$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ac5d77-1af3-35ce-8e6a-3a6289863538.roa File: 95ac5d77-1af3-35ce-8e6a-3a6289863538.roa (raw, json) Hash identifier: rpvIDH6+J/B2PO1lffcRdIkijFA8K1DKBXYbY8bRmk8= Subject key identifier: B8:CB:6B:F1:A1:02:67:19:DA:06:89:ED:04:97:0F:B2:2A:EB:C3:94 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F497F1463FDB3BF3E33FCB8C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ac5d77-1af3-35ce-8e6a-3a6289863538.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 166.82.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:14:63:fd:b3:bf:3e:33:fc:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=966dc7ee-9f8e-4b15-8065-9b11e43a9520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f9:95:87:dd:27:17:8a:c7:ec:a6:12:86:58: da:32:6d:7f:f2:ee:ac:b6:21:16:5e:10:46:2c:35: e0:96:d0:64:00:e1:43:05:b0:d8:cb:24:4c:d9:f3: 4b:26:31:95:33:b3:3e:d5:9d:92:37:9a:c7:95:65: d3:48:7c:7f:17:a8:2a:a3:6b:0d:3e:73:45:a9:56: 67:c1:90:c2:f9:87:3b:2d:34:31:ff:a8:ae:5b:39: 00:5f:cd:20:01:08:b1:fa:4c:e2:23:d3:dc:fc:65: 90:69:f7:d7:4c:2e:38:8e:67:52:9c:68:a8:fd:09: 6f:c5:71:de:ff:4b:44:35:4d:d5:20:fc:28:d2:ae: 57:9b:dc:3e:4d:ab:79:27:78:be:f6:31:41:12:8e: 0b:ec:5a:47:8e:74:04:10:f2:6a:41:4c:95:69:87: e7:41:fe:5a:e3:5b:9a:0f:95:f0:bb:99:dd:98:d7: 09:61:e9:a1:3c:d1:2e:dd:cd:c0:63:9e:09:f6:28: 41:02:03:59:64:84:cd:10:0a:3a:15:8b:4f:be:7e: 59:a2:77:3a:19:2d:30:47:ce:a0:4c:03:67:9d:6b: bd:6a:52:bf:e5:9d:30:e4:c0:e4:74:1b:6c:e9:14: fc:49:42:92:dc:54:3f:f8:f1:43:dd:62:8a:13:b6: 65:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CB:6B:F1:A1:02:67:19:DA:06:89:ED:04:97:0F:B2:2A:EB:C3:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ac5d77-1af3-35ce-8e6a-3a6289863538.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.82.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ee:a8:6c:e6:7c:1c:d4:f6:6a:06:02:91:44:52:cc:9f:af: a5:20:27:1e:44:ef:62:30:6a:1c:34:0c:be:ee:79:a8:8e:f9: fc:53:2a:ac:1b:5c:8a:8e:a8:5d:b8:f4:6a:75:86:d5:14:22: 88:71:39:a6:db:f1:ac:c6:10:a3:9c:77:50:2f:af:ff:52:a7: 27:ea:bf:31:40:bd:cb:f7:af:ee:cc:ec:88:8c:a1:70:5a:ef: 84:9b:df:30:57:0a:0e:11:b8:c8:f7:36:4d:f5:63:33:25:b6: be:d6:e2:c5:01:64:90:75:fe:f1:92:b4:7b:1d:eb:68:b9:9d: 76:15:27:4a:da:56:ab:08:38:1a:69:ff:8f:68:e7:67:ab:7b: 67:e0:92:8d:fd:b8:f7:3b:ca:23:c3:89:11:0c:93:67:90:8e: b9:0f:3a:49:dd:28:87:2a:dc:b8:02:ae:08:a1:45:b6:29:b7: 7a:8a:a3:ba:7b:0b:cb:65:f7:26:60:46:d5:94:fb:e3:9e:85: df:83:69:40:73:bc:3c:05:82:dd:fc:92:33:7a:5a:13:77:ce: 94:f5:61:97:08:44:6a:f8:4e:6e:ef:14:ea:e7:2f:b4:aa:8c: 25:f9:56:77:0b:c6:62:98:0b:59:79:a5:ab:83:ff:7a:c5:63: d0:c4:6e:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfxRj/bO/PjP8uMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTY2ZGM3ZWUtOWY4ZS00YjE1LTgwNjUtOWIxMWU0M2E5NTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvmVh90nF4rH7KYShljaMm1/8u6stiEWXhBG LDXgltBkAOFDBbDYyyRM2fNLJjGVM7M+1Z2SN5rHlWXTSHx/F6gqo2sNPnNFqVZn wZDC+Yc7LTQx/6iuWzkAX80gAQix+kziI9Pc/GWQaffXTC44jmdSnGio/QlvxXHe /0tENU3VIPwo0q5Xm9w+Tat5J3i+9jFBEo4L7FpHjnQEEPJqQUyVaYfnQf5a41ua D5Xwu5ndmNcJYemhPNEu3c3AY54J9ihBAgNZZITNEAo6FYtPvn5Zonc6GS0wR86g TANnnWu9alK/5Z0w5MDkdBts6RT8SUKS3FQ/+PFD3WKKE7ZlQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjLa/GhAmcZ2gaJ7QSXD7Iq68OUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTVhYzVkNzctMWFmMy0z NWNlLThlNmEtM2E2Mjg5ODYzNTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCplJQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPuqGzmfBzU9moGApFEUsyfr6UgJx5E72Iwahw0DL7ueaiO+fxTKqwb XIqOqF249Gp1htUUIohxOabb8azGEKOcd1Avr/9SpyfqvzFAvcv3r+7M7IiMoXBa 74Sb3zBXCg4RuMj3Nk31YzMltr7W4sUBZJB1/vGStHsd62i5nXYVJ0raVqsIOBpp /49o52ere2fgko39uPc7yiPDiREMk2eQjrkPOkndKIcq3LgCrgihRbYpt3qKo7p7 C8tl9yZgRtWU++Oehd+DaUBzvDwFgt38kjN6WhN3zpT1YZcIRGr4Tm7vFOrnL7Sq jCX5VncLxmKYC1l5pauD/3rFY9DEbmg= -----END CERTIFICATE-----Generated at Wed Sep 30 15:25:20 2026 by rpki-client