$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a818da9c-0041-314b-8b72-590627a9fca5.roa File: a818da9c-0041-314b-8b72-590627a9fca5.roa (raw, json) Hash identifier: 8KdCr7Bs6La/tkHaIsU1XZd2R1/c5cQ7ke9FJmV9EHQ= Subject key identifier: E3:67:B7:F6:47:F7:70:F3:6C:E4:1C:27:39:4D:5B:DA:D0:45:52:86 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D8E048B0F533DA32FA400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a818da9c-0041-314b-8b72-590627a9fca5.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 64.24.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:8e:04:8b:0f:53:3d:a3:2f:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=dd679d37-4848-4f40-a071-77968670e5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:39:1d:51:01:b5:99:5f:b9:5a:44:34:a6:14: f8:1b:35:83:71:8e:46:0f:95:c8:9a:cc:f7:a8:e0: e0:6d:88:6c:97:59:d7:12:af:0d:6d:fc:5e:f3:9f: a8:c1:fc:08:52:16:67:67:0e:61:8e:65:2f:f8:e5: 32:c9:8d:a3:4a:5e:20:fe:4f:7b:ab:e6:26:c3:5b: 6a:d2:05:58:d1:c9:11:18:00:0a:fc:92:5f:6a:2c: 34:2e:26:e5:48:99:28:24:8e:69:22:a2:cc:27:48: 44:24:82:b8:21:a3:10:c3:6a:69:41:ca:82:e4:d6: 71:5c:b3:1d:43:73:69:16:a7:0e:fb:6b:ee:86:e6: 2a:13:a6:2d:a6:f5:86:37:3c:11:23:bd:4f:8b:c9: 6c:e2:ee:fc:de:1a:cd:7f:25:7c:6c:4d:0c:a0:42: 58:01:c2:1e:42:34:1a:72:0d:2b:86:01:83:63:bd: a4:09:c4:c1:50:68:b4:1d:b9:42:cd:a0:c0:10:ef: 7b:ce:fc:9f:b0:3f:f3:05:d6:ee:cd:4e:8a:c5:22: cd:6e:8f:0c:54:d3:2b:b6:bc:a6:8e:cc:71:07:10: 6d:f1:88:51:51:61:f2:04:6a:e6:59:dd:ee:ea:b2: 1d:f8:9e:2a:54:5e:24:d9:e7:44:e6:17:ae:e5:8e: 8b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:67:B7:F6:47:F7:70:F3:6C:E4:1C:27:39:4D:5B:DA:D0:45:52:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a818da9c-0041-314b-8b72-590627a9fca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:74:4a:9e:2a:ab:2c:89:4a:ce:78:ed:18:d8:2b:48:4e:ef: 96:7e:67:fc:0c:e0:c7:81:a3:13:77:de:37:42:d2:59:83:af: 63:78:8d:96:51:d3:82:cf:a7:d0:c1:59:31:dd:07:af:46:09: 23:17:c5:ea:08:b8:cb:10:3c:c0:3c:78:42:48:97:dd:65:d6: 67:9b:ab:c3:dc:c4:c7:61:a9:27:2d:ae:6f:84:25:05:7c:3c: 09:0a:94:eb:6c:70:99:1b:06:ec:c6:46:fe:ab:c4:55:a9:42: 67:cd:6a:8d:c9:1a:ba:e2:85:db:f8:11:00:21:08:6e:f3:ff: 9c:c0:d3:00:92:30:c3:00:f7:46:43:b8:41:29:dd:a5:cd:43: 57:e2:f4:08:83:15:d5:f9:e8:c1:56:f8:f8:9d:a5:29:89:b6: 67:9c:5c:2a:4f:d4:99:b5:01:5a:6a:83:49:72:d2:46:55:d2: 6b:ca:95:eb:b5:2d:0b:e6:92:2f:c9:69:21:f2:d6:a8:f4:91: 4a:c7:4e:72:21:3b:cd:2d:83:28:05:39:7b:bf:70:c2:0e:e3: f9:da:ea:9d:00:7f:9b:e7:b1:92:eb:70:7e:c7:e8:49:f7:44: 2a:af:f8:91:6b:c5:37:ad:cc:3c:ea:74:4a:af:94:ee:a6:ed: 14:be:4d:1f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9UnY4Eiw9TPaMvpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZGQ2NzlkMzctNDg0OC00ZjQwLWEwNzEtNzc5Njg2NzBlNWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjkdUQG1mV+5WkQ0phT4GzWDcY5GD5XImsz3 qODgbYhsl1nXEq8Nbfxe85+owfwIUhZnZw5hjmUv+OUyyY2jSl4g/k97q+Ymw1tq 0gVY0ckRGAAK/JJfaiw0LiblSJkoJI5pIqLMJ0hEJIK4IaMQw2ppQcqC5NZxXLMd Q3NpFqcO+2vuhuYqE6YtpvWGNzwRI71Pi8ls4u783hrNfyV8bE0MoEJYAcIeQjQa cg0rhgGDY72kCcTBUGi0HblCzaDAEO97zvyfsD/zBdbuzU6KxSLNbo8MVNMrtrym jsxxBxBt8YhRUWHyBGrmWd3u6rId+J4qVF4k2edE5heu5Y6LNwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFONnt/ZH93DzbOQcJzlNW9rQRVKGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTgxOGRhOWMtMDA0MS0z MTRiLThiNzItNTkwNjI3YTlmY2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQBgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHnRKniqrLIlKznjtGNgrSE7vln5n/Azgx4GjE3feN0LSWYOvY3iNllHT gs+n0MFZMd0Hr0YJIxfF6gi4yxA8wDx4QkiX3WXWZ5urw9zEx2GpJy2ub4QlBXw8 CQqU62xwmRsG7MZG/qvEValCZ81qjckauuKF2/gRACEIbvP/nMDTAJIwwwD3RkO4 QSndpc1DV+L0CIMV1fnowVb4+J2lKYm2Z5xcKk/UmbUBWmqDSXLSRlXSa8qV67Ut C+aSL8lpIfLWqPSRSsdOciE7zS2DKAU5e79wwg7j+drqnQB/m+exkutwfsfoSfdE Kq/4kWvFN63MPOp0Sq+U7qbtFL5NHw== -----END CERTIFICATE-----Generated at Tue Sep 29 11:51:44 2026 by rpki-client