$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa28106e-e7e6-354b-9d61-537cbb86adc4.roa File: aa28106e-e7e6-354b-9d61-537cbb86adc4.roa (raw, json) Hash identifier: kxGo/oWftYEe62Qmjyt+RN8CAfzKry2Xtqv4Lw6ZEbc= Subject key identifier: FF:3C:FC:6C:8B:D7:27:37:C4:ED:4F:71:4E:56:3A:46:B7:DA:D0:A1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D997695AD374704323600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa28106e-e7e6-354b-9d61-537cbb86adc4.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 55107 IP address blocks: 66.173.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:99:76:95:ad:37:47:04:32:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=b09758d0-7a12-4f92-9f4b-59cdd88accc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ad:25:84:a7:89:bb:e4:53:bc:55:cf:f6:0f: dc:9a:c9:68:cc:2e:20:49:2b:40:cc:0d:f9:05:a1: 4d:08:4a:ab:11:db:ae:e7:c9:83:2f:cf:d9:da:37: 6a:5e:2a:8a:ca:02:98:90:a8:91:db:0b:be:41:79: a1:fe:ae:d9:4b:a3:da:09:e5:1b:52:8a:a6:ef:92: c7:c0:ab:3f:e2:2a:5f:83:dc:70:6b:5a:45:94:7f: 08:17:37:01:db:b0:48:c4:41:19:93:90:60:5c:b4: 60:f8:3d:14:34:c5:7e:f1:4b:0f:c7:dd:92:32:ed: f2:71:90:15:3c:5e:0e:59:c8:98:2d:f2:ac:00:11: 89:44:02:b6:36:4d:f7:df:64:94:66:77:17:77:f9: cc:5f:55:ff:17:10:23:d1:a2:95:36:d1:85:f6:fe: 26:a5:0e:a6:94:c6:2c:4d:39:c6:1f:6e:82:0a:66: f7:8b:f9:9e:89:ee:f7:91:93:d7:8b:e0:d2:d3:4c: a3:95:a2:d6:88:d6:b2:8b:e0:b6:1f:fb:9d:a5:d7: 2e:31:09:f5:78:4a:42:fb:43:3f:eb:1a:bd:60:d9: 25:8b:aa:e7:ff:6c:cc:9c:d9:e0:09:27:f3:ea:d2: 61:cf:71:d4:1c:65:cf:58:e0:7c:e0:ab:55:0e:90: 5a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3C:FC:6C:8B:D7:27:37:C4:ED:4F:71:4E:56:3A:46:B7:DA:D0:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa28106e-e7e6-354b-9d61-537cbb86adc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.173.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:08:04:6f:da:ec:3c:a6:99:f7:c0:42:49:95:9d:d7:fc:ff: b4:14:00:2b:83:9a:96:f2:a8:99:c5:90:63:26:a9:b7:18:cc: 7e:f6:92:75:9c:dc:06:fa:8e:69:67:a9:26:58:a0:2d:b6:1d: 97:b0:a2:94:f4:5f:b3:7b:49:7c:cc:b5:44:12:61:2a:b6:4d: fc:85:40:66:8a:17:b7:a8:65:e8:1f:6a:b6:79:ff:cc:df:1d: be:d2:ba:e9:a1:f4:17:ed:de:b7:04:6a:b0:82:f0:5c:f5:51: e8:2d:10:2e:3c:67:26:e8:94:17:b1:1c:4d:16:0c:86:1f:e4: 3d:00:0e:05:ff:1d:02:fd:42:37:63:c6:57:af:78:22:e1:dc: 39:1c:28:b5:60:f6:c2:91:8a:c9:62:fc:4f:24:06:16:1b:dd: eb:5e:97:d7:72:a1:34:52:73:01:1b:01:ca:39:3b:26:a9:8f: 59:a8:e1:b2:62:a9:42:a8:b5:a8:95:08:e7:6d:f0:7c:10:af: 73:4d:c1:8c:08:8c:94:13:f3:1b:8e:73:ea:65:f3:00:e1:02: 74:78:da:3e:78:c5:af:3d:bd:3b:2c:06:b1:fc:90:60:30:ba: ef:94:9b:d6:b7:ce:fa:bf:14:85:e8:1b:93:d5:91:95:68:e3: 46:33:e1:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZl2la03RwQyNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YjA5NzU4ZDAtN2ExMi00ZjkyLTlmNGItNTljZGQ4OGFjY2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq0lhKeJu+RTvFXP9g/cmslozC4gSStAzA35 BaFNCEqrEduu58mDL8/Z2jdqXiqKygKYkKiR2wu+QXmh/q7ZS6PaCeUbUoqm75LH wKs/4ipfg9xwa1pFlH8IFzcB27BIxEEZk5BgXLRg+D0UNMV+8UsPx92SMu3ycZAV PF4OWciYLfKsABGJRAK2Nk3332SUZncXd/nMX1X/FxAj0aKVNtGF9v4mpQ6mlMYs TTnGH26CCmb3i/meie73kZPXi+DS00yjlaLWiNayi+C2H/udpdcuMQn1eEpC+0M/ 6xq9YNkli6rn/2zMnNngCSfz6tJhz3HUHGXPWOB84KtVDpBayQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP88/GyL1yc3xO1PcU5WOka32tChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWEyODEwNmUtZTdlNi0z NTRiLTlkNjEtNTM3Y2JiODZhZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQq2dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwIBG/a7DymmffAQkmVndf8/7QUACuDmpbyqJnFkGMmqbcYzH72knWc 3Ab6jmlnqSZYoC22HZewopT0X7N7SXzMtUQSYSq2TfyFQGaKF7eoZegfarZ5/8zf Hb7Suumh9Bft3rcEarCC8Fz1UegtEC48ZybolBexHE0WDIYf5D0ADgX/HQL9Qjdj xleveCLh3DkcKLVg9sKRisli/E8kBhYb3etel9dyoTRScwEbAco5Oyapj1mo4bJi qUKotaiVCOdt8HwQr3NNwYwIjJQT8xuOc+pl8wDhAnR42j54xa89vTssBrH8kGAw uu+Um9a3zvq/FIXoG5PVkZVo40Yz4XU= -----END CERTIFICATE-----Generated at Wed Oct 14 07:54:40 2026 by rpki-client