$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b20ae154-a53f-3420-abc1-04af85e66c56.roa File: b20ae154-a53f-3420-abc1-04af85e66c56.roa (raw, json) Hash identifier: A5uvJIGz9RvbJInCHxy6eoz0+aLRhi3rmX5sQscgjJk= Subject key identifier: 61:9C:1B:0E:48:55:13:70:FF:47:95:2B:4A:4C:DD:6F:03:24:F4:08 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D00B2560A22ECABD857F4ED10 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b20ae154-a53f-3420-abc1-04af85e66c56.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 7029 IP address blocks: 216.96.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:56:0a:22:ec:ab:d8:57:f4:ed:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=6ab6cf1b-cda6-475f-a59f-dd7638cbae9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:36:f2:ff:05:b7:e9:a8:91:1a:d2:d8:26:e4: 7e:1d:37:cb:10:b1:21:f0:e9:50:6b:7b:ff:69:9e: 02:4a:34:5a:fb:08:9b:90:8c:ed:00:eb:47:b4:c2: 0c:47:ff:a0:99:92:0e:3c:4f:c7:f3:6b:7a:06:31: 63:06:ee:54:b5:1d:56:99:9a:d2:ab:0c:fe:62:e2: 9f:c9:85:fa:ec:8e:f9:8c:ea:d8:cd:23:a1:2f:4f: fb:7a:54:99:b4:af:f3:01:4a:20:d6:70:d5:5a:93: c7:ef:ab:5e:5d:09:87:72:86:b4:2d:c3:e1:7f:a3: 6b:6a:96:55:ff:bb:4b:cd:55:b3:7b:95:d3:ed:fd: 76:4d:1a:29:a9:c6:82:ef:db:1c:42:ba:19:6a:2e: 64:06:28:91:ec:02:d1:2b:ba:da:2d:56:f3:0f:c8: c1:5d:0c:0e:9c:df:41:a3:33:e0:af:9d:24:eb:6b: 9c:46:b2:16:3f:52:9b:0f:24:26:0b:ed:de:e8:32: 6b:3d:92:f3:d7:7a:07:7b:0c:90:01:c1:f5:ed:b4: 89:bc:32:3b:8f:33:f3:14:e6:2b:40:9b:78:26:0c: d7:78:ed:f6:86:66:ac:e7:bf:6b:94:74:43:07:9b: c1:70:0b:d8:61:35:dd:b4:63:88:90:68:5d:e4:e7: 38:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9C:1B:0E:48:55:13:70:FF:47:95:2B:4A:4C:DD:6F:03:24:F4:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b20ae154-a53f-3420-abc1-04af85e66c56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:13:87:3d:6b:c2:91:f0:03:e0:5a:d7:2c:09:f3:aa:5c:29: d4:d5:e5:11:47:ea:f4:05:7d:3e:a5:95:81:6d:56:0e:68:d8: 63:a8:7b:c3:b7:23:5c:b6:b2:51:45:eb:2b:a7:25:48:c8:cf: 29:7d:ec:2d:ae:60:8a:46:ab:19:68:b1:25:b8:5e:f8:52:41: da:40:7f:c7:74:7f:be:0c:7d:83:11:5c:82:0f:93:a6:c2:e4: 3e:cd:86:44:ef:e8:e6:2a:9b:91:cf:56:a8:2d:51:42:fe:47: bc:28:7c:38:5b:fd:94:ce:b1:2b:72:65:f9:d7:a1:51:28:71: 0e:87:fb:bc:52:cc:fc:f1:04:f0:8b:08:c1:af:7a:48:2b:d6: a7:6b:6f:f8:d9:08:db:ca:2b:99:73:5f:cd:80:ad:32:a4:8b: 1a:c1:ef:83:89:2e:81:fd:9c:2c:54:2d:44:b9:a1:ea:4f:8d: 31:c4:4c:f7:71:4f:6c:65:46:96:0b:f7:cc:9f:8b:fc:ea:ab: 04:02:1b:82:58:9b:3c:a6:a4:e5:3b:7b:ae:83:62:0c:19:d3: 0a:c3:8b:04:7a:db:2a:58:cb:41:82:c9:ec:df:c2:f5:fc:83: be:51:ce:3a:51:a8:dc:8a:e6:09:67:62:d8:70:6d:94:29:8d: 46:99:9b:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AslYKIuyr2Ff07RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk NmFiNmNmMWItY2RhNi00NzVmLWE1OWYtZGQ3NjM4Y2JhZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDby/wW36aiRGtLYJuR+HTfLELEh8OlQa3v/ aZ4CSjRa+wibkIztAOtHtMIMR/+gmZIOPE/H82t6BjFjBu5UtR1WmZrSqwz+YuKf yYX67I75jOrYzSOhL0/7elSZtK/zAUog1nDVWpPH76teXQmHcoa0LcPhf6NrapZV /7tLzVWze5XT7f12TRopqcaC79scQroZai5kBiiR7ALRK7raLVbzD8jBXQwOnN9B ozPgr50k62ucRrIWP1KbDyQmC+3e6DJrPZLz13oHewyQAcH17bSJvDI7jzPzFOYr QJt4JgzXeO32hmas579rlHRDB5vBcAvYYTXdtGOIkGhd5Oc4awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGcGw5IVRNw/0eVK0pM3W8DJPQIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjIwYWUxNTQtYTUzZi0z NDIwLWFiYzEtMDRhZjg1ZTY2YzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GBiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoThz1rwpHwA+Ba1ywJ86pcKdTV5RFH6vQFfT6llYFtVg5o2GOoe8O3 I1y2slFF6yunJUjIzyl97C2uYIpGqxlosSW4XvhSQdpAf8d0f74MfYMRXIIPk6bC 5D7NhkTv6OYqm5HPVqgtUUL+R7wofDhb/ZTOsStyZfnXoVEocQ6H+7xSzPzxBPCL CMGvekgr1qdrb/jZCNvKK5lzX82ArTKkixrB74OJLoH9nCxULUS5oepPjTHETPdx T2xlRpYL98yfi/zqqwQCG4JYmzympOU7e66DYgwZ0wrDiwR62ypYy0GCyezfwvX8 g75RzjpRqNyK5glnYthwbZQpjUaZm6Y= -----END CERTIFICATE-----Generated at Mon Mar 2 10:16:45 2026 by rpki-client