$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/85c62fa5-f921-37f8-adc7-f46418fe4708.roa File: 85c62fa5-f921-37f8-adc7-f46418fe4708.roa (raw, json) Hash identifier: iycweqxWTwAQHINnTX8+m48mHVg0XWJ1vXaJgXuYHIA= Subject key identifier: 2A:08:7B:52:13:7D:7D:2A:86:E0:16:2A:A0:04:15:22:B4:A1:CA:04 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D98E297CB9393153E6A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/85c62fa5-f921-37f8-adc7-f46418fe4708.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 40848 IP address blocks: 146.145.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:98:e2:97:cb:93:93:15:3e:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=63927b56-4754-4b39-8af3-114b2d208b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:07:4b:4f:cc:dc:cc:44:46:2b:32:11:d9:13: ae:53:1e:c9:fc:50:b8:10:4a:37:5e:a7:75:0b:e9: 62:a2:47:46:b8:6d:8f:4c:a4:ae:3a:48:5e:78:7d: cd:75:57:fe:ef:59:19:e1:00:61:3e:67:39:bd:12: fa:ea:a4:84:74:11:31:da:b0:06:bb:e5:74:7f:08: c9:b7:a9:7c:8c:83:fa:d5:d0:e5:7e:82:cf:0e:5d: 39:a9:70:fc:fc:20:dc:03:1d:3f:af:52:d7:22:8b: 30:3b:19:0a:4b:95:e0:59:70:e0:9d:a5:b3:d6:6b: 88:7f:b8:97:c5:f7:f7:43:23:be:6c:2d:86:6a:86: fb:d3:63:86:5d:29:1d:ca:47:e9:74:b7:9d:f7:7f: 5a:50:a9:a6:e4:82:9a:a2:19:62:5b:73:ff:aa:84: be:4f:12:33:1b:79:98:98:3e:35:67:a6:7c:de:56: b9:9a:df:7a:b8:3c:d7:73:3a:c2:fd:28:ae:15:00: a2:0b:28:69:5e:ef:04:d2:54:33:48:35:cc:5f:7d: 11:f2:e2:aa:c4:a5:53:8a:58:54:ec:e8:77:7e:e8: 8b:ee:b5:dd:ae:f7:c1:8a:84:4c:e0:9e:1a:22:a1: 89:90:27:bd:1a:37:5b:e9:2f:bb:ca:97:63:51:9a: c0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:08:7B:52:13:7D:7D:2A:86:E0:16:2A:A0:04:15:22:B4:A1:CA:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/85c62fa5-f921-37f8-adc7-f46418fe4708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 146.145.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:17:9a:58:21:0a:2a:fb:d6:b3:f1:bb:c6:57:f6:d7:eb:b5: 60:9f:33:e7:71:0d:7f:de:4e:4d:1a:a8:7e:dd:81:f1:5e:54: f6:1f:6c:68:ac:4d:01:a4:e8:89:b6:a4:bf:6e:bc:30:0a:1d: 78:75:02:10:44:42:a3:01:94:bf:ea:55:6e:4a:ba:97:49:5a: d1:4b:19:43:47:6a:c3:d9:cc:2e:3b:19:02:9a:b7:ab:bb:7c: 42:9d:36:42:b9:6c:40:56:f2:58:38:17:e6:9a:ff:fd:2a:0f: 95:a0:a7:38:4b:3a:2f:b7:71:c7:76:72:52:a1:a4:45:70:fe: 72:c3:8c:d3:d3:cb:ef:d1:55:93:d2:6f:a6:09:fc:fc:53:10: e2:71:87:ff:e3:6b:c4:c4:97:a4:77:01:72:76:9a:49:f1:04: 2b:44:f3:7c:38:9e:39:3d:7e:1a:6c:21:87:2e:58:c2:f9:38: c5:64:7f:93:b7:bb:9b:bf:04:f5:1f:27:32:89:2d:45:c8:7b: 08:f5:b5:22:78:17:d9:35:e5:bc:08:d0:8b:05:a1:1f:7a:38: f6:ef:d0:e2:20:15:dc:15:58:6c:71:96:b9:13:43:fc:a0:87: 6e:dd:96:67:cd:ab:f5:13:28:a6:cb:15:9a:69:f0:32:67:f4: a6:22:38:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZjil8uTkxU+agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NjM5MjdiNTYtNDc1NC00YjM5LThhZjMtMTE0YjJkMjA4YjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAdLT8zczERGKzIR2ROuUx7J/FC4EEo3Xqd1 C+liokdGuG2PTKSuOkheeH3NdVf+71kZ4QBhPmc5vRL66qSEdBEx2rAGu+V0fwjJ t6l8jIP61dDlfoLPDl05qXD8/CDcAx0/r1LXIoswOxkKS5XgWXDgnaWz1muIf7iX xff3QyO+bC2Gaob702OGXSkdykfpdLed939aUKmm5IKaohliW3P/qoS+TxIzG3mY mD41Z6Z83la5mt96uDzXczrC/SiuFQCiCyhpXu8E0lQzSDXMX30R8uKqxKVTilhU 7Oh3fuiL7rXdrvfBioRM4J4aIqGJkCe9Gjdb6S+7ypdjUZrAmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoIe1ITfX0qhuAWKqAEFSK0ocoEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODVjNjJmYTUtZjkyMS0z N2Y4LWFkYzctZjQ2NDE4ZmU0NzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkpGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoXmlghCir71rPxu8ZX9tfrtWCfM+dxDX/eTk0aqH7dgfFeVPYfbGis TQGk6Im2pL9uvDAKHXh1AhBEQqMBlL/qVW5KupdJWtFLGUNHasPZzC47GQKat6u7 fEKdNkK5bEBW8lg4F+aa//0qD5WgpzhLOi+3ccd2clKhpEVw/nLDjNPTy+/RVZPS b6YJ/PxTEOJxh//ja8TEl6R3AXJ2mknxBCtE83w4njk9fhpsIYcuWML5OMVkf5O3 u5u/BPUfJzKJLUXIewj1tSJ4F9k15bwI0IsFoR96OPbv0OIgFdwVWGxxlrkTQ/yg h27dlmfNq/UTKKbLFZpp8DJn9KYiOPU= -----END CERTIFICATE-----Generated at Sun Oct 11 22:49:29 2026 by rpki-client