$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ba5f6972-6e3a-3d8f-a3b7-c6b488cd5a1a.roa File: ba5f6972-6e3a-3d8f-a3b7-c6b488cd5a1a.roa (raw, json) Hash identifier: TAw/1c7Whfr+Hcfb3IN1BEeOwgCKq7A9MUaztPIEiFI= Subject key identifier: 1A:CD:78:AE:4B:CE:C5:46:51:D7:80:96:51:80:48:CD:0B:36:F5:E5 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584CC7773EDEA4852A24B8B1C000 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ba5f6972-6e3a-3d8f-a3b7-c6b488cd5a1a.roa Signing time: Sat 07 Feb 2026 02:00:31 +0000 ROA not before: Sat 07 Feb 2026 02:00:31 +0000 ROA not after: Fri 08 May 2026 01:00:31 +0000 asID: 203 IP address blocks: 192.25.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c7:77:3e:de:a4:85:2a:24:b8:b1:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 7 02:00:31 2026 GMT Not After : May 8 01:00:31 2026 GMT Subject: CN=8fd93ee9-6030-4286-972e-afe72364fd8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0b:1b:dd:55:ed:41:ef:9f:ce:fe:58:dd:99: 6d:5d:ab:26:fa:bd:8a:23:3d:21:7c:c2:6e:af:64: 27:c2:c4:2f:e0:d5:95:39:58:c1:66:56:7c:42:e1: 1c:c0:fc:70:f3:2e:74:dd:dc:12:98:01:49:50:63: 1d:1c:2a:c3:10:dc:3f:2b:89:84:28:91:b1:86:eb: b5:70:95:92:e2:68:ec:6f:0f:03:37:5c:30:69:4b: 73:75:98:00:23:27:74:6b:ee:6f:65:dd:b3:96:51: b9:46:5c:95:83:6f:39:c0:d3:b2:4b:a8:f9:51:e2: 61:47:44:a8:17:91:c1:c9:00:2e:a0:c3:56:32:df: a7:1c:ba:ba:aa:6f:bb:59:cc:68:9b:41:da:6a:81: e1:27:b7:20:26:fc:ab:6d:40:fe:d5:9f:a7:eb:95: 12:66:9b:e5:c9:bc:44:e2:1e:6e:99:1a:9a:0a:72: 91:87:9d:a7:25:bc:f7:fd:96:c0:9b:01:19:64:a5: f1:a9:95:61:c2:44:e5:cc:ee:27:4c:c2:1e:fb:73: f3:53:33:50:4b:4a:a3:f3:db:f8:75:57:67:54:2d: 57:7b:43:61:96:8c:81:18:00:b1:72:fc:9e:7b:83: 26:5b:00:d0:f5:64:cb:5d:54:e7:13:91:64:af:e5: 58:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CD:78:AE:4B:CE:C5:46:51:D7:80:96:51:80:48:CD:0B:36:F5:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ba5f6972-6e3a-3d8f-a3b7-c6b488cd5a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.25.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:e8:d0:0d:ba:b3:6c:7c:f4:90:a8:a4:4a:30:1c:9e:45:c8: a3:12:9a:45:08:68:97:1a:4e:1b:cb:4c:c3:68:46:b8:58:50: 21:5a:62:06:84:f0:a6:0d:4d:28:a0:87:87:eb:14:af:b6:16: 02:02:ba:91:26:10:86:71:10:0b:93:16:6e:3f:92:da:38:c7: e1:f5:f2:07:c9:7f:66:2c:61:df:89:a4:4b:f0:d1:57:9a:cd: c5:6b:48:4d:e8:ec:a1:25:25:a0:22:81:bf:40:1c:1d:11:7c: 47:68:21:19:f4:64:e9:1e:78:89:80:f7:29:07:25:ca:b9:4b: 12:dd:bc:56:01:87:12:0d:70:af:56:cf:46:84:82:50:de:44: be:90:8a:bd:b9:b8:72:99:08:79:e5:80:42:1d:e1:74:b1:02: 39:ae:d8:88:37:18:8a:9c:a7:9d:ee:9d:9d:07:54:f8:e6:54: 78:b8:81:45:b0:03:c8:d2:26:eb:cc:23:27:56:f4:f7:0e:35: 09:ea:ca:83:f7:3d:d7:25:d1:16:e6:b1:e2:63:69:cc:62:48: bf:4e:3c:7f:5f:b1:28:56:71:3f:c8:3c:43:fd:ff:26:04:04: 64:e6:31:ff:18:1f:9a:a4:af:1e:41:c1:29:1d:e9:11:39:e5: ea:14:a8:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHdz7epIUqJLixwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk OGZkOTNlZTktNjAzMC00Mjg2LTk3MmUtYWZlNzIzNjRmZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAsb3VXtQe+fzv5Y3ZltXasm+r2KIz0hfMJu r2QnwsQv4NWVOVjBZlZ8QuEcwPxw8y503dwSmAFJUGMdHCrDENw/K4mEKJGxhuu1 cJWS4mjsbw8DN1wwaUtzdZgAIyd0a+5vZd2zllG5RlyVg285wNOyS6j5UeJhR0So F5HByQAuoMNWMt+nHLq6qm+7Wcxom0HaaoHhJ7cgJvyrbUD+1Z+n65USZpvlybxE 4h5umRqaCnKRh52nJbz3/ZbAmwEZZKXxqZVhwkTlzO4nTMIe+3PzUzNQS0qj89v4 dVdnVC1Xe0NhloyBGACxcvyee4MmWwDQ9WTLXVTnE5Fkr+VYdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrNeK5LzsVGUdeAllGASM0LNvXlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYmE1ZjY5NzItNmUzYS0z ZDhmLWEzYjctYzZiNDg4Y2Q1YTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJno0A26s2x89JCopEowHJ5FyKMSmkUIaJcaThvLTMNoRrhYUCFaYgaE 8KYNTSigh4frFK+2FgICupEmEIZxEAuTFm4/kto4x+H18gfJf2YsYd+JpEvw0Vea zcVrSE3o7KElJaAigb9AHB0RfEdoIRn0ZOkeeImA9ykHJcq5SxLdvFYBhxINcK9W z0aEglDeRL6Qir25uHKZCHnlgEId4XSxAjmu2Ig3GIqcp53unZ0HVPjmVHi4gUWw A8jSJuvMIydW9PcONQnqyoP3Pdcl0RbmseJjacxiSL9OPH9fsShWcT/IPEP9/yYE BGTmMf8YH5qkrx5BwSkd6RE55eoUqH4= -----END CERTIFICATE-----Generated at Mon Mar 2 18:36:09 2026 by rpki-client