$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/2fc97616-433c-34a4-a801-399ce469f872.roa File: 2fc97616-433c-34a4-a801-399ce469f872.roa (raw, json) Hash identifier: GJ8jTNn2qlgnLnZHzJKEIr6L2+LlOf3VstlId2f7iQ4= Subject key identifier: 0F:B7:7C:4F:5B:90:81:CC:7F:19:FD:9D:0C:F1:0E:F3:EA:F5:0F:33 Certificate issuer: /CN=7a5ea33b-ee80-42d8-8255-b0c61f28b06f Certificate serial: 010D0C9F4328584CC07C96033371CC4D99DDDD80 Authority key identifier: ED:CE:21:14:DF:3C:FC:0C:9B:AC:DB:57:D2:7B:BC:B3:D4:52:B2:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/2fc97616-433c-34a4-a801-399ce469f872.roa Signing time: Wed 04 Feb 2026 14:00:39 +0000 ROA not before: Wed 04 Feb 2026 14:00:39 +0000 ROA not after: Tue 05 May 2026 13:00:39 +0000 asID: 1299 IP address blocks: 162.222.20.0/22 maxlen: 24 192.40.220.0/22 maxlen: 24 198.241.12.0/22 maxlen: 24 2606:8c80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c0:7c:96:03:33:71:cc:4d:99:dd:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a5ea33b-ee80-42d8-8255-b0c61f28b06f Validity Not Before: Feb 4 14:00:39 2026 GMT Not After : May 5 13:00:39 2026 GMT Subject: CN=7da26288-c09f-4922-8f3c-c7e1e04931f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ca:0b:56:70:ce:f1:9b:61:ca:ea:08:71:d4: e5:37:26:17:79:51:8b:ee:f1:29:08:f1:f7:d5:3e: a3:26:e2:ab:5f:50:f2:ec:61:7f:72:c6:4f:a6:cd: 52:94:7e:f4:69:a3:eb:98:54:99:c5:a1:19:23:e9: c2:e4:db:f2:bf:e6:ce:31:69:71:67:a9:a2:ae:e8: af:97:b7:e2:71:2c:7b:de:fa:4d:ef:4c:89:5d:47: f6:02:c9:84:8b:0f:db:23:54:1f:24:c3:4c:69:bc: 16:15:c3:5a:48:88:a7:5d:55:80:4c:cc:5f:dd:3a: d3:83:28:e1:c4:9b:26:5c:7c:05:21:ab:6a:80:d1: b6:ee:b0:5b:32:e2:8f:23:3a:7c:2a:e0:83:e6:a2: 4b:3e:b9:37:d8:3b:b0:a6:93:df:e9:64:00:e0:93: 01:c6:ec:03:8e:97:96:d6:9b:10:d4:04:0d:62:ea: 7f:f2:b9:02:db:a2:68:41:f5:dd:61:b5:59:94:5f: e1:8d:07:51:1f:7a:2a:c7:bb:71:51:b9:35:a3:08: 39:29:cb:c1:f7:4f:ed:96:83:8c:9c:61:7b:93:9b: 08:e6:a3:63:e3:4d:1d:aa:ef:59:44:ed:99:0d:67: ad:92:25:f5:9d:97:f5:36:5d:57:62:03:c8:c2:e3: a0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B7:7C:4F:5B:90:81:CC:7F:19:FD:9D:0C:F1:0E:F3:EA:F5:0F:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/2fc97616-433c-34a4-a801-399ce469f872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.crl X509v3 Authority Key Identifier: keyid:ED:CE:21:14:DF:3C:FC:0C:9B:AC:DB:57:D2:7B:BC:B3:D4:52:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.cer sbgp-ipAddrBlock: critical IPv4: 162.222.20.0/22 192.40.220.0/22 198.241.12.0/22 IPv6: 2606:8c80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:69:25:87:68:7d:b0:fb:f5:62:a6:ce:d6:a6:66:8f:8e:f5: 