$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e121129d-58f0-3ca0-b388-f88902b0d991.roa File: e121129d-58f0-3ca0-b388-f88902b0d991.roa (raw, json) Hash identifier: J1dbC+INnkGdafeAR6bRAP2qW24/xLOqkjGKrVpKVXQ= Subject key identifier: 8C:C7:29:3B:A7:98:3E:C5:28:08:85:13:EE:8D:BB:77:A1:2B:2F:83 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B1F0CD5081FC6BF3AF00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e121129d-58f0-3ca0-b388-f88902b0d991.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 64.206.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b1:f0:cd:50:81:fc:6b:f3:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=e60b21ad-d564-4b30-ac3f-4ae41795ad8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3d:5b:b3:de:eb:ec:af:8e:e1:73:b7:14:3f: 75:e4:1f:10:18:63:cc:cb:33:77:ca:5e:e4:7b:40: 21:b5:25:7a:d7:45:8e:ff:2a:3b:c3:81:3e:f1:cb: 1d:c1:d1:4d:19:0f:67:da:ef:15:55:11:95:37:6e: ce:33:12:3f:15:f3:1c:91:86:f5:76:86:90:62:63: 2c:8c:ed:f5:a2:6d:8b:b8:12:81:e0:67:76:f6:5f: f6:35:c1:76:d7:aa:91:16:a2:9d:24:d7:fd:9a:fd: 27:01:c2:82:3a:40:45:f9:da:60:65:3a:bb:27:f5: c5:9e:99:a5:35:6a:0c:51:ed:11:ad:28:4e:e6:8b: 73:ef:34:e6:e5:d4:02:46:71:db:56:69:12:84:b3: 29:65:17:64:44:43:d8:6f:1e:4f:05:79:1b:ea:87: d7:92:01:ca:6f:fa:86:59:e3:a7:d8:a0:63:27:f7: 86:a1:bf:61:09:9d:a1:6c:2a:fc:d4:5b:6f:82:c6: a1:e8:b8:a3:9c:d3:6c:4b:84:df:ce:c4:5f:34:26: 3c:92:85:8a:74:29:5b:ea:5c:91:6e:a9:b9:d8:40: 25:95:8a:ab:e0:9e:67:b2:03:bd:c2:a7:6b:bc:ad: f6:7f:0a:1a:e5:ea:68:40:64:e3:9a:52:19:a3:b1: e0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C7:29:3B:A7:98:3E:C5:28:08:85:13:EE:8D:BB:77:A1:2B:2F:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e121129d-58f0-3ca0-b388-f88902b0d991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.206.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:d8:d7:b4:92:b2:00:fe:be:a5:4d:99:e0:34:e4:2d:7a:b1: 9b:4f:6f:31:e4:65:2d:2e:de:13:11:91:89:66:6c:da:30:ed: 54:37:2c:8e:13:1a:50:1c:ad:62:7b:1a:45:da:39:c0:ba:ce: c4:67:e5:64:e3:a6:17:89:6d:c2:bf:ad:cf:64:c8:6a:98:d7: 9f:7e:16:c3:2d:50:1f:83:74:c3:4f:ea:45:1f:78:23:6c:7d: 42:3e:f5:58:39:2f:31:4c:00:60:16:c9:91:63:ec:38:05:7e: c1:84:2b:cd:1c:de:34:a2:4c:bc:91:dd:a6:91:f0:12:57:49: 17:ca:b4:4f:78:47:b3:41:b9:f2:b5:8c:db:18:b8:42:5f:3e: ad:17:10:99:45:38:59:35:7c:d4:27:e9:75:9a:80:c0:53:3a: 39:ed:47:b8:b2:03:1f:94:9c:9d:02:ca:40:6e:f4:c8:15:32: 16:ac:ba:5b:99:85:36:4e:97:c4:41:fb:28:23:94:d6:92:a3: e4:b3:9a:16:0c:7d:53:7d:08:94:62:92:87:88:3c:c4:93:ec: fb:36:01:8b:02:13:92:83:20:83:e3:71:30:da:90:05:49:0c: b5:60:4e:ba:32:f4:43:45:99:ee:8e:a6:7b:4d:04:de:f9:2c: 65:0e:ce:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rHwzVCB/GvzrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk ZTYwYjIxYWQtZDU2NC00YjMwLWFjM2YtNGFlNDE3OTVhZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgT1bs97r7K+O4XO3FD915B8QGGPMyzN3yl7k e0AhtSV610WO/yo7w4E+8csdwdFNGQ9n2u8VVRGVN27OMxI/FfMckYb1doaQYmMs jO31om2LuBKB4Gd29l/2NcF216qRFqKdJNf9mv0nAcKCOkBF+dpgZTq7J/XFnpml NWoMUe0RrShO5otz7zTm5dQCRnHbVmkShLMpZRdkREPYbx5PBXkb6ofXkgHKb/qG WeOn2KBjJ/eGob9hCZ2hbCr81Ftvgsah6LijnNNsS4TfzsRfNCY8koWKdClb6lyR bqm52EAllYqr4J5nsgO9wqdrvK32fwoa5epoQGTjmlIZo7HgOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzHKTunmD7FKAiFE+6Nu3ehKy+DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTEyMTEyOWQtNThmMC0z Y2EwLWIzODgtZjg4OTAyYjBkOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM7nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHY17SSsgD+vqVNmeA05C16sZtPbzHkZS0u3hMRkYlmbNow7VQ3LI4T GlAcrWJ7GkXaOcC6zsRn5WTjpheJbcK/rc9kyGqY159+FsMtUB+DdMNP6kUfeCNs fUI+9Vg5LzFMAGAWyZFj7DgFfsGEK80c3jSiTLyR3aaR8BJXSRfKtE94R7NBufK1 jNsYuEJfPq0XEJlFOFk1fNQn6XWagMBTOjntR7iyAx+UnJ0CykBu9MgVMhasuluZ hTZOl8RB+ygjlNaSo+SzmhYMfVN9CJRikoeIPMST7Ps2AYsCE5KDIIPjcTDakAVJ DLVgTroy9ENFme6OpntNBN75LGUOzvs= -----END CERTIFICATE-----Generated at Thu Oct 8 16:00:36 2026 by rpki-client