$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7106daaf-852e-3482-9817-4292a9226e8c.roa File: 7106daaf-852e-3482-9817-4292a9226e8c.roa (raw, json) Hash identifier: 3lHcQ+ZmYzBGMvj2MwK9CE9uIhYKWnVtxJTBX218coA= Subject key identifier: F2:29:CE:8D:C0:FB:59:60:C3:EC:26:69:3E:45:1C:33:07:E6:E3:64 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F6C583427227B832BE8C67F20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7106daaf-852e-3482-9817-4292a9226e8c.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 207.10.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:34:27:22:7b:83:2b:e8:c6:7f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=ee587c27-cdc2-43ad-90cb-0bf950c14fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ea:e1:c7:33:0d:c6:e9:9a:61:a4:1c:a2:46: d6:ba:92:e7:e4:b1:f4:cf:92:95:e4:4f:2b:e0:0d: ad:70:9d:6c:82:3e:6d:45:12:8b:83:d8:a4:e2:4a: e3:bb:b3:bb:f7:2a:8c:5f:f9:1d:55:08:9f:b2:4b: e7:17:86:8d:87:6c:40:8d:30:d9:08:d4:89:27:83: 88:3c:d3:27:b5:00:b8:0e:25:bd:d6:3f:8f:22:70: 51:63:5c:7c:ae:50:f1:26:1f:2f:77:6b:ac:52:8b: 15:8f:3c:3d:f5:e3:a4:ff:d0:38:37:57:7f:13:4b: 5b:1f:2e:0b:f5:a1:76:0d:79:b5:8d:34:8b:73:5b: 83:60:08:51:fa:2d:c6:e4:13:0f:19:1a:11:2e:ba: d0:e0:bb:77:32:d8:50:b0:20:e5:68:ea:5b:4e:50: 2b:08:4c:cc:1a:1b:a1:4f:3a:74:bf:ce:eb:d5:40: 5f:f8:79:08:43:01:9c:d8:0d:1c:6c:f8:67:4b:17: ea:35:41:f1:d5:7f:41:84:2d:6e:e8:3c:f2:28:16: 57:84:2e:df:5f:a1:f4:99:7c:d2:0f:1b:97:03:3f: ba:3b:fa:bc:1c:99:3e:ea:fe:4c:dc:e7:c4:b8:f5: c4:2c:72:05:c8:78:f7:a1:d3:46:a2:de:a5:65:0d: ed:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:29:CE:8D:C0:FB:59:60:C3:EC:26:69:3E:45:1C:33:07:E6:E3:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7106daaf-852e-3482-9817-4292a9226e8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.10.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:9b:56:60:9e:24:e8:1a:4c:8b:68:97:0c:00:85:af:a2:d7: 7d:82:19:7d:ad:87:8f:73:b2:76:b9:f9:a6:95:70:12:06:60: 8a:19:30:e7:e0:64:0f:39:50:eb:68:53:06:46:13:ff:9f:6a: 01:af:40:fc:1e:fb:24:14:95:b4:e8:89:f9:7a:4b:20:3a:41: 32:5d:37:1f:b7:92:ef:13:d3:dc:83:ec:e6:e0:eb:89:e1:a3: 7c:03:12:96:a1:37:b4:0a:30:a7:3b:17:62:d6:03:d9:51:7c: ae:23:1a:c4:af:3e:57:28:14:64:7a:48:5a:14:38:d7:4f:c0: d6:32:e3:5d:d6:c4:e0:a4:e5:11:26:a8:b9:b8:4f:2a:5d:09: 1a:f0:0c:ea:39:8d:99:67:11:d6:75:6b:e5:08:0b:08:8b:0c: 27:0f:bb:17:de:77:dd:a0:85:c0:e5:17:9a:09:74:a2:03:52: 54:50:b9:df:e7:b4:e6:df:9a:0a:d5:82:d3:89:97:34:11:97: a1:73:3c:c2:61:84:21:71:44:7e:80:bf:6e:cf:58:46:21:6e: f7:67:99:ec:56:91:b5:99:e0:0c:a0:fe:d2:15:5b:53:b9:28: de:7b:b4:36:c5:b5:70:e6:64:ee:13:26:cb:c9:92:8e:f0:0e: 90:cb:ea:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDQnInuDK+jGfyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk ZWU1ODdjMjctY2RjMi00M2FkLTkwY2ItMGJmOTUwYzE0ZmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+rhxzMNxumaYaQcokbWupLn5LH0z5KV5E8r 4A2tcJ1sgj5tRRKLg9ik4krju7O79yqMX/kdVQifskvnF4aNh2xAjTDZCNSJJ4OI PNMntQC4DiW91j+PInBRY1x8rlDxJh8vd2usUosVjzw99eOk/9A4N1d/E0tbHy4L 9aF2DXm1jTSLc1uDYAhR+i3G5BMPGRoRLrrQ4Lt3MthQsCDlaOpbTlArCEzMGhuh Tzp0v87r1UBf+HkIQwGc2A0cbPhnSxfqNUHx1X9BhC1u6DzyKBZXhC7fX6H0mXzS DxuXAz+6O/q8HJk+6v5M3OfEuPXELHIFyHj3odNGot6lZQ3tcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIpzo3A+1lgw+wmaT5FHDMH5uNkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzEwNmRhYWYtODUyZS0z NDgyLTk4MTctNDI5MmE5MjI2ZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzwoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFibVmCeJOgaTItolwwAha+i132CGX2th49zsna5+aaVcBIGYIoZMOfg ZA85UOtoUwZGE/+fagGvQPwe+yQUlbToifl6SyA6QTJdNx+3ku8T09yD7Obg64nh o3wDEpahN7QKMKc7F2LWA9lRfK4jGsSvPlcoFGR6SFoUONdPwNYy413WxOCk5REm qLm4TypdCRrwDOo5jZlnEdZ1a+UICwiLDCcPuxfed92ghcDlF5oJdKIDUlRQud/n tObfmgrVgtOJlzQRl6FzPMJhhCFxRH6Av27PWEYhbvdnmexWkbWZ4Ayg/tIVW1O5 KN57tDbFtXDmZO4TJsvJko7wDpDL6mA= -----END CERTIFICATE-----Generated at Sun Oct 11 06:57:11 2026 by rpki-client