$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/77f536e2-5579-396b-94ea-a0376642301d.roa File: 77f536e2-5579-396b-94ea-a0376642301d.roa (raw, json) Hash identifier: jRj9N/sH3t8IoeAVEm9tK+HD4nxpMNquZ6O0ZfFEM68= Subject key identifier: B4:27:1A:8B:91:55:11:AC:B7:FE:49:2A:21:01:DD:D8:84:F7:1A:2F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F49862175D08D05AAC4E9D480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/77f536e2-5579-396b-94ea-a0376642301d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 166.82.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:21:75:d0:8d:05:aa:c4:e9:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8fc42220-aeb4-47b1-89b4-4d2bfc820418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:68:9c:7e:d5:65:fb:c6:56:c9:5b:e9:6d:68: 7a:2f:2a:3d:16:61:4c:b1:96:d8:b0:e9:54:70:9a: 56:2a:eb:57:04:af:ce:66:16:67:6c:1d:ea:ff:2d: f9:66:66:7a:3e:ef:15:f3:aa:8d:c7:94:b5:c3:1b: 6c:57:ed:52:8d:a3:6e:31:e5:e6:01:51:0e:05:42: 6e:35:67:4d:15:42:c9:1d:11:e9:0d:47:cb:bf:ab: 7c:e9:66:a3:bf:11:db:88:3b:91:19:a1:4a:27:9f: 44:81:2a:21:e7:cd:17:19:2a:97:dd:90:e6:cf:13: 19:7d:40:50:79:c2:2d:9a:64:06:cf:b0:54:cf:46: 34:40:0c:52:c2:f1:45:cd:c4:65:c9:f9:b0:ae:cd: 95:c8:0c:30:79:8a:c5:a9:96:66:20:2e:8d:02:a4: 2e:be:3d:bc:cb:84:37:c4:70:38:78:08:31:72:9b: 55:d5:70:a8:b0:f3:34:90:13:d0:66:25:b6:e6:61: e9:af:87:46:ed:c4:6c:d0:87:04:37:2e:92:52:1b: 77:61:f9:06:39:60:d7:df:a6:c9:54:8c:3e:60:0c: f1:75:c4:4c:13:96:e4:7c:75:ae:ec:48:8a:9c:ec: cf:fe:a8:7d:a1:44:92:99:21:38:cc:9d:97:4b:d0: 71:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:27:1A:8B:91:55:11:AC:B7:FE:49:2A:21:01:DD:D8:84:F7:1A:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/77f536e2-5579-396b-94ea-a0376642301d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.82.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:bf:e6:1d:ca:bc:ea:82:c5:f5:75:ee:55:7c:ae:42:9b:74: e4:8f:6f:32:53:fa:cb:6d:d0:bd:8a:c9:6b:1c:87:4d:41:a1: fe:ab:5f:82:b7:aa:61:27:fd:5f:97:fa:07:ad:83:ec:30:d1: 72:f4:41:c3:6e:2b:20:26:13:d0:0b:c0:ae:b6:ba:9c:c4:d3: 2e:d2:a2:5e:8d:2e:66:9e:d3:1b:69:b0:dd:db:8c:3d:ae:b4: 85:8e:03:fd:cb:f8:e5:ae:10:1b:7a:62:45:45:6c:de:35:4d: 82:1c:d6:b6:28:12:08:ee:61:f7:b5:4c:67:fd:a4:69:aa:4f: 3f:aa:0d:57:82:1d:ae:d3:8c:1a:96:95:0c:08:36:bd:bb:a8: 12:95:a7:d1:d7:ca:77:44:fb:69:b4:2b:66:22:38:ed:e5:9f: c7:9a:eb:88:be:6e:c3:5c:7a:fc:6e:de:2d:27:5d:4f:5d:2b: 6c:6c:64:e3:d8:a5:7b:53:e6:72:66:40:d7:4d:15:08:43:65: 7b:c0:45:90:10:85:59:5b:61:42:98:03:06:36:7d:12:e8:21: 32:b5:23:9f:f8:cc:16:02:54:7e:cc:18:03:91:fa:b5:63:80: 17:a0:1c:16:0c:4d:6c:09:72:8c:50:df:87:37:92:9d:c7:0c: a1:c6:ed:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhiF10I0FqsTp1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGZjNDIyMjAtYWViNC00N2IxLTg5YjQtNGQyYmZjODIwNDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2icftVl+8ZWyVvpbWh6Lyo9FmFMsZbYsOlU cJpWKutXBK/OZhZnbB3q/y35ZmZ6Pu8V86qNx5S1wxtsV+1SjaNuMeXmAVEOBUJu NWdNFULJHRHpDUfLv6t86WajvxHbiDuRGaFKJ59EgSoh580XGSqX3ZDmzxMZfUBQ ecItmmQGz7BUz0Y0QAxSwvFFzcRlyfmwrs2VyAwweYrFqZZmIC6NAqQuvj28y4Q3 xHA4eAgxcptV1XCosPM0kBPQZiW25mHpr4dG7cRs0IcENy6SUht3YfkGOWDX36bJ VIw+YAzxdcRME5bkfHWu7EiKnOzP/qh9oUSSmSE4zJ2XS9BxswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQnGouRVRGst/5JKiEB3diE9xovMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzdmNTM2ZTItNTU3OS0z OTZiLTk0ZWEtYTAzNzY2NDIzMDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCplKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHO/5h3KvOqCxfV17lV8rkKbdOSPbzJT+stt0L2KyWsch01Bof6rX4K3 qmEn/V+X+getg+ww0XL0QcNuKyAmE9ALwK62upzE0y7Sol6NLmae0xtpsN3bjD2u tIWOA/3L+OWuEBt6YkVFbN41TYIc1rYoEgjuYfe1TGf9pGmqTz+qDVeCHa7TjBqW lQwINr27qBKVp9HXyndE+2m0K2YiOO3ln8ea64i+bsNcevxu3i0nXU9dK2xsZOPY pXtT5nJmQNdNFQhDZXvARZAQhVlbYUKYAwY2fRLoITK1I5/4zBYCVH7MGAOR+rVj gBegHBYMTWwJcoxQ34c3kp3HDKHG7ek= -----END CERTIFICATE-----Generated at Sun Sep 27 23:50:57 2026 by rpki-client