$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/df5c18b1-7d04-39af-97a4-da803d7e85ff.roa File: df5c18b1-7d04-39af-97a4-da803d7e85ff.roa (raw, json) Hash identifier: SgbXj6PtNOg7Enjd2Z6hgpY5zMSKJTExcgzfy4m1GYE= Subject key identifier: 1A:E4:2C:05:1C:9C:CC:48:76:E9:90:87:AB:53:A4:74:8B:35:46:18 Certificate issuer: /CN=e1a5b703-5dea-47f1-b708-67940244b847 Certificate serial: 010D0C9F4328584CEBC22E5E9BF2F99D1E1F2C80 Authority key identifier: 5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/df5c18b1-7d04-39af-97a4-da803d7e85ff.roa Signing time: Fri 20 Feb 2026 02:00:32 +0000 ROA not before: Fri 20 Feb 2026 02:00:32 +0000 ROA not after: Thu 21 May 2026 01:00:32 +0000 asID: 40264 IP address blocks: 199.15.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:eb:c2:2e:5e:9b:f2:f9:9d:1e:1f:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1a5b703-5dea-47f1-b708-67940244b847 Validity Not Before: Feb 20 02:00:32 2026 GMT Not After : May 21 01:00:32 2026 GMT Subject: CN=b1ee4243-7240-4fee-b5e7-167601c1110e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e9:54:81:ce:19:aa:3a:83:d1:94:8b:53:1d: bc:3b:d2:45:a4:ce:6f:93:b6:17:d1:16:3c:02:6e: d2:98:49:ae:9f:06:4a:1f:1a:5c:a3:33:f8:c6:94: 0c:07:a8:23:3e:88:87:61:36:24:fd:cf:77:be:12: 42:f9:41:cf:81:ff:d6:d8:45:e2:4a:4f:3e:11:10: d2:79:4a:a2:98:72:2e:7a:1b:84:59:b7:e4:f7:69: a6:2e:be:6d:c8:b9:7d:6c:ca:35:66:ca:ce:09:c2: 6b:66:09:c3:b8:0d:99:7a:1f:d7:4b:45:8b:a2:31: 70:e0:78:37:1d:48:a6:5f:c0:13:5c:5f:40:ed:5f: b9:c3:b0:81:02:25:2a:ce:e5:6d:10:b7:32:2e:87: b6:1a:96:2a:6e:82:b9:35:9a:de:89:05:6e:03:da: f7:9a:0d:1e:3c:2f:e6:20:0b:28:72:64:11:90:75: 98:e3:53:e4:0b:01:2b:ba:cc:0a:e5:37:1f:c9:f9: 89:a7:3f:9b:f7:c1:7d:fa:57:82:d4:6f:b4:36:14: 08:79:46:20:9f:83:76:dd:ce:4a:ec:ee:f8:27:57: bf:9c:72:a1:19:16:ac:c5:62:50:a9:5a:85:e7:17: 68:ac:ea:00:1a:14:51:7a:8a:83:b2:54:b2:4f:05: a9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E4:2C:05:1C:9C:CC:48:76:E9:90:87:AB:53:A4:74:8B:35:46:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/df5c18b1-7d04-39af-97a4-da803d7e85ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.crl X509v3 Authority Key Identifier: keyid:5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer sbgp-ipAddrBlock: critical IPv4: 199.15.