$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a85b66d-5b14-3f1b-81a0-03f88b9b1e74.roa File: 3a85b66d-5b14-3f1b-81a0-03f88b9b1e74.roa (raw, json) Hash identifier: 5WcEcvqE2QXibaDq8an4T7wuliC8iqU/KqY9bTbbMlk= Subject key identifier: C9:24:9B:2A:60:EC:7C:EA:E3:70:71:45:04:29:D6:DB:C8:59:F3:37 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F498721583CCEF08467657F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a85b66d-5b14-3f1b-81a0-03f88b9b1e74.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 216.96.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:21:58:3c:ce:f0:84:67:65:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d95d2dd1-7d26-4d73-93e2-2dd8f649410d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fb:fa:a8:d4:e9:33:7d:f4:24:4a:e4:d7:07: c6:d1:5f:1a:2d:d8:20:59:29:b8:a1:78:e9:af:2c: 16:f6:14:61:96:de:37:8a:21:7a:09:24:d0:9c:e5: 8b:88:49:09:e0:80:2d:24:f1:5a:92:63:2e:8a:b9: 3f:56:4d:58:4c:7c:92:63:04:f9:20:7e:0c:5f:b4: c4:dc:4d:6c:30:80:c5:81:ca:09:fa:e7:09:a3:8f: c1:d6:96:fb:57:28:2d:7f:6a:ed:e5:6e:30:58:2a: 00:b5:11:06:39:56:03:86:4b:2a:a8:12:65:6b:97: 31:6e:7b:71:5f:60:83:27:1a:88:3e:fa:0d:8b:c1: c2:f1:c1:f7:58:e1:01:8d:67:3f:f6:a6:46:75:c0: 31:14:a3:8d:41:38:e6:ba:ba:8a:15:08:60:c5:c8: bd:95:a1:86:15:e7:9c:a9:ec:80:9d:2e:77:1b:97: 17:4b:6e:a1:f0:ba:a6:b6:19:82:22:93:22:e8:47: fa:50:1f:d5:96:d8:4f:f3:7b:c5:1c:d5:1b:b2:69: ab:90:32:d1:b9:ca:f6:bc:bb:17:10:1a:00:d5:6a: ac:11:5b:7a:a3:80:e5:59:ea:8b:64:8a:cc:67:e5: 41:2a:26:cd:68:d4:2c:78:32:6f:d5:da:d9:cc:1f: 0c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:24:9B:2A:60:EC:7C:EA:E3:70:71:45:04:29:D6:DB:C8:59:F3:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a85b66d-5b14-3f1b-81a0-03f88b9b1e74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:8d:32:50:55:3a:62:c5:66:cd:02:79:4c:03:29:59:f3:4e: f5:40:13:a4:55:4c:9d:8f:62:88:46:c1:60:c8:97:81:b4:f3: bf:8a:a5:e5:fa:d8:75:4c:3f:32:03:9a:f5:88:c5:ea:d0:2d: 63:0a:d2:5b:fd:97:1e:46:dc:b8:89:73:dc:14:c9:80:fc:20: 67:b5:34:62:1f:27:1e:59:a2:d9:56:31:0b:aa:86:90:ba:3a: f8:9b:d9:f2:2d:c9:fc:15:78:ba:62:53:01:82:ca:c0:a2:8a: b1:d4:15:0f:7d:05:5b:52:ca:37:1b:32:37:3a:13:da:6a:33: 97:e0:47:12:50:8a:e2:ec:0a:23:c1:19:2a:bf:57:10:0b:ba: 5c:d9:24:ee:22:9c:10:cf:4a:99:2b:12:67:6e:79:ff:d3:7a: 60:12:d2:60:6b:54:65:6a:d7:b0:c0:f4:c6:f6:35:d1:90:47: 5d:27:76:59:c9:6b:1d:b4:e8:7d:07:fb:e7:dd:07:9e:fd:d5: 5e:70:99:ac:92:b1:6f:f2:fd:d6:64:23:08:7b:4b:e4:4e:bd: 8d:9a:f6:ed:b3:92:33:6f:2d:8f:08:d2:66:60:89:2f:6d:75: 50:e4:67:44:81:ce:bb:0c:92:51:17:ef:44:22:ca:6f:ed:33: 25:80:77:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhyFYPM7whGdlfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDk1ZDJkZDEtN2QyNi00ZDczLTkzZTItMmRkOGY2NDk0MTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovv6qNTpM330JErk1wfG0V8aLdggWSm4oXjp rywW9hRhlt43iiF6CSTQnOWLiEkJ4IAtJPFakmMuirk/Vk1YTHySYwT5IH4MX7TE 3E1sMIDFgcoJ+ucJo4/B1pb7Vygtf2rt5W4wWCoAtREGOVYDhksqqBJla5cxbntx X2CDJxqIPvoNi8HC8cH3WOEBjWc/9qZGdcAxFKONQTjmurqKFQhgxci9laGGFeec qeyAnS53G5cXS26h8LqmthmCIpMi6Ef6UB/VlthP83vFHNUbsmmrkDLRucr2vLsX EBoA1WqsEVt6o4DlWeqLZIrMZ+VBKibNaNQseDJv1drZzB8MEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkkmypg7Hzq43BxRQQp1tvIWfM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2E4NWI2NmQtNWIxNC0z ZjFiLTgxYTAtMDNmODhiOWIxZTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GAJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCNMlBVOmLFZs0CeUwDKVnzTvVAE6RVTJ2PYohGwWDIl4G087+KpeX6 2HVMPzIDmvWIxerQLWMK0lv9lx5G3LiJc9wUyYD8IGe1NGIfJx5ZotlWMQuqhpC6 Ovib2fItyfwVeLpiUwGCysCiirHUFQ99BVtSyjcbMjc6E9pqM5fgRxJQiuLsCiPB GSq/VxALulzZJO4inBDPSpkrEmduef/TemAS0mBrVGVq17DA9Mb2NdGQR10ndlnJ ax206H0H++fdB5791V5wmaySsW/y/dZkIwh7S+ROvY2a9u2zkjNvLY8I0mZgiS9t dVDkZ0SBzrsMklEX70Qiym/tMyWAdzc= -----END CERTIFICATE-----Generated at Fri Sep 25 22:57:32 2026 by rpki-client