$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/975b58b5-41e4-3c2e-b129-8e90818ced45.roa File: 975b58b5-41e4-3c2e-b129-8e90818ced45.roa (raw, json) Hash identifier: WYmFkUakIFZQGQVaEF/G0lKq6ljcfRO11X9NFPUR4vE= Subject key identifier: 30:85:FB:18:0B:D8:82:75:D6:26:5F:55:EA:61:31:10:73:BC:0B:D0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A79068FEC8A86C54AE300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/975b58b5-41e4-3c2e-b129-8e90818ced45.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 27479 IP address blocks: 166.82.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:79:06:8f:ec:8a:86:c5:4a:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=4d7e9e3c-87cc-45a2-ba68-bf0f32e07a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:00:a8:52:69:6d:69:39:4d:cf:ca:c0:ee:21: 41:49:8c:c8:0d:7d:46:68:61:ae:35:f8:b3:86:71: 5c:12:72:ad:3c:95:4f:f0:e3:03:95:f5:e8:3c:e8: 05:0c:bb:af:f3:3a:6f:94:92:f6:12:9e:df:ba:28: 44:68:53:fe:92:de:ab:c7:a8:86:3c:4f:85:2c:d1: 37:31:bb:2c:d2:6f:d5:7b:1c:59:bd:60:6b:74:f7: 1e:dc:70:80:c2:d9:83:65:87:4c:f8:ee:45:20:29: 55:8d:dc:37:36:94:ad:a5:77:44:35:5d:5c:81:a2: 7f:72:9d:55:d0:f6:93:6f:58:18:56:c3:63:cf:d6: 4b:fe:0e:d3:c0:1d:ed:b9:3f:8b:d6:d1:f8:ed:79: a2:e7:c8:71:3b:c3:96:e7:ed:b1:4d:93:92:aa:d7: 2f:0f:a3:46:63:d0:7e:64:01:06:b8:1c:2b:ee:79: 7c:8d:26:19:b5:aa:75:d7:24:b1:e4:27:f1:37:fb: 58:c7:45:ad:b9:6a:9b:9b:e8:ac:95:92:f5:0b:30: 45:68:9e:3a:8d:d1:3d:35:e4:1b:1e:91:d6:1d:cd: f3:50:6c:61:7d:84:e3:d3:fe:fd:5f:2a:20:0f:f1: 74:4c:87:b1:8f:b3:8e:8d:02:7d:96:cf:19:5f:63: 33:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:85:FB:18:0B:D8:82:75:D6:26:5F:55:EA:61:31:10:73:BC:0B:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/975b58b5-41e4-3c2e-b129-8e90818ced45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.82.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:dc:99:61:a2:96:32:88:c7:11:3a:08:71:c9:82:0e:34:cf: f8:80:3e:16:c9:b9:c1:bf:1c:f7:36:c5:12:b3:10:95:83:7b: ab:c8:da:0e:63:ec:3b:ee:45:b1:2b:6f:5a:5a:92:e5:8a:18: 61:67:15:f1:72:f4:90:75:b3:1a:42:a1:e2:0f:b5:b7:2b:1c: 67:b6:6e:da:25:bd:d7:f6:92:70:cc:9a:5d:52:7e:3a:9c:e5: 69:33:a5:d5:80:34:41:11:99:09:1c:2e:fa:93:92:9c:0a:0c: 25:c0:93:d7:8c:a4:34:21:09:1d:67:d1:9f:a1:02:2c:37:73: 1e:c8:c4:e9:1d:67:91:f7:21:b5:33:e0:6d:dc:c5:37:19:c5: 15:f8:33:a9:58:31:75:92:ee:41:37:f5:23:0c:88:4f:0c:7e: 1d:36:c0:44:12:1a:40:83:3c:dc:da:d4:cc:34:b2:77:b9:d4: b9:61:83:c3:37:f5:77:28:03:7d:bf:db:ce:1e:a1:93:f1:a7: d1:b9:a8:97:59:29:d1:ff:5d:5c:ed:57:69:b7:07:fc:a9:67: a0:5f:b1:15:e1:81:34:95:9c:55:ff:97:48:5c:21:2a:c9:05: 1a:9a:1e:eb:39:ad:ea:50:27:f4:83:11:f5:66:a3:40:49:c4: ed:53:44:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnkGj+yKhsVK4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NGQ3ZTllM2MtODdjYy00NWEyLWJhNjgtYmYwZjMyZTA3YTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQCoUmltaTlNz8rA7iFBSYzIDX1GaGGuNfiz hnFcEnKtPJVP8OMDlfXoPOgFDLuv8zpvlJL2Ep7fuihEaFP+kt6rx6iGPE+FLNE3 Mbss0m/VexxZvWBrdPce3HCAwtmDZYdM+O5FIClVjdw3NpStpXdENV1cgaJ/cp1V 0PaTb1gYVsNjz9ZL/g7TwB3tuT+L1tH47Xmi58hxO8OW5+2xTZOSqtcvD6NGY9B+ ZAEGuBwr7nl8jSYZtap11ySx5CfxN/tYx0WtuWqbm+islZL1CzBFaJ46jdE9NeQb HpHWHc3zUGxhfYTj0/79XyogD/F0TIexj7OOjQJ9ls8ZX2MzgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCF+xgL2IJ11iZfVephMRBzvAvQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTc1YjU4YjUtNDFlNC0z YzJlLWIxMjktOGU5MDgxOGNlZDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplJMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArcmWGiljKIxxE6CHHJgg40z/iAPhbJucG/HPc2xRKzEJWDe6vI2g5j 7DvuRbErb1pakuWKGGFnFfFy9JB1sxpCoeIPtbcrHGe2btolvdf2knDMml1Sfjqc 5WkzpdWANEERmQkcLvqTkpwKDCXAk9eMpDQhCR1n0Z+hAiw3cx7IxOkdZ5H3IbUz 4G3cxTcZxRX4M6lYMXWS7kE39SMMiE8Mfh02wEQSGkCDPNza1Mw0sne51Llhg8M3 9XcoA32/284eoZPxp9G5qJdZKdH/XVztV2m3B/ypZ6BfsRXhgTSVnFX/l0hcISrJ BRqaHus5repQJ/SDEfVmo0BJxO1TRLU= -----END CERTIFICATE-----Generated at Thu Mar 26 18:17:52 2026 by rpki-client