$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/488d7a87-5ecd-3b50-9364-606749816097.roa File: 488d7a87-5ecd-3b50-9364-606749816097.roa (raw, json) Hash identifier: aA0KpuuhdvBHvxTCWvQM99IJI70XFcDS2h+YY8u6Rgo= Subject key identifier: 9F:25:0A:A7:56:51:E0:BB:7B:6E:F1:89:C1:2C:FD:1E:7E:3A:F3:D1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D8EC01B89A756C06EC100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/488d7a87-5ecd-3b50-9364-606749816097.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 64.206.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:8e:c0:1b:89:a7:56:c0:6e:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=c244ae7e-79e5-4e27-ad2e-b885cc237179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:fc:69:a2:ed:07:41:9e:2a:93:1d:1a:5b: ae:b3:03:40:99:a4:15:25:94:db:d1:4f:7a:e2:16: 60:4e:97:4c:83:6e:28:c9:93:69:26:2f:74:44:0c: 9c:ad:9f:0a:1d:ad:70:08:10:fe:c5:23:3f:53:ad: a6:4f:c2:c9:f3:f9:f0:2c:cd:6a:3b:39:d5:56:99: 61:5f:4a:ba:57:47:b4:f7:46:87:e9:4f:d0:2e:17: d1:77:7e:71:a5:89:09:fe:1c:78:54:f1:38:17:0c: 69:7e:60:84:bb:4c:b4:ad:e9:d2:bf:3d:48:2d:70: c5:9d:58:d0:46:b3:ea:4b:ae:c2:5c:95:23:5f:07: 46:06:6b:fc:75:67:a4:8c:c4:db:9f:cf:e2:e5:94: 71:57:6e:22:94:06:1e:88:64:15:88:bf:d7:ec:5e: 94:7b:5f:ff:eb:fe:ba:33:39:6a:83:16:c3:08:7f: e6:ee:13:87:3e:d4:17:3b:26:cd:65:5c:fd:b0:43: 34:6e:88:d0:5f:4a:9d:2e:68:34:23:47:c8:69:b0: 6d:41:c4:e5:54:61:8e:59:11:94:1e:04:18:4b:66: 21:7b:da:bf:f4:e6:e5:42:9e:f9:80:3b:c0:00:cb: 61:3e:ed:f0:90:c6:57:3f:50:75:83:b2:8b:c7:e7: 47:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:25:0A:A7:56:51:E0:BB:7B:6E:F1:89:C1:2C:FD:1E:7E:3A:F3:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/488d7a87-5ecd-3b50-9364-606749816097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.206.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:fe:9a:1b:7f:e1:af:99:20:b9:eb:f4:7d:88:85:64:c0:52: 4a:65:df:ee:7e:db:85:b4:4a:4e:59:1a:b7:72:fe:e9:46:3c: 50:c0:69:d9:eb:a3:af:e4:52:ca:b5:dc:3c:6f:b4:08:2f:95: 84:2a:08:37:f9:30:0c:89:7c:5b:86:76:db:30:26:d9:80:cc: 59:e6:32:3e:48:06:45:b0:61:a3:1a:75:97:be:8d:36:a1:7c: d6:a8:e3:65:98:eb:af:13:df:70:7a:22:3d:e5:f0:29:e3:ec: b9:ea:d3:8f:46:3b:18:7b:66:f9:39:94:a9:98:28:a1:5e:92: 5d:de:43:fa:8e:95:18:9d:c4:fb:b5:d0:19:3e:1d:d6:56:5b: fc:3d:2b:52:3c:2f:85:fc:f5:6f:fd:2b:a7:e9:fb:88:e9:9f: 28:8a:ae:23:cf:7c:e6:29:37:26:73:74:f3:19:00:e9:85:a7: b9:30:3e:c9:16:d9:f5:14:ee:a6:7d:e2:4f:50:7e:23:df:4f: e3:94:a8:82:42:77:9d:b9:3d:3c:c1:b4:8a:05:cb:b3:a0:73: d2:be:fc:ba:5c:a4:7d:24:94:27:ba:00:4a:81:9c:d4:db:66: c8:73:44:43:46:39:df:97:92:6b:74:59:75:e4:66:17:04:e1: cc:17:e6:2d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9UnY7AG4mnVsBuwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YzI0NGFlN2UtNzllNS00ZTI3LWFkMmUtYjg4NWNjMjM3MTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwP8aaLtB0GeKpMdGluuswNAmaQVJZTb0U96 4hZgTpdMg24oyZNpJi90RAycrZ8KHa1wCBD+xSM/U62mT8LJ8/nwLM1qOznVVplh X0q6V0e090aH6U/QLhfRd35xpYkJ/hx4VPE4FwxpfmCEu0y0renSvz1ILXDFnVjQ RrPqS67CXJUjXwdGBmv8dWekjMTbn8/i5ZRxV24ilAYeiGQViL/X7F6Ue1//6/66 MzlqgxbDCH/m7hOHPtQXOybNZVz9sEM0bojQX0qdLmg0I0fIabBtQcTlVGGOWRGU HgQYS2Yhe9q/9OblQp75gDvAAMthPu3wkMZXP1B1g7KLx+dH6QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJ8lCqdWUeC7e27xicEs/R5+OvPRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDg4ZDdhODctNWVjZC0z YjUwLTkzNjQtNjA2NzQ5ODE2MDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQM4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAVP6aG3/hr5kguev0fYiFZMBSSmXf7n7bhbRKTlkat3L+6UY8UMBp2euj r+RSyrXcPG+0CC+VhCoIN/kwDIl8W4Z22zAm2YDMWeYyPkgGRbBhoxp1l76NNqF8 1qjjZZjrrxPfcHoiPeXwKePsuerTj0Y7GHtm+TmUqZgooV6SXd5D+o6VGJ3E+7XQ GT4d1lZb/D0rUjwvhfz1b/0rp+n7iOmfKIquI8985ik3JnN08xkA6YWnuTA+yRbZ 9RTupn3iT1B+I99P45SogkJ3nbk9PMG0igXLs6Bz0r78ulykfSSUJ7oASoGc1Ntm yHNEQ0Y535eSa3RZdeRmFwThzBfmLQ== -----END CERTIFICATE-----Generated at Sun Oct 4 07:34:30 2026 by rpki-client