$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/171b7afd-d4fd-3a23-adbd-f89558aba11e.roa File: 171b7afd-d4fd-3a23-adbd-f89558aba11e.roa (raw, json) Hash identifier: 5Sa3q35wamZ/3lrueqWIOf+RSTE9f8OlLN1QLnpmYd8= Subject key identifier: 44:64:DD:64:F0:44:41:82:AE:8F:84:C6:13:71:A6:64:C5:41:D3:3C Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d Certificate serial: 010D0C9F4328584CC611E6930E8385CC24144E80 Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/171b7afd-d4fd-3a23-adbd-f89558aba11e.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 2495 IP address blocks: 198.248.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:11:e6:93:0e:83:85:cc:24:14:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=31980a6d-2f46-49d0-a1bd-706c01de2e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e1:b8:6c:0f:f7:54:ce:68:8a:45:7a:0c:7f: cd:67:ae:2f:2c:f9:c0:7f:c2:be:aa:25:6f:6d:86: 7e:fe:37:e8:d8:cc:80:c7:a1:93:ed:ca:54:cd:53: 5a:b3:67:45:1c:96:ed:07:89:f9:15:96:9b:bd:51: 97:b6:13:ef:b1:b8:59:de:58:a3:f0:94:2e:9e:c9: b9:02:1a:f3:b6:a5:ea:a1:15:9f:e4:da:a5:44:78: 17:60:c0:05:e2:da:7d:27:af:01:d0:a2:47:cb:1c: 6a:de:7e:ea:b0:e1:4d:21:6b:b1:3d:aa:9d:76:c7: 3a:cb:72:83:39:06:f1:e3:64:e8:5d:19:ce:a8:06: 1c:30:79:84:2f:a4:af:54:5f:1e:99:a7:5f:de:6d: 26:98:ee:ce:b2:d9:ed:5e:16:5a:1a:78:da:14:6c: e7:25:40:77:99:3e:29:63:37:7a:6e:90:08:8c:34: 26:a2:e4:4c:18:63:3b:94:40:99:38:98:04:47:4c: 0a:7e:80:5e:e4:db:e7:f8:5c:f2:47:43:79:bc:3d: 71:f9:28:45:08:49:a6:4e:85:5b:c5:2f:83:7b:f2: 98:72:88:e2:2e:97:be:d8:a7:38:e0:89:c7:9d:36: 69:2c:eb:2b:6e:28:21:9b:63:5d:66:d6:e0:d4:6d: 32:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:64:DD:64:F0:44:41:82:AE:8F:84:C6:13:71:A6:64:C5:41:D3:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/171b7afd-d4fd-3a23-adbd-f89558aba11e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl X509v3 Authority Key Identifier: keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer sbgp-ipAddrBlock: critical IPv4: 198.248.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:bc:f2:fc:48:af:88:c2:34:5e:d0:63:a1:f6:0c:d9:da:5c: b3:c6:4f:c6:8b:0b:0c:6d:4c:d3:7b:95:04:3e:df:48:63:b7: f9:24:bc:c1:36:91:f8:b2:91:c6:59:ad:a2:eb:fb:8e:70:cb: ea:2a:b3:ba:67:c8:ce:1c:d9:b8:ff:4d:a8:02:70:2d:34:e5: eb:15:f6:af:61:a1:09:98:2e:8e:50:1c:69:8f:7b:67:e6:2b: 29:ec:77:1b:cb:4e:08:94:c1:a3:9c:5d:3c:7b:70:04:00:ba: 83:a1:2e:e3:99:68:52:61:f7:e1:a4:4e:0d:b5:a2:3c:68:b0: 2e:b2:fe:9c:a3:7d:ed:4a:63:86:73:cd:63:12:cb:36:bf:0f: f7:ff:cb:3b:01:c3:a7:02:67:eb:94:f8:8c:9b:1f:1b:f0:d0: 22:41:c2:73:50:1b:14:a6:7c:cc:24:06:4a:39:54:fc:1e:eb: 00:10:88:24:f5:7f:14:f4:53:4f:2a:7c:db:1e:da:f9:2e:76: a5:a3:c4:6a:c3:fc:11:35:76:41:bd:bd:72:ee:14:6c:9f:d1: a2:44:f9:cf:44:3b:03:95:aa:15:a6:53:03:3d:e3:45:c7:35: ed:d5:71:95:57:17:da:a5:a5:a0:50:81:a3:2a:49:a1:53:6d: 25:63:78:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEeaTDoOFzCQUToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi ODNkMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk MzE5ODBhNmQtMmY0Ni00OWQwLWExYmQtNzA2YzAxZGUyZTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeG4bA/3VM5oikV6DH/NZ64vLPnAf8K+qiVv bYZ+/jfo2MyAx6GT7cpUzVNas2dFHJbtB4n5FZabvVGXthPvsbhZ3lij8JQunsm5 AhrztqXqoRWf5NqlRHgXYMAF4tp9J68B0KJHyxxq3n7qsOFNIWuxPaqddsc6y3KD OQbx42ToXRnOqAYcMHmEL6SvVF8emadf3m0mmO7OstntXhZaGnjaFGznJUB3mT4p Yzd6bpAIjDQmouRMGGM7lECZOJgER0wKfoBe5Nvn+FzyR0N5vD1x+ShFCEmmToVb xS+De/KYcojiLpe+2Kc44InHnTZpLOsrbighm2NdZtbg1G0y6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERk3WTwREGCro+ExhNxpmTFQdM8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0 Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvMTcxYjdhZmQtZDRmZC0z YTIzLWFkYmQtZjg5NTU4YWJhMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxviSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACq88vxIr4jCNF7QY6H2DNnaXLPGT8aLCwxtTNN7lQQ+30hjt/kkvME2 kfiykcZZraLr+45wy+oqs7pnyM4c2bj/TagCcC005esV9q9hoQmYLo5QHGmPe2fm KynsdxvLTgiUwaOcXTx7cAQAuoOhLuOZaFJh9+GkTg21ojxosC6y/pyjfe1KY4Zz zWMSyza/D/f/yzsBw6cCZ+uU+IybHxvw0CJBwnNQGxSmfMwkBko5VPwe6wAQiCT1 fxT0U08qfNse2vkudqWjxGrD/BE1dkG9vXLuFGyf0aJE+c9EOwOVqhWmUwM940XH Ne3VcZVXF9qlpaBQgaMqSaFTbSVjeIE= -----END CERTIFICATE-----Generated at Mon Mar 2 18:09:02 2026 by rpki-client