$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ace85b09-a012-38de-a412-cd157390cbfd.roa File: ace85b09-a012-38de-a412-cd157390cbfd.roa (raw, json) Hash identifier: +Ww26xc0iU0yIbZLBM7MziW1byiZeRIJ8N7UKE9CnNg= Subject key identifier: 13:AB:6A:FD:A7:1A:AD:91:95:00:36:75:0E:C7:0B:B8:6F:D8:4A:48 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584CEA5CFC6EA6E1C8D326A44B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ace85b09-a012-38de-a412-cd157390cbfd.roa Signing time: Thu 19 Feb 2026 14:00:40 +0000 ROA not before: Thu 19 Feb 2026 14:00:40 +0000 ROA not after: Wed 20 May 2026 13:00:40 +0000 asID: 7029 IP address blocks: 166.82.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ea:5c:fc:6e:a6:e1:c8:d3:26:a4:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 19 14:00:40 2026 GMT Not After : May 20 13:00:40 2026 GMT Subject: CN=dd9a89e9-8048-4cf6-bf9a-fff17fb11127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:33:37:25:41:92:0c:c8:a5:d6:40:b6:97:09: 7c:5d:04:c1:34:fa:ea:10:05:21:49:90:95:9c:6b: cb:61:1b:68:2b:82:1a:7c:ee:4d:37:0f:7b:83:89: 11:c8:06:2e:b6:bf:e3:a9:10:29:d1:e0:cb:ab:c8: df:a2:cc:23:51:98:0c:16:73:7f:2a:e0:d5:84:61: 8f:b1:c7:f9:86:84:c2:dc:2a:98:17:f1:f1:41:a4: af:21:3d:49:c0:98:c5:0e:37:53:43:29:1f:4c:00: b7:22:46:aa:f9:fd:db:a5:c1:69:52:bf:ad:d6:7d: 4a:6b:f6:63:eb:b5:ec:af:78:e6:fd:cd:d2:39:5f: 85:19:02:8f:5b:28:46:01:e0:04:82:df:26:51:50: db:b1:77:4f:68:b1:db:bf:f3:e9:b9:30:ce:b6:16: d0:85:56:b7:28:af:dc:a8:1d:ea:eb:ba:3e:27:46: 48:d9:54:26:65:61:4e:cf:19:ab:db:3d:1d:70:a9: 86:d7:f5:0c:3a:0b:c8:b1:49:1b:ad:85:cc:58:4c: b6:80:a5:38:e9:d9:a8:30:8d:21:b4:0c:a7:17:e5: 4e:6c:1b:66:43:3f:ed:ec:b7:40:28:57:fe:0a:f8: 74:06:90:ea:a2:55:78:1e:3d:b7:54:66:78:26:5b: cb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AB:6A:FD:A7:1A:AD:91:95:00:36:75:0E:C7:0B:B8:6F:D8:4A:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ace85b09-a012-38de-a412-cd157390cbfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.82.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:4e:31:78:15:e4:55:b2:9e:3a:24:15:02:d9:17:81:a1:af: 23:90:15:53:1d:40:61:c9:51:d7:03:0b:5d:22:2a:0f:56:c7: ed:11:b2:26:dd:db:78:c5:5f:98:5b:15:10:23:e1:a8:09:8a: 1a:17:98:fe:4d:ab:47:49:b2:bc:e5:cd:2b:45:66:80:ef:c2: 63:42:29:6f:2e:30:c0:a7:fc:10:52:9f:8b:de:80:ec:82:95: 1e:25:7e:8f:bf:53:4c:28:41:4e:12:6f:03:b7:34:8a:93:a9: 89:1c:ef:15:90:59:6d:51:ba:c4:f9:2f:a0:51:c7:ce:3d:78: 30:61:f3:34:a8:e4:f0:f3:b6:bd:bb:e0:b9:9c:9d:89:57:64: 85:9e:c4:33:7f:06:23:de:7d:b8:eb:23:04:06:a1:9d:c1:2d: 58:f0:4c:39:fe:c6:ac:d2:41:2d:4b:9f:76:29:08:fa:7e:19: e4:d1:b3:41:35:81:14:94:10:dd:3c:e0:7d:99:52:e9:d1:85: dd:ff:4d:44:1f:1f:fc:c6:fa:ce:b1:3d:f0:b3:e1:bb:29:06: 6d:2b:e9:a3:45:28:2b:26:36:c8:23:1c:cd:4f:5d:dd:f6:19: 31:5f:f9:1a:ee:02:6d:ac:9a:c3:b6:33:ba:31:ea:ca:d3:b0: ca:ef:af:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXPxupuHI0yakSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGQ5YTg5ZTktODA0OC00Y2Y2LWJmOWEtZmZmMTdmYjExMTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTM3JUGSDMil1kC2lwl8XQTBNPrqEAUhSZCV nGvLYRtoK4IafO5NNw97g4kRyAYutr/jqRAp0eDLq8jfoswjUZgMFnN/KuDVhGGP scf5hoTC3CqYF/HxQaSvIT1JwJjFDjdTQykfTAC3Ikaq+f3bpcFpUr+t1n1Ka/Zj 67Xsr3jm/c3SOV+FGQKPWyhGAeAEgt8mUVDbsXdPaLHbv/PpuTDOthbQhVa3KK/c qB3q67o+J0ZI2VQmZWFOzxmr2z0dcKmG1/UMOgvIsUkbrYXMWEy2gKU46dmoMI0h tAynF+VObBtmQz/t7LdAKFf+Cvh0BpDqolV4Hj23VGZ4JlvLzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOrav2nGq2RlQA2dQ7HC7hv2EpIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWNlODViMDktYTAxMi0z OGRlLWE0MTItY2QxNTczOTBjYmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCplLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHROMXgV5FWynjokFQLZF4GhryOQFVMdQGHJUdcDC10iKg9Wx+0Rsibd 23jFX5hbFRAj4agJihoXmP5Nq0dJsrzlzStFZoDvwmNCKW8uMMCn/BBSn4vegOyC lR4lfo+/U0woQU4SbwO3NIqTqYkc7xWQWW1RusT5L6BRx849eDBh8zSo5PDztr27 4LmcnYlXZIWexDN/BiPefbjrIwQGoZ3BLVjwTDn+xqzSQS1Ln3YpCPp+GeTRs0E1 gRSUEN084H2ZUunRhd3/TUQfH/zG+s6xPfCz4bspBm0r6aNFKCsmNsgjHM1PXd32 GTFf+RruAm2smsO2M7ox6srTsMrvrw8= -----END CERTIFICATE-----Generated at Thu Feb 26 06:32:46 2026 by rpki-client