$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/14516a78-5003-3ee4-a230-723f4f86845d.roa File: 14516a78-5003-3ee4-a230-723f4f86845d.roa (raw, json) Hash identifier: F31sIIyN5deul+PPkqkonBZY1hxLKzat0kXYLjXF8nU= Subject key identifier: 32:5C:B2:26:12:F4:03:44:43:A6:E2:4D:0B:88:56:0B:97:0F:BB:B1 Certificate issuer: /CN=ba434fb3-146b-4bc5-a8cd-38ddf1603470 Certificate serial: 010D0C9F4328584CDB01FF5F7832D783DF962E80 Authority key identifier: A1:E3:10:29:38:AC:67:98:DA:DC:F0:11:4E:C1:B7:64:71:5A:21:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/14516a78-5003-3ee4-a230-723f4f86845d.roa Signing time: Sat 14 Feb 2026 02:00:32 +0000 ROA not before: Sat 14 Feb 2026 02:00:32 +0000 ROA not after: Fri 15 May 2026 01:00:32 +0000 asID: 36231 IP address blocks: 199.231.233.0/24 maxlen: 24 2606:f240::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:db:01:ff:5f:78:32:d7:83:df:96:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba434fb3-146b-4bc5-a8cd-38ddf1603470 Validity Not Before: Feb 14 02:00:32 2026 GMT Not After : May 15 01:00:32 2026 GMT Subject: CN=e272f361-d6e8-43ee-ba47-053160b78589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f8:44:ea:55:80:be:0c:39:a3:db:bf:52:ab: cd:ff:be:0b:62:c4:3a:6f:86:80:c2:be:2d:b6:71: ea:ab:71:7f:2e:c6:69:a5:5c:ef:26:85:f3:19:d9: 1e:9a:f1:c8:93:d2:b5:8f:14:a5:40:71:fa:4a:b1: 96:44:1c:3b:10:25:9b:82:ea:a4:50:f5:55:b5:eb: 2e:ac:b7:1e:e9:f5:0b:49:d9:ea:89:29:1a:f7:31: 08:e2:1e:a2:98:42:d6:95:33:40:c9:6c:de:58:70: 6c:d2:ab:e8:45:bc:7e:08:2b:8e:59:c8:c7:15:15: ea:c3:7d:3a:86:f3:f0:50:07:c8:6b:a4:bd:e1:3a: 99:5a:aa:c6:d9:61:32:c1:65:f2:b1:34:ca:8a:05: 59:c2:e6:8e:77:d8:0f:eb:5c:30:9a:14:de:9e:49: b6:e3:8b:28:d0:b2:81:79:c8:4d:66:07:7b:ef:68: c3:25:ff:df:31:08:55:a9:83:ee:77:a2:dc:f2:65: dc:15:fe:45:b6:26:41:76:38:c4:8a:4d:27:cd:e9: e9:6b:98:30:e2:6c:b4:d4:ab:8d:11:3b:43:69:36: 93:be:63:65:ed:10:38:bb:55:39:27:de:92:bd:4c: 06:48:8b:90:ab:d2:a7:35:d6:5f:15:84:af:dd:96: bc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5C:B2:26:12:F4:03:44:43:A6:E2:4D:0B:88:56:0B:97:0F:BB:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/14516a78-5003-3ee4-a230-723f4f86845d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl X509v3 Authority Key Identifier: keyid:A1:E3:10:29:38:AC:67:98:DA:DC:F0:11:4E:C1:B7:64:71:5A:21:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer sbgp-ipAddrBlock: critical IPv4: 199.231.233.0/24 IPv6: 2606:f240::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:8e:ca:cd:c6:85:b3:66:ad:e8:15:f1:cb:d4:ae:57:be:b8: 