$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/f7175e07-1420-33f1-98f2-96f8a3916e92.roa File: f7175e07-1420-33f1-98f2-96f8a3916e92.roa (raw, json) Hash identifier: rrkPnajS0P7TfFLNPV6HvhOA7gHBawPOgQI0bkwFXwk= Subject key identifier: 60:AA:DC:80:31:6E:2C:EE:FA:7B:2E:11:83:FB:09:DE:48:35:AC:90 Certificate issuer: /CN=e8253a5c-5822-44df-8846-56b6c0450bbe Certificate serial: 010D0C9F4328584CF85238086B1936B2C1EA1380 Authority key identifier: 8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/f7175e07-1420-33f1-98f2-96f8a3916e92.roa Signing time: Tue 24 Feb 2026 14:00:41 +0000 ROA not before: Tue 24 Feb 2026 14:00:41 +0000 ROA not after: Mon 25 May 2026 13:00:41 +0000 asID: 23036 IP address blocks: 158.222.80.0/20 maxlen: 20 158.222.80.0/23 maxlen: 23 158.222.82.0/23 maxlen: 23 158.222.84.0/23 maxlen: 23 158.222.86.0/23 maxlen: 23 158.222.88.0/24 maxlen: 24 158.222.89.0/24 maxlen: 24 158.222.90.0/24 maxlen: 24 158.222.91.0/24 maxlen: 24 158.222.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:52:38:08:6b:19:36:b2:c1:ea:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8253a5c-5822-44df-8846-56b6c0450bbe Validity Not Before: Feb 24 14:00:41 2026 GMT Not After : May 25 13:00:41 2026 GMT Subject: CN=3b0027aa-3c03-42ed-b2f0-e0b1f887ce64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:64:3e:2a:da:00:f8:15:ef:ed:8c:a3:dd:be: 20:37:ce:22:bf:eb:84:d8:5f:f6:4b:74:4c:f6:2c: 38:ec:eb:ef:89:19:12:7f:e6:1d:bf:c8:f3:94:c1: ce:5f:9c:9b:9a:85:12:4a:b8:da:de:f4:56:d1:f8: 36:a6:3f:a6:09:7f:97:48:c6:e0:ae:d0:69:f2:1a: 62:07:11:61:1a:ce:f7:c0:e1:7c:d0:d6:f0:12:8f: 16:9e:26:7c:ba:32:f2:c9:3a:f7:67:29:19:d3:f4: 64:bf:19:58:11:2c:3a:ea:a8:b5:ae:df:26:e0:05: 2e:a3:22:8e:16:d7:04:e2:2f:9b:dc:ec:95:51:6f: d5:f0:89:f1:58:da:43:66:28:45:f4:ac:1e:4a:58: 6b:b0:5b:39:9a:64:fd:05:64:65:3d:a8:e1:f7:c7: de:af:19:4e:4a:d3:38:ce:94:96:e5:64:a3:06:a4: 1e:9f:ea:5e:e7:ef:93:fb:5d:73:8b:97:87:ea:f0: 81:bb:ed:c1:4f:aa:85:0e:76:91:8f:bc:d7:0a:95: d0:14:4d:54:b2:e5:7d:58:8d:1d:8b:60:89:10:a7: c0:f7:ff:18:89:7f:db:f6:62:c8:1c:1a:eb:c9:60: ad:19:a2:80:e1:24:98:ec:12:0b:c5:71:59:f9:b8: 49:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AA:DC:80:31:6E:2C:EE:FA:7B:2E:11:83:FB:09:DE:48:35:AC:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/f7175e07-1420-33f1-98f2-96f8a3916e92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl X509v3 Authority Key Identifier: keyid:8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer sbgp-ipAddrBlock: critical IPv4: 158.222.