$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/827020d0-a29a-3bfc-9799-ac48dbfa6a8d.roa File: 827020d0-a29a-3bfc-9799-ac48dbfa6a8d.roa (raw, json) Hash identifier: 9doBbKt65+SRRd8BEk8iOtM59wDRhF2s4ooHq5XZrTs= Subject key identifier: 2F:36:68:EE:02:BD:46:8F:38:60:76:09:33:FA:6E:6C:8E:44:8A:6D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7CEB3B343926D4DC5D432B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/827020d0-a29a-3bfc-9799-ac48dbfa6a8d.roa Signing time: Tue 13 Oct 2026 11:29:39 +0000 ROA not before: Tue 13 Oct 2026 11:29:39 +0000 ROA not after: Mon 11 Jan 2027 12:29:39 +0000 asID: 7029 IP address blocks: 166.82.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7c:eb:3b:34:39:26:d4:dc:5d:43:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 13 11:29:39 2026 GMT Not After : Jan 11 12:29:39 2027 GMT Subject: CN=8b039c46-24ac-4be5-ae1f-44e354fc6831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b7:b1:76:86:37:7a:29:bd:a1:9e:58:e8:38: 5b:5d:bc:7f:d6:61:4c:30:83:a9:5b:39:8b:d0:e0: 14:c4:76:dd:cb:97:ff:f6:ad:f7:fe:14:b2:30:60: 1b:38:c6:d0:99:f8:47:44:4a:f7:91:9c:78:91:ef: bd:9e:66:5f:e7:2d:9d:f6:b7:ce:04:cc:97:80:07: b1:97:8e:5f:af:87:82:62:a7:ff:0d:60:14:d9:da: e3:24:9d:be:83:44:36:86:39:05:94:ef:74:60:6d: 16:28:58:f8:b2:4e:81:e7:04:4f:fb:0b:29:a2:23: 7a:11:38:c2:18:ed:6f:f3:3c:28:1e:4d:89:29:ff: d1:28:83:8a:fa:99:ef:f9:ad:cb:a5:76:71:97:dd: 73:c7:f4:7b:1d:68:c6:13:40:b8:29:53:41:bc:a4: b3:98:08:e7:61:c5:56:20:90:22:11:fa:de:2c:d4: 32:5e:6e:cf:94:76:99:a7:1c:de:d8:92:2d:7c:cb: 18:bd:c3:f4:6b:fd:6e:22:c7:ad:05:5b:c0:27:de: c8:2f:09:2d:26:c8:6d:e7:6f:52:87:f3:d0:78:10: da:16:a1:83:1a:00:dc:13:c7:2c:5b:67:09:0a:66: db:5c:e1:56:31:97:49:56:d0:ff:2b:40:e4:d7:d0: e8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:36:68:EE:02:BD:46:8F:38:60:76:09:33:FA:6E:6C:8E:44:8A:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/827020d0-a29a-3bfc-9799-ac48dbfa6a8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.82.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:87:b8:54:9a:e7:44:70:49:9d:9f:53:71:29:0a:02:3f:8f: 1b:c0:0b:13:64:90:47:e9:53:b2:a5:ac:b6:b2:d4:9b:50:97: 73:4c:eb:de:f0:db:02:5b:46:d6:16:0a:98:2d:71:81:2d:1e: 10:fc:7f:9b:d8:79:31:7a:75:ac:af:ee:ee:3f:7e:e2:8b:b5: 65:ea:9a:d5:20:0b:01:b1:ea:9a:99:c8:88:b4:34:8f:dc:d3: c0:85:07:d5:3e:e5:dd:3e:a9:6a:c1:ac:c8:d6:ee:16:69:d4: 5e:b9:58:9d:46:ba:8d:dd:06:0b:f4:8a:ff:ad:69:4f:98:29: 05:9e:51:f3:be:42:92:96:f4:2f:f9:3d:78:53:65:f6:96:e9: 7a:ca:e2:aa:59:4c:a3:d5:c6:f1:60:3a:a5:6a:eb:03:a4:97: 9c:ab:18:17:f5:42:53:9a:4e:52:9b:5a:a0:ad:e2:cc:cd:6d: 39:8b:76:02:a4:4d:c6:91:08:36:48:39:33:db:85:3b:59:0c: 1c:76:e4:ca:c3:15:b0:1b:76:3b:1c:9e:b5:4f:46:c0:48:1c: e4:5c:f6:8b:e2:3b:24:59:05:cb:5d:b2:ff:0c:f9:15:6e:b2: 74:45:de:f6:99:88:56:c6:52:b7:08:52:9b:65:5f:4a:78:1b: f9:e2:fc:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE986zs0OSbU3F1DKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMzExMjkzOVoXDTI3MDExMTEyMjkzOVowLzEtMCsGA1UEAxMk OGIwMzljNDYtMjRhYy00YmU1LWFlMWYtNDRlMzU0ZmM2ODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrexdoY3eim9oZ5Y6DhbXbx/1mFMMIOpWzmL 0OAUxHbdy5f/9q33/hSyMGAbOMbQmfhHREr3kZx4ke+9nmZf5y2d9rfOBMyXgAex l45fr4eCYqf/DWAU2drjJJ2+g0Q2hjkFlO90YG0WKFj4sk6B5wRP+wspoiN6ETjC GO1v8zwoHk2JKf/RKIOK+pnv+a3LpXZxl91zx/R7HWjGE0C4KVNBvKSzmAjnYcVW IJAiEfreLNQyXm7PlHaZpxze2JItfMsYvcP0a/1uIsetBVvAJ97ILwktJsht529S h/PQeBDaFqGDGgDcE8csW2cJCmbbXOFWMZdJVtD/K0Dk19Do+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC82aO4CvUaPOGB2CTP6bmyORIptMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODI3MDIwZDAtYTI5YS0z YmZjLTk3OTktYWM0OGRiZmE2YThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBplKaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaHuFSa50RwSZ2fU3EpCgI/jxvACxNkkEfpU7KlrLay1JtQl3NM697w 2wJbRtYWCpgtcYEtHhD8f5vYeTF6dayv7u4/fuKLtWXqmtUgCwGx6pqZyIi0NI/c 08CFB9U+5d0+qWrBrMjW7hZp1F65WJ1Guo3dBgv0iv+taU+YKQWeUfO+QpKW9C/5 PXhTZfaW6XrK4qpZTKPVxvFgOqVq6wOkl5yrGBf1QlOaTlKbWqCt4szNbTmLdgKk TcaRCDZIOTPbhTtZDBx25MrDFbAbdjscnrVPRsBIHORc9oviOyRZBctdsv8M+RVu snRF3vaZiFbGUrcIUptlX0p4G/ni/Ic= -----END CERTIFICATE-----Generated at Wed Oct 14 03:13:38 2026 by rpki-client