$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4e4e575f-2ebb-3c9f-995a-2bb1001781c2.roa File: 4e4e575f-2ebb-3c9f-995a-2bb1001781c2.roa (raw, json) Hash identifier: M13LQ990KtoCHMBEMWdov0NsfdyHDrz3BZ6btyrXKXA= Subject key identifier: D2:29:80:83:06:4F:24:9E:AF:1F:71:6D:43:91:F3:1F:66:C7:89:2B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584CF9B78B84E5C193ACF340B640 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4e4e575f-2ebb-3c9f-995a-2bb1001781c2.roa Signing time: Wed 25 Feb 2026 02:00:32 +0000 ROA not before: Wed 25 Feb 2026 02:00:32 +0000 ROA not after: Tue 26 May 2026 01:00:32 +0000 asID: 398465 IP address blocks: 198.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:b7:8b:84:e5:c1:93:ac:f3:40:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Feb 25 02:00:32 2026 GMT Not After : May 26 01:00:32 2026 GMT Subject: CN=11aca1fd-d2b5-45d1-9178-4c6fb4316052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8d:e9:74:27:a9:f7:d3:2d:d7:44:ee:f1:d4: 5b:13:e3:24:12:6f:05:73:98:de:6c:fd:c2:dd:1c: 35:f9:7b:43:b1:e0:a1:eb:c6:97:06:2f:cf:7f:70: ba:6e:af:64:8c:a4:72:69:08:01:b4:c0:73:76:05: fb:dd:ee:fa:98:9f:7f:c5:67:9f:68:90:6e:22:a4: 2b:19:14:b8:91:2a:56:09:55:1f:62:01:1b:28:2f: 8d:f9:9c:9d:d2:e1:26:0e:56:f9:7e:ff:99:ce:46: ab:68:05:74:9e:30:f7:c0:b9:7d:9e:8b:30:5b:68: 0b:0a:44:72:a3:a7:0e:57:10:12:4b:f8:e8:52:db: 47:3a:5f:b2:33:3d:0a:f4:6d:1d:3b:cd:7a:f3:dc: 55:0e:66:b2:36:40:d3:8a:d4:26:af:bf:9f:59:aa: 0d:0d:bb:40:88:b6:ad:9a:af:c5:f8:8e:f2:af:0b: 58:39:13:33:f4:c0:78:00:ef:26:ed:b6:be:08:93: ea:a9:97:73:63:c4:bb:d5:9e:fb:29:ca:e7:38:d2: 44:e3:d0:30:c7:90:4f:51:1d:b1:ec:67:06:28:87: d0:ab:19:15:50:50:44:fa:6b:4d:68:bc:4a:83:92: 77:2d:5e:c3:49:ff:57:da:f4:de:e9:d4:4c:df:2e: c8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:29:80:83:06:4F:24:9E:AF:1F:71:6D:43:91:F3:1F:66:C7:89:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4e4e575f-2ebb-3c9f-995a-2bb1001781c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:40:85:be:6e:c1:bd:96:66:f0:59:a9:b4:e2:6c:f1:10:f5: 2d:81:b0:ae:64:3b:0e:5f:df:17:93:b2:37:58:c2:a7:ba:7e: bd:c3:36:5b:cf:cc:08:a3:c6:4d:b0:5e:45:af:4a:08:1d:47: d7:8e:d4:c3:f8:70:ec:ec:91:35:8c:28:20:88:91:59:59:f5: 1b:a5:f9:60:f0:02:14:23:e7:0c:53:bb:62:25:3c:d6:f1:7d: c0:2f:1a:79:17:ba:4a:18:f3:57:76:1e:64:68:96:a3:29:53: 1d:8c:bf:96:f4:74:b6:8c:98:32:7a:88:a3:15:10:e8:35:2a: 7c:ac:9d:34:38:3f:3f:43:5d:23:7c:00:d1:4d:9e:7c:a4:65: e3:8a:c2:ae:83:2d:1f:b3:46:48:a3:19:9e:a4:80:6b:3d:1b: d4:6f:79:a2:f7:f1:ca:8c:8c:bf:3b:0a:29:9a:2e:3e:e2:af: d7:c9:2b:51:46:25:30:14:20:9b:f0:1a:92:c2:14:b3:4b:6e: 72:8f:a2:56:4e:00:4d:50:e3:86:58:e2:42:8d:9d:90:c2:8c: 1e:34:d4:a4:7a:ab:09:2d:1f:d8:df:16:b6:25:73:d0:dd:84: 2f:bd:44:e7:7e:ed:90:8f:38:8d:b9:c3:4f:6c:51:15:73:f7: 27:2a:c9:13 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEz5t4uE5cGTrPNAtkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDIyNTAyMDAzMloXDTI2MDUyNjAxMDAzMlowLzEtMCsGA1UEAxMk MTFhY2ExZmQtZDJiNS00NWQxLTkxNzgtNGM2ZmI0MzE2MDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI3pdCep99Mt10Tu8dRbE+MkEm8Fc5jebP3C 3Rw1+XtDseCh68aXBi/Pf3C6bq9kjKRyaQgBtMBzdgX73e76mJ9/xWefaJBuIqQr GRS4kSpWCVUfYgEbKC+N+Zyd0uEmDlb5fv+ZzkaraAV0njD3wLl9noswW2gLCkRy o6cOVxASS/joUttHOl+yMz0K9G0dO81689xVDmayNkDTitQmr7+fWaoNDbtAiLat mq/F+I7yrwtYORMz9MB4AO8m7ba+CJPqqZdzY8S71Z77KcrnONJE49Awx5BPUR2x 7GcGKIfQqxkVUFBE+mtNaLxKg5J3LV7DSf9X2vTe6dRM3y7InQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNIpgIMGTySerx9xbUOR8x9mx4krMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNGU0ZTU3NWYtMmViYi0z YzlmLTk5NWEtMmJiMTAwMTc4MWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxkIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAqECFvm7BvZZm8FmptOJs8RD1LYGwrmQ7Dl/fF5OyN1jCp7p+vcM2W8/M CKPGTbBeRa9KCB1H147Uw/hw7OyRNYwoIIiRWVn1G6X5YPACFCPnDFO7YiU81vF9 wC8aeRe6ShjzV3YeZGiWoylTHYy/lvR0toyYMnqIoxUQ6DUqfKydNDg/P0NdI3wA 0U2efKRl44rCroMtH7NGSKMZnqSAaz0b1G95ovfxyoyMvzsKKZouPuKv18krUUYl MBQgm/AaksIUs0tuco+iVk4ATVDjhljiQo2dkMKMHjTUpHqrCS0f2N8WtiVz0N2E L71E537tkI84jbnDT2xRFXP3JyrJEw== -----END CERTIFICATE-----Generated at Mon Mar 2 12:37:11 2026 by rpki-client