$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/2bd2aa2b-386d-3371-9575-5cff32c94aa5.roa File: 2bd2aa2b-386d-3371-9575-5cff32c94aa5.roa (raw, json) Hash identifier: 22nRyBu+2kdmhnysmotxdTtkXB+bUVvEmKzx8T2Uj+k= Subject key identifier: 86:5D:04:00:92:67:65:F9:82:5B:DE:92:5A:B4:8C:80:EB:58:42:12 Certificate issuer: /CN=0a2d75f1-8f4b-49d3-9661-209643086151 Certificate serial: 010D0C9F4328584CFDE7AE174D148D551CFC2C80 Authority key identifier: 0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/2bd2aa2b-386d-3371-9575-5cff32c94aa5.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 397606 IP address blocks: 66.118.49.0/24 maxlen: 24 130.51.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e7:ae:17:4d:14:8d:55:1c:fc:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a2d75f1-8f4b-49d3-9661-209643086151 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=31f9a4a6-95bd-4b87-a8d6-75cf66f6c282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:15:c0:56:12:17:1e:21:35:e9:8d:9c:d0:7b: aa:e7:b0:51:4e:19:ce:de:df:cb:0f:f5:61:d9:84: ab:0c:0b:bb:81:6f:ae:4b:2a:e2:b9:91:04:e5:f0: e1:a0:06:4b:48:f7:53:90:ad:b7:c1:0f:6f:50:1d: 72:b8:99:63:60:39:ab:71:a9:76:5e:03:56:ea:ae: d1:45:83:fd:13:d2:43:36:76:bf:7c:e5:53:2d:64: ed:54:12:7d:3a:2b:ae:e8:30:29:ad:48:11:27:45: ff:33:db:50:d0:d8:1f:63:cc:57:2d:d7:46:b9:7e: 6c:a9:f1:ff:bd:d2:c2:a5:eb:61:1b:90:04:64:b4: 50:79:3e:0b:6d:c2:73:fb:89:a9:da:12:46:9d:93: 8d:d0:2c:a6:4c:fa:11:17:4f:28:62:1a:b6:8c:70: 2c:13:12:95:42:b1:04:29:b3:8d:6d:21:07:56:e1: 58:61:e5:da:46:b8:1f:43:ce:cd:52:29:ad:4b:a6: 47:e0:96:51:f3:56:d2:48:41:b7:69:b1:7c:35:df: eb:db:27:19:e2:44:05:06:e9:d7:1e:31:02:f9:d8: 07:0c:6c:47:0f:db:4a:9e:71:ec:c7:fa:bb:22:d4: 09:fb:fe:48:d4:e7:f4:30:6d:aa:0f:70:09:99:23: a2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5D:04:00:92:67:65:F9:82:5B:DE:92:5A:B4:8C:80:EB:58:42:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/2bd2aa2b-386d-3371-9575-5cff32c94aa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl X509v3 Authority Key Identifier: keyid:0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer sbgp-ipAddrBlock: critical IPv4: 66.118.49.0/24 130.51.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:9c:2f:6e:e3:42:bd:1d:e9:8f:07:a0:70:4b:00:08:c2:9a: 4a:33:6b:b1:ad:51:f7:c8:62:10:9e:4b:da:9e:c6:ea:f9:88: 24:2d:ce:99:15:80:e6:fa:36:c8:cb:a8:12:33:c7:ba:e7:8f: fd:64:1d:00:8b:0f:bf:c5:03:da:80:df:ff:a4:08:80:93:70: 64:13:a8:c1:ba:28:ac:b3:c7:a7:eb:f2:6d:eb:45:bf:87:61: 9d:ca:e2:89:03:af:74:49:e7:b4:ef:80:b0:8b:04:cc:4e:7d: 91:43:f1:ac:91:e6:1b:dd:fc:e1:db:c6:78:a4:a4:23:5c:ac: 1b:68:af:b8:05:bd:01:08:ab:2d:a5:f5:8c:40:b4:69:a3:75: 4d:63:68:44:87:de:28:ba:99:8f:10:92:0c:fa:15:84:2d:28: 12:ca:40:5f:92:57:83:00:ad:ff:c5:f2:66:c8:d4:20:74:c9: a2:df:fa:86:f7:a1:2d:0a:00:c2:80:5d:10:d4:12:97:09:37: 8e:9e:0e:39:1e:25:95:00:d5:16:81:f3:52:a8:99:78:14:43: ed:1e:8d:ac:1f:98:da:74:51:4c:8b:0a:54:88:6c:35:77:3f: 45:76:a1:52:ec:d8:68:54:b4:86:e4:97:bc:e8:ff:ec:30:ee: f9:10:10:d6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEz9564XTRSNVRz8LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGEyZDc1ZjEtOGY0Yi00OWQzLTk2NjEtMjA5NjQzMDg2 MTUxMB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk MzFmOWE0YTYtOTViZC00Yjg3LWE4ZDYtNzVjZjY2ZjZjMjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohXAVhIXHiE16Y2c0Huq57BRThnO3t/LD/Vh 2YSrDAu7gW+uSyriuZEE5fDhoAZLSPdTkK23wQ9vUB1yuJljYDmrcal2XgNW6q7R RYP9E9JDNna/fOVTLWTtVBJ9Oiuu6DAprUgRJ0X/M9tQ0NgfY8xXLddGuX5sqfH/ vdLCpethG5AEZLRQeT4LbcJz+4mp2hJGnZON0CymTPoRF08oYhq2jHAsExKVQrEE KbONbSEHVuFYYeXaRrgfQ87NUimtS6ZH4JZR81bSSEG3abF8Nd/r2ycZ4kQFBunX HjEC+dgHDGxHD9tKnnHsx/q7ItQJ+/5I1Of0MG2qD3AJmSOi5QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIZdBACSZ2X5glveklq0jIDrWEISMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTJk NzVmMS04ZjRiLTQ5ZDMtOTY2MS0yMDk2NDMwODYxNTEvMmJkMmFhMmItMzg2ZC0z MzcxLTk1NzUtNWNmZjMyYzk0YWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGEyZDc1ZjEtOGY0Yi00OWQzLTk2 NjEtMjA5NjQzMDg2MTUxLzBhMmQ3NWYxLThmNGItNDlkMy05NjYxLTIwOTY0MzA4 NjE1MS5jcmwwHwYDVR0jBBgwFoAUDbM8/J5AXR7QSu6z+vGosBd4TH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTJkNzVmMS04ZjRiLTQ5ZDMtOTY2MS0yMDk2 NDMwODYxNTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQnYxAwQC gjOYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG+cL27jQr0d6Y8HoHBLAAjCmkoza7GtUffIYhCeS9qexur5 iCQtzpkVgOb6NsjLqBIzx7rnj/1kHQCLD7/FA9qA3/+kCICTcGQTqMG6KKyzx6fr 8m3rRb+HYZ3K4okDr3RJ57TvgLCLBMxOfZFD8ayR5hvd/OHbxnikpCNcrBtor7gF vQEIqy2l9YxAtGmjdU1jaESH3ii6mY8Qkgz6FYQtKBLKQF+SV4MArf/F8mbI1CB0 yaLf+ob3oS0KAMKAXRDUEpcJN46eDjkeJZUA1RaB81KomXgUQ+0ejawfmNp0UUyL ClSIbDV3P0V2oVLs2GhUtIbkl7zo/+ww7vkQENY= -----END CERTIFICATE-----Generated at Mon Mar 2 17:08:48 2026 by rpki-client