$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/14025d5c-27dd-3007-82d8-e3cb9483e64d.roa File: 14025d5c-27dd-3007-82d8-e3cb9483e64d.roa (raw, json) Hash identifier: tYIBctQJHT9Q7NEo01CFh9wr/SzyZzK3oDrS8yHa3m4= Subject key identifier: E0:DD:DA:2C:07:52:3E:9A:0A:3A:2E:FE:BB:DD:F7:5E:73:EF:5D:C3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D00B25F356F777491B9810740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/14025d5c-27dd-3007-82d8-e3cb9483e64d.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 7029 IP address blocks: 216.96.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:5f:35:6f:77:74:91:b9:81:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=3529942e-21f3-4f3f-be12-682df25c3352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a7:5c:06:5b:cc:3c:9f:12:1f:1f:f5:f2:5c: 20:e2:d0:d5:34:fa:92:ef:5f:38:0d:81:43:95:91: e5:50:af:50:26:7a:e9:dd:b8:4b:20:11:6b:ec:3d: 89:51:3e:b0:7b:7b:da:8f:be:b1:21:18:a8:8b:29: af:ba:69:92:22:0f:8e:ce:50:fb:e1:47:cd:81:cb: c2:c1:ed:5a:1a:43:c7:80:68:ea:1f:ea:8c:b7:fc: a5:0b:e8:69:3a:14:b7:d5:81:1c:95:39:c4:60:87: 85:78:bb:27:c9:77:3a:90:b9:01:b4:65:38:8b:e2: fa:15:e3:fe:c6:2c:6b:e2:f7:43:bd:2c:e0:ae:33: d7:e9:9a:f7:b7:10:94:ab:02:d1:19:64:31:be:0d: 20:55:dd:ca:48:b5:25:da:ea:c5:51:ca:e1:a5:8f: 3d:73:b1:84:ad:dd:2b:e0:c4:f9:2a:c9:98:0a:5e: 6d:34:81:45:8b:a5:da:22:7a:c5:32:7f:27:6b:ec: f0:c5:bb:6f:d5:49:b8:26:78:e1:40:c5:43:07:6c: f9:e2:ea:92:bb:e4:09:30:e6:08:4a:48:ee:bd:20: 4e:15:f8:1e:6f:df:81:ea:99:cb:19:59:50:98:59: e5:82:42:e6:3a:67:d7:bd:97:f4:7f:a6:20:b8:a5: 20:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DD:DA:2C:07:52:3E:9A:0A:3A:2E:FE:BB:DD:F7:5E:73:EF:5D:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/14025d5c-27dd-3007-82d8-e3cb9483e64d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b2:59:11:3e:1f:fa:eb:ee:e9:7d:30:3b:a3:97:aa:b8:45: 63:a9:2e:f8:91:f4:f5:d8:6f:15:17:3b:22:90:bd:55:73:d3: b3:2a:89:1b:56:90:98:1b:c9:e6:f9:e5:4c:7c:26:62:66:c8: b2:bf:c0:5a:62:5a:8a:2c:ee:0d:b1:e3:77:5b:59:0f:15:24: 5f:ed:96:bb:87:e0:0c:c5:ee:9d:f5:06:4e:b3:b8:c2:6f:90: a7:a9:80:a4:fd:44:b8:05:6d:79:f3:e4:ff:18:b7:2c:2a:a1: ae:c9:52:f9:18:93:97:a4:8b:d5:43:7c:5d:b0:22:87:7c:96: c0:41:75:b0:19:1f:99:73:35:77:3f:de:77:b4:6b:f7:b1:72: c8:fb:a0:b3:2c:1d:9b:c8:e7:25:80:81:e7:b8:a9:b4:8e:16: 96:71:5b:45:ab:7b:1c:e2:35:09:74:e6:ef:13:87:01:31:11: 41:79:66:e0:91:4b:43:12:b2:d6:10:94:3f:44:33:0d:b0:6f: 50:1e:07:21:0e:a5:9d:a7:35:b4:bb:8e:e6:5e:6a:ad:80:7d: ed:f2:8c:3e:ee:c4:39:65:e7:39:61:71:92:81:0f:db:96:4b: f7:11:a9:59:47:ef:f1:4d:45:13:6d:97:ee:c1:dc:51:51:e8: e2:0a:a9:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Asl81b3d0kbmBB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk MzUyOTk0MmUtMjFmMy00ZjNmLWJlMTItNjgyZGYyNWMzMzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6dcBlvMPJ8SHx/18lwg4tDVNPqS7184DYFD lZHlUK9QJnrp3bhLIBFr7D2JUT6we3vaj76xIRioiymvummSIg+OzlD74UfNgcvC we1aGkPHgGjqH+qMt/ylC+hpOhS31YEclTnEYIeFeLsnyXc6kLkBtGU4i+L6FeP+ xixr4vdDvSzgrjPX6Zr3txCUqwLRGWQxvg0gVd3KSLUl2urFUcrhpY89c7GErd0r 4MT5KsmYCl5tNIFFi6XaInrFMn8na+zwxbtv1Um4JnjhQMVDB2z54uqSu+QJMOYI SkjuvSBOFfgeb9+B6pnLGVlQmFnlgkLmOmfXvZf0f6YguKUgkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODd2iwHUj6aCjou/rvd915z713DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTQwMjVkNWMtMjdkZC0z MDA3LTgyZDgtZTNjYjk0ODNlNjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSyWRE+H/rr7ul9MDujl6q4RWOpLviR9PXYbxUXOyKQvVVz07MqiRtW kJgbyeb55Ux8JmJmyLK/wFpiWoos7g2x43dbWQ8VJF/tlruH4AzF7p31Bk6zuMJv kKepgKT9RLgFbXnz5P8Ytywqoa7JUvkYk5eki9VDfF2wIod8lsBBdbAZH5lzNXc/ 3ne0a/excsj7oLMsHZvI5yWAgee4qbSOFpZxW0WrexziNQl05u8ThwExEUF5ZuCR S0MSstYQlD9EMw2wb1AeByEOpZ2nNbS7juZeaq2Afe3yjD7uxDll5zlhcZKBD9uW S/cRqVlH7/FNRRNtl+7B3FFR6OIKqZo= -----END CERTIFICATE-----Generated at Sun Mar 1 19:02:45 2026 by rpki-client