$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa File: b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa (raw, json) Hash identifier: ozEoJaDnnmW3hOLVlVxpZ1MGPItly2+A1BHNx2Lad2g= Subject key identifier: 2C:4F:B0:AE:D2:BE:22:69:9E:DE:0B:09:8C:5F:AB:02:AA:2D:88:5E Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584CF42226475C800DCB63A270C8 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa Signing time: Mon 23 Feb 2026 02:00:31 +0000 ROA not before: Mon 23 Feb 2026 02:00:31 +0000 ROA not after: Sun 24 May 2026 01:00:31 +0000 asID: 23465 IP address blocks: 70.96.220.0/22 maxlen: 22 70.97.86.0/23 maxlen: 23 70.97.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:22:26:47:5c:80:0d:cb:63:a2:70:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Feb 23 02:00:31 2026 GMT Not After : May 24 01:00:31 2026 GMT Subject: CN=3f99a0b9-9ffd-4828-86f9-7ddf8675e6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6a:0c:3d:6b:8e:8f:c2:fd:d4:39:32:d5:73: d8:29:3d:87:25:1c:2c:7e:c5:4c:ee:98:dd:a2:9d: 1e:ea:fe:e5:a5:6c:bc:5e:1a:f7:24:fe:0b:7a:05: 2c:c9:b7:70:f5:4b:d4:32:c6:72:ce:b3:5b:f3:75: 1a:96:49:13:56:eb:31:f1:77:58:7d:98:c8:b2:29: 81:af:ae:36:d2:20:4d:08:d9:15:1c:91:37:d2:09: 04:77:cf:19:14:15:46:18:76:dd:00:aa:6a:6c:28: 9e:a1:a5:20:29:1a:10:fb:ce:1d:b0:a1:67:f9:5c: b9:b2:c8:b3:5b:38:a1:27:97:2e:80:bf:ae:67:f5: 37:c7:56:b6:5a:d0:51:37:9c:58:be:dc:81:af:f2: cd:73:00:cb:9a:43:51:8d:73:85:82:c8:c4:df:f6: 38:d9:70:44:71:71:f2:de:e7:a6:45:75:62:f4:4f: 07:5c:d5:c9:30:97:67:84:35:31:9a:d1:f2:8e:79: ba:81:a2:49:13:95:99:e0:ff:4e:fd:22:92:20:f7: 24:37:67:a3:e0:79:c2:86:0e:45:97:56:d8:31:d2: 93:e1:8e:41:d4:61:4a:c8:2f:41:51:86:fc:14:5d: 7b:3f:d6:17:d5:2c:ab:47:da:c2:50:f5:79:81:9f: 0a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4F:B0:AE:D2:BE:22:69:9E:DE:0B:09:8C:5F:AB:02:AA:2D:88:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 70.96.220.0/22 70.97.86.0/23 70.97.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:bd:d9:0c:78:d8:81:f6:0c:4d:e0:b6:d7:7e:4e:dd:03:d3: 8f:df:10:4a:a7:11:50:25:9d:7f:9b:cf:91:4f:e3:6a:e2:a5: e5:04:b0:8b:32:16:72:30:f2:b9:d7:0a:a6:e6:1d:a8:7a:50: 4d:29:b0:ca:a6:11:eb:45:3c:a8:cd:99:41:39:e9:07:4a:57: 16:3a:e3:87:06:07:91:49:b3:36:c4:74:fd:d7:92:f2:a4:63: e1:62:80:cc:ac:56:22:f8:d6:ae:52:e8:4a:32:39:b1:ef:5c: ef:d7:45:03:42:26:34:ef:b5:ad:dc:28:43:7a:93:cd:f1:f4: df:98:4d:7c:3c:b3:5f:b1:a1:7d:ce:d1:51:ff:fa:8f:07:1e: 85:6e:66:3c:6c:6b:93:62:bf:42:4b:19:c1:1e:23:1a:73:ec: da:5d:39:5d:f5:f8:65:53:45:26:e2:15:d4:65:db:1b:f2:4b: f7:b8:f1:18:6d:b2:4f:a7:04:60:97:68:43:19:81:c8:37:ad: 43:0c:00:f5:ed:c5:ca:be:8f:1d:70:db:97:38:21:fc:aa:5a: 81:dd:8c:54:9f:f8:ef:f2:0a:37:67:ee:3c:2c:92:7a:21:fc: fa:e6:33:54:26:fe:32:84:b7:eb:54:6b:db:24:f2:ac:25:cf: 35:72:d8:10 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEz0IiZHXIANy2OicMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk M2Y5OWEwYjktOWZmZC00ODI4LTg2ZjktN2RkZjg2NzVlNmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmoMPWuOj8L91Dky1XPYKT2HJRwsfsVM7pjd op0e6v7lpWy8Xhr3JP4LegUsybdw9UvUMsZyzrNb83UalkkTVusx8XdYfZjIsimB r6420iBNCNkVHJE30gkEd88ZFBVGGHbdAKpqbCieoaUgKRoQ+84dsKFn+Vy5ssiz WzihJ5cugL+uZ/U3x1a2WtBRN5xYvtyBr/LNcwDLmkNRjXOFgsjE3/Y42XBEcXHy 3uemRXVi9E8HXNXJMJdnhDUxmtHyjnm6gaJJE5WZ4P9O/SKSIPckN2ej4HnChg5F l1bYMdKT4Y5B1GFKyC9BUYb8FF17P9YX1SyrR9rCUPV5gZ8KAQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFCxPsK7SviJpnt4LCYxfqwKqLYheMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvYjI3OTlhZGEtMWVhZC0z YTlhLTljNTAtYjViMWFhNTdhZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCRmDcAwQB RmFWAwQBRmGGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIu92Qx42IH2DE3gttd+Tt0D04/fEEqnEVAlnX+b z5FP42ripeUEsIsyFnIw8rnXCqbmHah6UE0psMqmEetFPKjNmUE56QdKVxY644cG B5FJszbEdP3XkvKkY+FigMysViL41q5S6EoyObHvXO/XRQNCJjTvta3cKEN6k83x 9N+YTXw8s1+xoX3O0VH/+o8HHoVuZjxsa5Niv0JLGcEeIxpz7NpdOV31+GVTRSbi FdRl2xvyS/e48Rhtsk+nBGCXaEMZgcg3rUMMAPXtxcq+jx1w25c4IfyqWoHdjFSf +O/yCjdn7jwsknoh/PrmM1Qm/jKEt+tUa9sk8qwlzzVy2BA= -----END CERTIFICATE-----Generated at Mon Mar 2 16:33:34 2026 by rpki-client