$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa File: 0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa (raw, json) Hash identifier: pchbFKp2zhWvCgxdeNrgDpmmCrcM33kq4u/hszHY8L4= Subject key identifier: 27:0C:AB:03:EF:44:FE:BC:65:EF:B1:D9:03:8A:C8:33:6C:6B:66:16 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584CDB020A9AC834D259F24F2180 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa Signing time: Sat 14 Feb 2026 02:00:32 +0000 ROA not before: Sat 14 Feb 2026 02:00:32 +0000 ROA not after: Fri 15 May 2026 01:00:32 +0000 asID: 23465 IP address blocks: 208.186.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:db:02:0a:9a:c8:34:d2:59:f2:4f:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Feb 14 02:00:32 2026 GMT Not After : May 15 01:00:32 2026 GMT Subject: CN=df904a5a-40ad-481f-990d-0e96a6be7b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f5:52:1a:14:6c:ad:68:cf:02:39:f9:c1:82: 61:f5:6a:55:0b:2a:2c:63:b3:ab:64:59:86:44:e9: 44:46:df:5f:37:69:9e:57:1a:7d:53:b9:2d:65:c2: 32:ba:ce:1f:6c:e5:e5:23:9d:29:a5:e5:04:fb:2c: 5e:36:f5:af:3f:57:ac:65:d4:0e:69:20:d7:ab:56: dd:87:ca:f7:28:60:26:47:9d:a9:1e:4b:33:69:80: 32:e6:92:94:ff:c4:3b:e3:02:f5:6a:64:3a:12:e0: 7a:a2:e6:e8:81:30:0e:3b:4f:13:26:e5:17:a3:72: fa:33:3e:b5:21:b1:e4:0c:bb:1c:60:7e:55:2f:48: 62:cf:12:ee:b0:c1:8c:41:73:6a:b4:a8:3b:75:d5: 05:43:3d:bf:8f:72:2b:01:58:e5:25:f5:2e:f2:7e: 21:0f:e3:4f:ea:16:ae:f1:a7:81:f2:cd:7a:b2:15: 5a:2d:19:7d:a7:a8:6a:79:c4:75:d4:34:26:6a:64: e7:e2:eb:10:ef:6b:2c:7f:66:44:0e:a4:c8:de:1f: 79:12:84:17:bd:a4:ae:c0:7d:ff:74:17:03:1c:65: 8d:07:af:4a:c9:7c:ce:b5:aa:b9:0f:12:ff:c2:50: dc:4c:00:9f:fb:aa:81:25:54:50:f4:83:41:04:2b: 88:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0C:AB:03:EF:44:FE:BC:65:EF:B1:D9:03:8A:C8:33:6C:6B:66:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 208.186.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:ad:59:37:97:81:88:49:91:18:6c:70:35:6f:6d:22:27:b8: 3b:f7:74:b9:a0:db:5f:c8:15:30:60:d0:49:d7:ae:5e:3a:1d: 73:30:f9:e0:42:d2:63:f2:b9:a1:87:39:c6:19:04:40:31:ca: 6f:bd:17:e6:b3:b2:5b:e5:b1:1f:2a:d3:00:f5:21:ec:bc:53: bc:41:bd:e4:2d:3f:e3:85:24:15:4a:72:d4:32:df:77:e7:45: 7d:02:7f:ae:ca:16:53:b6:cb:50:80:d0:e6:31:51:d4:c0:37: 00:9f:23:06:ab:e2:a1:6b:11:7b:37:c5:e5:19:56:5f:d2:65: 6d:eb:18:8e:a7:1c:1d:4a:f8:38:ac:69:51:e7:ee:70:0d:e5: 1e:cd:df:4d:4d:f8:91:41:0c:64:d0:e2:f3:b0:3e:05:63:d4: 78:68:9b:cb:9f:a2:77:6b:b0:f9:1c:10:f8:ee:0a:19:9f:9a: 77:09:7a:55:a5:84:9b:9d:86:7b:19:f4:c5:66:35:2c:14:c8: c2:00:66:44:f8:c9:3c:fe:ac:a7:22:ea:88:66:6f:d3:95:ec: 6a:60:e5:7f:48:68:0c:75:87:c5:0c:93:64:a1:e2:05:07:2f: cb:97:55:7b:5c:3f:de:ee:ca:6c:1d:1d:e6:12:1a:55:98:7c: ff:12:fc:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzbAgqayDTSWfJPIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI2MDIxNDAyMDAzMloXDTI2MDUxNTAxMDAzMlowLzEtMCsGA1UEAxMk ZGY5MDRhNWEtNDBhZC00ODFmLTk5MGQtMGU5NmE2YmU3YjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvVSGhRsrWjPAjn5wYJh9WpVCyosY7OrZFmG ROlERt9fN2meVxp9U7ktZcIyus4fbOXlI50ppeUE+yxeNvWvP1esZdQOaSDXq1bd h8r3KGAmR52pHkszaYAy5pKU/8Q74wL1amQ6EuB6oubogTAOO08TJuUXo3L6Mz61 IbHkDLscYH5VL0hizxLusMGMQXNqtKg7ddUFQz2/j3IrAVjlJfUu8n4hD+NP6hau 8aeB8s16shVaLRl9p6hqecR11DQmamTn4usQ72ssf2ZEDqTI3h95EoQXvaSuwH3/ dBcDHGWNB69KyXzOtaq5DxL/wlDcTACf+6qBJVRQ9INBBCuIjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcMqwPvRP68Ze+x2QOKyDNsa2YWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvMGNmZDFlNDMtOTliMC0z YzJmLThiMDQtZjU1ZGQ5ZWIwYWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0LrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALytWTeXgYhJkRhscDVvbSInuDv3dLmg21/IFTBg0EnXrl46HXMw+eBC 0mPyuaGHOcYZBEAxym+9F+azslvlsR8q0wD1Iey8U7xBveQtP+OFJBVKctQy33fn RX0Cf67KFlO2y1CA0OYxUdTANwCfIwar4qFrEXs3xeUZVl/SZW3rGI6nHB1K+Dis aVHn7nAN5R7N301N+JFBDGTQ4vOwPgVj1Hhom8ufondrsPkcEPjuChmfmncJelWl hJudhnsZ9MVmNSwUyMIAZkT4yTz+rKci6ohmb9OV7Gpg5X9IaAx1h8UMk2Sh4gUH L8uXVXtcP97uymwdHeYSGlWYfP8S/BY= -----END CERTIFICATE-----Generated at Mon Mar 2 15:38:15 2026 by rpki-client