$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/08d94185-ad52-3fcc-85c6-05879b3a374e.roa File: 08d94185-ad52-3fcc-85c6-05879b3a374e.roa (raw, json) Hash identifier: e1Xw4Zv15Ax3wQ1aW0usltzS/ajhFJTgmVZW1kFQ4DE= Subject key identifier: CB:EA:07:90:14:DE:92:6B:24:14:E4:0E:93:E5:AF:70:21:91:66:A8 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584CEFF25F16C89E26779B150C80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/08d94185-ad52-3fcc-85c6-05879b3a374e.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 3949 IP address blocks: 157.238.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:5f:16:c8:9e:26:77:9b:15:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=031cee6c-43ec-4c00-9a17-1983fb37692d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b6:7d:cb:86:85:d7:f7:d5:03:72:e0:05:8f: 2a:25:f4:28:21:5b:bd:5c:c1:db:86:6b:8b:a6:9d: 7d:cd:1b:91:91:3e:bb:67:a3:71:bf:ce:72:06:d8: ea:8c:0f:33:e0:b0:4e:ef:85:ad:f7:a3:a2:bd:95: f8:ae:cd:74:7d:99:25:b5:c0:39:d6:39:20:a3:89: 49:4b:08:be:2e:da:8b:e3:97:73:e7:09:9d:03:79: 6a:1f:dd:65:8c:74:7e:82:5b:1e:93:c9:e2:80:63: 44:4e:8d:13:4b:ba:2e:00:0f:55:93:39:0e:19:6d: e3:54:54:ed:00:21:30:9a:b9:f3:1c:19:71:33:bd: 79:09:c2:69:94:f1:d1:d4:4c:ac:34:13:32:cb:66: c6:c6:55:d8:79:b0:65:ce:83:0a:ac:ac:82:be:5a: a2:a5:5b:86:ce:15:68:96:1d:91:2a:29:ea:e8:10: 9e:24:6b:da:47:86:71:29:16:27:4b:62:8a:48:80: 92:41:a3:55:14:f9:71:25:7f:83:fd:8f:98:19:76: 15:79:6c:21:8d:9e:38:ad:8b:f9:75:93:a5:9f:58: 50:74:c2:8a:3f:48:fb:e7:40:07:b5:be:bc:e6:39: d7:6e:00:d8:45:c4:83:37:26:2c:6e:5c:49:96:10: 67:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EA:07:90:14:DE:92:6B:24:14:E4:0E:93:E5:AF:70:21:91:66:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/08d94185-ad52-3fcc-85c6-05879b3a374e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 157.238.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:9e:55:b4:8a:27:8a:d2:03:87:1a:72:a4:58:bf:62:4a:a1: cf:a6:c3:49:23:8e:3a:b0:aa:94:64:4f:cc:ed:6b:a6:91:1b: 12:4a:54:c5:a7:46:69:6c:a4:be:21:8b:ec:08:02:0e:b4:ee: bc:f9:f8:59:4f:68:97:18:ed:ab:b5:4a:0f:d9:24:65:d5:55: 04:96:43:5f:23:68:d4:18:f3:32:06:6a:2e:e0:e7:dd:43:e6: c5:2e:11:a2:32:09:da:d1:36:28:e4:2e:c7:8e:35:52:99:ad: c5:8a:ba:95:d5:b9:4b:8b:70:40:aa:8e:83:05:1f:d7:03:30: f5:26:6f:bf:2e:e0:8d:40:1b:19:6d:1c:17:23:e2:f3:e2:df: 29:f2:29:89:8a:60:ec:c0:ad:6e:45:33:ec:8a:2c:96:9f:31: 1d:e5:67:21:7b:53:8b:6a:f9:24:ac:f2:fb:0c:c6:c6:31:18: 71:72:91:49:9c:c5:af:4a:74:43:d7:79:e7:f8:d0:c2:cd:55: 83:f4:94:ad:14:77:0c:82:f1:c9:bc:48:06:41:58:a2:4a:af: 10:10:3f:2b:6f:34:52:f3:69:dc:19:81:c7:ab:ce:c0:62:5c: 7d:ca:8f:02:94:cd:c6:fb:29:4e:b0:4b:9b:b8:d9:04:10:42: 01:82:25:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8l8WyJ4md5sVDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk MDMxY2VlNmMtNDNlYy00YzAwLTlhMTctMTk4M2ZiMzc2OTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLZ9y4aF1/fVA3LgBY8qJfQoIVu9XMHbhmuL pp19zRuRkT67Z6Nxv85yBtjqjA8z4LBO74Wt96OivZX4rs10fZkltcA51jkgo4lJ Swi+LtqL45dz5wmdA3lqH91ljHR+glsek8nigGNETo0TS7ouAA9VkzkOGW3jVFTt ACEwmrnzHBlxM715CcJplPHR1EysNBMyy2bGxlXYebBlzoMKrKyCvlqipVuGzhVo lh2RKinq6BCeJGvaR4ZxKRYnS2KKSICSQaNVFPlxJX+D/Y+YGXYVeWwhjZ44rYv5 dZOln1hQdMKKP0j750AHtb685jnXbgDYRcSDNyYsblxJlhBnCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvqB5AU3pJrJBTkDpPlr3AhkWaoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMDhkOTQxODUtYWQ1Mi0z ZmNjLTg1YzYtMDU4NzliM2EzNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCne60MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKeVbSKJ4rSA4cacqRYv2JKoc+mw0kjjjqwqpRkT8zta6aRGxJKVMWn RmlspL4hi+wIAg607rz5+FlPaJcY7au1Sg/ZJGXVVQSWQ18jaNQY8zIGai7g591D 5sUuEaIyCdrRNijkLseONVKZrcWKupXVuUuLcECqjoMFH9cDMPUmb78u4I1AGxlt HBcj4vPi3ynyKYmKYOzArW5FM+yKLJafMR3lZyF7U4tq+SSs8vsMxsYxGHFykUmc xa9KdEPXeef40MLNVYP0lK0UdwyC8cm8SAZBWKJKrxAQPytvNFLzadwZgcerzsBi XH3KjwKUzcb7KU6wS5u42QQQQgGCJQ0= -----END CERTIFICATE-----Generated at Mon Mar 2 05:00:20 2026 by rpki-client