$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a95e6802-d47b-387b-b4c3-1d0aae1be0f5.roa File: a95e6802-d47b-387b-b4c3-1d0aae1be0f5.roa (raw, json) Hash identifier: vgHv1qaadXrlvtgkWlCkMeR1egTam1Iqi7MBruDXE0c= Subject key identifier: 98:46:32:03:06:52:E1:9E:F0:09:9C:88:1B:59:08:B7:F2:54:7E:92 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F093CFA3B0E33FC335CD65400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a95e6802-d47b-387b-b4c3-1d0aae1be0f5.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 67.62.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:fa:3b:0e:33:fc:33:5c:d6:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=570337cd-98b0-47d7-a582-db46ba65b139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:49:94:61:81:9b:8e:62:dd:dc:3c:5e:01:bc: 57:5b:44:54:31:62:b5:28:5a:73:f6:3e:93:47:9b: f0:6a:f7:b3:b8:1f:42:7d:0a:6f:6c:c7:0b:5a:0e: 9e:4d:ea:51:70:2f:51:89:7b:dd:c8:17:ba:47:82: c4:96:47:70:c2:0e:d6:e4:99:10:30:77:0e:62:cd: e5:8a:46:07:c2:f3:b5:41:46:3c:ff:62:26:18:e7: 88:a3:d2:a0:cc:19:d1:51:f8:b2:5e:47:6e:25:3f: 15:47:a4:77:94:e9:9e:b2:79:25:ef:47:20:8b:e0: 40:65:26:fc:a6:7d:f7:93:a5:48:3c:96:4e:57:e8: d9:79:97:79:80:37:9a:93:81:56:5f:8d:bf:e7:90: 17:1b:2b:1e:81:7c:43:ba:1e:dc:5b:28:16:25:e2: 14:8e:cd:47:2f:07:68:c1:74:e2:0a:46:56:ba:9b: 1b:43:9a:92:42:b7:c4:06:49:87:f0:d5:1c:fd:31: 25:18:5b:9f:29:b2:4f:bb:48:76:1e:bf:ed:31:fc: d3:43:c4:87:fe:09:02:11:a1:73:ed:72:14:7b:07: 1a:e0:25:63:d1:42:94:fe:52:c1:c3:a5:55:e4:23: a7:fc:4f:48:d2:0f:46:d7:8f:72:ee:16:12:f0:73: 9e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:46:32:03:06:52:E1:9E:F0:09:9C:88:1B:59:08:B7:F2:54:7E:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a95e6802-d47b-387b-b4c3-1d0aae1be0f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.62.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:1e:a7:3f:51:68:96:86:e3:e0:17:55:f2:a6:a1:34:34:2e: 99:97:55:8c:96:33:18:36:0b:27:83:8e:8b:c0:81:4f:aa:f4: 7f:24:67:56:78:5b:56:10:94:26:b8:48:9b:e5:9f:3f:c4:73: c3:31:f7:46:19:f1:7f:38:00:e8:18:b9:f6:60:3b:c1:33:fd: aa:2c:02:96:a5:4c:65:f4:4f:06:da:c0:d6:26:b2:f6:b6:9e: 78:eb:d3:41:32:46:7b:93:41:c6:b9:77:6e:41:33:08:95:3a: e0:3d:84:86:48:d2:71:1b:ab:a4:e1:0a:f6:2b:1d:fb:7b:d1: d9:10:32:41:69:bc:7c:cc:ca:2a:86:eb:d6:df:46:24:c0:cf: 7e:4e:6d:42:2a:04:4f:74:f4:a5:a8:b2:29:8e:5a:01:24:9a: 61:c8:a1:07:a6:ea:fd:e8:72:3e:d1:54:22:dd:73:ce:a7:e2: c3:01:b7:ba:74:d8:72:ed:b7:72:f2:b0:cd:91:8f:f7:a3:9c: c0:d3:05:eb:b9:e2:5d:f4:a7:7b:ad:7e:dd:eb:7e:ac:b4:46: bc:f8:06:de:3f:d9:aa:33:25:e0:20:78:55:dc:d6:48:71:03: 1f:3a:73:d7:68:b0:ab:26:3a:08:52:7a:ad:48:b7:c6:36:9d: 4b:12:90:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPPo7DjP8M1zWVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk NTcwMzM3Y2QtOThiMC00N2Q3LWE1ODItZGI0NmJhNjViMTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUmUYYGbjmLd3DxeAbxXW0RUMWK1KFpz9j6T R5vwavezuB9CfQpvbMcLWg6eTepRcC9RiXvdyBe6R4LElkdwwg7W5JkQMHcOYs3l ikYHwvO1QUY8/2ImGOeIo9KgzBnRUfiyXkduJT8VR6R3lOmesnkl70cgi+BAZSb8 pn33k6VIPJZOV+jZeZd5gDeak4FWX42/55AXGysegXxDuh7cWygWJeIUjs1HLwdo wXTiCkZWupsbQ5qSQrfEBkmH8NUc/TElGFufKbJPu0h2Hr/tMfzTQ8SH/gkCEaFz 7XIUewca4CVj0UKU/lLBw6VV5COn/E9I0g9G149y7hYS8HOeawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhGMgMGUuGe8AmciBtZCLfyVH6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTk1ZTY4MDItZDQ3Yi0z ODdiLWI0YzMtMWQwYWFlMWJlMGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQz7yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAepz9RaJaG4+AXVfKmoTQ0LpmXVYyWMxg2CyeDjovAgU+q9H8kZ1Z4 W1YQlCa4SJvlnz/Ec8Mx90YZ8X84AOgYufZgO8Ez/aosApalTGX0TwbawNYmsva2 nnjr00EyRnuTQca5d25BMwiVOuA9hIZI0nEbq6ThCvYrHft70dkQMkFpvHzMyiqG 69bfRiTAz35ObUIqBE909KWosimOWgEkmmHIoQem6v3ocj7RVCLdc86n4sMBt7p0 2HLtt3LysM2Rj/ejnMDTBeu54l30p3utft3rfqy0Rrz4Bt4/2aozJeAgeFXc1khx Ax86c9dosKsmOghSeq1It8Y2nUsSkGI= -----END CERTIFICATE-----Generated at Sun Sep 20 22:04:55 2026 by rpki-client