$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ad644014-d396-3311-b8f5-c0be900b9032.roa File: ad644014-d396-3311-b8f5-c0be900b9032.roa (raw, json) Hash identifier: nXlycsrfzIrAV4btHzwx3AxmEsJ17UyMvnJsxxPVzl0= Subject key identifier: E4:64:BB:46:09:0C:21:C8:E5:ED:94:1B:CD:A4:61:3A:71:66:7B:24 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F497467A2C19D826CF3BCB600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ad644014-d396-3311-b8f5-c0be900b9032.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 207.91.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:67:a2:c1:9d:82:6c:f3:bc:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e3eafff0-4257-4282-b561-1af0b9f25473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:52:51:34:5d:97:4d:7b:e2:47:c0:3e:c7:c6: d5:d4:ec:71:9d:fe:90:19:5b:c7:b2:13:99:a3:9a: fd:38:2d:66:ac:8b:04:cd:b6:5b:ca:1a:eb:0d:b7: f2:4a:fc:5b:25:38:fe:43:e2:c0:59:cb:9f:03:bd: 90:85:95:8f:e7:f5:48:23:43:e7:7d:11:f8:7e:f9: f3:07:86:61:e1:41:54:bf:72:51:27:b6:fe:01:3b: 03:1f:28:d1:4f:e2:24:5e:1b:58:e3:23:69:59:0e: 1e:10:da:73:38:00:4b:79:3f:3d:cb:96:c6:ab:81: 0f:9c:dc:91:a2:ce:e7:71:96:72:2e:69:4b:d8:7f: 5d:8e:c5:d6:ae:f4:6c:0e:14:fe:74:07:d7:a4:16: f1:9f:ca:3f:a0:06:18:7a:af:3c:21:e8:1c:d5:2f: 00:74:c6:a9:49:83:93:f4:2a:54:9f:bb:d8:5b:2c: 05:a2:4a:54:32:d7:54:e1:ab:69:4d:47:7a:e6:e4: 4b:89:9c:ec:c9:4c:c2:89:42:1c:5e:b5:8a:dd:08: 35:bb:8c:03:1c:58:5d:91:37:4d:69:d3:a7:24:78: f1:13:e3:4e:1c:f3:e4:be:d1:bc:99:95:32:e9:0e: 58:d8:f0:28:f9:27:52:4a:cb:2e:41:a9:c6:f8:70: 48:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:64:BB:46:09:0C:21:C8:E5:ED:94:1B:CD:A4:61:3A:71:66:7B:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ad644014-d396-3311-b8f5-c0be900b9032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.91.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:1b:bf:03:ca:aa:50:13:1f:8f:33:9f:f2:b5:c0:ee:75:ad: b1:96:18:cf:2d:1a:a1:80:47:c4:66:9c:cb:85:d4:92:fd:f3: 83:ad:38:00:1f:c9:64:6f:46:f3:8a:75:9c:e8:73:4d:4b:3c: 2e:0e:07:1b:2c:52:d1:31:7e:e9:43:33:6f:e1:52:51:29:5a: 8a:4d:19:54:d9:72:b2:3c:8a:1d:73:10:23:91:12:73:d4:9d: 2e:76:e6:20:a9:7d:fe:e7:81:99:05:fb:c9:d3:79:fd:0a:da: 71:0a:39:73:6c:26:49:1c:1d:b3:ec:4d:b6:a7:42:4d:da:79: cb:15:60:2c:74:df:77:e7:cd:5a:eb:8b:0b:c0:03:19:e9:2b: a1:50:cc:7d:10:a3:4c:b3:0b:bf:e9:14:1e:4e:e2:9d:c1:30: f4:ab:65:97:1f:57:c6:66:75:8f:f7:be:f1:b7:ac:41:7d:6a: 1c:74:b4:84:bc:8c:83:ec:88:eb:3c:65:cd:0d:a2:bb:cb:5c: d7:38:0d:69:ce:cf:c4:e1:42:7e:8f:4f:44:64:7e:10:c3:77: 6c:21:6a:1a:3a:00:3d:39:0d:2b:a1:d6:10:04:62:4c:42:63: b8:04:86:4c:28:22:ce:d0:9b:a0:86:51:b6:39:ed:c6:c2:bb: 25:d1:7e:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdGeiwZ2CbPO8tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTNlYWZmZjAtNDI1Ny00MjgyLWI1NjEtMWFmMGI5ZjI1NDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFJRNF2XTXviR8A+x8bV1Oxxnf6QGVvHshOZ o5r9OC1mrIsEzbZbyhrrDbfySvxbJTj+Q+LAWcufA72QhZWP5/VII0PnfRH4fvnz B4Zh4UFUv3JRJ7b+ATsDHyjRT+IkXhtY4yNpWQ4eENpzOABLeT89y5bGq4EPnNyR os7ncZZyLmlL2H9djsXWrvRsDhT+dAfXpBbxn8o/oAYYeq88Iegc1S8AdMapSYOT 9CpUn7vYWywFokpUMtdU4atpTUd65uRLiZzsyUzCiUIcXrWK3Qg1u4wDHFhdkTdN adOnJHjxE+NOHPPkvtG8mZUy6Q5Y2PAo+SdSSssuQanG+HBI/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORku0YJDCHI5e2UG82kYTpxZnskMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWQ2NDQwMTQtZDM5Ni0z MzExLWI4ZjUtYzBiZTkwMGI5MDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz1swMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcbvwPKqlATH48zn/K1wO51rbGWGM8tGqGAR8RmnMuF1JL984OtOAAf yWRvRvOKdZzoc01LPC4OBxssUtExfulDM2/hUlEpWopNGVTZcrI8ih1zECOREnPU nS525iCpff7ngZkF+8nTef0K2nEKOXNsJkkcHbPsTbanQk3aecsVYCx033fnzVrr iwvAAxnpK6FQzH0Qo0yzC7/pFB5O4p3BMPSrZZcfV8ZmdY/3vvG3rEF9ahx0tIS8 jIPsiOs8Zc0NorvLXNc4DWnOz8ThQn6PT0RkfhDDd2whaho6AD05DSuh1hAEYkxC Y7gEhkwoIs7Qm6CGUbY57cbCuyXRfiw= -----END CERTIFICATE-----Generated at Sun Oct 4 16:50:00 2026 by rpki-client