$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/02a2b201-0d63-3b68-aadd-ec4984b4846f.roa File: 02a2b201-0d63-3b68-aadd-ec4984b4846f.roa (raw, json) Hash identifier: C5VNW8jB1ppCsAUa+Jtse4wWjysU7Wht+CqlnSsC06I= Subject key identifier: 10:31:C0:41:7F:C1:04:C5:4E:63:0D:E3:B3:B3:9C:62:B2:51:9E:86 Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Certificate serial: 010D0C9F4328584CFDE7A43FA3970A98FDE43F80 Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/02a2b201-0d63-3b68-aadd-ec4984b4846f.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 12129 IP address blocks: 199.167.252.0/24 maxlen: 24 199.167.253.0/24 maxlen: 24 199.167.254.0/24 maxlen: 24 199.167.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e7:a4:3f:a3:97:0a:98:fd:e4:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=3e12d473-d241-48e6-9a3d-9093cefb7284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:93:ad:fd:58:16:36:5d:43:e8:b8:98:f4:24: 94:99:62:c2:ca:77:50:cc:30:47:26:85:52:fe:5a: 1b:96:62:8a:86:20:dc:a6:8d:c0:04:7f:a9:c8:26: 56:09:c0:d1:b5:b5:2c:10:af:64:d9:0e:34:91:41: 44:0b:38:6c:14:9f:11:b4:46:26:78:48:2c:24:59: cd:ec:75:08:4e:55:ef:ea:1c:05:38:3e:0d:72:4e: 9e:44:84:1f:23:f4:26:b4:2e:c8:a5:87:8b:df:5e: 79:ea:59:6a:b0:6b:5e:f9:06:48:60:91:a7:34:09: 56:e4:9f:e2:2e:b6:fc:c0:d5:02:f6:58:f6:f5:6e: ef:48:4e:a2:e1:5e:49:3e:89:30:20:3b:d2:25:98: 68:ed:31:74:5e:f3:9f:16:5f:4e:40:8a:89:21:0a: 6e:16:70:82:a8:b2:47:bf:aa:3a:05:5d:f3:42:ea: ff:ee:94:b9:b9:4f:36:54:08:ae:08:4d:21:ae:57: 5b:e8:e0:b6:fc:e4:16:69:3a:84:cd:82:80:bf:bd: 50:0f:c6:ad:83:e8:ac:86:52:d7:95:7f:96:d7:1b: 16:5d:28:0b:57:19:aa:5f:20:e1:87:2b:a1:3e:5d: ee:03:11:27:27:e9:18:2c:72:94:62:a5:cc:bc:e7: 28:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:31:C0:41:7F:C1:04:C5:4E:63:0D:E3:B3:B3:9C:62:B2:51:9E:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/02a2b201-0d63-3b68-aadd-ec4984b4846f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl X509v3 Authority Key Identifier: keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer sbgp-ipAddrBlock: critical IPv4: 199.167.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:e7:ee:dd:c5:39:2d:02:a8:b4:ee:37:d8:7a:70:fb:60:0f: 62:ad:e7:d7:7d:f7:ad:5c:e1:c7:cf:25:aa:5f:5a:47:fa:1e: 08:77:d7:03:85:92:51:19:04:d7:f4:26:cc:f4:c5:6d:e4:a8: be:1f:c8:44:16:84:ac:47:f3:6f:1c:a1:81:36:f8:8c:ee:dd: 0c:eb:b0:4b:54:bb:92:9f:94:89:da:e5:87:e2:aa:79:e1:b4: 3f:e4:59:72:21:dd:d7:97:7f:7e:93:09:16:98:ea:e6:33:69: fb:f3:2d:db:56:14:3d:10:06:ef:69:b7:d9:16:cf:3c:86:90: 75:25:e7:f4:e9:06:1f:a6:60:a6:92:09:3d:96:2f:10:69:e7: bc:42:f3:7b:3c:b9:ec:68:73:05:ea:ba:97:91:59:5f:ca:87: f4:1e:90:74:13:73:9b:e8:ab:4c:00:4e:20:01:de:ab:34:ae: 9c:94:d2:54:b8:e8:b6:e2:70:60:ab:10:57:b6:bb:f0:e0:42: 0f:64:0a:fd:7e:73:08:4a:0c:87:7f:d9:34:5d:c4:3f:53:e6: 24:23:f3:63:c9:2b:87:ab:6f:a0:22:2b:da:e3:db:19:79:26: 07:14:b6:fa:00:18:65:04:f8:ae:ab:40:f7:86:b8:ce:f0:31: f2:e9:bd:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz956Q/o5cKmP3kP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFkZDY4NjAtNzE5ZS00NmMwLThiN2MtODliOWU4ZDg4 ZGE2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk M2UxMmQ0NzMtZDI0MS00OGU2LTlhM2QtOTA5M2NlZmI3Mjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5Ot/VgWNl1D6LiY9CSUmWLCyndQzDBHJoVS /loblmKKhiDcpo3ABH+pyCZWCcDRtbUsEK9k2Q40kUFECzhsFJ8RtEYmeEgsJFnN 7HUITlXv6hwFOD4Nck6eRIQfI/QmtC7IpYeL31556llqsGte+QZIYJGnNAlW5J/i Lrb8wNUC9lj29W7vSE6i4V5JPokwIDvSJZho7TF0XvOfFl9OQIqJIQpuFnCCqLJH v6o6BV3zQur/7pS5uU82VAiuCE0hrldb6OC2/OQWaTqEzYKAv71QD8atg+ishlLX lX+W1xsWXSgLVxmqXyDhhyuhPl3uAxEnJ+kYLHKUYqXMvOcoOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAxwEF/wQTFTmMN47OznGKyUZ6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRk Njg2MC03MTllLTQ2YzAtOGI3Yy04OWI5ZThkODhkYTYvMDJhMmIyMDEtMGQ2My0z YjY4LWFhZGQtZWM0OTg0YjQ4NDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFkZDY4NjAtNzE5ZS00NmMwLThi N2MtODliOWU4ZDg4ZGE2LzIxZGQ2ODYwLTcxOWUtNDZjMC04YjdjLTg5YjllOGQ4 OGRhNi5jcmwwHwYDVR0jBBgwFoAUQnmNqghyfHSiXcmRrdvqyi78pSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRkNjg2MC03MTllLTQ2YzAtOGI3Yy04OWI5 ZThkODhkYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6f8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTn7t3FOS0CqLTuN9h6cPtgD2Kt59d9961c4cfPJapfWkf6Hgh31wOF klEZBNf0Jsz0xW3kqL4fyEQWhKxH828coYE2+Izu3QzrsEtUu5KflIna5Yfiqnnh tD/kWXIh3deXf36TCRaY6uYzafvzLdtWFD0QBu9pt9kWzzyGkHUl5/TpBh+mYKaS CT2WLxBp57xC83s8uexocwXqupeRWV/Kh/QekHQTc5voq0wATiAB3qs0rpyU0lS4 6LbicGCrEFe2u/DgQg9kCv1+cwhKDId/2TRdxD9T5iQj82PJK4erb6AiK9rj2xl5 JgcUtvoAGGUE+K6rQPeGuM7wMfLpvSA= -----END CERTIFICATE-----Generated at Mon Mar 2 12:51:47 2026 by rpki-client