$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dd66e60-aa9a-3df3-be8c-e9f5be7d04d5.roa File: 2dd66e60-aa9a-3df3-be8c-e9f5be7d04d5.roa (raw, json) Hash identifier: ygkKL7c/VxJjfblUCdbPAO5u5HeVHzEJTd+Joy3P8DI= Subject key identifier: 75:D8:8A:B6:E1:FC:51:ED:6C:BB:E5:4A:00:41:A9:F2:52:72:7D:C1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DE150A2A76B6CD56178A50880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dd66e60-aa9a-3df3-be8c-e9f5be7d04d5.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 216.96.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:a2:a7:6b:6c:d5:61:78:a5:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=b0022280-6f2b-4f00-82f2-9bc01753d74c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:da:c9:73:99:7d:74:c5:c5:8a:ee:bb:df:45: 7b:17:69:a6:5a:bf:7f:26:e8:f1:76:05:77:d9:c6: 1d:72:b5:c0:ce:79:79:2d:90:f7:0c:58:f0:c7:bd: 8a:f7:15:56:79:b6:9c:d6:c3:4c:20:59:54:bf:63: 7b:00:e0:09:ad:b6:9a:50:4c:18:33:42:9b:71:d0: 9b:00:7d:c3:79:66:ff:bc:96:96:b0:5a:06:42:78: da:66:9b:24:87:c1:43:92:08:ae:40:21:36:72:cb: 0d:9b:c3:c5:7c:bc:56:49:bb:a7:52:4f:f7:0e:3d: 3f:3f:a1:50:67:b1:a4:48:c5:a5:60:a6:93:f6:af: 4e:19:4e:24:a7:17:09:48:1e:5a:5e:32:83:1f:ec: 18:2a:1a:00:83:ff:4b:7d:76:3f:36:a1:8d:87:a3: 1c:90:b7:35:c5:47:d3:cc:14:46:e1:e8:fa:21:23: 26:53:0b:62:a9:fa:51:69:cc:0c:cd:b1:ca:c7:dc: bc:f0:45:c6:cb:af:49:6b:82:65:ae:9c:60:2e:d8: b1:6b:86:f8:a8:7e:bd:c3:68:9a:b6:5e:3c:0a:4c: cc:2b:ad:ec:2c:10:3c:f7:4a:1d:64:6f:7f:7a:77: f1:e5:b1:b8:12:64:a5:16:a9:f3:65:4a:45:c7:0b: e1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D8:8A:B6:E1:FC:51:ED:6C:BB:E5:4A:00:41:A9:F2:52:72:7D:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dd66e60-aa9a-3df3-be8c-e9f5be7d04d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:26:0e:e1:f8:ad:d4:6e:b8:6e:9d:6a:eb:14:cb:01:85:e4: f4:9b:e4:4b:44:33:a2:d8:86:b1:dd:11:e3:11:fb:60:a8:19: fa:d2:f0:9c:25:7b:7f:af:46:64:c3:44:dc:6d:b1:b9:e1:c3: 31:63:34:2b:c8:5a:ad:b7:32:89:10:a6:33:a0:d7:da:2c:a6: 95:53:99:e9:39:97:7e:ea:04:70:95:a2:9e:2c:2c:da:f5:eb: 9a:d8:7d:a8:95:d5:ae:4a:b8:35:b8:6d:a2:71:58:2c:d3:d4: 1e:3a:3c:20:40:f4:a4:5e:39:55:7f:42:d7:ef:75:35:82:18: 8b:01:68:9b:a5:32:8e:58:53:db:b6:00:ac:bb:39:54:54:39: 9e:97:f4:be:cc:88:a0:74:79:dd:5a:5f:59:58:a2:85:e6:b4: f5:51:8e:ff:54:d1:87:1a:2d:b0:8e:3c:1a:50:19:cf:cd:fb: 4e:92:d7:73:10:15:bc:23:7c:10:7e:6d:ad:85:dd:84:33:6d: a2:b4:d9:fd:aa:cd:e3:ed:61:fc:80:d7:77:cb:5d:bc:a7:8e: 6c:70:66:29:26:38:35:de:15:9e:c2:72:30:51:e9:31:9a:65: e6:09:da:07:a9:96:ac:0b:1e:f3:e8:c0:53:7a:61:7a:3f:45: 31:16:3b:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUKKna2zVYXilCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk YjAwMjIyODAtNmYyYi00ZjAwLTgyZjItOWJjMDE3NTNkNzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9rJc5l9dMXFiu6730V7F2mmWr9/JujxdgV3 2cYdcrXAznl5LZD3DFjwx72K9xVWebac1sNMIFlUv2N7AOAJrbaaUEwYM0KbcdCb AH3DeWb/vJaWsFoGQnjaZpskh8FDkgiuQCE2cssNm8PFfLxWSbunUk/3Dj0/P6FQ Z7GkSMWlYKaT9q9OGU4kpxcJSB5aXjKDH+wYKhoAg/9LfXY/NqGNh6MckLc1xUfT zBRG4ej6ISMmUwtiqfpRacwMzbHKx9y88EXGy69Ja4JlrpxgLtixa4b4qH69w2ia tl48CkzMK63sLBA890odZG9/enfx5bG4EmSlFqnzZUpFxwvhYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXYirbh/FHtbLvlSgBBqfJScn3BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmRkNjZlNjAtYWE5YS0z ZGYzLWJlOGMtZTlmNWJlN2QwNGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMmDuH4rdRuuG6dausUywGF5PSb5EtEM6LYhrHdEeMR+2CoGfrS8Jwl e3+vRmTDRNxtsbnhwzFjNCvIWq23MokQpjOg19osppVTmek5l37qBHCVop4sLNr1 65rYfaiV1a5KuDW4baJxWCzT1B46PCBA9KReOVV/QtfvdTWCGIsBaJulMo5YU9u2 AKy7OVRUOZ6X9L7MiKB0ed1aX1lYooXmtPVRjv9U0YcaLbCOPBpQGc/N+06S13MQ FbwjfBB+ba2F3YQzbaK02f2qzePtYfyA13fLXbynjmxwZikmODXeFZ7CcjBR6TGa ZeYJ2geplqwLHvPowFN6YXo/RTEWO7Q= -----END CERTIFICATE-----Generated at Thu May 28 17:10:03 2026 by rpki-client