$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/063b6481-2d36-3d4c-bbf0-b02b91c0be09.roa File: 063b6481-2d36-3d4c-bbf0-b02b91c0be09.roa (raw, json) Hash identifier: Hp/6SaNJEdm0Z3F9j+Piz+8vHU5JD9lHlsiK/EnkwBk= Subject key identifier: DC:75:0B:13:62:C3:05:DB:CB:0B:96:69:A8:26:00:45:16:D9:80:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ECD45FF9B3FC08013CE24C380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/063b6481-2d36-3d4c-bbf0-b02b91c0be09.roa Signing time: Tue 11 Aug 2026 13:30:16 +0000 ROA not before: Tue 11 Aug 2026 13:30:16 +0000 ROA not after: Mon 09 Nov 2026 14:30:16 +0000 asID: 7029 IP address blocks: 166.82.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:45:ff:9b:3f:c0:80:13:ce:24:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 11 13:30:16 2026 GMT Not After : Nov 9 14:30:16 2026 GMT Subject: CN=ad65a503-e448-445e-9c55-2bc644300106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:29:1e:73:7b:cb:5e:0b:da:e7:4e:3c:35:6f: f0:25:94:ac:25:81:5f:3a:2a:51:fb:81:9a:79:80: 23:0f:e1:8b:97:67:8c:4f:9b:b9:73:9a:10:e6:2b: 05:e4:a1:e1:a7:e4:05:b2:ce:86:70:4b:d6:ac:dd: 81:2c:c9:87:61:d0:04:9c:ab:ed:09:87:99:e2:b5: cb:0c:14:82:6c:e4:32:aa:fa:0e:68:32:b6:44:77: 41:9f:63:e1:d1:8d:94:25:f9:70:5b:74:71:65:98: ff:54:34:a3:46:19:f3:09:92:cc:69:a7:ab:dc:a6: 40:85:01:6b:50:8d:f2:de:cc:e6:b5:29:49:32:fc: a9:99:de:e5:c2:8e:ad:c9:d7:b7:b6:18:3b:3e:f4: c6:fa:db:6e:42:01:33:06:b5:62:15:0d:4e:9b:b4: 2d:47:67:4b:af:56:49:45:92:bd:13:a9:ad:8a:3a: 91:3b:c3:c6:69:54:cf:dc:b8:c1:77:17:7b:4a:b8: a8:5b:99:f8:74:f7:37:fd:32:f8:86:06:47:e3:2d: be:f0:b1:86:0c:4e:7b:b2:2b:83:89:b3:4d:0b:44: 88:68:ef:06:8b:a8:aa:8b:5c:39:49:ac:02:b1:87: 3f:07:5d:3b:5e:51:4c:95:ae:62:6a:f7:7a:48:98: 24:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:75:0B:13:62:C3:05:DB:CB:0B:96:69:A8:26:00:45:16:D9:80:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/063b6481-2d36-3d4c-bbf0-b02b91c0be09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.82.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:d6:5a:09:09:1c:a4:c5:cb:ea:66:f7:21:a9:4d:05:4f:74: 2a:86:92:a3:63:0c:5a:78:f4:76:32:01:b3:9d:3b:7b:0d:e3: 2e:d5:70:49:c0:b5:91:ba:91:06:5c:84:1c:d3:58:b9:80:e7: de:39:66:12:0e:74:11:94:43:3b:db:52:63:86:b1:03:fb:35: 9b:f6:72:06:78:2e:4e:2b:f1:f7:f5:86:a1:4b:58:da:3e:3f: 7b:05:11:13:47:3e:78:ff:25:de:fb:35:2f:4f:33:a8:7d:dd: 75:cd:83:12:30:b1:dc:50:2c:46:12:ac:3a:db:31:d4:87:66: 8d:5f:0a:9a:25:98:87:44:80:de:22:71:b2:dd:23:d3:3c:c7: 0a:b3:7c:aa:9d:44:3f:f1:cc:ae:6c:ea:29:4b:f0:29:7d:bc: c2:64:4d:d2:19:46:1e:7b:56:c5:dc:e4:e6:27:48:a3:e0:bf: 05:07:da:d7:79:a8:1a:e6:b1:d7:f1:8c:2d:94:47:93:95:45: 25:89:9f:f1:24:02:c0:e2:b5:0a:39:0d:76:4e:15:6a:b8:78: 56:13:bf:7d:53:43:1d:d2:71:42:f8:81:43:68:f5:a1:ec:3c: ca:6e:61:ee:fd:68:61:fe:a2:8c:7b:54:5b:f5:36:03:cc:b7: f3:23:09:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NRf+bP8CAE84kw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxMTEzMzAxNloXDTI2MTEwOTE0MzAxNlowLzEtMCsGA1UEAxMk YWQ2NWE1MDMtZTQ0OC00NDVlLTljNTUtMmJjNjQ0MzAwMTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSkec3vLXgva5048NW/wJZSsJYFfOipR+4Ga eYAjD+GLl2eMT5u5c5oQ5isF5KHhp+QFss6GcEvWrN2BLMmHYdAEnKvtCYeZ4rXL DBSCbOQyqvoOaDK2RHdBn2Ph0Y2UJflwW3RxZZj/VDSjRhnzCZLMaaer3KZAhQFr UI3y3szmtSlJMvypmd7lwo6tyde3thg7PvTG+ttuQgEzBrViFQ1Om7QtR2dLr1ZJ RZK9E6mtijqRO8PGaVTP3LjBdxd7SrioW5n4dPc3/TL4hgZH4y2+8LGGDE57siuD ibNNC0SIaO8Gi6iqi1w5SawCsYc/B107XlFMla5iavd6SJgk2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNx1CxNiwwXbywuWaagmAEUW2YDhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDYzYjY0ODEtMmQzNi0z ZDRjLWJiZjAtYjAyYjkxYzBiZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplLJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHWWgkJHKTFy+pm9yGpTQVPdCqGkqNjDFp49HYyAbOdO3sN4y7VcEnA tZG6kQZchBzTWLmA5945ZhIOdBGUQzvbUmOGsQP7NZv2cgZ4Lk4r8ff1hqFLWNo+ P3sFERNHPnj/Jd77NS9PM6h93XXNgxIwsdxQLEYSrDrbMdSHZo1fCpolmIdEgN4i cbLdI9M8xwqzfKqdRD/xzK5s6ilL8Cl9vMJkTdIZRh57VsXc5OYnSKPgvwUH2td5 qBrmsdfxjC2UR5OVRSWJn/EkAsDitQo5DXZOFWq4eFYTv31TQx3ScUL4gUNo9aHs PMpuYe79aGH+oox7VFv1NgPMt/MjCeg= -----END CERTIFICATE-----Generated at Thu Aug 27 10:26:49 2026 by rpki-client