$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6991827-8269-315e-b730-05f1faa3a385.roa File: b6991827-8269-315e-b730-05f1faa3a385.roa (raw, json) Hash identifier: tPPTTXNadEwBEf4foXXRn+7M0FQVZVFkFY80qc79VZI= Subject key identifier: 84:EF:5A:98:DE:0E:C5:06:1B:5C:EB:B1:3C:A3:D6:CD:5B:75:DA:46 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584CAE5E8F4E6F2941559A0EF800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6991827-8269-315e-b730-05f1faa3a385.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 7029 IP address blocks: 71.29.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:8f:4e:6f:29:41:55:9a:0e:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=9a7846c5-335e-404b-a7b9-1ba60acf5a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ac:fb:81:ff:b3:34:64:23:ab:6d:19:b6:3d: b0:e2:0e:ba:60:0d:f9:d3:3e:c2:21:c5:6f:6d:3f: 78:20:ab:f6:bd:4e:3c:e9:2d:4c:74:d3:0a:54:57: ef:f0:15:82:5b:fc:2a:a8:ea:93:ed:84:9a:16:3c: 76:91:62:de:ab:f0:f1:70:9a:95:fc:c9:ba:5c:29: 1f:ce:f0:93:a2:e9:fc:c0:4d:57:34:12:e4:c6:a6: 30:1b:87:49:96:2a:b3:3e:11:d3:ab:f3:19:99:de: e2:69:be:10:9c:0f:a2:b0:f7:fa:84:a1:56:5c:01: d7:2a:73:82:1b:9d:54:2c:3d:13:a0:aa:0e:4a:19: c5:17:53:77:01:9e:70:e9:fd:bd:45:14:27:5c:8b: 6f:0e:7a:5f:c3:78:6a:51:10:10:76:3c:8a:7f:b2: 92:38:05:a1:0e:b1:73:26:35:5b:7c:47:fa:b9:2d: 71:c1:a8:e4:0a:7f:b9:db:cf:bd:c9:95:a5:bc:2b: d3:f1:e0:2e:ea:13:01:17:93:5f:0e:c3:24:be:f2: 1f:a5:40:e8:42:35:2c:88:59:c6:76:d4:a5:4c:12: 5d:fe:92:36:b5:9d:d5:9d:2b:24:bc:cd:1c:ad:a3: 0b:ce:62:97:1f:30:eb:7b:b4:28:f2:20:79:ea:b8: a7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:EF:5A:98:DE:0E:C5:06:1B:5C:EB:B1:3C:A3:D6:CD:5B:75:DA:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6991827-8269-315e-b730-05f1faa3a385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:ad:01:ad:63:85:f6:4f:03:53:ca:a3:d5:66:ff:89:9b:0e: 0d:32:53:ba:25:aa:75:09:97:dd:08:28:f4:09:04:40:34:9d: 3c:8e:dd:eb:90:74:71:5f:9e:24:a3:49:dc:6b:1b:3c:3c:d3: 43:f9:34:c4:65:6c:ec:33:59:ba:0f:99:9b:bf:88:a3:fc:07: f8:d7:c1:1b:e8:62:d0:25:5c:a4:12:ca:4a:53:69:67:1d:64: d1:43:58:5a:af:00:52:1c:89:2e:e2:ee:f0:8e:b4:28:fc:44: 92:f2:55:2e:c6:6a:27:6a:92:fd:cc:7c:03:df:9c:2f:e7:d9: 97:9c:19:ae:eb:80:c9:95:f6:64:52:bb:32:78:dd:54:01:2f: 72:0a:2e:71:f7:ec:30:8f:b7:40:6b:08:ba:30:cc:5d:ba:8b: 86:36:46:1a:8e:89:32:e2:cc:dc:e8:e9:a2:38:16:30:12:3a: e3:10:98:92:e2:13:81:9f:95:f9:14:7e:a7:93:51:1d:81:5e: 01:ae:d2:ea:03:7b:f1:a6:8a:61:8a:8d:5a:10:f0:b2:80:74: 69:b4:5d:b5:0f:ce:5f:cd:f4:c8:c1:a3:23:21:d7:b9:61:18: 90:38:4c:40:6e:20:1d:8a:97:0d:62:7c:b5:d6:e8:63:de:92: 57:3b:9e:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXo9ObylBVZoO+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OWE3ODQ2YzUtMzM1ZS00MDRiLWE3YjktMWJhNjBhY2Y1YTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqz7gf+zNGQjq20Ztj2w4g66YA350z7CIcVv bT94IKv2vU486S1MdNMKVFfv8BWCW/wqqOqT7YSaFjx2kWLeq/DxcJqV/Mm6XCkf zvCToun8wE1XNBLkxqYwG4dJliqzPhHTq/MZmd7iab4QnA+isPf6hKFWXAHXKnOC G51ULD0ToKoOShnFF1N3AZ5w6f29RRQnXItvDnpfw3hqURAQdjyKf7KSOAWhDrFz JjVbfEf6uS1xwajkCn+528+9yZWlvCvT8eAu6hMBF5NfDsMkvvIfpUDoQjUsiFnG dtSlTBJd/pI2tZ3VnSskvM0craMLzmKXHzDre7Qo8iB56rin4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITvWpjeDsUGG1zrsTyj1s1bddpGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjY5OTE4MjctODI2OS0z MTVlLWI3MzAtMDVmMWZhYTNhMzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx32MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+tAa1jhfZPA1PKo9Vm/4mbDg0yU7olqnUJl90IKPQJBEA0nTyO3euQ dHFfniSjSdxrGzw800P5NMRlbOwzWboPmZu/iKP8B/jXwRvoYtAlXKQSykpTaWcd ZNFDWFqvAFIciS7i7vCOtCj8RJLyVS7Gaidqkv3MfAPfnC/n2ZecGa7rgMmV9mRS uzJ43VQBL3IKLnH37DCPt0BrCLowzF26i4Y2RhqOiTLizNzo6aI4FjASOuMQmJLi E4GflfkUfqeTUR2BXgGu0uoDe/GmimGKjVoQ8LKAdGm0XbUPzl/N9MjBoyMh17lh GJA4TEBuIB2Klw1ifLXW6GPeklc7noM= -----END CERTIFICATE-----Generated at Thu Feb 26 07:58:22 2026 by rpki-client