$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1e04535b-d086-34a9-8637-4a3090cb4ca1.roa File: 1e04535b-d086-34a9-8637-4a3090cb4ca1.roa (raw, json) Hash identifier: Nzu3q2M7WbOC32AC8q5ma5VxcMA8TRJ9iEXiA04kU8U= Subject key identifier: 39:EF:57:16:9E:22:24:CB:7B:0D:E5:51:C8:26:84:5A:F3:5C:D4:A0 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584CDF32742415A6DABF07335600 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1e04535b-d086-34a9-8637-4a3090cb4ca1.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 3356 IP address blocks: 204.167.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:74:24:15:a6:da:bf:07:33:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=f1216398-2596-4abe-993c-2b475732c2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c6:f1:e5:62:02:7e:73:ab:3d:3e:05:35:52: 2f:ba:30:c6:b0:18:79:e7:2b:24:54:56:49:c2:8b: fa:17:d5:45:13:27:91:2c:58:3f:5f:03:d2:95:d9: 98:7d:e7:aa:e2:25:47:6f:fd:91:c2:e3:69:81:37: 78:39:fe:ab:31:4f:1d:72:63:93:f6:60:18:83:b7: e6:20:f9:38:e4:e6:cb:c8:0c:5e:95:f0:85:9c:e5: 79:31:0b:2f:ed:dd:f0:f0:9e:fd:8c:68:e0:f1:48: 18:8c:c8:72:04:2e:92:54:9c:43:2c:cc:75:39:26: 41:9e:f5:f6:50:67:9b:11:82:82:98:30:bf:f4:66: d7:2a:3b:8a:b7:d6:d7:48:c9:4f:8c:16:f9:d8:5d: 42:31:d4:82:ef:db:12:ad:4f:55:c5:c3:18:76:c7: 6f:a6:31:60:9d:98:3f:5e:89:48:60:a3:08:45:7a: 92:83:89:23:d5:00:7a:b6:b5:88:90:6e:e7:d7:29: 3f:94:17:2b:a7:20:9d:f1:73:47:74:cf:c3:f3:95: 20:5e:2d:30:cd:2d:e5:3b:68:aa:b0:f4:ee:f5:45: 8f:08:44:d4:7b:e3:e2:d5:3e:7e:63:dd:c3:46:53: cc:e6:f1:5a:59:77:0a:4b:7b:83:7d:69:6c:7b:13: 62:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EF:57:16:9E:22:24:CB:7B:0D:E5:51:C8:26:84:5A:F3:5C:D4:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1e04535b-d086-34a9-8637-4a3090cb4ca1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 204.167.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:b8:05:97:ce:c7:9e:ce:55:c2:2c:cf:a9:29:a0:3c:1b:79: fd:79:9b:b2:fc:91:78:f0:d4:36:8f:65:2c:c0:a7:30:cf:be: 82:a2:52:4b:6e:34:9f:52:a1:8b:6c:9a:b7:a1:c4:e4:c3:03: 06:d2:e4:7c:10:57:40:28:e8:1b:02:c0:fe:7e:f3:53:3f:32: f7:66:8a:bd:6d:d2:88:7f:22:e5:46:5b:1f:77:0e:31:4d:b6: af:a8:bd:6a:0a:4c:07:83:bc:51:3a:e6:88:94:82:b7:e2:89: d9:61:a1:c9:9e:3b:79:a7:6d:1b:5d:9c:c4:cd:c9:49:19:43: 08:68:5c:5b:15:6d:52:52:f4:0e:19:3f:5c:2c:1d:9b:1f:9b: 80:a2:99:6a:9a:37:b3:1f:37:44:c7:d3:c4:b3:1f:fd:2f:41: 8b:8b:55:d3:11:5a:1d:fe:19:66:6e:c5:57:0e:c8:ff:ef:6b: cc:38:1f:cc:f2:84:d5:88:8f:99:b7:18:1a:bb:2d:b2:d2:95: ae:f9:94:84:5d:60:5d:90:e9:ce:99:cb:80:17:f7:b0:68:50: a5:6c:5a:a6:10:01:35:52:2d:33:2f:a3:45:89:a3:7e:fa:e6: 93:84:1e:24:a0:2b:72:f6:75:fe:3d:92:09:9a:15:0d:a8:b5: 34:12:3d:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMnQkFabavwczVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk ZjEyMTYzOTgtMjU5Ni00YWJlLTk5M2MtMmI0NzU3MzJjMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMbx5WICfnOrPT4FNVIvujDGsBh55yskVFZJ wov6F9VFEyeRLFg/XwPSldmYfeeq4iVHb/2RwuNpgTd4Of6rMU8dcmOT9mAYg7fm IPk45ObLyAxelfCFnOV5MQsv7d3w8J79jGjg8UgYjMhyBC6SVJxDLMx1OSZBnvX2 UGebEYKCmDC/9GbXKjuKt9bXSMlPjBb52F1CMdSC79sSrU9VxcMYdsdvpjFgnZg/ XolIYKMIRXqSg4kj1QB6trWIkG7n1yk/lBcrpyCd8XNHdM/D85UgXi0wzS3lO2iq sPTu9UWPCETUe+Pi1T5+Y93DRlPM5vFaWXcKS3uDfWlsexNiLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnvVxaeIiTLew3lUcgmhFrzXNSgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMWUwNDUzNWItZDA4Ni0z NGE5LTg2MzctNGEzMDkwY2I0Y2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzKfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+4BZfOx57OVcIsz6kpoDwbef15m7L8kXjw1DaPZSzApzDPvoKiUktu NJ9SoYtsmrehxOTDAwbS5HwQV0Ao6BsCwP5+81M/Mvdmir1t0oh/IuVGWx93DjFN tq+ovWoKTAeDvFE65oiUgrfiidlhocmeO3mnbRtdnMTNyUkZQwhoXFsVbVJS9A4Z P1wsHZsfm4CimWqaN7MfN0TH08SzH/0vQYuLVdMRWh3+GWZuxVcOyP/va8w4H8zy hNWIj5m3GBq7LbLSla75lIRdYF2Q6c6Zy4AX97BoUKVsWqYQATVSLTMvo0WJo376 5pOEHiSgK3L2df49kgmaFQ2otTQSPSw= -----END CERTIFICATE-----Generated at Mon Mar 2 19:09:24 2026 by rpki-client