$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3282829-5e27-3dea-b8a1-159df9873046.roa File: f3282829-5e27-3dea-b8a1-159df9873046.roa (raw, json) Hash identifier: OGCRyaR9OqHlDjyFHqp9dFQreZOO/DLwOyJCtjCGA8M= Subject key identifier: 14:E0:D7:22:C7:00:D4:0E:FE:D4:30:87:0B:9C:F2:3D:16:6C:D9:D8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D00B25AF8BB8F73388C905F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3282829-5e27-3dea-b8a1-159df9873046.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 7029 IP address blocks: 216.96.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:5a:f8:bb:8f:73:38:8c:90:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=bc07fd15-93d6-4b29-a858-7e25e08b4c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:80:1c:39:c3:c7:56:4e:b6:f8:99:34:15:93: b9:fe:d2:d2:53:ee:7c:fd:2c:7f:94:6e:06:17:19: 3f:f4:b7:5b:c3:a7:5e:83:10:0c:f4:66:a7:56:9f: 4f:85:e4:45:12:23:09:26:25:6d:10:03:be:2c:e9: 78:4b:44:84:15:a5:11:9d:b3:2c:84:53:c9:dc:29: ce:e7:59:86:68:bb:5a:d9:39:e5:b5:9c:f3:33:44: 94:69:5c:98:1d:db:11:a1:a1:62:35:90:af:b3:42: 3a:51:72:d0:5a:64:f8:95:5d:28:ac:68:c5:a3:e6: 30:f9:cf:ed:21:44:cc:b7:13:ae:70:cf:8d:11:0d: f4:25:8f:39:13:79:36:11:9b:6f:c7:f2:c9:9f:72: 5b:1d:94:94:16:a4:5f:83:ce:09:b6:17:aa:c5:d6: 76:3b:a0:18:02:de:aa:8e:e9:00:fe:bc:b0:94:20: 3b:90:98:8b:e6:a5:05:20:fb:ea:2b:ab:9b:a7:bb: 15:12:48:6f:49:fe:89:1b:dd:c2:ad:2e:7b:d5:5d: 48:a7:64:71:31:c0:ed:80:ba:bd:41:82:47:1b:3a: 99:71:91:8f:42:71:1d:ee:d6:f3:bc:dc:6d:73:b4: 16:41:7c:fe:7c:af:3a:ae:08:66:93:70:7d:a1:50: 33:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E0:D7:22:C7:00:D4:0E:FE:D4:30:87:0B:9C:F2:3D:16:6C:D9:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3282829-5e27-3dea-b8a1-159df9873046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:0d:51:18:16:4a:7c:c8:07:d4:f0:b2:53:9d:57:4f:fa:bf: 19:90:1c:59:d4:65:fa:71:5f:8b:d6:94:2a:6a:74:dc:14:0b: 1d:16:f7:aa:ee:76:4e:22:db:5e:40:b1:de:d2:9e:e7:6b:6c: d3:19:e7:1f:ad:43:46:77:4e:de:c1:45:0b:59:6f:1d:9a:03: d5:20:b3:53:68:7e:ec:62:08:68:ff:41:de:a8:49:a7:80:5d: 72:71:0e:24:d4:e7:24:a9:b2:cb:38:7b:94:30:74:72:77:e1: 7e:0d:e2:18:53:e1:e3:98:a7:f3:f9:cf:02:ab:72:29:f2:8d: 99:db:14:8f:5d:35:8b:a8:e5:3c:09:7f:ad:9b:1c:fc:37:69: 64:cd:34:c8:54:be:1c:f9:dc:fa:32:21:d7:a6:6f:63:96:94: ac:69:f9:7d:b1:82:e0:c1:3c:81:50:70:25:46:03:53:e0:99: 20:3f:9e:2f:5d:d6:aa:b2:39:f7:ed:43:8a:00:5e:95:05:73: 4b:40:c4:3a:ee:34:48:d7:be:7a:01:19:0d:15:13:b0:f0:a9: ea:89:0f:9b:5f:0d:eb:d8:4a:3d:26:87:06:a1:92:cc:88:e7: 8b:11:4d:cc:5e:b6:df:45:93:ec:08:79:5e:0a:f6:2a:0a:89: c5:1c:6f:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Aslr4u49zOIyQX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk YmMwN2ZkMTUtOTNkNi00YjI5LWE4NTgtN2UyNWUwOGI0YzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IAcOcPHVk62+Jk0FZO5/tLSU+58/Sx/lG4G Fxk/9Ldbw6degxAM9GanVp9PheRFEiMJJiVtEAO+LOl4S0SEFaURnbMshFPJ3CnO 51mGaLta2TnltZzzM0SUaVyYHdsRoaFiNZCvs0I6UXLQWmT4lV0orGjFo+Yw+c/t IUTMtxOucM+NEQ30JY85E3k2EZtvx/LJn3JbHZSUFqRfg84JtheqxdZ2O6AYAt6q jukA/rywlCA7kJiL5qUFIPvqK6ubp7sVEkhvSf6JG93CrS571V1Ip2RxMcDtgLq9 QYJHGzqZcZGPQnEd7tbzvNxtc7QWQXz+fK86rghmk3B9oVAz3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTg1yLHANQO/tQwhwuc8j0WbNnYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjMyODI4MjktNWUyNy0z ZGVhLWI4YTEtMTU5ZGY5ODczMDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GBGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4NURgWSnzIB9TwslOdV0/6vxmQHFnUZfpxX4vWlCpqdNwUCx0W96ru dk4i215Asd7SnudrbNMZ5x+tQ0Z3Tt7BRQtZbx2aA9Ugs1NofuxiCGj/Qd6oSaeA XXJxDiTU5ySpsss4e5QwdHJ34X4N4hhT4eOYp/P5zwKrcinyjZnbFI9dNYuo5TwJ f62bHPw3aWTNNMhUvhz53PoyIdemb2OWlKxp+X2xguDBPIFQcCVGA1PgmSA/ni9d 1qqyOfftQ4oAXpUFc0tAxDruNEjXvnoBGQ0VE7DwqeqJD5tfDevYSj0mhwahksyI 54sRTcxett9Fk+wIeV4K9ioKicUcb9Y= -----END CERTIFICATE-----Generated at Sun Mar 1 20:39:42 2026 by rpki-client