$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ca37203-9c88-36be-9325-8bdef4118d27.roa File: 4ca37203-9c88-36be-9325-8bdef4118d27.roa (raw, json) Hash identifier: dYeU8rmAnkGLKzsHaEp/q0a3VkwzjDRqmJvAEvvA4Bc= Subject key identifier: A5:04:93:51:68:2F:64:15:5F:17:B9:D2:B3:1D:6C:38:3B:F7:FF:98 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584CD6D2248FC9146C0CCF09FA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ca37203-9c88-36be-9325-8bdef4118d27.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 7029 IP address blocks: 71.29.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:24:8f:c9:14:6c:0c:cf:09:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=6e3eaa88-30c7-480f-97fc-da760d1c21f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:72:e3:f4:d0:78:28:42:5a:d1:1b:45:8c:32: 1a:e0:5b:ad:ab:65:ac:ee:cc:b6:7f:9b:ed:3f:cf: 73:16:f6:d3:7b:12:87:8c:a8:38:3d:ad:05:5a:63: a9:29:cf:a6:32:c0:2b:a2:2a:89:b9:ba:c6:eb:5a: 1f:50:27:0b:6c:02:d0:3f:f7:84:c7:22:06:89:12: 9e:d6:c7:01:24:53:9e:a2:91:74:8f:d5:d1:bd:79: 74:3d:35:4b:ca:3c:c9:f4:70:79:c6:a8:e0:4a:25: f4:b9:23:89:2c:f9:01:01:1d:fd:69:2a:18:61:0e: 4a:54:47:f9:ca:47:ee:2e:1c:4d:23:21:c5:3e:62: 3b:cf:3a:b3:87:6d:f5:61:61:3d:08:f2:2d:50:bc: 78:cc:7f:24:21:a6:b7:40:d3:b8:af:7d:be:11:2d: db:3e:5f:d8:cc:5a:50:22:70:ec:77:92:5d:1f:65: 3d:9d:1a:ba:4c:2c:79:50:27:16:7a:b2:ac:55:d9: c6:4a:ff:90:37:10:c5:c5:a9:bf:55:be:ce:b2:9c: 10:a6:2c:a4:ec:68:20:b3:6d:83:07:6d:c7:f8:a8: da:fa:26:59:f1:d3:8e:de:7f:b2:7f:9a:b5:dc:26: b8:f6:e4:68:d7:6f:55:7f:0f:4a:0f:aa:e1:6d:cd: 90:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:04:93:51:68:2F:64:15:5F:17:B9:D2:B3:1D:6C:38:3B:F7:FF:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ca37203-9c88-36be-9325-8bdef4118d27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:1c:d7:d1:60:1d:df:62:82:c6:51:cd:c4:3d:44:d5:64:f9: 94:0f:be:28:ac:73:43:a3:88:72:75:41:d7:16:6e:97:99:4d: 83:9a:2e:b1:b1:64:70:0f:ff:bc:09:c3:81:6f:46:6e:fa:12: f3:df:a7:78:b9:49:23:c2:fe:cb:48:47:29:f7:96:dc:c6:01: 3e:41:d6:04:1c:92:c6:ef:e9:56:b8:a8:34:eb:22:8d:ae:4a: 5c:2d:ed:e9:bd:ba:92:12:df:32:ff:23:71:9e:9a:24:1c:ed: a1:1d:54:4c:33:99:04:6c:c1:c7:6f:b6:2f:4a:1b:18:47:ab: 0f:a0:ba:28:04:9d:49:f7:db:cf:d5:e6:98:7c:af:bc:a2:89: 14:13:90:c4:68:52:fa:78:1c:33:ff:13:c1:69:a7:bc:bf:08: 04:9d:73:82:34:50:33:79:da:0c:bc:b2:5e:99:ca:c6:2f:23: 22:93:8b:32:87:76:10:33:dd:75:31:ed:c3:b6:62:70:56:b1: 0f:78:7c:c0:5d:3f:31:89:28:95:82:15:2b:a6:29:22:a5:cd: 76:a5:15:73:1c:f1:53:4b:72:cd:9a:ae:c9:b6:a9:d5:1d:2e: d9:de:80:13:cd:27:5e:1f:e5:1f:0f:5c:b3:6f:c0:22:2f:3d: f0:90:a1:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0iSPyRRsDM8J+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk NmUzZWFhODgtMzBjNy00ODBmLTk3ZmMtZGE3NjBkMWMyMWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXLj9NB4KEJa0RtFjDIa4Futq2Ws7sy2f5vt P89zFvbTexKHjKg4Pa0FWmOpKc+mMsAroiqJubrG61ofUCcLbALQP/eExyIGiRKe 1scBJFOeopF0j9XRvXl0PTVLyjzJ9HB5xqjgSiX0uSOJLPkBAR39aSoYYQ5KVEf5 ykfuLhxNIyHFPmI7zzqzh231YWE9CPItULx4zH8kIaa3QNO4r32+ES3bPl/YzFpQ InDsd5JdH2U9nRq6TCx5UCcWerKsVdnGSv+QNxDFxam/Vb7OspwQpiyk7Gggs22D B23H+Kja+iZZ8dOO3n+yf5q13Ca49uRo129Vfw9KD6rhbc2QMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUEk1FoL2QVXxe50rMdbDg79/+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGNhMzcyMDMtOWM4OC0z NmJlLTkzMjUtOGJkZWY0MTE4ZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx0aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMc19FgHd9igsZRzcQ9RNVk+ZQPviisc0OjiHJ1QdcWbpeZTYOaLrGx ZHAP/7wJw4FvRm76EvPfp3i5SSPC/stIRyn3ltzGAT5B1gQcksbv6Va4qDTrIo2u Slwt7em9upIS3zL/I3GemiQc7aEdVEwzmQRswcdvti9KGxhHqw+guigEnUn328/V 5ph8r7yiiRQTkMRoUvp4HDP/E8Fpp7y/CASdc4I0UDN52gy8sl6ZysYvIyKTizKH dhAz3XUx7cO2YnBWsQ94fMBdPzGJKJWCFSumKSKlzXalFXMc8VNLcs2arsm2qdUd LtnegBPNJ14f5R8PXLNvwCIvPfCQoS0= -----END CERTIFICATE-----Generated at Thu Feb 26 06:34:51 2026 by rpki-client