$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b9e3915-4928-3c69-9bdc-338d3c42b386.roa File: 4b9e3915-4928-3c69-9bdc-338d3c42b386.roa (raw, json) Hash identifier: 4aGg0mmaUHnpCeFn7Iaf2iSXwWVwpB0lb89a7vCsRcM= Subject key identifier: 2C:AB:15:7F:01:71:BF:32:8C:90:85:FF:8A:09:E0:EA:A1:EA:F6:17 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F331D29E33734D13BAF3834C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b9e3915-4928-3c69-9bdc-338d3c42b386.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 203 IP address blocks: 66.84.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:29:e3:37:34:d1:3b:af:38:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=63ea978c-bb22-4d1a-80e2-2ff8ded9878f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e5:88:3d:eb:3b:25:4c:40:c5:f7:a0:db:ef: af:ea:d3:48:dd:fa:7d:e5:27:e0:d0:dd:9c:9c:c3: f3:fe:6b:a6:93:09:2e:93:e9:65:06:2f:c6:4e:ac: 45:06:cb:6b:c0:42:f5:35:3d:73:5b:49:70:bf:7b: fc:63:0a:24:cc:25:e4:07:b7:bf:90:bf:c6:09:d5: f6:83:78:18:ab:8a:56:75:64:0f:f2:2c:cd:21:d1: 9d:18:cf:ba:85:e8:bd:c5:f3:0d:9e:c6:14:1a:51: 37:3c:90:cd:31:23:69:96:0e:c8:f2:bd:b1:f6:5f: 5a:02:2d:42:a3:5a:15:7b:f8:2c:99:c1:10:31:70: a7:e8:23:52:ad:0b:8a:cf:71:9e:66:f7:3f:79:fc: 3e:47:93:58:32:4e:90:7b:71:e8:f0:4c:f0:8a:cc: f0:3c:ee:63:f6:a5:60:76:53:a4:a0:af:ad:27:52: 14:77:57:73:d9:ef:68:86:f9:04:9a:c6:31:1b:7e: 03:4f:03:2e:d7:bc:73:f9:39:8d:4e:d1:58:7b:7c: c9:2d:02:94:d9:db:05:81:75:15:8c:11:06:61:74: 84:8a:8a:28:c1:a8:43:e1:99:0b:9c:ba:f5:ee:15: 15:20:74:96:1d:1f:08:f5:f5:e8:9c:94:97:6d:fe: da:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AB:15:7F:01:71:BF:32:8C:90:85:FF:8A:09:E0:EA:A1:EA:F6:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b9e3915-4928-3c69-9bdc-338d3c42b386.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.84.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:8d:a8:85:b4:67:43:dd:b5:13:f0:06:4c:d1:b3:f5:1a:7b: a9:5d:6a:0d:08:f2:ad:36:9c:e9:58:15:1c:48:35:64:b3:50: 4e:10:6d:59:30:89:d0:3d:b5:95:c3:6b:95:90:fe:1d:6b:5b: 15:1a:6e:cb:cd:27:0e:6e:b0:27:9e:e9:93:f5:61:7b:a2:91: 4b:2d:d8:45:37:d2:e8:85:bf:68:91:95:54:15:b3:ea:11:6c: 2d:5c:3c:85:5f:90:f9:20:45:17:b6:12:4a:e8:75:58:fa:84: ae:14:09:f5:16:96:12:78:8d:58:2f:9c:d0:1a:ab:ee:fc:b7: ed:82:b5:1d:7a:2d:b1:9e:8a:9f:52:73:e5:8b:9d:fe:7d:42: 00:ff:55:fc:f2:0e:65:04:06:7c:d2:77:46:50:8f:99:17:3d: a9:95:2b:0b:69:4d:99:aa:7d:59:cf:78:d8:98:35:cf:6e:dd: b3:90:8f:01:66:9d:66:8c:17:fa:0b:3d:81:b0:77:ef:24:40: 87:9b:bf:d6:de:c6:f9:80:62:60:61:73:83:dc:b1:63:71:2a: 3c:ff:6d:cb:0f:5c:f4:bd:6e:ac:52:66:e0:ee:27:61:ec:57: 6e:22:21:78:d0:50:d6:38:3d:3b:5a:35:19:fc:2f:3c:f0:65: 19:d6:14:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHSnjNzTRO684NMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk NjNlYTk3OGMtYmIyMi00ZDFhLTgwZTItMmZmOGRlZDk4NzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOWIPes7JUxAxfeg2++v6tNI3fp95Sfg0N2c nMPz/mumkwkuk+llBi/GTqxFBstrwEL1NT1zW0lwv3v8YwokzCXkB7e/kL/GCdX2 g3gYq4pWdWQP8izNIdGdGM+6hei9xfMNnsYUGlE3PJDNMSNplg7I8r2x9l9aAi1C o1oVe/gsmcEQMXCn6CNSrQuKz3GeZvc/efw+R5NYMk6Qe3Ho8EzwiszwPO5j9qVg dlOkoK+tJ1IUd1dz2e9ohvkEmsYxG34DTwMu17xz+TmNTtFYe3zJLQKU2dsFgXUV jBEGYXSEiooowahD4ZkLnLr17hUVIHSWHR8I9fXonJSXbf7aXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyrFX8Bcb8yjJCF/4oJ4Oqh6vYXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGI5ZTM5MTUtNDkyOC0z YzY5LTliZGMtMzM4ZDNjNDJiMzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlSSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaNqIW0Z0PdtRPwBkzRs/Uae6ldag0I8q02nOlYFRxINWSzUE4QbVkw idA9tZXDa5WQ/h1rWxUabsvNJw5usCee6ZP1YXuikUst2EU30uiFv2iRlVQVs+oR bC1cPIVfkPkgRRe2EkrodVj6hK4UCfUWlhJ4jVgvnNAaq+78t+2CtR16LbGeip9S c+WLnf59QgD/VfzyDmUEBnzSd0ZQj5kXPamVKwtpTZmqfVnPeNiYNc9u3bOQjwFm nWaMF/oLPYGwd+8kQIebv9bexvmAYmBhc4PcsWNxKjz/bcsPXPS9bqxSZuDuJ2Hs V24iIXjQUNY4PTtaNRn8LzzwZRnWFEA= -----END CERTIFICATE-----Generated at Mon Oct 5 05:20:00 2026 by rpki-client