24:e2:29: d2:cd:a9:75:c6:36:80:74:ef:5a:c9:c9:89:ac:02:1f:72:d0: a7:8f:56:39:40:34:e0:32:8e:f6:9a:69:c7:af:3b:ac:fd:c4: 40:4d:ab:04:eb:d3:1b:4d:f3:84:32:da:f5:63:37:44:07:cb: 56:42:72:17:cd:fd:56:8f:b4:b2:04:6b:dd:2c:3e:bf:df:cf: 7c:11:f2:fe:f1:9e:ed:dc:1b:25:eb:f8:87:9e:c6:c4:80:41: b3:1e:ef:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+kLeeBgfhy4pcxngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAyNzEzMDAxM1oXDTI3MDEyNTE0MDAxM1owLzEtMCsGA1UEAxMk NDhmZDhhNmMtYWU4Ny00ZjViLWEzNzEtOGFhNGQ4NDdkMzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaRHCoX7znrQ6tVyTWUSkblQgYxcsE3fodwM yLVlhsUGdkvU0i66lCLEllRs2biNRiNNvi/yga6HV9iR0X9ubilsSNRJUmdXDrNu MN4oAcjN1XFoAZgZPsmTG2thAoHJsYVbasTyRy2IP70fksh08tJDTQnl4Kb3Dr6L kYC+yqj7UGdkwEdBbYMCbRopG39JUMgDRErAlVGUZGCH/cvcEVGYvUqBuzn4fTNQ qhjScqdth8xs1DekurcWsUYN9fWkXs3WQusDsOVSkYapgCVfQJASdDHixQlT8sPY VGCQItwLUD/IRbCh/0oB+enGNojLMjqQyOieJRII+r5t4r6W6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJS3mfw6cr0IyF4pP6afQ2dQF7VoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWZhNGQ3MzUtMjFmZi0z ZmFiLTg2MGYtZTJmMDJlMmFmMTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8/YpePXHz8WnYFv1qaQN+Iuf7BmBn7mBiiN4iUbykbAitxNuwEM4ML qlcbVqKJfyhE2IS9HF6I79UUcX1R6+NFMCB3f7Xr7mlxLtTSsjT8skp2nnk2t6M9 7uA0YSzdSj6ageVYxJaaXXbj8W/GwtbNQckq0nGOk21gO2rRQabT53OiCiYu+4qV Lz3J5fBWf814ZHVxC5tuYfYJA/rLgyTiKdLNqXXGNoB071rJyYmsAh9y0KePVjlA NOAyjvaaacevO6z9xEBNqwTr0xtN84Qy2vVjN0QHy1ZCchfN/VaPtLIEa90sPr/f z3wR8v7xnu3cGyXr+IeexsSAQbMe72w= -----END CERTIFICATE-----Generated at Sun Nov 15 21:44:23 2026 by rpki-client