2a:df:44:ea:90:87:dd:c9:37:50:c8:d4:7b:86:2b:42:bf:62: 49:4a:f7:6a:40:6e:26:c6:a3:d2:9e:92:28:0a:c8:d1:1e:8f: 0d:65:4d:2b:b2:60:66:92:78:fa:52:33:3b:52:a9:e2:f3:8c: 3a:bf:94:79:7e:0e:67:9e:28:5e:cc:b3:70:96:ce:54:5a:e8: 27:8d:89:32:d8:6b:4d:14:e4:aa:30:28:c9:d2:6e:70:d6:cb: 44:45:1d:07:89:ba:15:4e:52:b7:96:b0:19:ff:ce:f7:21:bc: 3d:ad:57:29:f8:a1:6f:55:62:6c:c6:9c:bd:41:92:1a:b0:65: 74:0e:ca:a8:57:ac:bb:07:e8:05:5d:ef:54:c5:e7:b0:d6:5e: 3a:a2:cc:7b:13:08:e2:63:f0:87:37:2c:26:98:10:5e:1e:ec: d5:a8:d8:ba:a2:e9:99:91:ee:9b:0f:7a:51:9c:09:6e:c0:10: 5d:c5:3b:4f:b9:0d:72:15:ad:d5:20:d7:e5:41:9e:51:10:5b: 3f:cd:fa:67:66:15:dd:cd:78:43:31:6d:47:9c:63:49:b0:61: 7e:8e:49:ab:c2:e0:47:90:54:c3:e2:32:eb:fd:df:c3:14:1d: fe:29:1e:f0 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEzbAf9feDLXg9+WLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0MzRmYjMtMTQ2Yi00YmM1LWE4Y2QtMzhkZGYxNjAz NDcwMB4XDTI2MDIxNDAyMDAzMloXDTI2MDUxNTAxMDAzMlowLzEtMCsGA1UEAxMk ZTI3MmYzNjEtZDZlOC00M2VlLWJhNDctMDUzMTYwYjc4NTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfhE6lWAvgw5o9u/UqvN/74LYsQ6b4aAwr4t tnHqq3F/LsZppVzvJoXzGdkemvHIk9K1jxSlQHH6SrGWRBw7ECWbguqkUPVVtesu rLce6fULSdnqiSka9zEI4h6imELWlTNAyWzeWHBs0qvoRbx+CCuOWcjHFRXqw306 hvPwUAfIa6S94TqZWqrG2WEywWXysTTKigVZwuaOd9gP61wwmhTenkm244so0LKB echNZgd772jDJf/fMQhVqYPud6Lc8mXcFf5FtiZBdjjEik0nzenpa5gw4my01KuN ETtDaTaTvmNl7RA4u1U5J96SvUwGSIuQq9KnNdZfFYSv3Za8ZQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFDJcsiYS9ANEQ6biTQuIVguXD7uxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYTQz NGZiMy0xNDZiLTRiYzUtYThjZC0zOGRkZjE2MDM0NzAvMTQ1MTZhNzgtNTAwMy0z ZWU0LWEyMzAtNzIzZjRmODY4NDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmE0MzRmYjMtMTQ2Yi00YmM1LWE4 Y2QtMzhkZGYxNjAzNDcwL2JhNDM0ZmIzLTE0NmItNGJjNS1hOGNkLTM4ZGRmMTYw MzQ3MC5jcmwwHwYDVR0jBBgwFoAUoeMQKTisZ5ja3PARTsG3ZHFaIQQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYTQzNGZiMy0xNDZiLTRiYzUtYThjZC0zOGRk ZjE2MDM0NzAuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAx+fpMA0E AgACMAcDBQAmBvJAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBALeOys3GhbNmregV8cvUrle+uCrfROqQh93J N1DI1HuGK0K/YklK92pAbibGo9KekigKyNEejw1lTSuyYGaSePpSMztSqeLzjDq/ lHl+DmeeKF7Ms3CWzlRa6CeNiTLYa00U5KowKMnSbnDWy0RFHQeJuhVOUreWsBn/ zvchvD2tVyn4oW9VYmzGnL1BkhqwZXQOyqhXrLsH6AVd71TF57DWXjqizHsTCOJj 8Ic3LCaYEF4e7NWo2Lqi6ZmR7psPelGcCW7AEF3FO0+5DXIVrdUg1+VBnlEQWz/N +mdmFd3NeEMxbUecY0mwYX6OSavC4EeQVMPiMuv938MUHf4pHvA= -----END CERTIFICATE-----Generated at Mon Mar 2 14:48:22 2026 by rpki-client