$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc52a309-4550-3e17-b8e7-c147f840f32c.roa File: cc52a309-4550-3e17-b8e7-c147f840f32c.roa (raw, json) Hash identifier: rR7U3DgClwtoJcygzbGHTyrXAVaNAs3QC4a4bDUixAg= Subject key identifier: 93:A4:64:4E:A5:BB:3D:FC:08:E1:40:1C:44:AD:2E:C2:4A:0F:85:06 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F6E9BA1E95890FA4B46D61010 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc52a309-4550-3e17-b8e7-c147f840f32c.roa Signing time: Thu 08 Oct 2026 08:27:57 +0000 ROA not before: Thu 08 Oct 2026 08:27:57 +0000 ROA not after: Wed 06 Jan 2027 09:27:57 +0000 asID: 7029 IP address blocks: 166.82.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6e:9b:a1:e9:58:90:fa:4b:46:d6:10:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 8 08:27:57 2026 GMT Not After : Jan 6 09:27:57 2027 GMT Subject: CN=471d7a2f-307f-453a-b443-445cc1d639dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:87:b8:ec:4a:62:42:ea:be:8a:64:a2:5d:3d: 28:1e:10:b1:0b:6e:37:44:a8:56:24:8f:64:8d:9b: 9a:90:ee:ec:ce:31:13:b1:da:52:ca:5a:f6:8b:04: 97:60:e3:51:0e:8a:e7:79:0a:3e:1d:28:2e:d3:9f: 88:05:bb:ea:c4:c0:10:c8:6a:62:1c:cb:e9:cb:7c: e4:21:ec:21:0b:83:0f:a6:2d:7a:6a:ed:4e:b4:87: 58:09:0f:eb:b6:74:2d:84:0a:59:49:56:32:a2:ee: f2:a7:6b:1b:35:6d:1c:a9:23:a3:95:46:c8:6a:05: 28:c1:42:b8:04:07:f0:dd:8d:30:9d:64:ca:56:fe: cd:17:c1:48:c7:39:1e:31:9e:c1:c8:09:98:97:47: 2c:59:01:87:c8:71:6f:25:ca:54:2e:f1:13:40:20: d4:50:65:1e:54:22:2d:1f:db:e5:4c:06:ab:20:b9: e3:63:b9:a4:52:8f:5c:c3:22:f5:c3:c3:cd:12:43: 7f:87:20:b8:02:36:10:80:b7:ea:9b:1a:fe:38:42: 0e:c5:c1:91:f7:e9:c2:de:d1:78:d6:25:33:a1:1b: c2:e0:9b:8f:ad:e2:f4:76:3d:23:75:bb:19:27:0b: 93:5d:a8:e0:b4:f9:dc:94:65:5d:f0:5f:70:d8:b6: 5d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A4:64:4E:A5:BB:3D:FC:08:E1:40:1C:44:AD:2E:C2:4A:0F:85:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc52a309-4550-3e17-b8e7-c147f840f32c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.82.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:8e:63:45:1b:28:cd:1e:e1:42:85:4f:b4:a6:94:e1:c1:1c: 89:d8:71:b8:0e:ad:fe:db:b7:a6:18:56:8b:4d:88:9e:2b:bc: 9f:ec:c4:7c:f3:29:30:20:77:25:dc:d7:c6:df:5a:5a:c3:97: 4e:64:f2:4b:66:cb:2a:fc:34:96:12:b3:fd:1e:32:2e:6b:ed: f7:8f:98:bd:5a:2c:37:bb:32:16:5f:8f:85:58:0b:ae:ca:55: 17:77:84:fc:95:92:b9:f2:d7:c3:7f:e5:15:85:45:0a:ae:3b: e6:34:82:44:4b:67:76:64:14:35:4b:92:e3:c2:1e:c4:e7:cc: 7d:8e:9b:6d:3e:65:f1:47:f3:ec:e8:c4:7c:d8:5f:66:b6:9b: 44:0f:91:a3:9a:33:31:d5:09:9f:b2:c3:fd:89:59:11:64:45: 80:f1:3d:24:a9:12:58:f6:62:07:99:ae:77:0b:56:c7:cf:46: f3:46:7b:ad:20:0d:48:5f:74:37:61:62:0b:79:75:f7:8b:67: e2:8b:d0:a8:08:42:1e:74:49:8a:4b:3a:86:bc:1b:05:ec:c3: b7:4c:89:df:63:e3:01:77:88:39:b2:15:18:6a:e5:85:c4:73: 19:46:a3:f6:f8:4f:0f:52:c7:fb:50:a1:95:cf:d0:da:b4:f8: 22:3d:89:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9um6HpWJD6S0bWEBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwODA4Mjc1N1oXDTI3MDEwNjA5Mjc1N1owLzEtMCsGA1UEAxMk NDcxZDdhMmYtMzA3Zi00NTNhLWI0NDMtNDQ1Y2MxZDYzOWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIe47EpiQuq+imSiXT0oHhCxC243RKhWJI9k jZuakO7szjETsdpSylr2iwSXYONRDorneQo+HSgu05+IBbvqxMAQyGpiHMvpy3zk IewhC4MPpi16au1OtIdYCQ/rtnQthApZSVYyou7yp2sbNW0cqSOjlUbIagUowUK4 BAfw3Y0wnWTKVv7NF8FIxzkeMZ7ByAmYl0csWQGHyHFvJcpULvETQCDUUGUeVCIt H9vlTAarILnjY7mkUo9cwyL1w8PNEkN/hyC4AjYQgLfqmxr+OEIOxcGR9+nC3tF4 1iUzoRvC4JuPreL0dj0jdbsZJwuTXajgtPnclGVd8F9w2LZdGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOkZE6luz38COFAHEStLsJKD4UGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2M1MmEzMDktNDU1MC0z ZTE3LWI4ZTctYzE0N2Y4NDBmMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplIJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOOY0UbKM0e4UKFT7SmlOHBHInYcbgOrf7bt6YYVotNiJ4rvJ/sxHzz KTAgdyXc18bfWlrDl05k8ktmyyr8NJYSs/0eMi5r7fePmL1aLDe7MhZfj4VYC67K VRd3hPyVkrny18N/5RWFRQquO+Y0gkRLZ3ZkFDVLkuPCHsTnzH2Om20+ZfFH8+zo xHzYX2a2m0QPkaOaMzHVCZ+yw/2JWRFkRYDxPSSpElj2YgeZrncLVsfPRvNGe60g DUhfdDdhYgt5dfeLZ+KL0KgIQh50SYpLOoa8GwXsw7dMid9j4wF3iDmyFRhq5YXE cxlGo/b4Tw9Sx/tQoZXP0Nq0+CI9icQ= -----END CERTIFICATE-----Generated at Tue Oct 13 17:32:26 2026 by rpki-client