$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/16af8d8e-0e1d-3a73-8822-a49d0ed6c5b6.roa File: 16af8d8e-0e1d-3a73-8822-a49d0ed6c5b6.roa (raw, json) Hash identifier: xamXNPE1h+aTcXSinStuBAS+12BzyvEycrdApNgys0s= Subject key identifier: 6B:FD:06:45:72:AC:9B:FF:75:8B:04:3D:20:7F:8F:52:71:EB:F1:FE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D770C5A16D79A3EBC2380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/16af8d8e-0e1d-3a73-8822-a49d0ed6c5b6.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 166.102.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:77:0c:5a:16:d7:9a:3e:bc:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=98d8ef56-0a9f-4abd-9303-75d30678cd36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fa:35:91:51:4f:c9:0f:90:07:ed:9a:3d:2e: 6d:6c:e2:06:75:e5:b9:a2:4a:fa:45:03:39:33:f6: 7c:18:6f:2c:40:4c:4f:72:d5:69:df:c1:af:1f:1f: a7:f8:02:8e:70:e5:62:ee:5d:dc:4e:25:c0:37:e2: 45:7e:95:78:32:f1:c5:f8:fd:11:0e:e4:f9:6d:22: 31:89:40:46:f8:30:71:36:f8:8a:56:8d:a4:54:e2: 9e:d4:d7:13:e0:0b:ad:4d:a0:fc:12:d5:9e:7b:d3: 49:97:f1:3e:bd:ca:e2:39:72:40:68:64:56:1c:22: 5c:7a:3c:6c:cd:bf:2d:bb:66:e7:22:8d:3b:7d:cd: 38:e5:5b:9d:3f:64:2d:0e:25:09:df:f3:19:82:d6: c9:84:57:5e:b6:32:0f:ea:60:d0:59:14:9a:44:28: 22:c3:ea:0c:c4:85:f3:56:6d:02:5e:df:02:93:b1: 92:0c:a2:6a:da:a6:32:dd:8f:03:f8:71:6b:c5:c9: eb:18:6d:49:f3:37:b1:ac:c6:5a:15:72:80:6c:78: 5e:31:39:e2:56:3a:c7:c5:54:c2:a4:5b:e4:35:1b: 74:a8:2f:41:fc:a5:51:7b:5f:3b:4b:78:a4:c9:f9: de:4b:06:dd:f2:dc:b5:5a:11:1a:0d:02:cb:70:3c: d6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FD:06:45:72:AC:9B:FF:75:8B:04:3D:20:7F:8F:52:71:EB:F1:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/16af8d8e-0e1d-3a73-8822-a49d0ed6c5b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.102.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:49:b1:e7:d8:19:3b:ff:14:19:49:fb:95:fa:c1:9f:d1:26: 66:86:d1:f6:9b:48:9e:18:86:04:70:1f:d9:b1:78:5a:27:de: 07:63:82:64:a1:43:55:95:9f:46:4f:99:16:9e:68:a1:b2:8f: 37:8c:76:04:dd:d1:7a:ae:40:58:1d:8b:b2:60:20:9e:ce:2d: d6:0d:c3:33:6b:7f:d4:0f:23:42:3c:e0:15:84:72:dc:f4:8a: 62:48:c7:71:4c:31:e5:74:cf:8c:e2:b8:78:88:cc:54:fa:1a: ca:e1:ae:d4:5a:47:e6:72:a7:23:40:4f:9a:f6:52:3e:17:d7: 79:8a:26:bb:87:c8:05:e5:cd:9c:20:5c:97:98:c3:ce:ca:40: 5e:59:d2:ea:33:24:8a:49:a3:15:6d:b8:4d:15:38:69:21:b5: 64:e2:ea:bf:37:49:61:04:8e:3e:c5:13:97:3e:69:19:a8:4e: 21:53:68:f1:58:a6:6c:27:af:5c:af:5d:29:43:5d:bb:84:c0: cc:1a:6b:06:1b:c9:91:72:a8:f6:18:96:0a:a4:d5:be:7c:56: fc:c9:39:99:a2:db:95:39:1f:d8:d4:22:85:ec:79:6d:4e:74: 08:14:cf:fe:d2:30:b3:04:a3:a1:9e:79:34:ac:55:fd:d6:4b: ab:b0:73:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXcMWhbXmj68I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OThkOGVmNTYtMGE5Zi00YWJkLTkzMDMtNzVkMzA2NzhjZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvo1kVFPyQ+QB+2aPS5tbOIGdeW5okr6RQM5 M/Z8GG8sQExPctVp38GvHx+n+AKOcOVi7l3cTiXAN+JFfpV4MvHF+P0RDuT5bSIx iUBG+DBxNviKVo2kVOKe1NcT4AutTaD8EtWee9NJl/E+vcriOXJAaGRWHCJcejxs zb8tu2bnIo07fc045VudP2QtDiUJ3/MZgtbJhFdetjIP6mDQWRSaRCgiw+oMxIXz Vm0CXt8Ck7GSDKJq2qYy3Y8D+HFrxcnrGG1J8zexrMZaFXKAbHheMTniVjrHxVTC pFvkNRt0qC9B/KVRe187S3ikyfneSwbd8ty1WhEaDQLLcDzWbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGv9BkVyrJv/dYsEPSB/j1Jx6/H+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTZhZjhkOGUtMGUxZC0z YTczLTg4MjItYTQ5ZDBlZDZjNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApmYbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRJsefYGTv/FBlJ+5X6wZ/RJmaG0fabSJ4YhgRwH9mxeFon3gdjgmSh Q1WVn0ZPmRaeaKGyjzeMdgTd0XquQFgdi7JgIJ7OLdYNwzNrf9QPI0I84BWEctz0 imJIx3FMMeV0z4ziuHiIzFT6GsrhrtRaR+ZypyNAT5r2Uj4X13mKJruHyAXlzZwg XJeYw87KQF5Z0uozJIpJoxVtuE0VOGkhtWTi6r83SWEEjj7FE5c+aRmoTiFTaPFY pmwnr1yvXSlDXbuEwMwaawYbyZFyqPYYlgqk1b58VvzJOZmi25U5H9jUIoXseW1O dAgUz/7SMLMEo6GeeTSsVf3WS6uwc6U= -----END CERTIFICATE-----Generated at Tue Oct 13 16:03:35 2026 by rpki-client