$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2bf8a4b-70a7-3edc-b70b-bb5b2840c694.roa File: c2bf8a4b-70a7-3edc-b70b-bb5b2840c694.roa (raw, json) Hash identifier: HkWIIcnsxeLzTImGZb01QztPQrX6B3jamVn5lJr+H1E= Subject key identifier: DC:BE:25:34:23:43:77:93:DC:68:C8:6F:E5:A2:78:3A:62:CE:4E:04 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CEDCF051581BD4FB49C4A8140 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2bf8a4b-70a7-3edc-b70b-bb5b2840c694.roa Signing time: Fri 20 Feb 2026 19:38:20 +0000 ROA not before: Fri 20 Feb 2026 19:38:20 +0000 ROA not after: Thu 21 May 2026 18:38:20 +0000 asID: 19905 IP address blocks: 150.195.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:cf:05:15:81:bd:4f:b4:9c:4a:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 20 19:38:20 2026 GMT Not After : May 21 18:38:20 2026 GMT Subject: CN=e27890a5-ee7f-4a96-8a85-06bab11c8611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f1:7a:4c:80:d3:fe:47:6f:40:a6:7e:54:41: 93:de:45:10:7c:1d:3e:2e:20:d4:81:78:56:90:79: 95:bc:3f:ed:18:e6:0f:cb:73:dd:10:af:9d:f3:7f: a7:a4:ba:85:ac:0f:e8:92:56:e7:9d:b0:9f:92:29: a7:8a:fc:14:75:e1:11:03:71:78:94:cb:a6:3b:55: 94:f1:15:39:21:fd:b6:3b:0a:28:10:a7:bd:20:20: 05:4b:88:9c:43:1c:08:55:41:b7:b2:b6:ef:4a:08: 6e:41:61:bb:45:83:7f:ba:42:b2:c8:ce:c7:11:f4: 4a:89:13:82:d9:60:08:a8:74:85:e5:86:cf:ee:b6: e2:13:5b:e9:ef:83:5d:59:11:01:50:db:1d:5e:1f: 96:2d:ba:64:e7:29:a0:4e:09:e9:e4:89:6f:f7:e6: 27:e0:2b:05:2c:47:f8:ba:b5:6b:3c:b8:ee:7a:fb: e7:95:de:2b:51:79:11:09:20:f5:04:1f:01:70:5f: ac:28:5d:f6:8c:7a:55:07:57:92:7a:7c:f4:55:90: 55:27:db:eb:9d:1f:cc:6d:e6:49:19:54:dd:1d:07: 4e:f4:9f:ea:50:9d:81:f2:44:4b:1c:79:d0:7c:8e: 21:5e:49:cb:13:f7:f8:fb:78:83:6f:e3:c4:00:26: 98:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BE:25:34:23:43:77:93:DC:68:C8:6F:E5:A2:78:3A:62:CE:4E:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2bf8a4b-70a7-3edc-b70b-bb5b2840c694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:61:ce:b2:ce:fa:65:2c:75:26:6d:8e:e1:4e:e9:22:ca:b8: 21:05:6d:4f:39:7f:8a:9e:97:bd:90:b8:27:49:4e:6d:aa:e0: ab:49:47:30:e4:8f:67:ec:ef:63:09:bd:cd:02:97:80:8e:4d: 09:de:0a:62:b8:f6:f7:97:fa:be:87:da:63:2f:01:fc:ec:92: f0:f6:31:a7:fc:6d:62:3e:26:1f:9c:0b:4c:4a:c1:2e:77:5f: 20:01:84:25:c8:2b:b2:79:fe:7b:7e:41:bf:0c:09:35:bf:ce: 33:94:07:58:f3:41:ff:a6:eb:8a:2a:1f:2b:ce:d5:4f:0d:2f: a8:bd:8a:02:0e:2f:84:cc:07:25:1c:b9:d8:dc:7c:f5:db:5b: 69:ca:29:29:f2:32:6d:2e:1b:59:19:06:e0:c6:ff:55:bc:ff: ab:93:3c:77:40:0f:24:0e:d1:61:97:06:ff:a4:eb:c0:d3:b2: ab:f9:0c:bf:57:a9:1d:0f:64:3b:ca:73:22:c1:e2:31:ff:8d: de:37:f4:42:0d:a4:81:da:ee:78:45:19:bc:c2:5a:8b:1b:e6: ee:ce:74:50:19:47:a2:f4:84:2a:62:64:ac:dc:4b:0b:9a:5f: ca:69:be:11:cf:9b:7c:f1:d0:db:58:b3:10:8b:77:2b:c0:29: d7:62:2a:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztzwUVgb1PtJxKgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIyMDE5MzgyMFoXDTI2MDUyMTE4MzgyMFowLzEtMCsGA1UEAxMk ZTI3ODkwYTUtZWU3Zi00YTk2LThhODUtMDZiYWIxMWM4NjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/F6TIDT/kdvQKZ+VEGT3kUQfB0+LiDUgXhW kHmVvD/tGOYPy3PdEK+d83+npLqFrA/oklbnnbCfkimnivwUdeERA3F4lMumO1WU 8RU5If22OwooEKe9ICAFS4icQxwIVUG3srbvSghuQWG7RYN/ukKyyM7HEfRKiROC 2WAIqHSF5YbP7rbiE1vp74NdWREBUNsdXh+WLbpk5ymgTgnp5Ilv9+Yn4CsFLEf4 urVrPLjuevvnld4rUXkRCSD1BB8BcF+sKF32jHpVB1eSenz0VZBVJ9vrnR/MbeZJ GVTdHQdO9J/qUJ2B8kRLHHnQfI4hXknLE/f4+3iDb+PEACaYDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNy+JTQjQ3eT3GjIb+WieDpizk4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzJiZjhhNGItNzBhNy0z ZWRjLWI3MGItYmI1YjI4NDBjNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsMnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdhzrLO+mUsdSZtjuFO6SLKuCEFbU85f4qel72QuCdJTm2q4KtJRzDk j2fs72MJvc0Cl4COTQneCmK49veX+r6H2mMvAfzskvD2Maf8bWI+Jh+cC0xKwS53 XyABhCXIK7J5/nt+Qb8MCTW/zjOUB1jzQf+m64oqHyvO1U8NL6i9igIOL4TMByUc udjcfPXbW2nKKSnyMm0uG1kZBuDG/1W8/6uTPHdADyQO0WGXBv+k68DTsqv5DL9X qR0PZDvKcyLB4jH/jd439EINpIHa7nhFGbzCWosb5u7OdFAZR6L0hCpiZKzcSwua X8ppvhHPm3zx0NtYsxCLdyvAKddiKgQ= -----END CERTIFICATE-----Generated at Mon Mar 2 03:53:32 2026 by rpki-client