$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27c8e03c-6bdc-3c81-a2b7-a582552a9127.roa File: 27c8e03c-6bdc-3c81-a2b7-a582552a9127.roa (raw, json) Hash identifier: h97zs1sys37/Z3laiB35QLfWenxwafJQ/jiQIjqM45g= Subject key identifier: 0E:9A:91:8A:78:C2:81:CD:5E:04:37:40:05:7E:D4:9D:A1:7C:A8:01 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EBD3C52672AA650BA0645F500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27c8e03c-6bdc-3c81-a2b7-a582552a9127.roa Signing time: Wed 05 Aug 2026 19:37:50 +0000 ROA not before: Wed 05 Aug 2026 19:37:50 +0000 ROA not after: Tue 03 Nov 2026 20:37:50 +0000 asID: 7029 IP address blocks: 166.82.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bd:3c:52:67:2a:a6:50:ba:06:45:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 5 19:37:50 2026 GMT Not After : Nov 3 20:37:50 2026 GMT Subject: CN=46bb6148-39e3-4d3b-9a02-503e75583fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bb:cb:76:77:4e:85:eb:f9:15:91:79:21:3b: 57:aa:00:90:0f:38:19:d8:15:6d:c4:4e:40:10:cb: d8:14:b7:8d:d6:62:03:3b:58:3f:4d:06:96:1f:13: 08:be:27:7b:72:a4:78:7f:24:be:7d:ea:af:15:12: 54:05:c5:ce:65:97:c3:5a:73:9f:0c:e8:07:fb:85: 86:4a:7e:ff:c5:9b:46:4a:93:80:14:44:09:a7:35: a7:66:e0:b6:91:42:41:ee:58:8d:a4:df:e8:9a:82: 3d:26:5d:d4:ae:4d:47:fa:e2:23:ef:75:b7:83:58: 6a:30:d8:75:21:78:65:0b:2f:34:b0:e4:80:32:8b: 4b:60:fb:43:3a:40:ab:ab:41:a2:0d:99:6c:2e:bc: 6c:42:8e:4b:a5:95:16:9c:0f:b9:77:72:91:d2:a4: 0f:4a:22:c1:bd:4e:1d:2f:c7:24:de:ab:88:c5:aa: 0b:83:00:90:a9:89:cf:74:b9:6d:0e:fb:13:e5:d3: 1e:47:ad:f4:c4:15:37:17:55:0e:9d:ea:57:06:76: bf:19:16:88:4a:5f:1b:39:f6:a0:2d:04:8f:60:e6: bd:e4:ec:12:15:8e:7e:7d:d3:d6:98:dc:cf:9a:55: 55:23:52:70:2b:af:bc:96:3b:e4:14:d4:9c:d2:00: 81:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9A:91:8A:78:C2:81:CD:5E:04:37:40:05:7E:D4:9D:A1:7C:A8:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27c8e03c-6bdc-3c81-a2b7-a582552a9127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.82.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:c5:d6:a5:d5:09:e6:7f:a3:7d:da:9c:d7:c2:7f:5a:86:28: eb:80:4f:bd:35:f0:99:81:b9:1b:0e:81:28:53:31:e3:02:b7: 76:d4:86:62:1f:2d:fd:7d:e4:21:1a:a1:9a:3f:92:3d:dc:dd: 67:da:ec:4a:16:0b:f7:9e:66:e6:3b:8c:58:97:2b:18:67:7f: 1d:24:b6:ec:89:e3:6f:f1:e5:3b:f2:84:7c:0b:75:c6:54:99: f5:4c:11:db:13:9b:c6:1f:28:73:0a:9a:53:e3:81:f8:9a:20: 63:f6:24:ee:4c:12:d6:69:18:82:bd:e0:88:1e:ca:6e:6c:49: 2d:73:56:79:de:95:cc:e3:14:4e:e9:24:f7:57:e1:41:7b:2d: 12:e7:06:f6:a9:fe:a9:73:d7:48:aa:a6:94:33:b9:fb:0b:e1: 88:18:2d:9e:ba:59:7a:52:d6:37:08:5b:d5:9c:b0:9c:ef:e8: 77:aa:e9:8f:ef:e8:8e:c5:5f:d5:4f:0d:41:01:b9:84:45:2d: 2b:85:f5:c2:69:c8:bd:2e:60:ea:9f:b6:11:69:75:ac:d4:c7: e2:a8:87:91:21:56:2e:89:d0:74:2f:ee:78:8f:56:f5:02:6d: 17:e9:76:38:79:60:c7:d5:04:09:f5:24:ba:8a:ff:b1:32:22: 83:d8:4c:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE69PFJnKqZQugZF9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwNTE5Mzc1MFoXDTI2MTEwMzIwMzc1MFowLzEtMCsGA1UEAxMk NDZiYjYxNDgtMzllMy00ZDNiLTlhMDItNTAzZTc1NTgzZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrvLdndOhev5FZF5ITtXqgCQDzgZ2BVtxE5A EMvYFLeN1mIDO1g/TQaWHxMIvid7cqR4fyS+feqvFRJUBcXOZZfDWnOfDOgH+4WG Sn7/xZtGSpOAFEQJpzWnZuC2kUJB7liNpN/omoI9Jl3Urk1H+uIj73W3g1hqMNh1 IXhlCy80sOSAMotLYPtDOkCrq0GiDZlsLrxsQo5LpZUWnA+5d3KR0qQPSiLBvU4d L8ck3quIxaoLgwCQqYnPdLltDvsT5dMeR630xBU3F1UOnepXBna/GRaISl8bOfag LQSPYOa95OwSFY5+fdPWmNzPmlVVI1JwK6+8ljvkFNSc0gCBFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6akYp4woHNXgQ3QAV+1J2hfKgBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjdjOGUwM2MtNmJkYy0z YzgxLWEyYjctYTU4MjU1MmE5MTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBplKeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7F1qXVCeZ/o33anNfCf1qGKOuAT7018JmBuRsOgShTMeMCt3bUhmIf Lf195CEaoZo/kj3c3Wfa7EoWC/eeZuY7jFiXKxhnfx0ktuyJ42/x5TvyhHwLdcZU mfVMEdsTm8YfKHMKmlPjgfiaIGP2JO5MEtZpGIK94Igeym5sSS1zVnnelczjFE7p JPdX4UF7LRLnBvap/qlz10iqppQzufsL4YgYLZ66WXpS1jcIW9WcsJzv6Heq6Y/v 6I7FX9VPDUEBuYRFLSuF9cJpyL0uYOqfthFpdazUx+Koh5EhVi6J0HQv7niPVvUC bRfpdjh5YMfVBAn1JLqK/7EyIoPYTEo= -----END CERTIFICATE-----Generated at Thu Aug 27 09:46:41 2026 by rpki-client