$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60901289-8f58-32fd-a99a-a58e61c82919.roa File: 60901289-8f58-32fd-a99a-a58e61c82919.roa (raw, json) Hash identifier: 6WGywbBpUccdH6yQKBDRX6KDic9MBNAAYSVjlnOYdpg= Subject key identifier: 94:14:DA:9F:07:FA:95:33:A1:24:51:72:F0:C8:68:20:C7:4C:ED:80 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D7858AB706F50D3CDD300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60901289-8f58-32fd-a99a-a58e61c82919.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 207.170.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:78:58:ab:70:6f:50:d3:cd:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=c41281f9-e865-4d70-b8ab-abbf4c495b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ac:1a:24:8d:c3:90:5f:27:16:14:62:53:3e: 68:fa:04:02:20:3a:1f:82:f2:5c:f9:60:28:42:b1: db:0b:85:7e:a7:99:18:2b:8f:37:fd:34:cc:58:53: a9:6a:66:4f:46:c8:84:49:2d:29:cb:6e:58:c3:8b: 8c:eb:dd:4c:ae:cf:2b:91:8d:82:46:38:af:83:c4: 04:23:b4:68:10:f2:08:ac:ad:5d:b2:4e:d2:3d:d5: 2f:0c:33:81:8b:7b:d1:43:9b:73:34:b9:a0:03:33: 84:07:f8:d3:45:61:ce:3b:f8:d0:ba:b4:82:d3:8a: c9:a2:0a:6c:5e:97:5a:6d:90:87:08:e0:0f:f1:c8: 1a:1e:80:3c:a9:e1:8f:ad:61:84:e0:e3:37:c4:f7: f7:99:3b:ce:87:17:0e:2e:c0:41:1d:91:52:e0:3c: 59:b8:40:a2:10:03:d1:66:fc:ec:8f:11:e0:a7:33: e2:0e:b9:56:24:d4:b3:83:3b:b0:27:8d:71:11:d4: bd:52:e0:1e:b2:ba:b5:2e:52:2c:1b:35:cd:99:31: 41:81:60:22:3a:e6:f5:2a:8a:94:6f:6c:c5:65:57: 06:c6:f2:f6:24:9b:4f:69:21:bb:e4:a5:4d:89:09: da:88:62:a0:79:05:91:4a:7c:5d:56:37:62:b4:03: cb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:14:DA:9F:07:FA:95:33:A1:24:51:72:F0:C8:68:20:C7:4C:ED:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60901289-8f58-32fd-a99a-a58e61c82919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.170.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:41:b8:0b:55:4a:2d:23:77:7e:33:da:b9:21:0a:cd:3f:9a: 64:90:da:2e:ec:6a:83:ac:8b:ef:aa:63:ca:e9:ad:4f:95:a2: de:58:5b:e7:d8:2c:48:94:1f:b8:8d:cc:0b:54:22:db:fe:ce: 48:65:03:ec:f9:53:f2:b7:c4:5e:5a:4d:07:dd:27:49:6c:bb: 0b:71:d1:b6:f0:dd:e1:ec:5e:85:00:c1:8d:b6:a1:aa:85:bb: ea:49:e9:b5:c7:46:d3:81:f4:2f:2d:6d:60:f0:df:4a:a2:85: 5a:f3:59:89:70:e5:b4:93:3b:45:63:81:46:5b:bf:32:19:1e: 3e:8e:ee:db:c1:0e:e5:ea:92:f5:3e:ca:a7:89:e9:18:d5:92: af:e2:2a:89:ae:14:08:70:85:5b:f0:bb:d4:47:a3:0a:4d:8a: f7:13:a6:9f:a3:ce:0a:b9:24:4d:29:22:1e:cf:b2:4c:97:38: 9d:0d:09:ef:2b:f4:cf:b5:e0:a9:ea:b8:48:06:78:85:77:14: 37:23:2a:98:22:4c:94:2b:f7:78:ff:17:87:87:b4:aa:32:7e: d8:fc:d5:0d:84:30:49:d3:ec:e2:b4:3f:b0:2c:f8:20:d1:17: 9e:18:bb:8f:56:1c:a0:b2:9a:ba:1d:e8:62:77:6f:9d:bb:da: c2:b8:6d:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXhYq3BvUNPN0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YzQxMjgxZjktZTg2NS00ZDcwLWI4YWItYWJiZjRjNDk1YjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6waJI3DkF8nFhRiUz5o+gQCIDofgvJc+WAo QrHbC4V+p5kYK483/TTMWFOpamZPRsiESS0py25Yw4uM691Mrs8rkY2CRjivg8QE I7RoEPIIrK1dsk7SPdUvDDOBi3vRQ5tzNLmgAzOEB/jTRWHOO/jQurSC04rJogps XpdabZCHCOAP8cgaHoA8qeGPrWGE4OM3xPf3mTvOhxcOLsBBHZFS4DxZuECiEAPR ZvzsjxHgpzPiDrlWJNSzgzuwJ41xEdS9UuAesrq1LlIsGzXNmTFBgWAiOub1KoqU b2zFZVcGxvL2JJtPaSG75KVNiQnaiGKgeQWRSnxdVjditAPLiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQU2p8H+pUzoSRRcvDIaCDHTO2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjA5MDEyODktOGY1OC0z MmZkLWE5OWEtYTU4ZTYxYzgyOTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGz6oAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJBuAtVSi0jd34z2rkhCs0/mmSQ2i7saoOsi++qY8rprU+Vot5YW+fY LEiUH7iNzAtUItv+zkhlA+z5U/K3xF5aTQfdJ0lsuwtx0bbw3eHsXoUAwY22oaqF u+pJ6bXHRtOB9C8tbWDw30qihVrzWYlw5bSTO0VjgUZbvzIZHj6O7tvBDuXqkvU+ yqeJ6RjVkq/iKomuFAhwhVvwu9RHowpNivcTpp+jzgq5JE0pIh7PskyXOJ0NCe8r 9M+14KnquEgGeIV3FDcjKpgiTJQr93j/F4eHtKoyftj81Q2EMEnT7OK0P7As+CDR F54Yu49WHKCymrod6GJ3b5272sK4bUA= -----END CERTIFICATE-----Generated at Mon Oct 5 05:22:04 2026 by rpki-client