$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa File: fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa (raw, json) Hash identifier: YhlnzLSi1AeSHon+TweqwdGVZ6Qfn18aqAIRBIzJMGg= Subject key identifier: 74:2E:26:E0:19:53:B5:7A:27:04:BE:48:C1:23:70:B5:01:1D:17:11 Certificate issuer: /CN=7da3df33-ad97-4a08-81e8-054f28d035ed Certificate serial: 010D0C9F4328584CF4222367BB7583F2A019C090 Authority key identifier: 9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa Signing time: Mon 23 Feb 2026 02:00:31 +0000 ROA not before: Mon 23 Feb 2026 02:00:31 +0000 ROA not after: Sun 24 May 2026 01:00:31 +0000 asID: 209 IP address blocks: 199.253.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:22:23:67:bb:75:83:f2:a0:19:c0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da3df33-ad97-4a08-81e8-054f28d035ed Validity Not Before: Feb 23 02:00:31 2026 GMT Not After : May 24 01:00:31 2026 GMT Subject: CN=3c0aa88a-39d3-40fe-863f-df660a46c2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:68:ac:fc:80:ee:de:e5:a4:36:ea:03:1c:82: d8:ab:fa:39:85:c1:d6:aa:57:22:4e:e7:8e:4b:90: 83:b1:13:1e:ef:c1:3a:6c:0f:4a:56:c5:47:19:f6: 35:e8:ea:e0:7d:08:a2:89:73:94:c1:3b:96:3d:6c: b6:cb:78:0f:2c:fd:40:ab:87:7b:50:9f:1a:5f:4e: 04:57:6b:f7:21:ca:9b:b6:d0:2e:f4:74:95:6d:b9: 67:db:9a:a9:95:92:96:25:56:81:c6:79:ce:30:dd: f6:3a:08:19:3f:0b:3f:5f:12:de:46:38:fb:89:4e: 05:81:64:5e:6f:8d:69:c1:86:59:dc:b8:64:6a:a2: 34:87:40:4c:bd:b1:10:cd:fa:95:3b:9d:78:c7:fd: c4:fc:ed:71:e0:be:39:1d:74:c3:f5:b9:43:c8:5c: a4:e4:ae:c7:3a:c4:1f:96:1d:e5:d6:94:00:3d:84: 36:df:d9:2f:c9:a1:94:31:d4:e1:f1:58:09:84:78: 4b:15:ab:65:15:cf:bb:ce:f7:de:55:0f:78:dc:4c: 16:54:09:86:01:f7:c8:9c:ce:c1:2c:8b:f1:b5:58: 24:99:30:c3:b6:51:b5:94:36:e1:da:85:90:39:ad: 5f:8a:13:42:57:94:79:dd:69:70:fe:fc:94:af:cf: 84:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2E:26:E0:19:53:B5:7A:27:04:BE:48:C1:23:70:B5:01:1D:17:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl X509v3 Authority Key Identifier: keyid:9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer sbgp-ipAddrBlock: critical IPv4: 199.253.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:4e:a8:17:82:11:3b:dd:49:41:7f:07:f8:09:60:b2:c3:a2: a8:16:e1:4c:04:55:f2:d0:b9:ee:f8:47:48:fb:1b:71:cb:51: f4:16:42:dc:44:c5:98:74:c3:bb:f0:d8:c3:72:72:dd:8b:32: a8:9f:bb:0e:57:27:5c:25:0a:01:ce:05:2c:f9:b1:b1:ea:9d: 5b:e2:e7:76:eb:2e:fe:ae:26:e4:f3:0e:e4:0f:79:df:ad:86: dd:73:e2:6b:81:12:c5:b7:17:48:28:87:a3:99:12:e3:ca:34: 22:27:07:6e:c0:d8:ca:6b:14:98:2f:d6:bd:ee:06:b6:aa:bc: 8e:5f:9b:fc:fc:dc:81:62:90:d8:32:ef:b4:bb:35:c3:53:80: 72:65:81:34:f3:21:f6:4c:f9:06:ae:35:a4:0d:d3:93:29:b4: a4:fc:90:f1:76:11:55:5c:41:97:8d:6e:69:17:e9:ec:a9:9b: 0d:e6:ff:59:21:9d:c9:d8:15:3a:ce:03:ff:26:8e:08:57:fd: 62:fd:20:81:11:57:5c:64:5d:3a:7c:45:79:ff:b3:75:21:1f: 41:47:3a:7b:77:d6:52:b4:1e:25:9a:e4:af:66:0d:06:88:5c: 95:c7:12:77:54:cc:50:17:cf:eb:42:5a:9a:73:bd:82:a5:60: c8:17:7b:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0IiNnu3WD8qAZwJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhM2RmMzMtYWQ5Ny00YTA4LTgxZTgtMDU0ZjI4ZDAz NWVkMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk M2MwYWE4OGEtMzlkMy00MGZlLTg2M2YtZGY2NjBhNDZjMmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWis/IDu3uWkNuoDHILYq/o5hcHWqlciTueO S5CDsRMe78E6bA9KVsVHGfY16OrgfQiiiXOUwTuWPWy2y3gPLP1Aq4d7UJ8aX04E V2v3IcqbttAu9HSVbbln25qplZKWJVaBxnnOMN32OggZPws/XxLeRjj7iU4FgWRe b41pwYZZ3LhkaqI0h0BMvbEQzfqVO514x/3E/O1x4L45HXTD9blDyFyk5K7HOsQf lh3l1pQAPYQ239kvyaGUMdTh8VgJhHhLFatlFc+7zvfeVQ943EwWVAmGAffInM7B LIvxtVgkmTDDtlG1lDbh2oWQOa1fihNCV5R53Wlw/vyUr8+EiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQuJuAZU7V6JwS+SMEjcLUBHRcRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZGEz ZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRmMjhkMDM1ZWQvZmJiYTBhN2YtYjhlZi0z YWY0LWI5NjAtMTNmNzEwY2M1OGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2RhM2RmMzMtYWQ5Ny00YTA4LTgx ZTgtMDU0ZjI4ZDAzNWVkLzdkYTNkZjMzLWFkOTctNGEwOC04MWU4LTA1NGYyOGQw MzVlZC5jcmwwHwYDVR0jBBgwFoAUm94pr6UJ6HVQdeBF8ykvsQ5kiF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZGEzZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRm MjhkMDM1ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx/2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9OqBeCETvdSUF/B/gJYLLDoqgW4UwEVfLQue74R0j7G3HLUfQWQtxE xZh0w7vw2MNyct2LMqifuw5XJ1wlCgHOBSz5sbHqnVvi53brLv6uJuTzDuQPed+t ht1z4muBEsW3F0goh6OZEuPKNCInB27A2MprFJgv1r3uBraqvI5fm/z83IFikNgy 77S7NcNTgHJlgTTzIfZM+QauNaQN05MptKT8kPF2EVVcQZeNbmkX6eypmw3m/1kh ncnYFTrOA/8mjghX/WL9IIERV1xkXTp8RXn/s3UhH0FHOnt31lK0HiWa5K9mDQaI XJXHEndUzFAXz+tCWppzvYKlYMgXe+w= -----END CERTIFICATE-----Generated at Mon Mar 2 01:14:17 2026 by rpki-client