$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/152d5f6f-78f2-31d9-8757-11d8cefc505c.roa File: 152d5f6f-78f2-31d9-8757-11d8cefc505c.roa (raw, json) Hash identifier: uEoInNz4xhor8mAlyp+MRbftkfz7OKlm8VskZyMpkNE= Subject key identifier: 9B:3B:32:F8:24:EA:D1:E0:A6:03:CB:92:6F:C6:F0:D1:60:3E:4E:A1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F4986491D30E526F812C9CC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/152d5f6f-78f2-31d9-8757-11d8cefc505c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 53271 IP address blocks: 67.62.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:49:1d:30:e5:26:f8:12:c9:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bf938405-c3e1-440e-8a5f-07bfab82f977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fe:bc:5b:a9:00:97:b6:0d:98:48:a1:22:20: 9f:fc:95:76:0f:cd:de:02:78:95:bc:ed:f0:10:37: d7:16:e2:30:20:38:b7:04:21:73:b9:e6:df:c9:a1: 3d:6b:ed:eb:03:13:a9:48:fa:eb:de:53:53:54:92: 85:5b:b4:8f:64:7c:5e:35:7c:95:46:0e:e3:97:57: 53:6f:12:32:3b:ab:25:72:d0:43:99:53:99:20:75: f7:e5:cf:79:db:12:8c:16:35:a9:5f:c7:f9:ad:f1: 79:c6:38:73:7d:f2:c3:22:81:c3:d5:0e:07:ea:f2: 95:ed:c8:73:67:d3:46:f4:c5:54:ca:6d:b8:f2:f1: c7:05:4a:ad:38:58:63:07:61:33:57:f1:40:b6:72: 99:d3:2f:b5:41:1e:08:92:2f:5d:6b:1c:f1:c6:99: c4:91:ac:2b:49:9a:7d:11:b4:84:74:ef:82:34:cf: f1:23:31:e6:4d:66:c3:5d:95:b4:44:41:a0:3a:6a: f8:a7:1a:2d:65:e6:48:44:6c:73:5f:d5:62:03:c6: b3:d7:34:0c:a4:d5:e4:be:55:a1:d9:ea:43:48:68: 32:56:a1:33:a0:57:76:10:e7:15:d9:2e:96:e3:52: c2:10:ca:23:8d:1f:92:a1:ad:1c:99:e9:8d:8c:fd: 03:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:3B:32:F8:24:EA:D1:E0:A6:03:CB:92:6F:C6:F0:D1:60:3E:4E:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/152d5f6f-78f2-31d9-8757-11d8cefc505c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.62.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:71:60:97:d4:f4:29:5d:a0:c2:da:be:92:31:81:7d:c2:3a: cf:f6:c3:07:f5:e1:74:d0:56:05:95:a8:f0:41:49:49:3b:0e: d7:ca:c2:3a:8a:32:a2:f4:a8:f6:15:cf:d9:48:ed:d9:c4:c8: 5c:14:71:19:3e:f3:f7:ea:87:f9:9e:28:e5:04:08:08:9a:6f: 64:d7:fa:ca:2f:10:1d:39:07:e7:ab:09:2f:fc:d5:bd:92:25: 11:d0:55:d0:ce:66:82:3f:37:83:ad:06:81:21:85:14:99:78: 50:34:08:5a:f3:f5:b8:d7:85:b1:63:ec:ea:ab:95:fe:e8:c9: 63:7d:b7:04:8f:3b:0d:40:46:97:25:28:ee:45:5f:c8:85:a9: 9e:cb:b7:f9:13:b8:8c:c7:df:5f:35:b7:b9:d0:77:a8:19:49: bb:51:66:62:d0:8f:ea:47:97:6d:c7:c6:b8:7f:a6:59:62:4d: 54:0d:d5:2b:2a:89:56:48:ca:8c:37:10:ec:97:23:09:c0:14: f4:7a:b1:a3:cc:06:6b:4e:3c:b1:ef:a3:7f:37:f7:7d:84:6d: 43:e7:18:bd:87:91:f9:ec:a1:0d:b3:d9:1d:58:c5:0f:be:de: c7:38:1d:7f:b9:72:03:ee:2e:f1:96:45:fa:39:25:05:ae:5d: 1d:5a:47:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhkkdMOUm+BLJzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmY5Mzg0MDUtYzNlMS00NDBlLThhNWYtMDdiZmFiODJmOTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P68W6kAl7YNmEihIiCf/JV2D83eAniVvO3w EDfXFuIwIDi3BCFzuebfyaE9a+3rAxOpSPrr3lNTVJKFW7SPZHxeNXyVRg7jl1dT bxIyO6slctBDmVOZIHX35c952xKMFjWpX8f5rfF5xjhzffLDIoHD1Q4H6vKV7chz Z9NG9MVUym248vHHBUqtOFhjB2EzV/FAtnKZ0y+1QR4Iki9daxzxxpnEkawrSZp9 EbSEdO+CNM/xIzHmTWbDXZW0REGgOmr4pxotZeZIRGxzX9ViA8az1zQMpNXkvlWh 2epDSGgyVqEzoFd2EOcV2S6W41LCEMojjR+Soa0cmemNjP0DcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJs7Mvgk6tHgpgPLkm/G8NFgPk6hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTUyZDVmNmYtNzhmMi0z MWQ5LTg3NTctMTFkOGNlZmM1MDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQz5YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZxYJfU9CldoMLavpIxgX3COs/2wwf14XTQVgWVqPBBSUk7DtfKwjqK MqL0qPYVz9lI7dnEyFwUcRk+8/fqh/meKOUECAiab2TX+sovEB05B+erCS/81b2S JRHQVdDOZoI/N4OtBoEhhRSZeFA0CFrz9bjXhbFj7Oqrlf7oyWN9twSPOw1ARpcl KO5FX8iFqZ7Lt/kTuIzH3181t7nQd6gZSbtRZmLQj+pHl23Hxrh/plliTVQN1Ssq iVZIyow3EOyXIwnAFPR6saPMBmtOPLHvo383932EbUPnGL2HkfnsoQ2z2R1YxQ++ 3sc4HX+5cgPuLvGWRfo5JQWuXR1aR+g= -----END CERTIFICATE-----Generated at Sun Sep 27 08:49:33 2026 by rpki-client