$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34bfe1cb-de97-313d-9d84-0cdfa6306dec.roa File: 34bfe1cb-de97-313d-9d84-0cdfa6306dec.roa (raw, json) Hash identifier: JcEwfJ2fCG4m4oDAQc8AY3FGoApAjtGrdvqVyifwgEg= Subject key identifier: 51:67:91:5F:55:64:4F:45:32:68:4C:ED:E6:09:7E:4A:14:0C:F6:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584CF2BD053DF1EEB671B2761A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34bfe1cb-de97-313d-9d84-0cdfa6306dec.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 7029 IP address blocks: 71.28.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bd:05:3d:f1:ee:b6:71:b2:76:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=b5809f76-7ef1-45a2-8fca-9fd02c8d19f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f7:b0:80:42:06:4c:bc:28:b8:87:ba:19:d7: 0f:7f:6b:fc:e7:99:7a:e7:5b:f5:56:67:de:33:b3: d1:b9:a9:35:d4:fc:13:99:2d:19:4e:fc:b3:e0:cb: a2:c8:db:7c:8d:f9:0d:ef:7f:19:69:3e:fa:bb:af: 72:e9:35:3a:1a:97:6d:3e:66:4c:93:a7:ec:b5:d2: 22:cf:55:aa:8c:b1:20:6b:06:04:4f:03:31:77:5a: d2:c3:12:4e:c3:28:07:09:1d:f8:03:4a:06:2d:50: e4:ce:a5:ce:66:ca:a7:cb:e0:21:8a:78:0e:28:f6: 2e:54:6e:c2:fb:69:dc:6c:fb:22:ad:3e:85:f2:05: 6c:76:76:f7:ab:2c:a7:e0:21:81:2c:70:e7:47:46: cb:6e:86:fd:74:e8:9f:3a:15:8a:4c:e8:64:4c:83: 49:b7:98:1b:19:4b:ce:7c:1a:a6:f1:89:46:f4:11: 5e:d3:63:6a:a0:d0:cf:70:67:3a:81:78:d8:a9:83: ce:b7:8f:0a:a1:e1:91:62:bb:ae:5f:b1:b9:fe:ed: 13:4a:e2:07:50:08:24:8f:59:30:50:3d:9f:35:8f: c1:fb:76:89:0e:10:cc:c7:40:52:fb:6c:07:87:e3: 04:0b:f4:e4:10:78:02:6a:95:49:e1:f5:78:f3:23: b6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:67:91:5F:55:64:4F:45:32:68:4C:ED:E6:09:7E:4A:14:0C:F6:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34bfe1cb-de97-313d-9d84-0cdfa6306dec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:e4:6e:3d:2c:04:4c:c4:3e:ef:68:97:c1:38:5f:9a:f9:91: 66:8e:d2:1c:1a:96:6d:1b:a1:e5:8c:d8:fc:32:4a:c6:14:7c: 55:34:41:69:8d:2e:b3:cf:de:f7:a5:7d:69:9b:9f:a0:13:6c: 87:b3:89:7a:6e:de:96:43:07:b4:b1:14:ed:b8:fe:42:b1:bd: b2:de:2a:c2:d1:f4:4c:84:4f:30:0d:4b:7b:d7:4a:84:bf:52: a4:51:f3:b4:2b:41:99:aa:09:78:8a:6c:8c:30:35:51:4d:d3: c9:69:76:ba:3c:71:7a:c2:52:3c:f1:a6:ea:58:79:5d:1a:f5: a4:76:de:8a:e7:c0:1f:6b:76:c9:05:fc:9b:52:98:e0:48:f2: 29:33:81:bd:9c:ef:cb:4a:e2:38:99:6d:db:6a:6a:9f:7d:8d: 49:e9:f2:01:ca:d9:c6:d4:ee:39:2e:bc:4e:91:0b:17:f6:d5: c0:98:2d:2f:e7:18:f5:57:15:ae:28:97:42:c0:ed:62:c3:19: 6a:25:2b:03:9c:75:4a:b0:e3:b3:dc:ff:e7:2a:bd:fe:45:0c: f4:68:cd:d4:78:3c:29:ae:0a:ca:31:06:3f:7f:a6:60:1d:d3: 57:e8:47:12:17:65:14:ea:98:58:90:8b:1e:57:5d:e7:86:f7: 0e:b2:dc:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvQU98e62cbJ2GoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk YjU4MDlmNzYtN2VmMS00NWEyLThmY2EtOWZkMDJjOGQxOWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfewgEIGTLwouIe6GdcPf2v855l651v1Vmfe M7PRuak11PwTmS0ZTvyz4MuiyNt8jfkN738ZaT76u69y6TU6GpdtPmZMk6fstdIi z1WqjLEgawYETwMxd1rSwxJOwygHCR34A0oGLVDkzqXOZsqny+AhingOKPYuVG7C +2ncbPsirT6F8gVsdnb3qyyn4CGBLHDnR0bLbob9dOifOhWKTOhkTINJt5gbGUvO fBqm8YlG9BFe02NqoNDPcGc6gXjYqYPOt48KoeGRYruuX7G5/u0TSuIHUAgkj1kw UD2fNY/B+3aJDhDMx0BS+2wHh+MEC/TkEHgCapVJ4fV48yO2XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFnkV9VZE9FMmhM7eYJfkoUDPZbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzRiZmUxY2ItZGU5Ny0z MTNkLTlkODQtMGNkZmE2MzA2ZGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTkbj0sBEzEPu9ol8E4X5r5kWaO0hwalm0boeWM2PwySsYUfFU0QWmN LrPP3velfWmbn6ATbIeziXpu3pZDB7SxFO24/kKxvbLeKsLR9EyETzANS3vXSoS/ UqRR87QrQZmqCXiKbIwwNVFN08lpdro8cXrCUjzxpupYeV0a9aR23ornwB9rdskF /JtSmOBI8ikzgb2c78tK4jiZbdtqap99jUnp8gHK2cbU7jkuvE6RCxf21cCYLS/n GPVXFa4ol0LA7WLDGWolKwOcdUqw47Pc/+cqvf5FDPRozdR4PCmuCsoxBj9/pmAd 01foRxIXZRTqmFiQix5XXeeG9w6y3FE= -----END CERTIFICATE-----Generated at Thu Feb 26 07:57:05 2026 by rpki-client