$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db315c54-2d45-3c4c-a01d-39465b270b1e.roa File: db315c54-2d45-3c4c-a01d-39465b270b1e.roa (raw, json) Hash identifier: DzloIENTirb5OHmRQhm/ZTgcP4YoCpCHtpA6M27aq3M= Subject key identifier: F3:54:32:CC:A6:CF:6C:24:BD:C9:3F:24:91:3A:FA:26:AE:75:46:0F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584CF1577C59B0E98B01992A7000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db315c54-2d45-3c4c-a01d-39465b270b1e.roa Signing time: Sun 22 Feb 2026 02:00:32 +0000 ROA not before: Sun 22 Feb 2026 02:00:32 +0000 ROA not after: Sat 23 May 2026 01:00:32 +0000 asID: 27338 IP address blocks: 209.192.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f1:57:7c:59:b0:e9:8b:01:99:2a:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 22 02:00:32 2026 GMT Not After : May 23 01:00:32 2026 GMT Subject: CN=842d97af-262b-4b31-8a21-c9c6e7e6f988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:da:7f:fd:30:59:68:c1:f7:d3:e1:7e:77:06: e6:fc:bb:c2:c2:6a:af:6b:c9:a3:01:79:96:d0:8d: 9c:1f:5f:a2:36:4e:91:f7:bc:a3:a6:57:7f:53:94: 69:bd:55:33:8d:6a:31:99:96:f9:7b:60:94:bc:fd: c0:47:48:56:3d:d4:f5:c3:51:45:a1:59:df:b5:ef: 02:39:2e:86:ee:5e:5e:b7:2b:59:76:5a:6c:25:9f: 40:35:c4:7b:33:96:21:65:04:fc:75:98:a2:e2:d1: 48:72:76:a6:49:25:2b:a1:3a:d7:83:68:99:b1:98: fc:ce:6b:78:01:df:cc:ae:81:3b:26:bd:4c:7c:7c: ab:b2:20:71:87:9e:94:4d:86:1a:07:a5:bf:98:1d: 02:5a:b8:19:b9:75:40:39:47:61:52:31:c2:f4:14: fa:cc:4f:3e:ce:e0:06:38:b9:82:cd:e7:a6:b4:12: 1f:d2:d4:04:a2:1a:0f:3d:6f:59:8d:86:17:08:d9: 45:c5:5f:a3:69:07:b4:48:be:fe:06:00:cb:03:4d: fc:5a:99:a2:30:04:23:d9:1d:c1:de:dd:a2:53:76: 12:c8:94:18:c5:0d:ea:e4:97:0c:ab:17:34:9e:c9: 6a:31:ea:84:0e:46:c8:c6:55:cd:97:9b:a9:8e:c0: 55:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:54:32:CC:A6:CF:6C:24:BD:C9:3F:24:91:3A:FA:26:AE:75:46:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db315c54-2d45-3c4c-a01d-39465b270b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:5e:cf:73:f8:df:85:d1:ca:fb:e2:b2:91:c1:ad:19:97:b5: 82:85:5e:52:39:df:ff:0b:3a:4d:74:4a:9f:84:f7:91:17:ed: 18:28:d1:fc:3e:5e:c4:35:17:24:16:ad:13:b4:4c:1b:3c:30: bb:ec:de:f6:53:03:92:91:c1:e1:2a:87:29:8f:07:20:81:1f: c4:e2:8e:d2:00:ea:95:6c:3b:a2:a1:d7:46:47:61:11:ee:9a: fb:22:8a:8b:e9:68:6f:90:84:46:ff:c1:d5:2b:81:d2:7a:51: 3f:a3:7f:42:ae:0d:15:1c:e6:e1:af:31:72:0f:55:23:1f:0f: ce:bc:22:89:33:00:fb:97:05:13:61:ab:41:8d:12:3c:ff:fd: 32:98:83:e2:4a:94:ef:cf:e5:62:3b:b1:4e:62:0e:f9:54:dc: ff:c3:e8:91:0b:01:6b:90:4a:42:ca:95:62:3f:fe:1b:8c:70: 58:59:be:91:ab:2e:44:f4:49:a4:db:95:cb:97:e0:83:62:b2: ed:b3:84:1f:e2:44:e3:52:4e:37:52:aa:0c:4a:d2:84:2f:f9: 62:54:13:d1:f4:c6:ef:4f:de:b2:2b:9a:41:36:4b:da:9b:c4: ca:54:95:96:6c:97:59:81:55:06:7f:e5:4b:80:73:8f:1b:82: e2:93:69:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzxV3xZsOmLAZkqcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIyMjAyMDAzMloXDTI2MDUyMzAxMDAzMlowLzEtMCsGA1UEAxMk ODQyZDk3YWYtMjYyYi00YjMxLThhMjEtYzljNmU3ZTZmOTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdp//TBZaMH30+F+dwbm/LvCwmqva8mjAXmW 0I2cH1+iNk6R97yjpld/U5RpvVUzjWoxmZb5e2CUvP3AR0hWPdT1w1FFoVnfte8C OS6G7l5etytZdlpsJZ9ANcR7M5YhZQT8dZii4tFIcnamSSUroTrXg2iZsZj8zmt4 Ad/MroE7Jr1MfHyrsiBxh56UTYYaB6W/mB0CWrgZuXVAOUdhUjHC9BT6zE8+zuAG OLmCzeemtBIf0tQEohoPPW9ZjYYXCNlFxV+jaQe0SL7+BgDLA038WpmiMAQj2R3B 3t2iU3YSyJQYxQ3q5JcMqxc0nslqMeqEDkbIxlXNl5upjsBVcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNUMsymz2wkvck/JJE6+iaudUYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGIzMTVjNTQtMmQ0NS0z YzRjLWEwMWQtMzk0NjViMjcwYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpez3P434XRyvvispHBrRmXtYKFXlI53/8LOk10Sp+E95EX7Rgo0fw+ XsQ1FyQWrRO0TBs8MLvs3vZTA5KRweEqhymPByCBH8TijtIA6pVsO6Kh10ZHYRHu mvsiiovpaG+QhEb/wdUrgdJ6UT+jf0KuDRUc5uGvMXIPVSMfD868IokzAPuXBRNh q0GNEjz//TKYg+JKlO/P5WI7sU5iDvlU3P/D6JELAWuQSkLKlWI//huMcFhZvpGr LkT0SaTblcuX4INisu2zhB/iRONSTjdSqgxK0oQv+WJUE9H0xu9P3rIrmkE2S9qb xMpUlZZsl1mBVQZ/5UuAc48bguKTaRc= -----END CERTIFICATE-----Generated at Thu Feb 26 09:13:32 2026 by rpki-client