$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6dced57e-3770-3946-aa28-f17af5922741.roa File: 6dced57e-3770-3946-aa28-f17af5922741.roa (raw, json) Hash identifier: VTdL1xNjZBjpVbm4+e2seMyfo7r5PDfNBhloZyIDnxo= Subject key identifier: 7D:CE:68:E5:53:E7:CD:9E:5E:70:13:ED:BE:5F:A4:6E:5E:9C:15:8D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D7C00514CE7A37CE33D60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6dced57e-3770-3946-aa28-f17af5922741.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 29877 IP address blocks: 66.29.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:7c:00:51:4c:e7:a3:7c:e3:3d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=881c28b1-cf8d-4def-9589-703992640d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cf:8f:ae:ba:66:96:a4:a6:4d:e1:17:40:ec: c2:d5:ce:be:e4:a5:62:d9:28:e3:d1:53:da:35:cf: ca:94:97:0f:f0:22:67:eb:64:e6:ec:71:6e:40:79: 71:d8:dd:ba:9e:d4:77:39:2f:d6:74:24:3c:29:dd: 7c:2a:0a:67:fa:f3:74:0b:97:04:4a:a4:da:3d:05: a0:3e:a3:ac:76:ed:c1:bc:fc:ab:7e:ec:f8:96:2c: 92:48:b5:c7:e6:17:87:88:d6:a3:ce:3d:05:e0:82: 37:c1:d1:04:d7:05:52:5f:b0:40:97:7f:cd:92:df: 75:98:78:0f:ba:5b:7d:a2:b6:6c:0d:9f:a1:1f:67: c8:2e:dc:65:90:83:5f:40:60:38:f3:2b:f5:4f:c9: b2:fe:7c:37:96:32:82:3f:ce:bd:08:08:4a:8e:1a: e0:d5:8d:e0:87:f3:f3:4d:ae:b4:43:a6:d8:36:56: 98:ac:08:51:88:af:dd:41:f8:aa:ec:2d:e3:4b:23: 32:d3:da:e2:e6:cd:71:2e:a3:e1:dd:ac:15:8d:60: bc:b9:db:38:5c:9f:3e:e9:a7:fd:3a:0e:be:05:05: e6:fe:21:14:48:36:a9:76:f2:f0:66:2d:4c:59:9a: d0:6f:bb:7c:43:1b:fc:e4:ae:08:4f:60:54:f4:82: 87:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CE:68:E5:53:E7:CD:9E:5E:70:13:ED:BE:5F:A4:6E:5E:9C:15:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6dced57e-3770-3946-aa28-f17af5922741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.29.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a4:b0:4b:76:2e:b7:9e:5c:8b:84:f2:b5:89:32:6b:c0:1c: 88:17:c1:5e:80:98:89:07:16:05:4a:07:c9:e3:ce:5b:f4:24: 27:e3:0f:7e:d2:d6:a3:4e:34:f1:6d:ee:2f:73:f8:ce:83:76: 25:e4:43:10:b4:26:ec:28:f5:a7:e4:d9:ba:b6:bb:e5:d4:46: df:8e:a9:04:21:5d:09:2a:94:33:ae:56:18:49:62:e7:32:a0: 56:9a:ad:3a:a8:4a:45:c2:0d:22:d4:ea:b5:31:64:15:2b:ad: f9:53:6e:74:50:d5:89:d8:9b:a6:69:2f:56:8b:28:81:87:9b: f6:b5:8f:10:8d:7a:1c:47:df:a7:bb:b2:8c:9e:3e:31:07:41: a2:b1:a8:3a:3a:5b:30:36:cc:84:61:f9:47:d5:97:f0:28:07: 38:e7:19:cd:e4:f9:1a:7a:7c:7e:b9:3d:c3:ce:37:31:df:2c: 2b:6a:ff:59:99:29:d6:6d:e9:8c:8f:2c:a3:a8:87:31:98:e2: ba:f5:fd:9f:47:32:b1:57:4e:b6:03:3c:86:fb:08:c2:80:dc: 02:48:62:c6:09:96:a4:d0:52:77:2a:c7:6e:ed:f1:f9:06:8f: d7:85:65:56:21:f7:af:aa:75:10:45:dd:db:52:c6:f6:49:09: 90:84:50:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXwAUUzno3zjPWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ODgxYzI4YjEtY2Y4ZC00ZGVmLTk1ODktNzAzOTkyNjQwZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8+PrrpmlqSmTeEXQOzC1c6+5KVi2Sjj0VPa Nc/KlJcP8CJn62Tm7HFuQHlx2N26ntR3OS/WdCQ8Kd18Kgpn+vN0C5cESqTaPQWg PqOsdu3BvPyrfuz4liySSLXH5heHiNajzj0F4II3wdEE1wVSX7BAl3/Nkt91mHgP ult9orZsDZ+hH2fILtxlkINfQGA48yv1T8my/nw3ljKCP869CAhKjhrg1Y3gh/Pz Ta60Q6bYNlaYrAhRiK/dQfiq7C3jSyMy09ri5s1xLqPh3awVjWC8uds4XJ8+6af9 Og6+BQXm/iEUSDapdvLwZi1MWZrQb7t8Qxv85K4IT2BU9IKHNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3OaOVT582eXnAT7b5fpG5enBWNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmRjZWQ1N2UtMzc3MC0z OTQ2LWFhMjgtZjE3YWY1OTIyNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQh3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKksEt2LreeXIuE8rWJMmvAHIgXwV6AmIkHFgVKB8njzlv0JCfjD37S 1qNONPFt7i9z+M6DdiXkQxC0Juwo9afk2bq2u+XURt+OqQQhXQkqlDOuVhhJYucy oFaarTqoSkXCDSLU6rUxZBUrrflTbnRQ1YnYm6ZpL1aLKIGHm/a1jxCNehxH36e7 soyePjEHQaKxqDo6WzA2zIRh+UfVl/AoBzjnGc3k+Rp6fH65PcPONzHfLCtq/1mZ KdZt6YyPLKOohzGY4rr1/Z9HMrFXTrYDPIb7CMKA3AJIYsYJlqTQUncqx27t8fkG j9eFZVYh96+qdRBF3dtSxvZJCZCEUFs= -----END CERTIFICATE-----Generated at Sun Oct 11 15:26:54 2026 by rpki-client