$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0faf63f-7c57-3279-8a19-b5c4db997e94.roa File: a0faf63f-7c57-3279-8a19-b5c4db997e94.roa (raw, json) Hash identifier: qFw3Tkud93Z0B+TMFqwcqydhyNO3DvRLX3LVAEAFWtI= Subject key identifier: 02:2C:64:0C:1D:22:9C:48:FC:F4:3B:01:F5:61:50:C8:ED:5A:22:8B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F5E62C85303D373A69255C340 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0faf63f-7c57-3279-8a19-b5c4db997e94.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 7029 IP address blocks: 69.40.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c8:53:03:d3:73:a6:92:55:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=0fb7505d-015e-4e52-bb92-9b0639518047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7c:c3:71:75:64:8b:3c:93:df:9f:b7:1c:9c: 9f:b0:2f:c1:22:70:28:15:0e:6a:89:e6:62:05:9d: 4d:4a:0d:0b:eb:12:f0:2c:80:f1:0d:d3:c2:1f:f6: 4a:c6:3d:ac:e1:19:bc:c0:4c:37:a4:d4:62:90:75: 61:ff:68:5d:0e:b8:0f:8e:49:a6:3a:06:ba:0e:dc: ad:42:85:75:b5:11:46:b0:aa:38:76:a7:7c:ea:f5: ee:37:e8:cb:85:90:f1:80:be:d6:c7:71:d3:5f:20: 27:ed:03:c4:77:b2:16:e6:e2:59:83:4c:7e:d0:d5: 27:d2:61:c4:9f:d7:22:c0:75:63:0f:3b:80:bd:d3: 36:49:3e:70:e4:90:34:b3:b7:ba:15:1d:c3:f2:f8: 16:74:2d:21:0f:c0:b7:af:6d:ab:cc:c8:8a:7d:0a: 7d:94:68:38:3b:f3:61:42:2d:e9:a2:49:57:2b:2b: b2:04:ae:c6:f0:49:25:00:80:f1:58:5c:ed:af:39: 76:c2:16:dd:8b:cb:d9:c7:28:c7:a5:ad:32:8e:ba: 5e:94:fb:05:f5:89:ee:20:76:a2:7f:b9:09:61:5c: 52:64:5a:3b:9f:5f:14:f8:25:28:78:70:47:b4:47: 68:74:3e:c1:40:88:2d:d3:cb:e6:b2:df:02:f7:46: e0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2C:64:0C:1D:22:9C:48:FC:F4:3B:01:F5:61:50:C8:ED:5A:22:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0faf63f-7c57-3279-8a19-b5c4db997e94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:13:8c:cd:90:c2:b8:8f:9c:ec:a0:20:3a:02:8e:40:f7:1c: b2:f0:33:7b:08:a2:47:96:4d:48:3e:9f:5c:ee:e2:57:2d:d8: 37:ee:4b:31:2d:b5:0b:50:02:86:4d:fb:43:b9:2c:21:2d:33: db:48:da:88:75:30:88:8a:35:0c:45:0c:7e:a7:c6:19:53:ca: 5b:f0:eb:41:25:15:62:5f:d7:3c:e4:90:ef:a8:1c:f0:a6:e2: 91:34:a8:88:40:f6:61:d8:8c:13:1a:01:ed:cb:1e:26:0a:05: d7:54:1f:47:2a:00:ee:ab:1b:18:a9:f8:88:bb:2e:79:42:ff: 1d:a8:3f:19:11:6d:1d:12:ce:a9:16:95:79:0f:3b:64:df:db: a1:f9:87:d6:cb:bf:3a:32:1f:75:a5:f7:d1:64:81:be:10:85: 86:29:99:99:0a:63:f1:de:84:9f:2d:d0:09:88:e7:1b:da:3d: ff:61:04:ea:c0:4e:02:12:80:e9:85:61:b4:4d:c9:ad:53:36: 2b:e3:25:fe:9b:77:76:c2:02:67:3d:e1:ef:79:0a:bc:59:d3: 8f:47:55:41:5e:0f:6e:28:91:9c:3d:90:64:8c:ba:63:ca:7c: fa:a3:de:0c:ce:2d:53:06:47:5c:4b:4f:be:4c:a2:50:76:4d: 8e:c0:df:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYshTA9NzppJVw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk MGZiNzUwNWQtMDE1ZS00ZTUyLWJiOTItOWIwNjM5NTE4MDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3zDcXVkizyT35+3HJyfsC/BInAoFQ5qieZi BZ1NSg0L6xLwLIDxDdPCH/ZKxj2s4Rm8wEw3pNRikHVh/2hdDrgPjkmmOga6Dtyt QoV1tRFGsKo4dqd86vXuN+jLhZDxgL7Wx3HTXyAn7QPEd7IW5uJZg0x+0NUn0mHE n9ciwHVjDzuAvdM2ST5w5JA0s7e6FR3D8vgWdC0hD8C3r22rzMiKfQp9lGg4O/Nh Qi3poklXKyuyBK7G8EklAIDxWFztrzl2whbdi8vZxyjHpa0yjrpelPsF9YnuIHai f7kJYVxSZFo7n18U+CUoeHBHtEdodD7BQIgt08vmst8C90bgqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIsZAwdIpxI/PQ7AfVhUMjtWiKLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTBmYWY2M2YtN2M1Ny0z Mjc5LThhMTktYjVjNGRiOTk3ZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRSggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsTjM2QwriPnOygIDoCjkD3HLLwM3sIokeWTUg+n1zu4lct2DfuSzEt tQtQAoZN+0O5LCEtM9tI2oh1MIiKNQxFDH6nxhlTylvw60ElFWJf1zzkkO+oHPCm 4pE0qIhA9mHYjBMaAe3LHiYKBddUH0cqAO6rGxip+Ii7LnlC/x2oPxkRbR0SzqkW lXkPO2Tf26H5h9bLvzoyH3Wl99Fkgb4QhYYpmZkKY/HehJ8t0AmI5xvaPf9hBOrA TgISgOmFYbRNya1TNivjJf6bd3bCAmc94e95CrxZ049HVUFeD24okZw9kGSMumPK fPqj3gzOLVMGR1xLT75MolB2TY7A3xM= -----END CERTIFICATE-----Generated at Sat Oct 3 12:02:42 2026 by rpki-client