$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46e898e8-09ea-3a9b-a977-d135334936f2.roa File: 46e898e8-09ea-3a9b-a977-d135334936f2.roa (raw, json) Hash identifier: yRkarczPHsnH+EdPcy50wYQy9ri75QkjHUowc9JJa8A= Subject key identifier: 50:A2:E5:D3:20:B3:93:EA:AC:E1:7A:C7:7D:D4:3B:B5:45:20:5D:07 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F497F17F9C28CA67CFFB98170 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46e898e8-09ea-3a9b-a977-d135334936f2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 67.140.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:17:f9:c2:8c:a6:7c:ff:b9:81:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3ea9adee-4698-4d44-8aa8-434be81738a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:be:40:15:0f:ed:59:f6:3b:97:d9:c6:40:4b: da:0a:c2:df:d7:67:72:40:44:bf:12:6e:ed:69:c9: 7b:34:88:5b:95:de:db:a6:10:1a:86:66:ea:da:99: 2d:74:d3:b1:fd:1f:6b:49:47:27:e0:6f:41:a5:6b: 27:58:32:dd:20:85:58:69:68:c1:70:af:1c:ad:5b: 6d:5b:2c:6d:5d:68:45:ee:af:e9:d3:f3:08:20:ad: db:f6:1e:3f:39:bc:3f:d6:5e:2a:23:f2:24:92:6d: 66:f0:ec:b9:41:3f:61:c0:0f:e6:90:e7:06:00:de: d4:0d:84:d2:24:4f:76:f0:06:bb:a7:da:06:37:00: 56:a8:60:7e:24:c9:b7:bf:5f:89:08:7c:2c:73:b1: 50:90:22:b8:e8:99:b2:e6:77:a1:43:42:66:bc:b8: 11:b3:28:02:47:c5:63:5e:5f:3c:80:51:5d:19:ac: 6f:c4:c6:36:55:b8:d9:1c:26:2b:4c:e5:ed:66:30: 5e:db:f8:12:d0:a0:ff:a4:b8:9b:7d:10:f9:f7:c2: 9f:d7:cb:4e:ad:c2:34:2d:4e:f7:21:f1:c0:c6:46: 4b:a6:16:d3:83:1f:ba:cf:c0:40:68:fd:ef:5b:64: 86:b6:41:1e:ba:01:e6:26:75:1a:1b:58:4f:95:73: 5f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A2:E5:D3:20:B3:93:EA:AC:E1:7A:C7:7D:D4:3B:B5:45:20:5D:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46e898e8-09ea-3a9b-a977-d135334936f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:fa:34:6a:6a:ef:dc:b3:30:c6:5e:d0:dd:16:70:aa:92:a9: fc:47:30:b1:ec:75:48:7e:11:ab:55:c5:d9:94:92:34:12:d7: 48:89:d1:2c:6a:8b:ba:57:e2:15:c4:e6:93:cd:04:1a:8f:af: 9a:cf:17:0c:d1:7a:48:61:7b:3a:a7:f3:69:9a:04:0b:95:01: ea:d5:fe:23:af:fa:54:ce:71:ef:f3:e6:e8:c4:1c:ec:a5:04: d1:4f:45:0a:fe:48:59:93:ac:e0:4b:f7:ad:48:a0:40:8f:3c: ac:01:97:e5:3d:7a:ae:2a:4a:42:03:59:79:1d:d4:1c:ac:22: 89:33:19:fa:1a:ff:84:49:0f:21:a1:7e:49:9c:a3:ad:33:73: 17:ed:a8:4d:7c:15:bb:ae:9f:7c:32:7b:f5:e7:10:7f:c4:6a: 0c:18:76:07:5c:f3:81:88:21:36:7b:2b:69:ab:25:c5:01:a2: 8e:63:ac:ce:8d:20:97:6f:f0:7c:be:2f:af:44:fb:26:c2:26: 90:7d:bb:d9:18:79:6d:53:1c:f0:cc:71:a3:ab:1e:ce:08:ea: a4:51:2e:03:f6:5c:11:c0:49:29:1b:07:53:0d:0e:9a:2e:31: 17:4c:d4:ac:c2:c1:13:c5:7d:b4:3d:8d:a9:64:60:d1:de:9e: 90:a0:fb:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfxf5woymfP+5gXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2VhOWFkZWUtNDY5OC00ZDQ0LThhYTgtNDM0YmU4MTczOGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv75AFQ/tWfY7l9nGQEvaCsLf12dyQES/Em7t acl7NIhbld7bphAahmbq2pktdNOx/R9rSUcn4G9BpWsnWDLdIIVYaWjBcK8crVtt WyxtXWhF7q/p0/MIIK3b9h4/Obw/1l4qI/Ikkm1m8Oy5QT9hwA/mkOcGAN7UDYTS JE928Aa7p9oGNwBWqGB+JMm3v1+JCHwsc7FQkCK46Jmy5nehQ0JmvLgRsygCR8Vj Xl88gFFdGaxvxMY2VbjZHCYrTOXtZjBe2/gS0KD/pLibfRD598Kf18tOrcI0LU73 IfHAxkZLphbTgx+6z8BAaP3vW2SGtkEeugHmJnUaG1hPlXNf2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCi5dMgs5PqrOF6x33UO7VFIF0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDZlODk4ZTgtMDllYS0z YTliLWE5NzctZDEzNTMzNDkzNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4wQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAv6NGpq79yzMMZe0N0WcKqSqfxHMLHsdUh+EatVxdmUkjQS10iJ0Sxq i7pX4hXE5pPNBBqPr5rPFwzRekhhezqn82maBAuVAerV/iOv+lTOce/z5ujEHOyl BNFPRQr+SFmTrOBL961IoECPPKwBl+U9eq4qSkIDWXkd1BysIokzGfoa/4RJDyGh fkmco60zcxftqE18Fbuun3wye/XnEH/EagwYdgdc84GIITZ7K2mrJcUBoo5jrM6N IJdv8Hy+L69E+ybCJpB9u9kYeW1THPDMcaOrHs4I6qRRLgP2XBHASSkbB1MNDpou MRdM1KzCwRPFfbQ9jalkYNHenpCg+8Q= -----END CERTIFICATE-----Generated at Fri Sep 25 08:17:31 2026 by rpki-client