$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9158033-9432-32b6-9e76-162cc075a3e8.roa File: f9158033-9432-32b6-9e76-162cc075a3e8.roa (raw, json) Hash identifier: /8CuSPQcGyLHkEM+Skb7DLPxniPR5vXfevvD2mz5vzo= Subject key identifier: 57:77:3A:99:1B:30:B5:15:DF:04:F6:53:6B:C5:2E:78:6C:24:66:83 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D9A41516EE7FA9B0A0800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9158033-9432-32b6-9e76-162cc075a3e8.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 67.224.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:9a:41:51:6e:e7:fa:9b:0a:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=6171a373-194e-4ee0-b3eb-ce4e26c94c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a8:a3:e7:eb:63:ff:28:fb:21:4a:f4:0a:28: 75:79:a6:78:95:8b:52:a2:d2:00:c4:e7:5a:02:ef: 76:5c:91:ea:bd:1e:07:2f:b8:a3:8e:29:dd:13:45: e9:1a:2c:03:16:a0:65:76:dd:b2:8f:ec:b2:db:86: 02:5c:af:b2:06:ee:7e:4d:e2:11:cd:80:81:ff:e2: 4e:2c:63:82:57:1b:9b:a7:69:d5:d0:2d:dd:55:5b: 01:31:6d:c5:ed:42:c0:05:34:04:dc:83:ac:fd:e1: a3:5d:57:d8:5e:d6:61:80:eb:73:b3:e1:ee:75:af: be:0f:1a:26:35:9b:90:be:bc:62:42:bd:09:4f:16: a2:6e:16:e1:c3:10:dc:c9:ae:bc:96:37:84:3a:3f: 61:48:ea:84:5d:a1:d8:7f:fe:b4:3b:ce:f3:f7:8b: bb:1f:82:86:16:7d:94:78:d6:6f:83:5b:ef:c8:dd: 7e:0f:d6:e3:19:03:26:b3:bc:44:98:54:8b:68:d7: 5f:47:f8:98:e5:a7:a7:4d:e4:02:47:4d:4d:49:69: 2f:7b:48:d6:4a:0a:7c:6f:14:9c:ba:eb:67:d3:15: 40:d8:5b:a4:a6:f8:df:21:f7:d6:98:1f:d0:d1:ea: b2:2f:c6:ea:85:ea:a3:17:4f:3b:71:8f:8a:02:4d: 3d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:77:3A:99:1B:30:B5:15:DF:04:F6:53:6B:C5:2E:78:6C:24:66:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9158033-9432-32b6-9e76-162cc075a3e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.224.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f7:6e:bd:3c:33:ef:d7:6e:79:a9:a1:aa:57:52:77:d4:4f: ce:87:9b:ac:0b:cc:73:e2:fc:bf:99:6a:c5:60:d8:82:eb:91: 2d:e1:37:11:43:d4:b5:83:10:5e:93:6c:fa:40:f0:91:d7:64: 3a:c1:cb:9b:a4:ef:28:c0:18:8a:ec:2a:f6:f3:33:a9:ab:ab: 25:f8:c2:cf:4a:f1:87:d5:3a:11:3f:dd:01:91:c7:bb:fc:84: ca:7a:5a:ab:61:03:51:f3:9b:2e:16:c8:b7:c1:56:58:bc:34: 16:02:9e:6d:2d:19:66:3f:00:c1:10:eb:04:77:9c:4b:9b:d3: 99:c0:e3:c8:78:5b:52:01:25:6f:98:1e:a2:14:95:a4:c9:64: 1e:d3:74:12:15:e7:0e:29:00:23:fb:ef:32:af:7e:d5:5a:7d: dc:3b:b5:89:ee:b8:64:60:8b:ef:86:2f:82:7a:5d:4a:04:aa: c8:9b:2b:29:cd:63:c9:c6:d8:e1:f8:f5:9d:73:83:d2:f8:69: 6e:be:da:c7:40:ec:43:d5:20:1c:2f:5b:86:ea:7e:b9:d1:28: 74:8f:aa:a0:86:ec:27:30:0d:4b:59:81:ff:28:06:f0:9b:b2: 71:86:33:08:c2:b2:a8:62:04:cd:d4:2c:db:01:e8:2c:b8:d9: f8:11:dd:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZpBUW7n+psKCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NjE3MWEzNzMtMTk0ZS00ZWUwLWIzZWItY2U0ZTI2Yzk0YzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8aij5+tj/yj7IUr0Cih1eaZ4lYtSotIAxOda Au92XJHqvR4HL7ijjindE0XpGiwDFqBldt2yj+yy24YCXK+yBu5+TeIRzYCB/+JO LGOCVxubp2nV0C3dVVsBMW3F7ULABTQE3IOs/eGjXVfYXtZhgOtzs+Huda++Dxom NZuQvrxiQr0JTxaibhbhwxDcya68ljeEOj9hSOqEXaHYf/60O87z94u7H4KGFn2U eNZvg1vvyN1+D9bjGQMms7xEmFSLaNdfR/iY5aenTeQCR01NSWkve0jWSgp8bxSc uutn0xVA2FukpvjfIffWmB/Q0eqyL8bqheqjF087cY+KAk09cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFd3OpkbMLUV3wT2U2vFLnhsJGaDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjkxNTgwMzMtOTQzMi0z MmI2LTllNzYtMTYyY2MwNzVhM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ+AgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADL3br08M+/XbnmpoapXUnfUT86Hm6wLzHPi/L+ZasVg2ILrkS3hNxFD 1LWDEF6TbPpA8JHXZDrBy5uk7yjAGIrsKvbzM6mrqyX4ws9K8YfVOhE/3QGRx7v8 hMp6WqthA1Hzmy4WyLfBVli8NBYCnm0tGWY/AMEQ6wR3nEub05nA48h4W1IBJW+Y HqIUlaTJZB7TdBIV5w4pACP77zKvftVafdw7tYnuuGRgi++GL4J6XUoEqsibKynN Y8nG2OH49Z1zg9L4aW6+2sdA7EPVIBwvW4bqfrnRKHSPqqCG7CcwDUtZgf8oBvCb snGGMwjCsqhiBM3ULNsB6Cy42fgR3aQ= -----END CERTIFICATE-----Generated at Thu Oct 1 03:49:37 2026 by rpki-client