$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/26943e87-39ab-3b24-8913-0c7e660bdac3.roa File: 26943e87-39ab-3b24-8913-0c7e660bdac3.roa (raw, json) Hash identifier: kmGAhuUv5rQU8zH4Buxlh8npGKq1G5NgaFkdq3cxd04= Subject key identifier: F1:A9:2D:41:32:2F:D2:CA:B8:C7:6A:45:A1:99:16:DF:A3:21:33:09 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE8221F37BE251A5A378400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/26943e87-39ab-3b24-8913-0c7e660bdac3.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 21508 IP address blocks: 70.88.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e8:22:1f:37:be:25:1a:5a:37:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=26a255e5-c6b3-413d-bda0-b9c384f40fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a3:37:ad:76:d4:9b:93:4b:b3:f1:2d:97:0b: f2:98:ec:25:93:64:24:ff:30:08:b2:0e:64:2c:88: 85:cc:11:df:b0:73:87:16:e0:80:6a:b7:25:fd:88: a3:ab:85:1b:67:23:b7:4c:16:ab:0c:36:0e:60:2a: da:36:b3:80:3f:72:04:80:05:85:54:2c:f1:83:8e: e4:b7:eb:dd:79:6e:81:08:07:7a:01:1e:8f:eb:3d: 70:4a:8d:c8:a7:70:38:d9:e7:11:43:e1:dc:70:b3: 97:c8:7b:5e:14:dc:80:06:e6:3e:e6:58:af:fb:d9: 7e:b4:40:92:87:36:b8:dd:e8:7e:cd:35:c2:d7:02: 55:05:c4:21:69:a9:d4:8c:83:70:f9:e0:4b:d7:7b: ca:9f:f5:38:19:d4:5c:fa:43:26:f5:a9:53:eb:1d: 25:f0:77:2f:77:91:e1:22:7c:81:d4:73:01:b7:3f: 0d:87:a4:89:c1:94:b3:bb:9c:14:f2:d8:52:15:f2: b6:cf:5b:d9:a0:22:a2:f2:2b:37:bd:a9:ab:9b:57: 1f:73:87:67:96:1b:7c:de:02:f3:d9:78:96:ad:ad: 23:ff:6e:8c:4f:ac:d2:09:ad:a2:4e:6f:5e:bb:c8: 86:40:eb:3a:27:e9:8d:8f:e9:4f:da:83:84:d8:47: 80:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A9:2D:41:32:2F:D2:CA:B8:C7:6A:45:A1:99:16:DF:A3:21:33:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/26943e87-39ab-3b24-8913-0c7e660bdac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.88.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:5f:ea:80:f5:e7:19:b8:54:a8:9a:f8:7a:b8:9f:7d:57:e2: 04:8b:4f:b8:21:4a:ad:fb:6c:e1:0e:e4:f6:93:fd:39:76:0b: 74:84:b7:9d:87:4b:b0:87:98:e9:83:99:53:fa:02:85:66:73: b0:c2:e1:39:dd:44:30:1a:9f:24:37:b0:5e:76:fd:9d:8e:9c: ee:da:b3:57:b8:54:1e:dc:a0:58:91:9a:e5:9d:60:8e:56:0a: 25:9a:50:de:ee:f7:66:8e:e9:8b:ea:d4:d9:fb:d7:9a:6a:11: 3c:b3:3c:92:9c:e1:54:64:d1:36:31:ac:05:c5:f0:83:56:85: 56:7e:20:d8:88:0e:e0:61:00:bb:4a:b4:ac:ca:22:be:01:45: e2:21:85:54:31:0a:5f:bc:07:11:bc:34:3c:4a:db:bd:48:be: 1e:e6:85:96:7d:c4:1b:2b:b2:c9:b4:f5:d5:dc:77:a0:a0:e5: 88:d4:51:88:f0:4f:8e:ac:9f:1a:20:7b:62:2c:d7:1f:32:4b: ac:ab:4d:29:dd:2c:a3:8e:75:de:5f:26:6c:54:ba:d3:69:1b: 7a:6d:03:2c:1f:a6:f0:4d:81:da:fd:c6:85:53:3b:a3:4c:70: 5c:bc:a4:ce:92:3b:0f:37:ab:3d:58:e3:6d:4b:8c:4d:59:99: b0:cf:84:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96CIfN74lGlo3hAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk MjZhMjU1ZTUtYzZiMy00MTNkLWJkYTAtYjljMzg0ZjQwZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6M3rXbUm5NLs/EtlwvymOwlk2Qk/zAIsg5k LIiFzBHfsHOHFuCAarcl/Yijq4UbZyO3TBarDDYOYCraNrOAP3IEgAWFVCzxg47k t+vdeW6BCAd6AR6P6z1wSo3Ip3A42ecRQ+HccLOXyHteFNyABuY+5liv+9l+tECS hza43eh+zTXC1wJVBcQhaanUjINw+eBL13vKn/U4GdRc+kMm9alT6x0l8Hcvd5Hh InyB1HMBtz8Nh6SJwZSzu5wU8thSFfK2z1vZoCKi8is3vamrm1cfc4dnlht83gLz 2XiWra0j/26MT6zSCa2iTm9eu8iGQOs6J+mNj+lP2oOE2EeArwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGpLUEyL9LKuMdqRaGZFt+jITMJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjY5NDNlODctMzlhYi0z YjI0LTg5MTMtMGM3ZTY2MGJkYWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRlioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpf6oD15xm4VKia+Hq4n31X4gSLT7ghSq37bOEO5PaT/Tl2C3SEt52H S7CHmOmDmVP6AoVmc7DC4TndRDAanyQ3sF52/Z2OnO7as1e4VB7coFiRmuWdYI5W CiWaUN7u92aO6Yvq1Nn715pqETyzPJKc4VRk0TYxrAXF8INWhVZ+INiIDuBhALtK tKzKIr4BReIhhVQxCl+8BxG8NDxK271Ivh7mhZZ9xBsrssm09dXcd6Cg5YjUUYjw T46snxoge2Is1x8yS6yrTSndLKOOdd5fJmxUutNpG3ptAywfpvBNgdr9xoVTO6NM cFy8pM6SOw83qz1Y421LjE1ZmbDPhPY= -----END CERTIFICATE-----Generated at Sun Mar 1 19:04:09 2026 by rpki-client