$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c0a3825-9f11-31bb-9289-dde54bd64525.roa File: 4c0a3825-9f11-31bb-9289-dde54bd64525.roa (raw, json) Hash identifier: IpXEgvRxve5WmXpy41+V3r6bf+7ETFI20zXC37QZgVU= Subject key identifier: FF:2C:DA:CD:C6:E6:94:41:B0:CC:83:5D:F2:51:7D:F6:A9:6C:4A:1F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F3052844397D61C5A42C091E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c0a3825-9f11-31bb-9289-dde54bd64525.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 66.19.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:84:43:97:d6:1c:5a:42:c0:91:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=1c1a09b4-0db2-4259-bb47-3d92fd3affc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:50:bd:1e:ae:46:3e:48:42:7b:f5:6c:44:32: 0c:d4:67:fe:de:62:22:56:2d:68:83:e1:42:6f:12: 5a:1d:2f:06:85:1b:f1:68:01:89:d8:ce:ec:72:e5: c6:7d:fa:fd:ae:77:ff:af:e0:cc:2e:53:25:2b:93: 13:90:53:6b:1d:a2:f3:f7:6d:86:32:a9:b8:59:12: 65:59:22:9f:e9:b1:ed:d0:e1:5e:ec:97:48:c7:87: 00:a0:16:c7:77:41:ce:01:fe:40:91:55:99:2c:02: d2:59:50:81:5a:f4:c9:01:71:e5:57:de:7e:92:9b: 41:cc:fc:b5:0e:90:9d:dc:f5:74:dd:f7:e2:8d:f9: d4:60:0c:5e:55:de:a7:fc:df:04:b8:d6:dd:7f:e9: 5e:57:22:33:49:4f:ca:b7:ea:34:d5:aa:f7:33:e3: c0:44:cb:81:9c:be:c3:21:04:5c:48:50:c0:49:ac: 96:f6:ba:92:4d:e5:0d:c6:4c:c5:4a:3a:de:5e:3d: 94:e0:eb:e3:ea:21:42:cf:59:83:fe:39:6f:d0:ac: 45:b8:9a:40:ec:6a:52:fc:0e:c1:26:68:c5:ec:bc: e2:fe:72:55:cd:2e:56:df:5b:99:b2:cb:c1:0b:a1: 39:c4:07:e9:58:3a:88:29:aa:fa:50:9b:78:2a:d9: 6e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2C:DA:CD:C6:E6:94:41:B0:CC:83:5D:F2:51:7D:F6:A9:6C:4A:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c0a3825-9f11-31bb-9289-dde54bd64525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.19.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f6:69:1b:e7:d3:0c:3b:ef:7b:57:da:33:c3:17:01:2d:ff: e6:92:09:97:fa:59:67:e5:3c:53:1a:15:a9:7c:e1:d7:85:22: 15:79:37:50:5d:2b:5f:d2:82:e1:0f:fe:fb:d3:88:e7:93:8c: 17:14:67:3d:27:2c:82:c0:17:9f:36:8e:d2:46:89:7b:35:d2: b5:2f:42:19:7d:de:59:23:89:47:a6:f2:e5:4b:dd:6f:fd:b2: 84:2e:cc:37:3d:c6:88:e2:a9:9c:f5:01:b2:5b:14:23:54:8f: f5:b9:94:a5:05:ca:04:c4:04:05:75:e9:76:eb:8e:56:1b:26: 6b:66:60:09:ba:43:d6:5c:a1:97:58:c8:27:39:cc:59:66:cf: 77:c3:9f:a3:f6:0b:88:e2:0a:b4:da:a2:41:d4:61:f9:6b:8f: 31:16:7c:50:45:7a:2e:3a:fd:b3:15:00:14:a3:a0:e9:a7:8c: 92:88:f5:33:7f:bf:c7:ea:81:44:27:51:a4:f2:5a:58:29:0f: b2:73:87:ab:a4:fd:22:1f:50:bb:4c:1c:75:e6:88:ad:34:48: b7:37:12:65:4e:0b:ae:f4:2e:c9:35:27:65:95:b7:5a:c4:80: 21:ab:6a:e8:b1:78:fb:07:3c:18:2f:4b:9f:30:7d:7e:2b:a0: ea:10:3f:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUoRDl9YcWkLAkeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk MWMxYTA5YjQtMGRiMi00MjU5LWJiNDctM2Q5MmZkM2FmZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1C9Hq5GPkhCe/VsRDIM1Gf+3mIiVi1og+FC bxJaHS8GhRvxaAGJ2M7scuXGffr9rnf/r+DMLlMlK5MTkFNrHaLz922GMqm4WRJl WSKf6bHt0OFe7JdIx4cAoBbHd0HOAf5AkVWZLALSWVCBWvTJAXHlV95+kptBzPy1 DpCd3PV03ffijfnUYAxeVd6n/N8EuNbdf+leVyIzSU/Kt+o01ar3M+PARMuBnL7D IQRcSFDASayW9rqSTeUNxkzFSjreXj2U4Ovj6iFCz1mD/jlv0KxFuJpA7GpS/A7B JmjF7Lzi/nJVzS5W31uZssvBC6E5xAfpWDqIKar6UJt4KtlukQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8s2s3G5pRBsMyDXfJRffapbEofMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGMwYTM4MjUtOWYxMS0z MWJiLTkyODktZGRlNTRiZDY0NTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQhPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/2aRvn0ww773tX2jPDFwEt/+aSCZf6WWflPFMaFal84deFIhV5N1Bd K1/SguEP/vvTiOeTjBcUZz0nLILAF582jtJGiXs10rUvQhl93lkjiUem8uVL3W/9 soQuzDc9xojiqZz1AbJbFCNUj/W5lKUFygTEBAV16XbrjlYbJmtmYAm6Q9ZcoZdY yCc5zFlmz3fDn6P2C4jiCrTaokHUYflrjzEWfFBFei46/bMVABSjoOmnjJKI9TN/ v8fqgUQnUaTyWlgpD7Jzh6uk/SIfULtMHHXmiK00SLc3EmVOC670Lsk1J2WVt1rE gCGrauixePsHPBgvS58wfX4roOoQP20= -----END CERTIFICATE-----Generated at Sun Sep 20 18:59:39 2026 by rpki-client