$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa File: 520be285-2429-3ad0-8ae4-5cc51f14e87e.roa (raw, json) Hash identifier: 2fkzuelUNBi9IFfIHwE4jskZW74/CiEjygrYOTOnAU0= Subject key identifier: 6E:E5:0A:6E:05:22:25:40:B3:A9:E6:26:D4:A2:8D:37:88:C0:3A:5E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D8ED76D59D58A2E3F6700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 66.0.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:8e:d7:6d:59:d5:8a:2e:3f:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=412ab2f7-032c-4390-aa44-ef799004b42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:91:f4:47:cc:84:eb:07:37:f0:9d:6c:c4:01: b7:f7:21:a8:aa:91:5a:93:ad:7a:c1:d8:81:0a:d0: 46:18:5a:40:c5:ea:7f:d9:4c:e2:8f:f8:26:66:81: 28:d5:69:af:33:4f:fe:de:1c:1f:71:36:cc:b8:4c: 4d:f5:23:f8:4d:22:ea:ac:46:1e:0e:5e:7d:bb:39: 88:73:30:0a:16:42:7b:7a:e0:ff:1c:6d:d2:1e:ff: 75:e1:d7:a3:d3:6d:f7:46:75:38:6d:43:40:67:25: 87:53:d8:f1:0e:3e:49:92:78:66:44:04:c2:6b:0b: 44:98:06:1f:57:d8:84:4a:d0:66:17:1c:e4:27:5a: 9b:84:ca:57:31:18:da:a0:22:52:69:f0:63:e6:33: 4e:ba:ef:cc:ea:47:64:29:7c:3a:b0:3f:8b:1b:54: a1:a7:f1:94:0e:2f:60:26:50:92:7d:38:bc:e4:0c: b2:66:f6:6b:28:2d:8f:95:ad:fd:12:7c:03:91:07: a9:0e:33:a6:9f:5d:3a:0a:92:f4:7b:e8:c7:6d:9e: b6:2f:76:d8:03:47:06:1a:37:f5:75:89:fe:4f:52: 08:93:86:a9:43:29:f3:b3:2e:23:18:e9:62:6a:27: 4a:46:48:1a:a4:6a:9c:7c:46:c1:a9:f6:f3:d2:38: 6d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E5:0A:6E:05:22:25:40:B3:A9:E6:26:D4:A2:8D:37:88:C0:3A:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.0.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:1b:94:85:c5:33:9f:c1:23:68:13:7d:6b:81:75:86:e0:2e: 9c:62:f9:37:76:cf:9d:58:3b:77:22:bc:78:17:43:32:24:26: c2:9c:eb:c2:30:3c:d0:0a:b3:85:eb:c1:1e:4c:70:aa:8f:65: 5d:9e:8e:d8:bd:da:ea:7d:cc:f4:f0:81:99:65:43:cf:3e:a3: a4:4c:21:08:ed:8e:f7:6a:33:16:8b:68:f3:1c:b8:13:f6:33: fb:c4:06:7f:4e:a5:d1:5a:44:50:48:a8:2e:de:8b:30:66:54: dc:28:ca:80:4d:9c:06:d5:7c:99:be:70:fa:2f:a2:10:b8:6e: 2f:ec:1d:bd:a3:d4:cd:43:a1:be:18:c0:4c:a4:f2:4d:b4:14: 3e:18:53:8a:b7:f3:04:a8:65:c5:f1:81:ab:5d:7e:3f:b4:c3: e8:c9:04:66:d1:d3:af:cd:7a:cb:44:c1:1c:08:b1:4a:1b:7d: f9:d9:69:c3:07:a5:b1:41:79:c2:79:1d:0c:d1:8d:74:9d:8b: 73:dd:58:e0:29:7a:f3:5e:2b:95:06:54:2b:af:55:8a:36:88: 1f:14:b9:c8:3e:55:81:05:8d:c3:af:67:24:f7:a0:f2:bf:03: fc:0e:f2:46:67:b9:8d:4b:f1:48:70:dd:7a:5b:b8:b9:c8:79: 5b:e3:6b:a8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9UnY7XbVnVii4/ZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NDEyYWIyZjctMDMyYy00MzkwLWFhNDQtZWY3OTkwMDRiNDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZH0R8yE6wc38J1sxAG39yGoqpFak616wdiB CtBGGFpAxep/2Uzij/gmZoEo1WmvM0/+3hwfcTbMuExN9SP4TSLqrEYeDl59uzmI czAKFkJ7euD/HG3SHv914dej0233RnU4bUNAZyWHU9jxDj5JknhmRATCawtEmAYf V9iEStBmFxzkJ1qbhMpXMRjaoCJSafBj5jNOuu/M6kdkKXw6sD+LG1Shp/GUDi9g JlCSfTi85AyyZvZrKC2Pla39EnwDkQepDjOmn106CpL0e+jHbZ62L3bYA0cGGjf1 dYn+T1IIk4apQynzsy4jGOliaidKRkgapGqcfEbBqfbz0jhtDQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFG7lCm4FIiVAs6nmJtSijTeIwDpeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTIwYmUyODUtMjQyOS0z YWQwLThhZTQtNWNjNTFmMTRlODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQgAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAIBuUhcUzn8EjaBN9a4F1huAunGL5N3bPnVg7dyK8eBdDMiQmwpzrwjA8 0AqzhevBHkxwqo9lXZ6O2L3a6n3M9PCBmWVDzz6jpEwhCO2O92ozFoto8xy4E/Yz +8QGf06l0VpEUEioLt6LMGZU3CjKgE2cBtV8mb5w+i+iELhuL+wdvaPUzUOhvhjA TKTyTbQUPhhTirfzBKhlxfGBq11+P7TD6MkEZtHTr816y0TBHAixSht9+dlpwwel sUF5wnkdDNGNdJ2Lc91Y4Cl6814rlQZUK69VijaIHxS5yD5VgQWNw69nJPeg8r8D /A7yRme5jUvxSHDdelu4uch5W+NrqA== -----END CERTIFICATE-----Generated at Sat Oct 3 22:37:53 2026 by rpki-client