$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dd66e60-aa9a-3df3-be8c-e9f5be7d04d5.roa File: 2dd66e60-aa9a-3df3-be8c-e9f5be7d04d5.roa (raw, json) Hash identifier: RuG72hUATHmqxGhScFqnDXTSCipaGlmLTHlZYq301pI= Subject key identifier: 10:4D:05:6B:92:C7:7D:3B:C4:81:E0:7F:93:AF:6C:3F:CB:DC:7E:D9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D00B25B69743C9645332EAF40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dd66e60-aa9a-3df3-be8c-e9f5be7d04d5.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 7029 IP address blocks: 216.96.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:5b:69:74:3c:96:45:33:2e:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=226ed519-0a23-431e-8e5d-aec71485b858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:44:da:78:71:73:16:a4:8d:8e:b3:00:10:1e: 70:1a:74:5d:2c:ba:09:3e:c9:03:a3:4e:75:1f:88: 88:4a:a0:c5:bd:7d:05:e1:36:74:a9:e7:dc:8e:56: 10:22:ea:aa:0a:50:a3:8e:89:b1:1a:2c:61:2a:c3: c7:53:bc:1b:6a:42:b2:2f:29:a7:7f:53:b6:95:9b: c4:85:65:1c:54:65:29:24:56:69:ac:f0:9c:fc:c0: 5c:64:62:d4:b9:79:54:64:43:c3:98:53:30:f7:0c: ee:de:1a:36:bf:4f:09:ec:e6:71:45:71:ec:fd:92: 77:a3:22:c9:ab:16:a7:51:58:b9:6e:a5:c8:ef:59: 90:73:f2:9e:20:11:fe:0d:64:ff:b1:29:dd:eb:36: 6a:b8:e2:03:9f:79:99:1a:7d:d2:7e:da:42:d1:7d: 32:6b:3f:1b:fe:d5:7c:ad:e0:d1:e6:28:48:40:b2: e8:8b:0a:fe:b9:ca:47:f0:c2:0b:02:19:92:ce:f8: 48:20:51:2f:3f:f5:d6:7a:60:21:e1:64:b9:13:b9: 3d:9f:bb:7c:80:c1:50:d8:3f:c2:87:bd:e2:bd:a5: b9:f5:2c:c7:9d:29:3f:14:e4:78:3c:d1:80:33:87: 1e:4b:a9:30:f2:9e:68:25:11:ce:17:86:88:93:c3: 6b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4D:05:6B:92:C7:7D:3B:C4:81:E0:7F:93:AF:6C:3F:CB:DC:7E:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dd66e60-aa9a-3df3-be8c-e9f5be7d04d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:5e:0c:ca:fc:22:7a:16:23:ae:60:3b:61:1b:94:b1:fa:11: 67:05:ec:45:2e:5c:4e:bd:31:e2:07:08:d8:94:d4:cf:f1:1a: bd:dc:31:88:1e:f8:67:0d:a8:f9:37:3e:9d:15:b5:3e:c9:fb: 69:f4:d7:09:a7:bb:2f:7a:75:3c:6b:83:e9:7e:ec:86:89:ee: 34:8a:b2:f9:aa:e8:fa:a0:50:17:df:23:4c:f2:e7:f4:1b:33: d6:3e:c1:cc:a6:49:15:02:dd:d1:dd:fd:e8:be:f7:dc:50:2c: f9:5c:37:1d:c9:aa:d1:46:63:6b:5d:97:4b:64:db:92:6e:c6: 2b:1a:9b:d9:4e:56:d1:2b:ad:cd:52:ec:e3:89:fe:43:a2:9c: a7:75:a8:e8:24:96:d2:ef:8b:74:df:d2:34:29:dd:92:8e:b3: 05:56:28:d0:74:15:8e:bc:19:90:0c:ff:ce:fd:3c:c1:83:5d: a3:d2:b7:29:a0:95:5c:6f:99:6b:90:25:b4:d9:74:d3:ed:f0: 6a:ce:c5:22:eb:f9:1d:a3:e8:c3:b8:e4:9c:37:d0:a0:45:1c: 41:5e:3d:89:6e:2f:58:00:fb:ad:fa:8e:4a:a5:ab:38:b4:d9: d1:5c:7f:a0:55:49:6c:1f:85:7f:d7:be:2d:ee:fa:ca:f3:32: e4:b8:c3:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AsltpdDyWRTMur0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk MjI2ZWQ1MTktMGEyMy00MzFlLThlNWQtYWVjNzE0ODViODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUTaeHFzFqSNjrMAEB5wGnRdLLoJPskDo051 H4iISqDFvX0F4TZ0qefcjlYQIuqqClCjjomxGixhKsPHU7wbakKyLymnf1O2lZvE hWUcVGUpJFZprPCc/MBcZGLUuXlUZEPDmFMw9wzu3ho2v08J7OZxRXHs/ZJ3oyLJ qxanUVi5bqXI71mQc/KeIBH+DWT/sSnd6zZquOIDn3mZGn3SftpC0X0yaz8b/tV8 reDR5ihIQLLoiwr+ucpH8MILAhmSzvhIIFEvP/XWemAh4WS5E7k9n7t8gMFQ2D/C h73ivaW59SzHnSk/FOR4PNGAM4ceS6kw8p5oJRHOF4aIk8NrsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBNBWuSx307xIHgf5OvbD/L3H7ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmRkNjZlNjAtYWE5YS0z ZGYzLWJlOGMtZTlmNWJlN2QwNGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACteDMr8InoWI65gO2EblLH6EWcF7EUuXE69MeIHCNiU1M/xGr3cMYge +GcNqPk3Pp0VtT7J+2n01wmnuy96dTxrg+l+7IaJ7jSKsvmq6PqgUBffI0zy5/Qb M9Y+wcymSRUC3dHd/ei+99xQLPlcNx3JqtFGY2tdl0tk25Juxisam9lOVtErrc1S 7OOJ/kOinKd1qOgkltLvi3Tf0jQp3ZKOswVWKNB0FY68GZAM/879PMGDXaPStymg lVxvmWuQJbTZdNPt8GrOxSLr+R2j6MO45Jw30KBFHEFePYluL1gA+636jkqlqzi0 2dFcf6BVSWwfhX/Xvi3u+srzMuS4wzQ= -----END CERTIFICATE-----Generated at Sun Mar 1 20:25:57 2026 by rpki-client