80:60:a4:fd:44:a2:f5:8f:7b:2f:a2:98:25:e8:54:b3:fd:29: 1e:70:99:89:f3:e3:57:c7:11:eb:b9:f1:f8:c0:5b:82:9a:99: 16:9d:9b:c7:64:94:23:39:0f:90:56:1c:cd:4e:4a:59:8f:09: b3:e7:0a:e2:55:88:ed:6e:f8:62:82:a7:43:10:24:7a:e3:1e: 56:f6:5b:0a:c8:34:65:7a:8c:47:4a:47:02:a6:ce:52:4e:14: e6:88:9f:0f:14:0d:e6:0d:06:5e:b5:44:db:40:5b:d5:f7:9a: 37:91:c0:21:f7:07:e3:5d:82:fa:e8:5c:94:10:14:58:0e:3f: 1c:7f:84:44:d4:65:a0:c5:94:18:00:67:b7:30:09:49:63:7a: 8f:d0:d8:44:1c:b8:39:e1:ca:68:f2:de:1a:e9:46:d4:03:b5: 44:60:0e:c6:df:37:ff:1a:85:44:3d:db:c9:90:42:df:b1:d7: 68:23:fe:ca:ff:89:46:eb:aa:c4:5b:bb:7d:9f:a0:ea:90:15: 5e:54:a9:13:95:3a:35:32:fd:ec:f4:74:67:e3:1f:48:41:e5: f4:88:a0:a2:86:43:9e:14:82:4d:28:12:0c:88:7e:af:d2:26: d8:0e:7b:4a -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEzAfJYDM3HMTZnd3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E1ZWEzM2ItZWU4MC00MmQ4LTgyNTUtYjBjNjFmMjhi MDZmMB4XDTI2MDIwNDE0MDAzOVoXDTI2MDUwNTEzMDAzOVowLzEtMCsGA1UEAxMk N2RhMjYyODgtYzA5Zi00OTIyLThmM2MtYzdlMWUwNDkzMWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8oLVnDO8ZthyuoIcdTlNyYXeVGL7vEpCPH3 1T6jJuKrX1Dy7GF/csZPps1SlH70aaPrmFSZxaEZI+nC5Nvyv+bOMWlxZ6miruiv l7ficSx73vpN70yJXUf2AsmEiw/bI1QfJMNMabwWFcNaSIinXVWATMxf3TrTgyjh xJsmXHwFIatqgNG27rBbMuKPIzp8KuCD5qJLPrk32DuwppPf6WQA4JMBxuwDjpeW 1psQ1AQNYup/8rkC26JoQfXdYbVZlF/hjQdRH3oqx7txUbk1owg5KcvB90/tloOM nGF7k5sI5qNj400dqu9ZRO2ZDWetkiX1nZf1Nl1XYgPIwuOgpwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFA+3fE9bkIHMfxn9nQzxDvPq9Q8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83YTVl YTMzYi1lZTgwLTQyZDgtODI1NS1iMGM2MWYyOGIwNmYvMmZjOTc2MTYtNDMzYy0z NGE0LWE4MDEtMzk5Y2U0NjlmODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2E1ZWEzM2ItZWU4MC00MmQ4LTgy NTUtYjBjNjFmMjhiMDZmLzdhNWVhMzNiLWVlODAtNDJkOC04MjU1LWIwYzYxZjI4 YjA2Zi5jcmwwHwYDVR0jBBgwFoAU7c4hFN88/AybrNtX0nu8s9RSsg8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83YTVlYTMzYi1lZTgwLTQyZDgtODI1NS1iMGM2 MWYyOGIwNmYuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCot4UAwQC wCjcAwQCxvEMMA0EAgACMAcDBQAmBoyAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHFpJYdofbD79WKmztam Zo+O9YBgpP1EovWPey+imCXoVLP9KR5wmYnz41fHEeu58fjAW4KamRadm8dklCM5 D5BWHM1OSlmPCbPnCuJViO1u+GKCp0MQJHrjHlb2WwrINGV6jEdKRwKmzlJOFOaI nw8UDeYNBl61RNtAW9X3mjeRwCH3B+NdgvroXJQQFFgOPxx/hETUZaDFlBgAZ7cw CUljeo/Q2EQcuDnhymjy3hrpRtQDtURgDsbfN/8ahUQ928mQQt+x12gj/sr/iUbr qsRbu32foOqQFV5UqROVOjUy/ez0dGfjH0hB5fSIoKKGQ54Ugk0oEgyIfq/SJtgO e0o= -----END CERTIFICATE-----Generated at Sun Mar 1 16:31:42 2026 by rpki-client