$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/3cc25bcf-8851-3c68-a89f-59793b01e859.roa File: 3cc25bcf-8851-3c68-a89f-59793b01e859.roa (raw, json) Hash identifier: fLimZ0SwPep6pr8HvvMoWdYgqcjF0a4I6CjxHVRcZlc= Subject key identifier: 50:C9:AC:C2:98:38:31:50:EE:D8:27:9D:4E:6E:79:E0:58:89:DB:F8 Certificate issuer: /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Certificate serial: 010D0C9F4328584CCD0CA24E4EF01C5E06716E00 Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/3cc25bcf-8851-3c68-a89f-59793b01e859.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 852 IP address blocks: 208.68.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:a2:4e:4e:f0:1c:5e:06:71:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=a786fec7-0d4f-42c2-9ff8-66de694f129e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:aa:09:15:0b:53:8f:10:d0:a1:5d:94:75:ff: 99:4c:51:c3:cf:db:85:9c:5c:8a:ae:d1:b6:ae:d1: da:66:64:8b:1c:b3:6e:50:f5:d8:c5:e6:6d:07:3d: 04:8d:02:a5:bf:29:49:2d:6b:3a:d5:09:81:cc:ee: 0a:a6:3a:cf:a7:2c:a2:44:74:a6:47:96:53:43:19: 2d:ca:02:88:26:10:3c:0b:81:85:3a:4e:20:96:32: 50:92:94:b3:de:54:84:63:34:63:9b:f0:b7:4e:e2: bb:3c:8c:03:1b:57:c9:5a:93:c8:f4:b1:ea:26:90: f1:40:ac:a3:57:c0:c6:39:3c:ee:d6:98:69:37:47: 8e:39:01:60:f4:9c:d5:4c:88:14:24:51:0a:ce:01: cb:5b:b5:f2:e9:a3:f1:26:98:31:06:4d:4c:d8:5f: 91:bc:28:29:fd:8f:f9:5a:cf:69:bd:12:76:62:ad: ed:d8:c8:87:85:20:0d:6a:dc:5f:5a:3c:69:0e:60: 8e:6a:39:f0:eb:77:f9:5e:cc:20:24:e5:33:4a:68: f0:93:ec:00:e1:35:9c:92:22:4d:8c:84:03:77:6f: bc:42:34:c5:42:d8:51:06:22:5b:35:35:ee:47:d7: 89:4f:b2:30:8f:36:a0:8c:33:7c:08:eb:1a:dc:ea: d3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C9:AC:C2:98:38:31:50:EE:D8:27:9D:4E:6E:79:E0:58:89:DB:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/3cc25bcf-8851-3c68-a89f-59793b01e859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl X509v3 Authority Key Identifier: keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:22:b3:14:a4:e1:6c:82:c5:9e:2d:f7:8c:4c:66:21:17:3c: 20:df:1b:b1:dc:dd:25:03:e8:5a:60:2a:f6:58:7c:a5:f0:8a: a8:d2:e4:b3:3c:a6:d5:b8:c7:f7:87:0e:7d:0f:71:bb:dc:cd: bc:f2:bf:d3:2c:1b:87:69:4c:ee:37:ab:25:dd:a7:a0:57:3e: 20:7b:c3:b3:70:53:14:f3:66:27:83:b1:33:0a:fb:b6:9d:90: 62:d9:dc:23:40:fe:a2:89:44:d0:58:27:8d:13:e4:ca:b9:39: 3a:a9:76:13:11:f8:bf:97:38:09:0f:ae:7e:e8:bf:db:2d:ca: 0b:a3:2a:ee:f2:a6:b5:ba:b1:32:cd:47:a6:d4:89:de:d9:84: 50:02:df:fe:2b:df:19:26:b2:19:07:66:d4:53:c4:5a:60:21: ff:d8:89:58:d5:8b:fc:5e:6d:d5:1d:e4:e8:78:0a:f2:0b:5d: 6d:b1:cd:24:9f:38:b8:5c:fa:6e:c6:cb:a2:b7:45:df:9f:97: 9e:0c:f6:e4:69:60:97:12:d7:68:2c:e4:48:a1:6b:7d:20:3b: 5d:de:d8:f8:28:e6:9a:d9:fa:78:2c:a0:e5:ff:07:75:1c:a3: 2a:2e:2a:d1:c7:e2:c5:d4:3d:ce:42:2a:ca:f0:d5:b6:58:82: 23:a5:2b:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDKJOTvAcXgZxbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyZGM2ZTctZmExYS00YWNmLWEwMzYtNWI0NDg3MTAw ZGU5MB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk YTc4NmZlYzctMGQ0Zi00MmMyLTlmZjgtNjZkZTY5NGYxMjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KoJFQtTjxDQoV2Udf+ZTFHDz9uFnFyKrtG2 rtHaZmSLHLNuUPXYxeZtBz0EjQKlvylJLWs61QmBzO4KpjrPpyyiRHSmR5ZTQxkt ygKIJhA8C4GFOk4gljJQkpSz3lSEYzRjm/C3TuK7PIwDG1fJWpPI9LHqJpDxQKyj V8DGOTzu1phpN0eOOQFg9JzVTIgUJFEKzgHLW7Xy6aPxJpgxBk1M2F+RvCgp/Y/5 Ws9pvRJ2Yq3t2MiHhSANatxfWjxpDmCOajnw63f5XswgJOUzSmjwk+wA4TWckiJN jIQDd2+8QjTFQthRBiJbNTXuR9eJT7IwjzagjDN8COsa3OrTmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDJrMKYODFQ7tgnnU5ueeBYidv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJk YzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0ODcxMDBkZTkvM2NjMjViY2YtODg1MS0z YzY4LWE4OWYtNTk3OTNiMDFlODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyZGM2ZTctZmExYS00YWNmLWEw MzYtNWI0NDg3MTAwZGU5L2IwMmRjNmU3LWZhMWEtNGFjZi1hMDM2LTViNDQ4NzEw MGRlOS5jcmwwHwYDVR0jBBgwFoAUzajON082SuE49vB+z212scrE6D4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJkYzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0 ODcxMDBkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ET4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQisxSk4WyCxZ4t94xMZiEXPCDfG7Hc3SUD6FpgKvZYfKXwiqjS5LM8 ptW4x/eHDn0Pcbvczbzyv9MsG4dpTO43qyXdp6BXPiB7w7NwUxTzZieDsTMK+7ad kGLZ3CNA/qKJRNBYJ40T5Mq5OTqpdhMR+L+XOAkPrn7ov9stygujKu7yprW6sTLN R6bUid7ZhFAC3/4r3xkmshkHZtRTxFpgIf/YiVjVi/xebdUd5Oh4CvILXW2xzSSf OLhc+m7Gy6K3Rd+fl54M9uRpYJcS12gs5Eiha30gO13e2Pgo5prZ+ngsoOX/B3Uc oyouKtHH4sXUPc5CKsrw1bZYgiOlK7I= -----END CERTIFICATE-----Generated at Mon Mar 2 14:15:19 2026 by rpki-client