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:87:67:91:21:34:c7:1d:03:dd:7c:33:92:c4:2f:6b:f6:38: 47:b5:75:40:94:ee:c2:f2:1f:13:d1:34:25:95:92:fd:95:a4: 33:f2:55:cf:41:c9:0e:36:24:a0:f2:90:a3:65:2f:42:47:0b: 83:c2:10:55:5e:da:78:e6:fd:12:16:94:10:61:c4:3e:47:3b: e6:d7:28:21:0d:a6:bf:9e:73:a4:a3:c1:95:c6:08:00:ac:d2: 72:f4:c1:94:47:fc:a9:e3:98:fe:c5:a7:2c:94:dd:78:a1:4f: 5e:4c:0c:f7:b5:cd:a4:f0:b6:e0:9f:a3:82:d0:a8:75:98:35: 51:ef:2a:d4:19:0b:90:82:33:eb:0c:4c:bb:61:91:fb:02:d5: c2:68:28:b5:a3:44:70:03:95:3b:2b:f2:f7:bd:5a:77:6e:7d: 84:d7:7b:6b:ff:e1:68:c1:af:b1:58:2c:6f:0a:b8:33:7c:cf: b1:e9:45:1a:96:c4:24:33:16:fd:3c:ce:2d:dd:ff:7a:2f:3d: cb:ca:58:ca:7c:41:22:dd:f8:f0:9c:19:38:27:18:99:c1:b5: f1:92:65:fe:ed:f2:9d:c7:e7:ac:0b:23:8f:eb:14:cb:e7:6b: 6e:0a:7a:bc:b2:0a:c7:e5:33:2d:fd:b3:2d:b5:5b:50:b3:28: 92:21:b7:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4UjgIaxk2ssHqE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTgyNTNhNWMtNTgyMi00NGRmLTg4NDYtNTZiNmMwNDUw YmJlMB4XDTI2MDIyNDE0MDA0MVoXDTI2MDUyNTEzMDA0MVowLzEtMCsGA1UEAxMk M2IwMDI3YWEtM2MwMy00MmVkLWIyZjAtZTBiMWY4ODdjZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWQ+KtoA+BXv7Yyj3b4gN84iv+uE2F/2S3RM 9iw47OvviRkSf+Ydv8jzlMHOX5ybmoUSSrja3vRW0fg2pj+mCX+XSMbgrtBp8hpi BxFhGs73wOF80NbwEo8WniZ8ujLyyTr3ZykZ0/RkvxlYESw66qi1rt8m4AUuoyKO FtcE4i+b3OyVUW/V8InxWNpDZihF9KweSlhrsFs5mmT9BWRlPajh98ferxlOStM4 zpSW5WSjBqQen+pe5++T+11zi5eH6vCBu+3BT6qFDnaRj7zXCpXQFE1UsuV9WI0d i2CJEKfA9/8YiX/b9mLIHBrryWCtGaKA4SSY7BILxXFZ+bhJfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCq3IAxbizu+nsuEYP7Cd5INayQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lODI1 M2E1Yy01ODIyLTQ0ZGYtODg0Ni01NmI2YzA0NTBiYmUvZjcxNzVlMDctMTQyMC0z M2YxLTk4ZjItOTZmOGEzOTE2ZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTgyNTNhNWMtNTgyMi00NGRmLTg4 NDYtNTZiNmMwNDUwYmJlL2U4MjUzYTVjLTU4MjItNDRkZi04ODQ2LTU2YjZjMDQ1 MGJiZS5jcmwwHwYDVR0jBBgwFoAUjARRQe9lRA2Nvxc4Mhp+c0pN6gowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lODI1M2E1Yy01ODIyLTQ0ZGYtODg0Ni01NmI2 YzA0NTBiYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnt5QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaHZ5EhNMcdA918M5LEL2v2OEe1dUCU7sLyHxPRNCWVkv2VpDPyVc9B yQ42JKDykKNlL0JHC4PCEFVe2njm/RIWlBBhxD5HO+bXKCENpr+ec6SjwZXGCACs 0nL0wZRH/KnjmP7FpyyU3XihT15MDPe1zaTwtuCfo4LQqHWYNVHvKtQZC5CCM+sM TLthkfsC1cJoKLWjRHADlTsr8ve9WndufYTXe2v/4WjBr7FYLG8KuDN8z7HpRRqW xCQzFv08zi3d/3ovPcvKWMp8QSLd+PCcGTgnGJnBtfGSZf7t8p3H56wLI4/rFMvn a24KeryyCsflMy39sy21W1CzKJIht3c= -----END CERTIFICATE-----Generated at Mon Mar 2 17:12:20 2026 by rpki-client