$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c70f49b6-5761-3442-a40c-5a838f9fd894.roa File: c70f49b6-5761-3442-a40c-5a838f9fd894.roa (raw, json) Hash identifier: P6I25jcvtOaL6Cio9nPR5w3bR9Bw44i3PvZZ4YXZvTM= Subject key identifier: 41:74:AD:80:5D:C1:30:CE:9E:FA:13:9E:25:8A:AE:35:BA:35:38:D6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F498898022FCAF6522FF26B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c70f49b6-5761-3442-a40c-5a838f9fd894.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 216.96.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:98:02:2f:ca:f6:52:2f:f2:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dd4725b7-082d-497f-987c-34c1b01cce47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:81:68:26:9c:8e:35:d8:19:d9:2c:b3:00:1a: 69:e6:fc:1c:c2:42:57:03:ce:f0:7d:97:2a:16:45: 71:1d:01:30:e6:e1:1d:cc:9d:1d:cc:06:66:5c:6f: e8:20:90:00:42:bc:16:25:d4:d4:0c:7f:5b:3d:7c: 5c:86:2e:1d:5c:8d:ad:20:80:47:94:4a:f9:c0:22: 32:44:3b:ea:e9:52:1a:66:6a:a3:f2:a8:fa:9d:14: 92:5b:f7:b9:15:b7:ef:9e:86:d0:eb:85:fa:3d:45: 65:9f:7b:87:fe:70:6b:de:aa:80:1d:21:ea:bf:c0: fb:55:47:c6:2b:e4:b1:76:10:91:9c:02:75:58:25: 0f:82:f2:1a:21:60:19:2f:29:49:ee:fe:33:51:aa: a2:44:88:67:86:4d:12:57:39:98:e5:e8:24:94:7e: 68:c0:ce:1d:a4:5b:be:04:0b:fd:4b:40:1e:9d:fc: 7a:92:40:63:19:d0:66:3b:90:8d:dd:1b:95:ab:7f: b6:61:f2:1f:69:07:11:e1:40:94:cb:9e:a8:0f:c6: 53:77:ad:2c:cb:27:55:f5:5b:d9:f5:4c:a7:b8:e2: 12:f7:81:c1:e0:70:f8:31:be:f5:84:38:7c:ac:64: 73:8f:ec:e1:25:b5:60:13:d4:88:68:96:2a:4f:11: 69:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:74:AD:80:5D:C1:30:CE:9E:FA:13:9E:25:8A:AE:35:BA:35:38:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c70f49b6-5761-3442-a40c-5a838f9fd894.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:42:38:b5:99:1b:a2:0d:84:29:80:2a:18:6f:0a:7b:23:9a: 82:f8:44:d8:ce:23:51:d9:64:00:bf:3e:dd:fb:c5:10:ca:8e: b0:90:1a:eb:06:17:d5:98:38:e2:68:c8:2c:18:f9:ba:fa:d1: 5b:4c:2c:af:42:10:f6:0f:46:f2:46:bc:31:7d:0d:04:31:9c: 5f:eb:8b:69:cc:e5:56:b6:cf:16:38:ad:d3:9e:b9:a6:21:be: 64:1a:6a:ea:6d:ea:20:0c:1d:95:13:0a:a5:f7:e4:ae:0b:c7: 6f:73:87:aa:c9:c6:b6:82:0c:d9:b1:ee:12:dd:c8:7f:4a:7a: c2:09:e7:5e:16:a5:ad:05:04:a7:43:ea:f4:47:6a:11:a5:a5: 9d:65:99:c9:fe:86:3e:2f:75:13:4c:a7:cf:ad:98:6a:24:b5: db:61:84:c4:eb:f0:df:21:4c:f0:f9:b2:cb:a8:bc:2e:81:10: 61:1c:ea:d1:e1:9f:a8:c1:66:f7:60:c6:12:a2:99:15:88:ef: 11:fe:48:26:68:ef:4b:61:b8:34:e9:5c:c2:09:dc:1c:eb:8f: 88:e7:76:f4:3a:d1:72:77:82:89:b8:02:dd:22:76:99:f0:31: 2a:a1:96:8b:bc:c9:7f:1f:73:fe:d8:65:b6:5d:c1:12:b7:d2: 82:a0:b8:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiJgCL8r2Ui/yawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGQ0NzI1YjctMDgyZC00OTdmLTk4N2MtMzRjMWIwMWNjZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoFoJpyONdgZ2SyzABpp5vwcwkJXA87wfZcq FkVxHQEw5uEdzJ0dzAZmXG/oIJAAQrwWJdTUDH9bPXxchi4dXI2tIIBHlEr5wCIy RDvq6VIaZmqj8qj6nRSSW/e5FbfvnobQ64X6PUVln3uH/nBr3qqAHSHqv8D7VUfG K+SxdhCRnAJ1WCUPgvIaIWAZLylJ7v4zUaqiRIhnhk0SVzmY5egklH5owM4dpFu+ BAv9S0Aenfx6kkBjGdBmO5CN3RuVq3+2YfIfaQcR4UCUy56oD8ZTd60syydV9VvZ 9UynuOIS94HB4HD4Mb71hDh8rGRzj+zhJbVgE9SIaJYqTxFplwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEF0rYBdwTDOnvoTniWKrjW6NTjWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzcwZjQ5YjYtNTc2MS0z NDQyLWE0MGMtNWE4MzhmOWZkODk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GAeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRCOLWZG6INhCmAKhhvCnsjmoL4RNjOI1HZZAC/Pt37xRDKjrCQGusG F9WYOOJoyCwY+br60VtMLK9CEPYPRvJGvDF9DQQxnF/ri2nM5Va2zxY4rdOeuaYh vmQaaupt6iAMHZUTCqX35K4Lx29zh6rJxraCDNmx7hLdyH9KesIJ514Wpa0FBKdD 6vRHahGlpZ1lmcn+hj4vdRNMp8+tmGoktdthhMTr8N8hTPD5ssuovC6BEGEc6tHh n6jBZvdgxhKimRWI7xH+SCZo70thuDTpXMIJ3Bzrj4jndvQ60XJ3gom4At0idpnw MSqhlou8yX8fc/7YZbZdwRK30oKguCY= -----END CERTIFICATE-----Generated at Sat Oct 3 19:57:29 2026 by rpki-client