$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20455f62-3832-3132-8950-2d4d84f4cf4f.roa File: 20455f62-3832-3132-8950-2d4d84f4cf4f.roa (raw, json) Hash identifier: 7YLWY3686AVrYn2sBz6aQbFSc2DFcpq07nMaSzgMJHs= Subject key identifier: D8:CA:2C:B0:05:CC:71:62:8B:17:55:74:8C:9A:1F:45:A7:FB:B8:C7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D00B23F870FB113A0A95C0200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20455f62-3832-3132-8950-2d4d84f4cf4f.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 7029 IP address blocks: 216.96.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:3f:87:0f:b1:13:a0:a9:5c:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=0a133da9-9f4a-4734-8c7a-69484acc20c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0a:3e:79:db:42:ad:2a:17:3f:8a:7a:45:45: 29:4f:e0:c3:6e:a4:73:1e:98:99:83:22:a6:46:1f: d0:d3:1b:18:3c:10:06:19:a1:ce:26:7e:97:4e:b4: 70:0f:45:fe:16:44:9e:1d:50:a5:fc:8b:20:5d:31: 5f:bd:44:f4:8e:14:49:90:a9:cb:7f:49:a3:26:70: 75:35:8f:21:24:96:72:a6:98:14:0a:ec:e0:e8:a5: 04:d9:73:fe:31:15:09:93:d6:b5:e0:e8:f0:dc:1c: 7b:ce:1f:8a:d8:6f:6c:ea:29:71:de:2b:66:6c:54: 72:dc:90:db:8d:04:0e:ba:c5:b5:8c:f1:fb:f3:c9: 90:c1:1e:0a:37:0f:e5:b1:b8:6b:f6:12:94:b4:33: 42:04:68:0b:11:76:f4:d2:c1:6d:28:d3:42:03:02: 27:f9:73:b6:fb:4b:78:90:24:f0:fd:11:8e:92:2d: 83:af:9e:fd:fd:3e:13:90:11:55:94:fb:10:9d:e7: 43:b1:a2:b7:6f:8f:b2:36:bc:d8:c1:90:a1:ee:62: 2a:05:0f:d9:ff:9d:1e:f4:2f:02:d0:df:e2:55:69: 6f:ea:00:3e:c2:1a:61:01:f5:64:ba:73:a6:4e:c1: 3a:7c:38:bf:5f:78:2e:7e:e5:7f:e5:c2:b6:b3:4a: ba:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CA:2C:B0:05:CC:71:62:8B:17:55:74:8C:9A:1F:45:A7:FB:B8:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20455f62-3832-3132-8950-2d4d84f4cf4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:3c:57:c6:30:5a:35:06:73:8b:6c:f5:af:3e:26:06:0d:24: 60:f7:e4:eb:0b:e5:aa:00:04:57:5a:1c:7a:d8:61:5a:7c:00: a3:44:4a:b9:0f:67:23:f7:e7:79:48:e5:2b:80:85:40:3c:56: de:bb:df:93:17:cf:06:3b:45:db:4d:bd:66:3e:f8:a6:6d:53: 37:4b:07:4e:2b:85:a3:86:48:9a:6e:50:10:11:82:74:31:2b: 5e:e7:79:f8:e1:12:5e:36:8a:8c:5b:fa:8b:82:c2:f0:a0:83: be:b8:31:ff:b4:09:77:23:f2:14:22:1f:49:bc:7d:84:4d:f4: e5:5f:41:e3:64:8f:6a:8c:a3:1f:f4:bc:7d:9b:f3:47:97:f0: 68:e6:5d:c3:62:c0:c1:32:c9:4f:3d:7a:04:b3:e4:24:07:7b: 6f:01:a8:20:ae:81:04:4a:00:5b:e0:9e:8d:44:07:fb:01:50: 08:b3:7e:c4:ee:cc:7b:7b:f1:fa:5a:bd:13:f6:6a:a1:70:e6: 5c:d2:50:6b:9f:0e:42:c2:90:2c:8f:8a:b8:30:a7:30:39:b4: b6:c9:12:c9:57:5f:45:3b:47:31:eb:94:c1:11:e0:79:3a:38: c1:d0:23:c0:9e:2d:3a:40:5e:bc:05:64:1c:52:46:aa:b1:54: 96:c8:7e:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Asj+HD7EToKlcAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk MGExMzNkYTktOWY0YS00NzM0LThjN2EtNjk0ODRhY2MyMGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgo+edtCrSoXP4p6RUUpT+DDbqRzHpiZgyKm Rh/Q0xsYPBAGGaHOJn6XTrRwD0X+FkSeHVCl/IsgXTFfvUT0jhRJkKnLf0mjJnB1 NY8hJJZyppgUCuzg6KUE2XP+MRUJk9a14Ojw3Bx7zh+K2G9s6ilx3itmbFRy3JDb jQQOusW1jPH788mQwR4KNw/lsbhr9hKUtDNCBGgLEXb00sFtKNNCAwIn+XO2+0t4 kCTw/RGOki2Dr579/T4TkBFVlPsQnedDsaK3b4+yNrzYwZCh7mIqBQ/Z/50e9C8C 0N/iVWlv6gA+whphAfVkunOmTsE6fDi/X3gufuV/5cK2s0q6+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjKLLAFzHFiixdVdIyaH0Wn+7jHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjA0NTVmNjItMzgzMi0z MTMyLTg5NTAtMmQ0ZDg0ZjRjZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GAdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACM8V8YwWjUGc4ts9a8+JgYNJGD35OsL5aoABFdaHHrYYVp8AKNESrkP ZyP353lI5SuAhUA8Vt6735MXzwY7RdtNvWY++KZtUzdLB04rhaOGSJpuUBARgnQx K17nefjhEl42ioxb+ouCwvCgg764Mf+0CXcj8hQiH0m8fYRN9OVfQeNkj2qMox/0 vH2b80eX8GjmXcNiwMEyyU89egSz5CQHe28BqCCugQRKAFvgno1EB/sBUAizfsTu zHt78fpavRP2aqFw5lzSUGufDkLCkCyPirgwpzA5tLbJEslXX0U7RzHrlMER4Hk6 OMHQI8CeLTpAXrwFZBxSRqqxVJbIfkg= -----END CERTIFICATE-----Generated at Sun Mar 1 18:56:15 2026 by rpki-client