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:7c:ca:c4:c4:c9:06:80:c8:9b:b6:c6:54:c3:ca:f6:28:b9: b5:44:f2:20:61:60:cb:cc:1b:f2:e3:bc:02:e1:10:6b:58:1b: ff:13:1e:8d:61:35:11:0a:3a:ee:4b:bb:a2:69:93:ae:5f:26: ac:ca:5e:a8:18:3b:52:58:2d:8f:72:14:71:fb:9f:79:a6:f4: a0:39:a9:c3:dd:00:12:4a:34:3e:0d:cc:fa:8c:7d:b9:0f:d7: ea:46:a4:71:6b:82:fd:c8:5f:aa:5a:a2:9c:86:91:37:f2:fd: af:77:6f:4b:66:32:3e:7b:33:6b:04:68:59:7f:47:0c:46:ae: 90:2b:a7:16:fd:f3:4b:dd:f0:26:63:75:10:86:84:24:34:e9: 73:be:80:aa:20:90:d6:9a:4e:93:32:26:dc:01:aa:29:5e:2e: ac:a3:04:60:71:a8:c4:31:3b:7a:26:35:c7:e9:04:b1:3e:83: 80:44:ec:24:80:56:6c:18:87:c6:af:e3:12:75:c7:e7:ba:17: 57:65:de:8a:44:d4:3b:af:0a:cf:ca:b4:7c:c9:77:c3:27:ec: 71:3b:4d:03:62:e4:f7:c7:74:25:2a:d6:48:58:bb:fd:b3:2f: 44:a2:8e:7c:78:ca:bd:03:6e:e8:bc:7a:8c:31:12:67:3a:77: 9e:3e:f2:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrwi5em/L5nR4fLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTFhNWI3MDMtNWRlYS00N2YxLWI3MDgtNjc5NDAyNDRi ODQ3MB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk YjFlZTQyNDMtNzI0MC00ZmVlLWI1ZTctMTY3NjAxYzExMTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOlUgc4ZqjqD0ZSLUx28O9JFpM5vk7YX0RY8 Am7SmEmunwZKHxpcozP4xpQMB6gjPoiHYTYk/c93vhJC+UHPgf/W2EXiSk8+ERDS eUqimHIuehuEWbfk92mmLr5tyLl9bMo1ZsrOCcJrZgnDuA2Zeh/XS0WLojFw4Hg3 HUimX8ATXF9A7V+5w7CBAiUqzuVtELcyLoe2GpYqboK5NZreiQVuA9r3mg0ePC/m IAsocmQRkHWY41PkCwEruswK5TcfyfmJpz+b98F9+leC1G+0NhQIeUYgn4N23c5K 7O74J1e/nHKhGRasxWJQqVqF5xdorOoAGhRReoqDslSyTwWpiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrkLAUcnMxIdumQh6tTpHSLNUYYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMWE1 YjcwMy01ZGVhLTQ3ZjEtYjcwOC02Nzk0MDI0NGI4NDcvZGY1YzE4YjEtN2QwNC0z OWFmLTk3YTQtZGE4MDNkN2U4NWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTFhNWI3MDMtNWRlYS00N2YxLWI3 MDgtNjc5NDAyNDRiODQ3L2UxYTViNzAzLTVkZWEtNDdmMS1iNzA4LTY3OTQwMjQ0 Yjg0Ny5jcmwwHwYDVR0jBBgwFoAUXoxDOPofuUOl7dK+p+GAarbQwv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMWE1YjcwMy01ZGVhLTQ3ZjEtYjcwOC02Nzk0 MDI0NGI4NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxw/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE98ysTEyQaAyJu2xlTDyvYoubVE8iBhYMvMG/LjvALhEGtYG/8THo1h NREKOu5Lu6Jpk65fJqzKXqgYO1JYLY9yFHH7n3mm9KA5qcPdABJKND4NzPqMfbkP 1+pGpHFrgv3IX6paopyGkTfy/a93b0tmMj57M2sEaFl/RwxGrpArpxb980vd8CZj dRCGhCQ06XO+gKogkNaaTpMyJtwBqileLqyjBGBxqMQxO3omNcfpBLE+g4BE7CSA VmwYh8av4xJ1x+e6F1dl3opE1DuvCs/KtHzJd8Mn7HE7TQNi5PfHdCUq1khYu/2z L0Sijnx4yr0Dbui8eowxEmc6d54+8nE= -----END CERTIFICATE-----Generated at Mon Mar 2 17:40:44 2026 by rpki-client