$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7066ed3-15b3-37a0-bb45-03fba5f29522.roa File: b7066ed3-15b3-37a0-bb45-03fba5f29522.roa (raw, json) Hash identifier: 9+fy+WQQ7vn/f1tbuDgxqGw4ko8CtZBRObVmwhlzSzY= Subject key identifier: 35:82:64:02:C1:02:74:02:A5:35:32:5A:4B:0C:C3:11:56:02:02:D9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F1467898768FE176C43DBB700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7066ed3-15b3-37a0-bb45-03fba5f29522.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 7029 IP address blocks: 208.101.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:89:87:68:fe:17:6c:43:db:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=75969805-fda9-4659-a3ae-ef9624dd362d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1c:69:af:ce:91:76:5d:bb:60:fb:ad:77:1a: f4:ca:cb:38:1a:47:71:81:5b:f8:91:92:08:42:83: 43:69:fb:a9:6f:b5:70:70:35:44:3a:c4:97:19:a7: d8:65:39:bb:c6:e9:6c:4f:e7:2e:e2:a8:ad:91:86: 98:c9:ef:22:f4:19:56:69:69:fc:26:59:47:a6:4f: b1:29:81:c5:17:42:bf:85:8a:62:aa:53:50:e7:e8: de:c4:7f:e1:a4:98:59:23:ec:24:b8:e6:60:f7:22: 9d:cc:11:0e:e4:b8:28:8c:20:6f:2d:dc:30:82:0d: c6:a7:61:49:ab:86:cc:17:d0:de:19:67:0b:14:da: d1:fa:c6:85:70:41:8b:60:13:37:10:b2:78:e3:c7: 06:2b:0e:7b:26:cd:18:96:6a:de:38:37:c1:1a:77: 21:68:c1:2a:a9:ac:d7:5a:8c:48:0f:96:c2:f9:6f: 17:23:72:b8:a7:8b:b8:d2:e1:5f:34:25:db:53:e7: 2e:91:9a:f5:62:d2:32:4d:fa:95:e2:ff:47:3b:b0: d1:38:84:a3:04:ac:eb:2a:8c:fb:c3:a0:39:86:53: 31:be:82:ac:9d:19:89:71:f4:11:c3:00:d4:9f:0d: bf:8f:ff:a1:9d:b4:0f:fe:f4:56:2c:29:3e:4b:ff: 61:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:82:64:02:C1:02:74:02:A5:35:32:5A:4B:0C:C3:11:56:02:02:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7066ed3-15b3-37a0-bb45-03fba5f29522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:0a:cf:fa:b5:c7:92:c0:5b:82:0c:37:24:ba:e9:8a:04:2c: e4:9c:80:e6:dc:83:37:48:31:62:0e:29:17:08:1a:2a:ee:51: a2:e5:89:9d:a3:1b:37:96:f2:1a:81:86:c5:90:ad:12:e7:e4: 45:be:40:08:1f:75:26:b8:3d:82:b6:84:bf:25:80:1e:99:47: 44:d9:bb:f3:eb:55:e9:c4:7f:cd:d2:3c:ae:9f:aa:1c:54:98: ec:ee:5c:b0:b3:e0:99:14:f1:03:49:e2:4b:f1:26:4d:4a:5b: f5:64:b1:b0:5d:11:4b:5f:4b:8f:2e:c2:c8:2e:ea:d7:55:b1: 4d:04:c7:b6:a0:47:68:d9:13:3b:d8:fd:ab:f8:16:de:74:6e: 5b:f3:95:83:e9:a4:f7:76:c5:a5:d4:f9:7f:72:9b:61:b2:77: 47:7d:82:78:29:84:7c:8f:bb:08:1f:27:63:76:2f:1b:99:25: 62:c8:16:a6:b3:c9:c4:f3:ab:fb:12:fa:9d:19:01:a5:97:06: d2:81:41:a6:d9:96:4b:a9:b5:12:75:2e:3b:21:79:1a:92:bc: 57:97:33:1f:e0:04:63:9d:ba:7f:c2:bf:df:c3:c4:6e:fd:5c: 3d:bc:f2:57:f3:fa:9f:c0:04:82:66:af:79:23:1a:2b:c7:66: b3:f3:50:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ4mHaP4XbEPbtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NzU5Njk4MDUtZmRhOS00NjU5LWEzYWUtZWY5NjI0ZGQzNjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRxpr86Rdl27YPutdxr0yss4GkdxgVv4kZII QoNDafupb7VwcDVEOsSXGafYZTm7xulsT+cu4qitkYaYye8i9BlWaWn8JllHpk+x KYHFF0K/hYpiqlNQ5+jexH/hpJhZI+wkuOZg9yKdzBEO5LgojCBvLdwwgg3Gp2FJ q4bMF9DeGWcLFNrR+saFcEGLYBM3ELJ448cGKw57Js0YlmreODfBGnchaMEqqazX WoxID5bC+W8XI3K4p4u40uFfNCXbU+cukZr1YtIyTfqV4v9HO7DROISjBKzrKoz7 w6A5hlMxvoKsnRmJcfQRwwDUnw2/j/+hnbQP/vRWLCk+S/9h9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWCZALBAnQCpTUyWksMwxFWAgLZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjcwNjZlZDMtMTViMy0z N2EwLWJiNDUtMDNmYmE1ZjI5NTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GWFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkKz/q1x5LAW4IMNyS66YoELOScgObcgzdIMWIOKRcIGiruUaLliZ2j GzeW8hqBhsWQrRLn5EW+QAgfdSa4PYK2hL8lgB6ZR0TZu/PrVenEf83SPK6fqhxU mOzuXLCz4JkU8QNJ4kvxJk1KW/VksbBdEUtfS48uwsgu6tdVsU0Ex7agR2jZEzvY /av4Ft50blvzlYPppPd2xaXU+X9ym2Gyd0d9gngphHyPuwgfJ2N2LxuZJWLIFqaz ycTzq/sS+p0ZAaWXBtKBQabZlkuptRJ1LjsheRqSvFeXMx/gBGOdun/Cv9/DxG79 XD288lfz+p/ABIJmr3kjGivHZrPzULQ= -----END CERTIFICATE-----Generated at Sun Sep 27 14:49:53 2026 by rpki-client