$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d2b22a6-bd49-3c71-a630-4cd3ecafa3ae.roa File: 5d2b22a6-bd49-3c71-a630-4cd3ecafa3ae.roa (raw, json) Hash identifier: kyacCvll+6FoUNzV8AGpVN5slRkNBgaLtsBEJN0wYVY= Subject key identifier: 57:AE:AC:C0:85:23:FA:83:06:9E:97:E7:99:EC:C4:7B:F4:91:74:46 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D00B25E63ACBA285A098A2180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d2b22a6-bd49-3c71-a630-4cd3ecafa3ae.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 7029 IP address blocks: 174.131.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:5e:63:ac:ba:28:5a:09:8a:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=1de6230d-b6f1-4c5c-90b6-30e0e23d8832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:92:c8:4c:c3:9b:38:f0:f4:c4:12:8d:82:a1: 4f:22:62:df:ab:77:f8:d0:8a:fc:2c:1f:fa:1a:5b: 55:e9:0c:c5:94:e4:e5:e7:ad:ab:53:37:bf:6e:ff: bb:f4:78:67:a3:70:c3:6b:d9:0a:08:5b:49:6b:ab: d1:18:90:88:01:1d:c6:b5:19:48:df:77:bb:2a:54: 18:7b:39:6d:80:f1:c8:7c:2b:dc:8a:9b:22:b8:5a: 4a:1b:44:e3:dd:de:bb:86:e1:54:b1:82:78:d5:4e: b1:f3:f5:24:dd:04:30:a2:8d:d8:43:c1:a1:b0:08: d5:f3:77:b7:ff:bc:71:5a:68:b7:d4:21:2e:4d:2b: c2:fc:e9:f8:71:e7:17:20:c9:0d:29:29:90:7c:22: c5:61:19:c8:b6:73:47:e4:eb:f4:23:c4:38:49:58: ac:c5:f7:d2:4c:40:d9:ba:fc:61:01:db:87:f6:ca: dc:8e:52:3b:f4:96:38:28:22:60:99:75:ba:bb:bc: 26:bd:a4:ab:ad:fd:05:ed:6c:6d:95:1f:7d:7f:32: d7:8c:6e:7b:93:81:2a:a8:8d:1e:60:9d:e9:c7:53: 81:ef:fe:a5:14:74:dc:6f:6e:d1:c8:9f:55:39:b9: b8:f1:2c:00:03:30:3f:2b:57:1d:38:6f:31:69:f1: 61:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AE:AC:C0:85:23:FA:83:06:9E:97:E7:99:EC:C4:7B:F4:91:74:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d2b22a6-bd49-3c71-a630-4cd3ecafa3ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:1d:4d:43:dc:63:36:cb:cb:c5:7b:52:7f:22:58:b0:0f:1c: 11:0c:a3:d5:17:61:04:be:17:47:a4:24:b9:35:dc:af:ff:aa: e9:7c:d7:6f:03:24:a6:38:b9:40:69:4c:81:7d:2b:9e:7b:d7: a5:c8:70:66:6b:0e:0d:d3:8b:a6:05:f4:67:87:86:a7:ea:64: f9:67:63:3e:f0:e5:72:1a:0f:07:9c:08:a9:17:1a:ff:6b:c8: a7:b4:53:a0:c8:0b:21:61:eb:cd:54:e3:a0:38:40:9e:35:ef: 57:08:4a:a3:34:4b:1a:75:72:a4:ff:df:fd:71:10:cf:a9:52: bb:92:32:49:20:2a:e6:94:c2:c9:2d:07:84:77:c1:b7:87:2f: dd:dc:17:94:73:73:19:3f:36:db:e4:4f:92:cc:b7:a2:da:cb: 00:7b:24:c0:be:4a:bf:07:bd:d0:1c:6b:52:4a:54:1a:c7:8b: 46:09:e8:99:5a:36:1a:60:67:a6:c5:21:38:01:02:df:fc:bf: 0a:74:ef:85:72:1d:59:cd:46:42:f7:08:de:0d:a8:f6:1c:d4: 01:64:56:b3:3f:0c:e0:b0:c5:c6:c9:0b:b3:aa:84:c6:27:7f: 12:8b:3b:c5:5c:2f:36:5c:58:31:c0:2c:6d:11:b8:5b:31:74: c9:ea:45:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Asl5jrLooWgmKIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk MWRlNjIzMGQtYjZmMS00YzVjLTkwYjYtMzBlMGUyM2Q4ODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZLITMObOPD0xBKNgqFPImLfq3f40Ir8LB/6 GltV6QzFlOTl562rUze/bv+79Hhno3DDa9kKCFtJa6vRGJCIAR3GtRlI33e7KlQY ezltgPHIfCvcipsiuFpKG0Tj3d67huFUsYJ41U6x8/Uk3QQwoo3YQ8GhsAjV83e3 /7xxWmi31CEuTSvC/On4cecXIMkNKSmQfCLFYRnItnNH5Ov0I8Q4SVisxffSTEDZ uvxhAduH9srcjlI79JY4KCJgmXW6u7wmvaSrrf0F7WxtlR99fzLXjG57k4EqqI0e YJ3px1OB7/6lFHTcb27RyJ9VObm48SwAAzA/K1cdOG8xafFhwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeurMCFI/qDBp6X55nsxHv0kXRGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWQyYjIyYTYtYmQ0OS0z YzcxLWE2MzAtNGNkM2VjYWZhM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroP6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIdTUPcYzbLy8V7Un8iWLAPHBEMo9UXYQS+F0ekJLk13K//qul8128D JKY4uUBpTIF9K55716XIcGZrDg3Ti6YF9GeHhqfqZPlnYz7w5XIaDwecCKkXGv9r yKe0U6DICyFh681U46A4QJ4171cISqM0Sxp1cqT/3/1xEM+pUruSMkkgKuaUwskt B4R3wbeHL93cF5Rzcxk/NtvkT5LMt6LaywB7JMC+Sr8HvdAca1JKVBrHi0YJ6Jla NhpgZ6bFITgBAt/8vwp074VyHVnNRkL3CN4NqPYc1AFkVrM/DOCwxcbJC7OqhMYn fxKLO8VcLzZcWDHALG0RuFsxdMnqRRI= -----END CERTIFICATE-----Generated at Sun Mar 1 20:43:24 2026 by rpki-client