$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/814cbe67-9c67-3420-81e6-2b9acdf04041.roa File: 814cbe67-9c67-3420-81e6-2b9acdf04041.roa (raw, json) Hash identifier: ZmtMLLwrSCHhzGc1un1Vx8r2w3rOVT6LbPi+8wnFDEg= Subject key identifier: C7:AC:89:02:6C:BB:04:BF:E1:AF:C0:03:43:04:1B:20:A5:08:66:84 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D95228AB72BEDC2017A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/814cbe67-9c67-3420-81e6-2b9acdf04041.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 208.101.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:95:22:8a:b7:2b:ed:c2:01:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=d712c0d7-df67-4ec4-84dc-7c0e7aa9977d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:95:d0:10:d2:0c:27:f2:c6:8e:a5:6d:b8:99: 75:66:63:5f:e3:ed:02:1d:6c:be:f1:d6:f8:b3:90: ba:1b:02:cf:8c:40:44:ba:67:16:a5:32:e4:dd:93: 04:bf:d7:ad:28:2f:44:c2:e6:2e:b9:c4:8f:17:6d: 9c:45:de:77:bf:11:ad:0e:a3:35:22:c8:ae:95:a9: 29:48:26:7b:23:3d:28:0e:bd:52:e2:a1:dc:8e:75: d4:a6:19:5c:48:c4:e4:ee:d8:b0:60:87:e3:71:12: bb:bd:fb:b2:ac:e6:e3:1d:df:34:ec:70:3f:54:93: d1:77:59:ec:18:50:8c:ff:84:ba:9f:e8:36:d5:cb: 4c:93:a2:33:01:0b:7f:00:7c:3a:bc:be:48:42:c4: ca:a5:83:ac:b8:c8:53:cf:67:45:97:79:b8:1a:eb: bf:33:a7:1e:36:bc:52:fa:2e:a6:af:ce:11:d8:1e: 57:07:6c:3a:fc:90:e5:63:57:52:35:f2:5b:62:41: bf:1a:12:72:c2:05:96:08:55:13:2e:3b:74:aa:9e: 61:bc:2d:6a:aa:22:12:8a:e9:3e:46:fd:06:16:65: 01:95:c6:5e:3c:57:04:a1:95:85:5a:92:7e:f7:14: 69:2a:9a:38:cc:b3:cf:15:71:12:ec:20:ed:b2:f5: 83:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AC:89:02:6C:BB:04:BF:E1:AF:C0:03:43:04:1B:20:A5:08:66:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/814cbe67-9c67-3420-81e6-2b9acdf04041.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:b7:65:f3:8c:69:d3:dd:e7:0b:ea:dd:d5:8e:7b:f6:f0:98: b3:8b:af:ce:74:b7:9e:0a:65:2d:bb:41:b8:97:3c:2e:fe:89: ab:10:88:56:05:a4:3c:aa:a8:38:84:0e:16:1c:75:14:98:3d: 2e:3e:1d:73:3b:e8:25:a7:7d:33:07:0e:c3:5a:5b:9a:21:f4: a4:55:87:0b:27:a5:14:96:87:32:21:f1:ba:a7:5f:44:70:37: 9e:27:96:a8:9c:84:3f:b9:42:16:f4:4f:85:48:58:59:28:02: c5:01:c0:97:ce:e9:6f:d2:5c:7d:5b:a2:ea:2f:82:65:f7:cd: b2:17:e4:bb:5c:e0:8b:4e:a1:c3:d8:10:2d:03:b2:38:54:ac: 39:1f:64:02:2c:25:ed:83:7a:83:6e:29:86:19:83:55:4a:e2: 28:ec:68:83:00:d3:62:7c:1d:ad:15:bb:55:b7:6d:86:bb:ab: 7a:01:e2:53:33:15:fc:bd:5a:53:49:52:df:32:f1:f4:e6:65: 02:51:b0:a1:f3:69:f8:15:0b:9e:7a:e5:b5:be:f7:88:fb:40: dd:42:fe:7a:cf:5d:84:09:1c:0a:22:04:4d:1b:af:cc:23:7d: de:78:4f:5e:93:91:7d:04:b4:a3:e0:34:f2:77:36:7d:b9:17: b1:97:81:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZUiircr7cIBeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZDcxMmMwZDctZGY2Ny00ZWM0LTg0ZGMtN2MwZTdhYTk5NzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZXQENIMJ/LGjqVtuJl1ZmNf4+0CHWy+8db4 s5C6GwLPjEBEumcWpTLk3ZMEv9etKC9EwuYuucSPF22cRd53vxGtDqM1Isiulakp SCZ7Iz0oDr1S4qHcjnXUphlcSMTk7tiwYIfjcRK7vfuyrObjHd807HA/VJPRd1ns GFCM/4S6n+g21ctMk6IzAQt/AHw6vL5IQsTKpYOsuMhTz2dFl3m4Guu/M6ceNrxS +i6mr84R2B5XB2w6/JDlY1dSNfJbYkG/GhJywgWWCFUTLjt0qp5hvC1qqiISiuk+ Rv0GFmUBlcZePFcEoZWFWpJ+9xRpKpo4zLPPFXES7CDtsvWDfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMesiQJsuwS/4a/AA0MEGyClCGaEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODE0Y2JlNjctOWM2Ny0z NDIwLTgxZTYtMmI5YWNkZjA0MDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0GWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHa3ZfOMadPd5wvq3dWOe/bwmLOLr850t54KZS27QbiXPC7+iasQiFYF pDyqqDiEDhYcdRSYPS4+HXM76CWnfTMHDsNaW5oh9KRVhwsnpRSWhzIh8bqnX0Rw N54nlqichD+5Qhb0T4VIWFkoAsUBwJfO6W/SXH1bouovgmX3zbIX5Ltc4ItOocPY EC0DsjhUrDkfZAIsJe2DeoNuKYYZg1VK4ijsaIMA02J8Ha0Vu1W3bYa7q3oB4lMz Ffy9WlNJUt8y8fTmZQJRsKHzafgVC5565bW+94j7QN1C/nrPXYQJHAoiBE0br8wj fd54T16TkX0EtKPgNPJ3Nn25F7GXgWE= -----END CERTIFICATE-----Generated at Sun Oct 4 11:07:57 2026 by rpki-client