$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/290b17d3-46d1-383e-baa1-5a1dd19bbebf.roa File: 290b17d3-46d1-383e-baa1-5a1dd19bbebf.roa (raw, json) Hash identifier: ArHLM492wV0LVmVELekHvVYJ0fbKMqm6zxHLSt1eVTQ= Subject key identifier: 43:9F:2E:8D:33:08:2A:B2:F7:51:5C:FF:55:06:D9:31:A3:D7:26:5A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F02423041A65541F6AD3F9180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/290b17d3-46d1-383e-baa1-5a1dd19bbebf.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 67.141.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:30:41:a6:55:41:f6:ad:3f:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=15696a43-a50b-4510-b934-d21e52b61b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dc:9f:25:10:75:68:8e:a6:93:60:f4:4d:c5: 61:dc:f9:4a:48:a1:0c:5b:6e:a5:ca:e4:d2:fd:73: 72:16:c5:ff:3a:8b:5a:1d:8a:be:94:ef:63:c2:19: 97:db:ed:ae:41:1f:f8:3a:e3:0d:f2:25:64:0d:b0: 5e:48:68:c3:e8:a8:e6:18:fa:e2:d8:b9:95:22:ad: 70:12:fd:64:91:26:09:b2:3c:16:02:d7:30:40:b5: 25:1d:12:27:23:d5:1c:fb:4d:b3:d5:bf:e0:d5:82: 27:1b:18:2e:18:4a:f3:c6:bf:97:a5:90:4f:c9:0e: fc:8f:23:cd:ab:d5:a2:70:b2:6a:95:5d:5d:bc:a3: 70:8d:e2:c1:e0:88:21:5e:48:e3:50:27:d0:82:fd: 3c:ba:4c:71:1f:c8:ac:2f:bc:ca:e7:44:8f:5f:40: 37:13:8a:a4:20:9c:30:ee:4d:97:13:ec:c8:c7:7b: ab:a0:6f:35:ff:63:4a:4d:3b:0c:53:2f:5c:74:cf: 1f:1c:00:a3:3b:65:65:5a:7f:69:20:05:8d:ca:1e: be:f7:4a:e5:90:d6:d7:64:8c:0c:20:0d:b6:f5:89: 91:c2:93:6c:b3:1c:5b:cf:a0:ab:70:39:82:70:06: 02:16:3c:66:a0:50:4f:9e:fe:25:f6:5d:39:3a:47: 63:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9F:2E:8D:33:08:2A:B2:F7:51:5C:FF:55:06:D9:31:A3:D7:26:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/290b17d3-46d1-383e-baa1-5a1dd19bbebf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:e3:62:9c:bd:dd:c7:c7:77:6a:62:f8:81:48:ca:32:1e:17: fd:4d:08:bb:d0:00:f6:69:17:ff:e1:e7:7f:2b:0a:f8:54:74: 69:5e:ea:d0:fe:4e:a8:51:13:b0:29:20:40:dc:08:89:ae:d3: 58:5c:57:3d:3c:c5:77:91:d4:f8:eb:94:a4:02:02:4e:1b:96: 01:62:7c:75:f8:80:23:ea:da:7e:91:39:b6:e3:04:d6:8a:b7: d2:4e:5e:bc:7a:0b:a0:e3:49:a7:51:c9:b2:0d:8a:1a:a1:b1: bd:5c:37:ad:0f:7c:53:88:17:62:66:19:39:2f:dd:7d:82:87: ba:79:7d:d2:e3:3c:ae:3b:10:1e:d2:db:67:b1:2c:3c:04:a0: 50:b0:52:18:67:f3:d5:29:1f:63:e5:72:6c:38:34:ec:5d:27: 50:a0:6d:87:8a:0f:24:8e:57:9c:e4:ff:23:66:dd:70:6c:87: 2a:1d:88:ad:86:5f:8d:e9:0b:d2:da:c6:46:83:58:c1:bc:03: f2:46:81:c3:60:96:1a:3a:50:42:22:34:29:61:36:ac:54:44: be:c8:a8:1f:87:2f:ba:5d:3b:7e:c6:f2:87:1f:54:6d:c2:5f: 18:99:ee:ea:09:c4:00:fd:8f:99:45:74:66:a0:95:a0:d4:46: b0:1a:ba:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjBBplVB9q0/kYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk MTU2OTZhNDMtYTUwYi00NTEwLWI5MzQtZDIxZTUyYjYxYjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudyfJRB1aI6mk2D0TcVh3PlKSKEMW26lyuTS /XNyFsX/OotaHYq+lO9jwhmX2+2uQR/4OuMN8iVkDbBeSGjD6KjmGPri2LmVIq1w Ev1kkSYJsjwWAtcwQLUlHRInI9Uc+02z1b/g1YInGxguGErzxr+XpZBPyQ78jyPN q9WicLJqlV1dvKNwjeLB4IghXkjjUCfQgv08ukxxH8isL7zK50SPX0A3E4qkIJww 7k2XE+zIx3uroG81/2NKTTsMUy9cdM8fHACjO2VlWn9pIAWNyh6+90rlkNbXZIwM IA229YmRwpNssxxbz6CrcDmCcAYCFjxmoFBPnv4l9l05Okdj/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOfLo0zCCqy91Fc/1UG2TGj1yZaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjkwYjE3ZDMtNDZkMS0z ODNlLWJhYTEtNWExZGQxOWJiZWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ41gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTjYpy93cfHd2pi+IFIyjIeF/1NCLvQAPZpF//h538rCvhUdGle6tD+ TqhRE7ApIEDcCImu01hcVz08xXeR1PjrlKQCAk4blgFifHX4gCPq2n6RObbjBNaK t9JOXrx6C6DjSadRybINihqhsb1cN60PfFOIF2JmGTkv3X2Ch7p5fdLjPK47EB7S 22exLDwEoFCwUhhn89UpH2Plcmw4NOxdJ1CgbYeKDySOV5zk/yNm3XBshyodiK2G X43pC9LaxkaDWMG8A/JGgcNglho6UEIiNClhNqxURL7IqB+HL7pdO37G8ocfVG3C XxiZ7uoJxAD9j5lFdGaglaDURrAaupw= -----END CERTIFICATE-----Generated at Tue Sep 22 16:51:12 2026 by rpki-client