$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d242c1a2-0bf3-3976-88e9-20789a846b33.roa File: d242c1a2-0bf3-3976-88e9-20789a846b33.roa (raw, json) Hash identifier: GEAPdZu/yI1IY/90L+jGAFDGyv3xaOQ/cwwMCPCMqJU= Subject key identifier: 03:44:17:C7:53:CF:3C:19:1D:39:8B:E9:2D:21:DB:02:DE:EA:AE:C3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F498621824C213A31C8F5A700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d242c1a2-0bf3-3976-88e9-20789a846b33.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 166.82.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:21:82:4c:21:3a:31:c8:f5:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dfd0a346-89e1-4ae0-b08e-8a5a2e45e4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d9:3d:6a:36:83:0b:94:cf:3b:75:33:1c:e8: be:c1:7c:09:b3:a4:a9:71:ab:1d:16:3a:b9:f1:67: 8c:38:12:d7:54:16:01:e5:a5:c6:73:48:2f:59:4e: a8:8a:4a:22:1d:b0:9e:91:90:aa:92:98:4b:0e:46: 65:e7:46:25:41:e4:f8:05:ff:a2:9f:11:83:16:11: 8a:62:62:45:10:23:4a:40:a0:e4:cc:3f:85:d3:82: ca:b9:fc:8a:6e:9d:c6:6b:d3:9a:78:e3:0e:9f:db: 32:15:19:e1:3b:83:b9:a5:06:64:eb:53:cb:2f:91: b9:26:85:a5:6c:00:13:ef:6a:75:6c:af:9b:d7:96: 85:3d:9b:96:11:12:f7:60:68:f0:4b:d5:9c:09:e8: d0:d8:12:85:9a:79:3c:f1:7f:4d:de:af:f2:fe:37: 94:ea:d3:2b:05:ff:51:02:aa:81:5c:1c:58:c2:60: f9:12:c5:8b:9b:69:b2:fa:d0:ab:bf:0b:63:b6:99: 5b:05:bc:53:5e:92:a6:38:66:da:d1:1d:7b:19:85: 74:a1:1a:2d:7e:21:88:d9:58:fd:ce:5a:ab:a2:df: e0:14:f8:5d:8a:14:7a:4a:4c:de:8c:5f:db:0c:38: 92:9c:83:51:e3:20:0d:d1:b2:04:b5:2e:db:68:02: 80:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:44:17:C7:53:CF:3C:19:1D:39:8B:E9:2D:21:DB:02:DE:EA:AE:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d242c1a2-0bf3-3976-88e9-20789a846b33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.82.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b6:98:7b:2d:53:a5:e1:d4:2f:76:e0:f6:41:fa:f8:2c:49: 66:fd:a6:14:f6:f9:54:85:16:35:ec:c3:3a:23:38:11:97:21: 43:65:f1:39:0f:fc:b7:fb:22:9a:5b:92:5f:13:f9:d2:a9:1d: aa:45:f5:0b:13:15:54:31:2a:f1:9f:b4:a1:2b:cc:05:4e:92: a7:b2:c2:9f:4e:0f:f5:68:51:2e:a8:08:6c:79:1f:ec:a7:7f: 3a:2e:b1:e1:ec:9c:ba:4a:7e:ee:4f:79:c8:b1:b9:a3:a3:be: 63:75:2d:d8:b8:f4:f9:97:d5:88:c2:1c:fa:d2:b4:84:be:d9: 9a:7e:b5:84:a7:95:35:3f:d4:6e:b5:e8:5b:fc:3e:40:ad:e4: 1f:03:fc:45:f3:02:ef:41:ff:76:75:a1:a8:bc:ab:19:a0:51: 18:b6:5e:2c:45:64:69:83:77:28:41:3c:51:3c:e6:ca:97:5e: c8:36:9d:09:b1:07:10:32:15:dc:85:da:54:89:6d:c0:c1:f9: 1c:58:88:ce:e7:55:39:ab:b3:cc:6d:08:8d:18:68:bb:30:c3: 5a:3c:16:ee:a2:32:a7:ca:4e:ea:b5:59:a1:f4:36:31:bf:03: fe:22:13:46:9b:e9:56:8b:fa:b9:fd:9b:84:b6:a8:9e:58:05: 53:80:7c:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhiGCTCE6Mcj1pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGZkMGEzNDYtODllMS00YWUwLWIwOGUtOGE1YTJlNDVlNGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Nk9ajaDC5TPO3UzHOi+wXwJs6SpcasdFjq5 8WeMOBLXVBYB5aXGc0gvWU6oikoiHbCekZCqkphLDkZl50YlQeT4Bf+inxGDFhGK YmJFECNKQKDkzD+F04LKufyKbp3Ga9OaeOMOn9syFRnhO4O5pQZk61PLL5G5JoWl bAAT72p1bK+b15aFPZuWERL3YGjwS9WcCejQ2BKFmnk88X9N3q/y/jeU6tMrBf9R AqqBXBxYwmD5EsWLm2my+tCrvwtjtplbBbxTXpKmOGba0R17GYV0oRotfiGI2Vj9 zlqrot/gFPhdihR6SkzejF/bDDiSnINR4yAN0bIEtS7baAKACwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANEF8dTzzwZHTmL6S0h2wLe6q7DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDI0MmMxYTItMGJmMy0z OTc2LTg4ZTktMjA3ODlhODQ2YjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCplKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADe2mHstU6Xh1C924PZB+vgsSWb9phT2+VSFFjXswzojOBGXIUNl8TkP /Lf7Ippbkl8T+dKpHapF9QsTFVQxKvGftKErzAVOkqeywp9OD/VoUS6oCGx5H+yn fzouseHsnLpKfu5PecixuaOjvmN1Ldi49PmX1YjCHPrStIS+2Zp+tYSnlTU/1G61 6Fv8PkCt5B8D/EXzAu9B/3Z1oai8qxmgURi2XixFZGmDdyhBPFE85sqXXsg2nQmx BxAyFdyF2lSJbcDB+RxYiM7nVTmrs8xtCI0YaLsww1o8Fu6iMqfKTuq1WaH0NjG/ A/4iE0ab6VaL+rn9m4S2qJ5YBVOAfMo= -----END CERTIFICATE-----Generated at Sun Oct 11 03:38:12 2026 by rpki-client