$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acc98a9d-f047-3806-b8a4-f122b0c49d7b.roa File: acc98a9d-f047-3806-b8a4-f122b0c49d7b.roa (raw, json) Hash identifier: VKBqGELtD7KaWK9AKz0kj2xuAjMJzcsNd08Dg74L82s= Subject key identifier: 1D:5E:C7:CC:6D:C9:77:84:36:DA:6D:AC:E4:FA:2A:AA:5E:31:1B:7B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D733C8F493B1B39E923E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acc98a9d-f047-3806-b8a4-f122b0c49d7b.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 64.196.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:73:3c:8f:49:3b:1b:39:e9:23:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=5b6a0505-83d2-4bad-badb-3cbb4d42866b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:dd:dd:e0:af:1f:d5:d1:3b:67:22:88:bf: 8f:75:bf:07:8e:28:e2:6b:d1:2a:2a:66:48:ac:59: e5:b1:5f:a1:b6:cb:44:63:b0:97:1e:f0:08:8d:97: a6:cd:37:e2:76:5b:2e:76:07:53:75:a7:cb:e7:37: 9a:4b:47:23:2d:06:b9:00:89:02:50:fc:a5:ce:74: ad:25:e0:95:2b:37:37:d6:d6:fa:a7:a7:13:db:0d: ab:46:9a:8c:d8:a4:23:af:c5:89:16:72:69:aa:7c: e0:32:fb:4c:66:6c:f7:1e:0d:59:2a:a4:a6:22:37: f2:8f:9e:87:f6:d6:49:ff:ce:9e:1c:4d:71:19:64: 2e:14:61:09:4d:a5:e9:a8:fe:d8:50:bc:b2:8c:73: cb:17:3d:c3:81:0f:79:36:61:a8:bc:ac:ed:dd:8d: ff:59:64:84:c8:fc:a8:a9:86:cd:6b:9d:69:e6:f6: ff:0a:15:00:f1:f6:8a:aa:65:5b:1c:31:18:43:14: 15:64:0c:80:6c:be:d8:15:ea:a1:32:0f:21:de:4a: 14:cc:0b:2e:43:33:3e:59:26:6f:26:0b:70:95:84: f5:57:cc:3f:8c:3f:79:13:02:f7:e6:bb:f5:65:34: af:74:8b:23:35:27:a3:a9:ba:71:83:d5:03:b1:37: 7b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5E:C7:CC:6D:C9:77:84:36:DA:6D:AC:E4:FA:2A:AA:5E:31:1B:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acc98a9d-f047-3806-b8a4-f122b0c49d7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.196.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:95:f2:20:8e:a8:41:e1:8d:7f:09:a4:dd:93:1e:1d:20:7a: ff:b2:fe:ee:df:e7:a2:ae:74:78:38:cc:86:e4:8d:da:62:99: d8:78:70:2e:db:7a:0d:63:29:a4:11:a0:31:f1:47:75:4f:70: 02:7f:ae:39:a7:dd:e8:5a:c7:c8:1e:19:2b:e7:03:27:f2:27: ae:25:3d:a4:2d:f8:c0:57:af:ba:86:1b:a1:33:28:fe:6b:85: 8b:ea:28:e0:91:03:f2:d1:a0:a0:57:8d:45:79:d2:2b:f2:dc: a4:7e:56:b1:f0:87:11:e8:ef:85:81:8c:da:fc:47:90:63:8b: 10:21:5b:73:9f:f5:9b:33:bc:69:d5:73:1a:26:2a:bc:1d:70: 19:0a:81:8a:4c:f1:5d:62:52:63:94:b6:7b:2e:73:99:c7:0f: 3b:80:30:d2:be:40:77:da:ab:ee:20:dc:d1:18:e0:80:26:08: d7:c6:77:b5:17:40:ad:72:7a:a8:e7:6d:50:2c:34:17:d2:63: ad:4d:bf:f4:13:1a:b2:0d:f1:cd:f3:fc:dc:31:d4:b3:e9:48: d9:07:a8:79:8e:eb:7a:03:b7:f2:4d:c3:a2:af:a7:b6:aa:ee: fa:9e:90:4f:2c:2a:6b:05:52:69:c8:fc:c0:9f:db:ad:d8:c4: c6:dd:a3:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXM8j0k7GznpI+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NWI2YTA1MDUtODNkMi00YmFkLWJhZGItM2NiYjRkNDI4NjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIjd3eCvH9XRO2ciiL+Pdb8Hjijia9EqKmZI rFnlsV+htstEY7CXHvAIjZemzTfidlsudgdTdafL5zeaS0cjLQa5AIkCUPylznSt JeCVKzc31tb6p6cT2w2rRpqM2KQjr8WJFnJpqnzgMvtMZmz3Hg1ZKqSmIjfyj56H 9tZJ/86eHE1xGWQuFGEJTaXpqP7YULyyjHPLFz3DgQ95NmGovKzt3Y3/WWSEyPyo qYbNa51p5vb/ChUA8faKqmVbHDEYQxQVZAyAbL7YFeqhMg8h3koUzAsuQzM+WSZv JgtwlYT1V8w/jD95EwL35rv1ZTSvdIsjNSejqbpxg9UDsTd7rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1ex8xtyXeENtptrOT6KqpeMRt7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWNjOThhOWQtZjA0Ny0z ODA2LWI4YTQtZjEyMmIwYzQ5ZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMTHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6V8iCOqEHhjX8JpN2THh0gev+y/u7f56KudHg4zIbkjdpimdh4cC7b eg1jKaQRoDHxR3VPcAJ/rjmn3ehax8geGSvnAyfyJ64lPaQt+MBXr7qGG6EzKP5r hYvqKOCRA/LRoKBXjUV50ivy3KR+VrHwhxHo74WBjNr8R5BjixAhW3Of9ZszvGnV cxomKrwdcBkKgYpM8V1iUmOUtnsuc5nHDzuAMNK+QHfaq+4g3NEY4IAmCNfGd7UX QK1yeqjnbVAsNBfSY61Nv/QTGrIN8c3z/Nwx1LPpSNkHqHmO63oDt/JNw6Kvp7aq 7vqekE8sKmsFUmnI/MCf263YxMbdo50= -----END CERTIFICATE-----Generated at Sun Oct 11 20:13:25 2026 by rpki-client