$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/8042e5a5-cb9b-3d3d-ace3-2de1e2272c4d.roa File: 8042e5a5-cb9b-3d3d-ace3-2de1e2272c4d.roa (raw, json) Hash identifier: PSbumVRlki3KSh3QWdYqfk0j78Thn6B25CYBHO0cy/c= Subject key identifier: D6:74:8B:66:A4:4E:38:F3:97:BE:CC:D1:5C:99:68:54:2D:D1:08:B9 Certificate issuer: /CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Certificate serial: 010D0C9F4328584D00B269B15EA39941EDB90942 Authority key identifier: 0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/8042e5a5-cb9b-3d3d-ace3-2de1e2272c4d.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 62715 IP address blocks: 64.207.222.0/23 maxlen: 24 67.222.252.0/22 maxlen: 24 68.65.192.0/21 maxlen: 24 103.8.239.0/24 maxlen: 24 162.222.40.0/21 maxlen: 24 216.9.196.0/23 maxlen: 24 216.9.198.0/24 maxlen: 24 2606:4a80::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:69:b1:5e:a3:99:41:ed:b9:09:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=00bd4f26-bed1-41d4-b0d0-b5891a44f161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:d4:30:1e:c5:0f:7c:7f:08:54:ae:a6:ed: 03:99:d3:d4:85:4c:73:be:a5:d0:43:bd:3c:fc:68: 5f:6a:97:b7:0d:ae:93:d0:bc:1c:a9:3d:f2:42:d2: 00:0f:41:c9:dc:50:4f:b0:28:65:7e:51:3e:4c:bc: de:b6:d3:0a:09:29:19:7a:7b:da:71:80:25:63:0c: 87:4e:38:b0:30:3b:ad:d8:bf:d5:a1:64:8f:d3:89: a8:3b:35:d3:b8:eb:aa:e8:72:96:88:17:21:07:d1: 80:09:99:7e:21:59:7b:1a:a7:fd:84:54:d1:1f:4c: 04:c0:d1:2c:45:73:b6:68:da:f0:85:c6:47:6e:a7: e0:d8:cf:c5:14:01:aa:a7:cb:ba:41:60:b7:7e:31: f0:2a:47:58:92:32:4b:ab:98:ce:69:21:77:c2:53: 73:39:0a:96:6a:3a:06:27:6b:a0:df:5e:da:ac:3e: ac:74:f7:5f:1e:23:d7:ed:36:a8:a8:12:13:68:c6: 7b:63:ae:0a:48:68:4e:aa:32:b3:44:6b:07:16:86: 5e:80:8c:3d:a3:0e:e0:f2:6c:cf:78:f0:77:cf:9a: c3:99:70:37:e0:6d:c4:56:23:6c:3e:6a:f8:0e:43: d2:29:f7:2d:01:6f:87:d8:00:07:d1:a0:b0:69:ff: 3d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:74:8B:66:A4:4E:38:F3:97:BE:CC:D1:5C:99:68:54:2D:D1:08:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/8042e5a5-cb9b-3d3d-ace3-2de1e2272c4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl X509v3 Authority Key Identifier: keyid:0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer sbgp-ipAddrBlock: critical IPv4: 64.207.222.0/23 67.222.252.0/22 68.65.192.0/21 103.8.239.0/24 162.222.40.0/21 216.9.196.0-216.9.198.255 IPv6: 2606:4a80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f0:08:d9:ba:65:d1:f9:eb:43:ac:50:de:45:4c:a2:09:0f: 34:7b:86:9f:07:20:de:7f:4f:df:2d:ce:f7:0f:4d:0e:9c:08: