$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c3a9a40-4595-38f8-a92b-fdb444293646.roa File: 4c3a9a40-4595-38f8-a92b-fdb444293646.roa (raw, json) Hash identifier: UBEjpIsVLNUHgsa9MYXeC0P/KJV0/yBX1CU45MNwXl8= Subject key identifier: C0:18:03:94:BB:D9:ED:13:E3:00:C5:17:05:39:E8:E3:6B:36:CB:34 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D926FE8D42078F4186180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c3a9a40-4595-38f8-a92b-fdb444293646.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 166.102.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:92:6f:e8:d4:20:78:f4:18:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=575719b4-cf83-4ff0-92cb-934c086d457e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f5:d4:1e:22:bb:44:88:da:cb:ed:ec:f1:02: 44:56:3f:10:a5:70:d2:f6:80:cc:fe:96:75:d4:b5: 8a:f4:48:52:52:ca:84:9e:4b:ab:a4:f3:17:17:82: b6:34:ad:7c:39:ed:1e:3f:30:a2:62:d4:37:f2:eb: 45:95:ff:d9:e7:6e:13:b4:4e:2c:5c:91:80:8b:71: 3c:15:65:41:65:bf:ff:8f:67:d4:1b:b5:b9:87:98: ba:10:be:c6:88:ea:c3:81:d0:c0:3c:3d:51:80:1c: bb:78:59:1c:b9:d1:7e:b2:fb:f3:ef:4c:43:a9:9b: eb:e4:96:f1:42:9a:fd:fd:1d:14:42:62:af:cc:aa: 4c:f0:f9:b5:48:99:6e:14:00:c3:14:94:8c:24:da: d3:c8:27:20:2b:c7:34:93:58:52:bf:78:7b:71:60: 71:5a:0b:1d:e0:4d:b4:60:44:35:62:a2:f5:1b:d1: 0d:24:66:84:19:94:19:16:16:1d:84:82:ed:c2:f6: 95:7d:76:1c:17:28:45:b3:f2:4e:a9:c5:9f:a9:32: 6a:6d:ec:a7:a7:9f:5f:ca:18:83:9d:90:d5:17:93: 8d:3c:b0:fc:12:dc:02:61:06:73:98:d0:41:8d:44: c2:e0:82:67:2f:a2:bc:4b:c7:16:8a:1e:d8:16:49: 6e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:18:03:94:BB:D9:ED:13:E3:00:C5:17:05:39:E8:E3:6B:36:CB:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c3a9a40-4595-38f8-a92b-fdb444293646.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.102.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:1b:bb:40:77:65:3b:a7:00:9d:9d:bb:28:ff:f7:a1:4c:b7: 8d:e2:fe:3e:86:77:26:8f:ee:fe:39:9b:4e:94:56:6e:f3:f1: 61:96:7c:4e:f0:d9:73:fe:f0:e6:df:cc:1a:27:d3:2b:8c:54: c7:c0:ba:de:9a:6f:05:bb:5b:9b:fb:88:d4:58:d6:b5:59:b9: a9:aa:4b:85:0d:c6:39:ec:71:0d:9a:8d:c9:a1:a6:e2:46:65: b9:f8:0a:71:5d:ee:ce:b8:91:3a:72:a0:26:f4:fb:10:be:9d: 41:f0:ad:d9:70:54:dc:e0:7b:01:78:ed:17:b2:16:cf:38:fe: b5:4d:4e:f1:97:66:5a:ad:3d:ca:0c:69:24:53:73:c3:28:58: 7d:7e:03:67:b7:29:4f:36:57:7f:81:4d:77:1f:e3:4b:3d:3d: 98:ea:81:2f:1c:35:33:33:bd:3e:fd:c1:5d:67:72:6b:ca:8a: 88:76:cc:b2:84:52:41:52:98:44:02:00:dd:be:69:3e:3c:3d: 43:94:77:83:9b:c7:de:0b:05:23:35:cb:3e:57:9e:b6:c2:ba: 13:9f:d9:3b:61:32:ca:a2:55:d3:f9:31:1f:27:f5:1e:87:25: 81:67:1c:50:db:5f:63:18:95:93:0a:e9:a1:b2:f2:ae:b8:84: d5:f5:20:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZJv6NQgePQYYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NTc1NzE5YjQtY2Y4My00ZmYwLTkyY2ItOTM0YzA4NmQ0NTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/XUHiK7RIjay+3s8QJEVj8QpXDS9oDM/pZ1 1LWK9EhSUsqEnkurpPMXF4K2NK18Oe0ePzCiYtQ38utFlf/Z524TtE4sXJGAi3E8 FWVBZb//j2fUG7W5h5i6EL7GiOrDgdDAPD1RgBy7eFkcudF+svvz70xDqZvr5Jbx Qpr9/R0UQmKvzKpM8Pm1SJluFADDFJSMJNrTyCcgK8c0k1hSv3h7cWBxWgsd4E20 YEQ1YqL1G9ENJGaEGZQZFhYdhILtwvaVfXYcFyhFs/JOqcWfqTJqbeynp59fyhiD nZDVF5ONPLD8EtwCYQZzmNBBjUTC4IJnL6K8S8cWih7YFklu5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAYA5S72e0T4wDFFwU56ONrNss0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGMzYTlhNDAtNDU5NS0z OGY4LWE5MmItZmRiNDQ0MjkzNjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApmYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0bu0B3ZTunAJ2duyj/96FMt43i/j6GdyaP7v45m06UVm7z8WGWfE7w 2XP+8ObfzBon0yuMVMfAut6abwW7W5v7iNRY1rVZuamqS4UNxjnscQ2ajcmhpuJG Zbn4CnFd7s64kTpyoCb0+xC+nUHwrdlwVNzgewF47ReyFs84/rVNTvGXZlqtPcoM aSRTc8MoWH1+A2e3KU82V3+BTXcf40s9PZjqgS8cNTMzvT79wV1ncmvKioh2zLKE UkFSmEQCAN2+aT48PUOUd4Obx94LBSM1yz5XnrbCuhOf2TthMsqiVdP5MR8n9R6H JYFnHFDbX2MYlZMK6aGy8q64hNX1IIg= -----END CERTIFICATE-----Generated at Sun Oct 11 13:53:21 2026 by rpki-client