$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa File: ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa (raw, json) Hash identifier: JqmKHKhXsz7+0E1KZXEZEdPTRbvlZt7rBHtSeZNFrKI= Subject key identifier: 30:FF:B3:A3:36:47:10:1F:B5:60:E8:29:3D:D6:89:11:FC:64:0A:A2 Certificate issuer: /CN=7da3df33-ad97-4a08-81e8-054f28d035ed Certificate serial: 010D0C9F4328584CF2BCE2D550EA778418A5AC20 Authority key identifier: 9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 13660 IP address blocks: 199.253.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bc:e2:d5:50:ea:77:84:18:a5:ac:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da3df33-ad97-4a08-81e8-054f28d035ed Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=dffa5bce-e64f-4029-adf4-ac5944f6ed7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:71:9f:93:d6:72:fc:03:40:be:03:79:1f:f2: 00:a1:1a:11:51:6e:5e:ef:40:7c:b1:8c:df:26:41: 37:de:40:c0:58:7d:38:e5:69:40:73:17:05:74:f2: 76:97:ee:1f:ae:16:8f:3f:7e:bc:92:8d:ec:f3:0b: 32:ff:72:af:5e:6f:4e:66:b2:0f:a7:8d:5f:22:59: 9f:9e:ee:b8:8b:11:9e:54:2e:f2:ae:0b:b0:3f:d4: 08:c5:84:9c:a8:74:70:f7:b1:78:9b:b8:5e:ee:03: c1:0f:c8:c9:ad:ca:5d:05:85:3b:96:43:56:fb:76: f4:c7:79:40:1e:13:a0:dc:39:e8:84:94:f5:07:3a: f0:90:97:d2:21:81:1e:01:7d:85:ae:17:a3:30:51: 84:0b:d8:e5:03:86:b1:e0:61:57:fb:18:68:ad:1f: 49:ea:d4:ba:74:e5:54:1f:97:f3:43:54:c9:74:f2: 29:cd:1e:b4:4f:d8:04:98:c8:04:56:73:9e:80:ac: 69:e7:67:17:e1:4e:4f:60:49:d8:7e:17:3e:90:84: 6d:09:a4:ca:5c:cf:61:23:57:91:4a:0c:4e:de:3c: 69:b2:7d:85:03:fd:67:54:13:39:e6:a4:b6:b4:27: 5c:0f:49:fa:e7:3f:65:d4:48:cf:3b:b2:28:8a:3f: 02:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FF:B3:A3:36:47:10:1F:B5:60:E8:29:3D:D6:89:11:FC:64:0A:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl X509v3 Authority Key Identifier: keyid:9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer sbgp-ipAddrBlock: critical IPv4: 199.253.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:23:1c:05:e8:f1:35:00:44:9a:4e:6b:43:ef:1e:64:c7:ac: d8:83:6a:df:91:4e:3e:71:aa:3c:02:23:23:2a:63:29:f8:1b: 1a:54:69:f1:21:96:ef:cb:f5:2e:38:47:fd:b0:f0:d1:e3:5b: b4:e4:2e:94:4c:a2:49:4e:20:6a:8c:89:cc:90:8f:4b:03:34: 4a:91:b6:cd:25:e1:66:ed:8f:04:04:8b:83:63:d7:5d:71:a6: 83:70:6f:fb:bf:d8:8f:f7:50:52:44:5f:88:72:86:36:25:14: 0a:21:a5:c4:e3:e6:bc:ed:91:2c:3b:03:ea:e7:28:54:39:ac: 9f:7d:6d:ba:a6:1a:33:a2:b0:ff:0d:6b:df:04:10:6f:14:03: fd:f3:71:bc:90:31:ca:11:90:72:48:e6:c5:3f:38:2e:a0:fd: 48:75:68:d7:dc:7b:88:38:ac:c9:de:aa:e0:d5:78:7b:c4:75: a3:b5:60:a7:6b:a3:70:3b:a6:18:fc:48:b2:ff:dd:f0:74:b5: 25:ff:ba:84:d2:18:f5:49:da:48:13:4f:ab:97:9e:0c:34:ce: b5:fb:13:5a:af:97:2e:85:ba:63:9c:fc:f6:dc:2a:0d:5c:d4: e5:91:f7:ae:60:79:51:33:95:fb:e8:0e:58:cc:47:c5:0e:0a: f0:5d:bb:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvOLVUOp3hBilrCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhM2RmMzMtYWQ5Ny00YTA4LTgxZTgtMDU0ZjI4ZDAz NWVkMB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk ZGZmYTViY2UtZTY0Zi00MDI5LWFkZjQtYWM1OTQ0ZjZlZDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73Gfk9Zy/ANAvgN5H/IAoRoRUW5e70B8sYzf JkE33kDAWH045WlAcxcFdPJ2l+4frhaPP368ko3s8wsy/3KvXm9OZrIPp41fIlmf nu64ixGeVC7yrguwP9QIxYScqHRw97F4m7he7gPBD8jJrcpdBYU7lkNW+3b0x3lA HhOg3DnohJT1BzrwkJfSIYEeAX2FrhejMFGEC9jlA4ax4GFX+xhorR9J6tS6dOVU H5fzQ1TJdPIpzR60T9gEmMgEVnOegKxp52cX4U5PYEnYfhc+kIRtCaTKXM9hI1eR SgxO3jxpsn2FA/1nVBM55qS2tCdcD0n65z9l1EjPO7Ioij8CRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDD/s6M2RxAftWDoKT3WiRH8ZAqiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZGEz ZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRmMjhkMDM1ZWQvY2UzNDBhZGEtZjVjNy0z NTZlLThmNmMtYzgxYTZjNzJjODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2RhM2RmMzMtYWQ5Ny00YTA4LTgx ZTgtMDU0ZjI4ZDAzNWVkLzdkYTNkZjMzLWFkOTctNGEwOC04MWU4LTA1NGYyOGQw MzVlZC5jcmwwHwYDVR0jBBgwFoAUm94pr6UJ6HVQdeBF8ykvsQ5kiF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZGEzZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRm MjhkMDM1ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx/2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKojHAXo8TUARJpOa0PvHmTHrNiDat+RTj5xqjwCIyMqYyn4GxpUafEh lu/L9S44R/2w8NHjW7TkLpRMoklOIGqMicyQj0sDNEqRts0l4WbtjwQEi4Nj111x poNwb/u/2I/3UFJEX4hyhjYlFAohpcTj5rztkSw7A+rnKFQ5rJ99bbqmGjOisP8N a98EEG8UA/3zcbyQMcoRkHJI5sU/OC6g/Uh1aNfce4g4rMnequDVeHvEdaO1YKdr o3A7phj8SLL/3fB0tSX/uoTSGPVJ2kgTT6uXngw0zrX7E1qvly6FumOc/PbcKg1c 1OWR965geVEzlfvoDljMR8UOCvBdu/U= -----END CERTIFICATE-----Generated at Mon Mar 2 13:24:44 2026 by rpki-client