cd:c7:0d:12:45:11:99:6a:8e:a4:f9:7c:9c:a8:08:77:97:fc: 6b:85:f5:a7:72:c5:c7:e5:b7:d2:05:c5:90:2c:49:22:a6:83: a2:86:2f:ef:fa:f8:6e:6a:17:30:fd:ce:64:99:c7:04:31:8e: 99:dd:2b:6f:12:67:2f:ed:be:06:b6:99:5f:4c:b7:d1:bb:68: 86:97:ac:62:bc:9e:7d:6c:1b:f6:e5:0e:89:92:5d:e4:4b:88: 16:63:d9:04:ed:c0:b0:21:e1:40:18:cc:35:28:80:be:32:bc: 72:40:c4:29:5a:f1:fb:d0:15:ae:39:91:ec:4b:0c:c1:b4:6b: 27:c1:11:80:84:38:85:80:68:2c:6e:ef:f0:ac:67:94:f9:5b: 08:2e:f7:a0:1a:95:a8:35:35:b0:3c:d8:66:18:33:a6:c5:67: 2e:e8:82:28:f3:be:23:d0:26:e8:27:f9:53:94:6a:83:5d:0a: 2d:44:00:52:e6:77:53:ae:5a:d4:ad:50:b7:16:59:2e:8d:e4: 1c:23:bb:ed:61:e6:c7:46:52:fb:c2:3f:d3:16:8d:a7:0e:76: c5:2c:c5:07 -----BEGIN CERTIFICATE----- MIIGeDCCBWCgAwIBAgIUAQ0Mn0MoWE0AsmmxXqOZQe25CUIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllM2NkZTEtOGFiMi00MzQzLWE1OTctMjRlNmRiNWM4 ZmU1MB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk MDBiZDRmMjYtYmVkMS00MWQ0LWIwZDAtYjU4OTFhNDRmMTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRPUMB7FD3x/CFSupu0DmdPUhUxzvqXQQ708 /Ghfape3Da6T0LwcqT3yQtIAD0HJ3FBPsChlflE+TLzettMKCSkZenvacYAlYwyH TjiwMDut2L/VoWSP04moOzXTuOuq6HKWiBchB9GACZl+IVl7Gqf9hFTRH0wEwNEs RXO2aNrwhcZHbqfg2M/FFAGqp8u6QWC3fjHwKkdYkjJLq5jOaSF3wlNzOQqWajoG J2ug317arD6sdPdfHiPX7TaoqBITaMZ7Y64KSGhOqjKzRGsHFoZegIw9ow7g8mzP ePB3z5rDmXA34G3EViNsPmr4DkPSKfctAW+H2AAH0aCwaf89nwIDAQABo4IDijCC A4YwHQYDVR0OBBYEFNZ0i2akTjjzl77M0VyZaFQt0Qi5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWUz Y2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2ZGI1YzhmZTUvODA0MmU1YTUtY2I5Yi0z ZDNkLWFjZTMtMmRlMWUyMjcyYzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODllM2NkZTEtOGFiMi00MzQzLWE1 OTctMjRlNmRiNWM4ZmU1Lzg5ZTNjZGUxLThhYjItNDM0My1hNTk3LTI0ZTZkYjVj OGZlNS5jcmwwHwYDVR0jBBgwFoAUC3drIWzbMlwhsUiL5FVLiXcMGx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWUzY2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2 ZGI1YzhmZTUuY2VyMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQBQM/eAwQC Q978AwQDREHAAwQAZwjvAwQDot4oMAwDBALYCcQDBADYCcYwDQQCAAIwBwMFACYG SoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAdvAI2bpl0fnrQ6xQ3kVMogkPNHuGnwcg3n9P3y3O9w9NDpwI zccNEkURmWqOpPl8nKgId5f8a4X1p3LFx+W30gXFkCxJIqaDooYv7/r4bmoXMP3O ZJnHBDGOmd0rbxJnL+2+BraZX0y30btohpesYryefWwb9uUOiZJd5EuIFmPZBO3A sCHhQBjMNSiAvjK8ckDEKVrx+9AVrjmR7EsMwbRrJ8ERgIQ4hYBoLG7v8KxnlPlb CC73oBqVqDU1sDzYZhgzpsVnLuiCKPO+I9Am6Cf5U5Rqg10KLUQAUuZ3U65a1K1Q txZZLo3kHCO77WHmx0ZS+8I/0xaNpw52xSzFBw== -----END CERTIFICATE-----Generated at Mon Mar 2 13:00:41 2026 by rpki-client