$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b032cd57-b8be-3111-abf5-9b49a52319f2.roa File: b032cd57-b8be-3111-abf5-9b49a52319f2.roa (raw, json) Hash identifier: TQW+1FlHxXwrcx2Q+1QpVMsyQ+DMEZjGSKUm3u4Em0g= Subject key identifier: B7:86:9E:83:98:49:87:5D:C5:E6:15:EA:10:78:AF:1B:1D:67:40:E8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F6292B632B1EA8B22266E7880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b032cd57-b8be-3111-abf5-9b49a52319f2.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 166.82.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:b6:32:b1:ea:8b:22:26:6e:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=3af7ecf5-a0b0-4f90-9c4b-833b72bf16e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:51:84:67:48:02:09:b3:cd:dc:61:8e:40:7a: 24:d7:03:dd:25:64:06:08:9a:b6:a9:20:03:73:32: ff:77:20:ce:0d:51:6a:d7:cd:82:0f:cd:d6:d7:9c: dd:c1:d8:72:8c:7c:f5:b3:b5:cd:1d:89:82:c3:72: a6:c0:a5:bc:35:d7:a3:39:87:60:09:fb:ce:28:13: 07:99:91:ca:f7:b0:15:50:0b:57:93:6e:cc:b1:bc: 31:45:67:ff:29:d7:56:19:ca:16:63:d4:9a:73:94: 30:f4:8e:37:31:3f:77:3e:1c:6a:3f:37:a3:e4:e2: a6:9f:91:6e:12:ff:30:6e:7a:14:9f:cf:ca:1b:01: dd:2c:f2:53:33:4c:bb:cb:31:ed:4a:19:a4:83:94: 04:8e:12:ce:ce:a0:33:c2:57:01:fd:27:ee:16:8f: 5d:25:68:f7:7c:5e:63:2f:22:2f:ba:44:26:ba:54: 5c:f5:1e:da:35:91:15:6c:d8:88:90:56:ff:c5:34: 1a:fc:21:2f:2e:d0:d8:7a:93:68:18:71:7d:c0:34: 40:6b:e2:a6:dd:1f:36:ae:35:b9:5f:94:84:7e:41: af:42:b1:56:42:3e:49:ae:66:bf:d2:a5:bd:82:48: a4:db:15:91:05:4b:ba:52:e2:b1:8c:17:48:b1:14: 52:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:86:9E:83:98:49:87:5D:C5:E6:15:EA:10:78:AF:1B:1D:67:40:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b032cd57-b8be-3111-abf5-9b49a52319f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.82.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:06:fc:79:3d:9d:43:01:0c:32:cb:f7:56:75:66:cd:d5:1f: 9e:33:9f:04:c0:ae:1b:82:1c:64:3b:61:fb:9e:99:ab:3e:25: 2d:63:40:d1:9b:22:05:45:51:79:7f:fc:e4:cb:9a:69:96:43: 0b:74:7b:7a:ba:1f:20:d1:8f:1b:9c:b8:b5:84:90:d1:58:dc: 51:55:25:ce:96:d9:8d:21:a4:72:29:e8:75:7e:46:fe:ab:7e: 27:6a:4f:4a:f2:37:f7:e6:62:f1:47:05:cf:e9:34:c3:ca:16: b7:5c:6c:ca:2d:06:25:1b:e4:ca:42:b6:24:99:61:d7:51:0c: 0a:db:b1:eb:f1:5d:4f:a2:94:91:6c:6a:49:ed:6e:ee:59:65: 6e:43:7c:9a:9c:df:5c:46:3d:55:c1:ae:13:b3:e8:e2:5c:89: e0:4b:07:dc:da:9b:2f:fe:6e:13:16:13:fe:24:78:67:6f:9a: 68:45:fe:24:02:f7:75:ce:cb:28:68:af:41:d5:34:9d:a7:36: 89:97:3f:bd:97:eb:07:b8:54:85:72:9e:a7:21:81:ee:8a:24: 16:02:dd:06:26:f7:6e:3c:c1:d6:87:45:00:a7:5a:d1:f2:bb: 39:8d:dd:80:ec:80:3b:d4:3e:02:31:7b:09:e1:9d:4f:d5:d3: 08:dd:ec:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrYyseqLIiZueIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk M2FmN2VjZjUtYTBiMC00ZjkwLTljNGItODMzYjcyYmYxNmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11GEZ0gCCbPN3GGOQHok1wPdJWQGCJq2qSAD czL/dyDODVFq182CD83W15zdwdhyjHz1s7XNHYmCw3KmwKW8NdejOYdgCfvOKBMH mZHK97AVUAtXk27MsbwxRWf/KddWGcoWY9Sac5Qw9I43MT93PhxqPzej5OKmn5Fu Ev8wbnoUn8/KGwHdLPJTM0y7yzHtShmkg5QEjhLOzqAzwlcB/SfuFo9dJWj3fF5j LyIvukQmulRc9R7aNZEVbNiIkFb/xTQa/CEvLtDYepNoGHF9wDRAa+Km3R82rjW5 X5SEfkGvQrFWQj5Jrma/0qW9gkik2xWRBUu6UuKxjBdIsRRSFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeGnoOYSYddxeYV6hB4rxsdZ0DoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjAzMmNkNTctYjhiZS0z MTExLWFiZjUtOWI0OWE1MjMxOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplKyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkG/Hk9nUMBDDLL91Z1Zs3VH54znwTArhuCHGQ7Yfuemas+JS1jQNGb IgVFUXl//OTLmmmWQwt0e3q6HyDRjxucuLWEkNFY3FFVJc6W2Y0hpHIp6HV+Rv6r fidqT0ryN/fmYvFHBc/pNMPKFrdcbMotBiUb5MpCtiSZYddRDArbsevxXU+ilJFs akntbu5ZZW5DfJqc31xGPVXBrhOz6OJcieBLB9zamy/+bhMWE/4keGdvmmhF/iQC 93XOyyhor0HVNJ2nNomXP72X6we4VIVynqchge6KJBYC3QYm9248wdaHRQCnWtHy uzmN3YDsgDvUPgIxewnhnU/V0wjd7FE= -----END CERTIFICATE-----Generated at Tue Oct 13 17:38:53 2026 by rpki-client