$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/293865fd-1b3f-3bf3-8129-d4e42800588a.roa File: 293865fd-1b3f-3bf3-8129-d4e42800588a.roa (raw, json) Hash identifier: SapHSMGnRTO4yRhDKtmGOpvLWuh/1zn471pjdedt9+c= Subject key identifier: 44:BB:34:B4:AC:12:EC:72:4B:E1:45:88:72:FE:6D:72:12:FD:10:03 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE8289637243EDF32D1C2C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/293865fd-1b3f-3bf3-8129-d4e42800588a.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 22258 IP address blocks: 66.208.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e8:28:96:37:24:3e:df:32:d1:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=56270b9c-1aa9-4473-bd8e-90c6ba103f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8b:13:d6:8c:45:12:76:df:dd:41:2c:f1:09: d5:d8:83:bd:55:9c:f2:80:94:10:02:0a:e8:82:ac: 84:1e:ea:64:54:ba:68:07:19:fd:14:59:87:39:2d: b4:a6:89:85:f5:1d:e7:9a:bc:3c:b5:c7:1c:60:23: 54:f7:a2:0c:e0:c4:45:b8:ad:ab:76:17:02:ce:7a: 4f:8b:8a:c9:71:31:02:4b:63:e6:54:e9:39:1c:ca: e1:64:97:cf:37:4a:ac:18:9b:c6:cb:6b:11:09:aa: d0:12:20:17:2e:2f:4f:27:6b:11:a8:03:51:53:db: f8:a2:86:65:5f:9d:3c:d5:43:5a:78:4b:62:24:3c: bc:05:62:60:82:c0:5f:33:5d:b9:bb:58:fd:16:72: d7:1f:a3:93:d3:fa:23:e5:2b:c5:71:18:b3:6e:05: a3:b8:ee:70:fb:cd:7e:4c:72:f6:79:65:81:84:41: 06:04:10:69:91:2a:f7:31:12:dc:6f:92:77:11:39: a5:d5:94:5d:2d:b1:34:e0:b9:43:5d:55:81:8d:a9: 1d:af:49:37:62:47:d1:a0:0b:ec:5e:cc:33:d4:04: 37:b7:cc:a5:74:61:51:4c:d3:ec:47:b7:4f:0b:63: 2b:32:b5:e6:c3:46:4a:ae:26:33:ce:a1:1c:33:98: 1f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BB:34:B4:AC:12:EC:72:4B:E1:45:88:72:FE:6D:72:12:FD:10:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/293865fd-1b3f-3bf3-8129-d4e42800588a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 66.208.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:82:f7:3a:9a:9b:8a:44:9e:7d:6b:e0:df:5f:ee:33:49:ff: 94:b6:a7:ae:c3:2a:94:78:ad:b0:99:43:3a:a2:01:e9:b1:0e: 1b:f5:20:28:29:cc:54:48:3a:e5:72:1a:b2:31:ac:0f:1a:ad: 85:a0:a3:d4:2b:5c:37:2c:b7:06:2a:1c:d1:4f:bf:31:f1:97: 75:0e:95:02:e0:ba:06:81:f7:ec:be:f7:cc:e3:be:7c:84:ec: 74:49:1f:49:d4:25:13:f0:bc:98:65:4e:e3:cc:38:bb:ee:b2: 46:b1:3c:61:8d:b7:39:0a:6e:fe:43:43:00:28:99:e6:c6:92: 70:62:35:4e:ef:de:35:ed:37:d3:fb:ff:73:1a:7c:4c:e1:85: 3c:38:13:f7:29:f6:90:b4:86:31:ec:7d:00:6a:6f:12:ce:50: 5f:f4:b5:c1:93:ab:55:eb:09:96:9c:f0:e4:ee:02:e0:c1:c0: b6:9f:ab:c3:24:12:1c:b7:47:29:54:c3:c1:bf:bf:d9:cd:f4: 91:73:27:80:40:3b:7c:7b:c2:32:0d:c3:ca:de:4f:86:70:9f: 78:a5:7f:4b:f8:4a:ff:76:66:ec:9c:23:3b:f7:dc:e7:eb:3a: 36:9f:fe:61:f3:6b:f4:f5:78:cb:61:4f:32:98:d2:08:f0:a5: 2e:8d:42:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96CiWNyQ+3zLRwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk NTYyNzBiOWMtMWFhOS00NDczLWJkOGUtOTBjNmJhMTAzZjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsosT1oxFEnbf3UEs8QnV2IO9VZzygJQQAgro gqyEHupkVLpoBxn9FFmHOS20pomF9R3nmrw8tcccYCNU96IM4MRFuK2rdhcCznpP i4rJcTECS2PmVOk5HMrhZJfPN0qsGJvGy2sRCarQEiAXLi9PJ2sRqANRU9v4ooZl X5081UNaeEtiJDy8BWJggsBfM125u1j9FnLXH6OT0/oj5SvFcRizbgWjuO5w+81+ THL2eWWBhEEGBBBpkSr3MRLcb5J3ETml1ZRdLbE04LlDXVWBjakdr0k3YkfRoAvs Xswz1AQ3t8yldGFRTNPsR7dPC2MrMrXmw0ZKriYzzqEcM5gfcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFES7NLSsEuxyS+FFiHL+bXIS/RADMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjkzODY1ZmQtMWIzZi0z YmYzLTgxMjktZDRlNDI4MDA1ODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqC9zqam4pEnn1r4N9f7jNJ/5S2p67DKpR4rbCZQzqiAemxDhv1ICgp zFRIOuVyGrIxrA8arYWgo9QrXDcstwYqHNFPvzHxl3UOlQLgugaB9+y+98zjvnyE 7HRJH0nUJRPwvJhlTuPMOLvuskaxPGGNtzkKbv5DQwAomebGknBiNU7v3jXtN9P7 /3MafEzhhTw4E/cp9pC0hjHsfQBqbxLOUF/0tcGTq1XrCZac8OTuAuDBwLafq8Mk Ehy3RylUw8G/v9nN9JFzJ4BAO3x7wjINw8reT4Zwn3ilf0v4Sv92ZuycIzv33Ofr Ojaf/mHza/T1eMthTzKY0gjwpS6NQuQ= -----END CERTIFICATE-----Generated at Sun Mar 1 18:39:37 2026 by rpki-client