$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a59a4b39-5f64-366e-8310-41f56bd1475a.roa File: a59a4b39-5f64-366e-8310-41f56bd1475a.roa (raw, json) Hash identifier: FwTP0/a6GZlHJ1Kwml799R+oxD+Bgv+atFZ5Dd4PyFE= Subject key identifier: 2D:D6:42:93:27:37:B4:7E:40:BA:3A:0A:0D:F7:F1:FB:85:B6:8C:5A Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584CE362000FC9DD8F4A21541080 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a59a4b39-5f64-366e-8310-41f56bd1475a.roa Signing time: Tue 17 Feb 2026 02:00:31 +0000 ROA not before: Tue 17 Feb 2026 02:00:31 +0000 ROA not after: Mon 18 May 2026 01:00:31 +0000 asID: 36222 IP address blocks: 128.241.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e3:62:00:0f:c9:dd:8f:4a:21:54:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Feb 17 02:00:31 2026 GMT Not After : May 18 01:00:31 2026 GMT Subject: CN=8b7f777c-e2eb-4bb2-af1e-69ac1b06f1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ec:f6:d4:a5:16:71:b6:d8:c3:9c:87:44:78: 93:56:b8:4a:5a:fe:e0:c8:05:3e:68:47:c4:ba:96: 77:35:b0:da:dd:d5:8b:9a:a5:bb:ea:02:0e:53:48: af:be:30:06:68:03:fa:eb:1a:f6:54:92:2d:45:7f: a0:21:59:75:f2:7c:04:72:8b:71:f0:9f:51:2d:4f: be:60:47:8c:11:86:19:b6:2d:7a:de:a7:c9:5c:86: 75:47:16:48:8a:bd:88:90:26:51:09:6c:65:a8:1c: aa:94:e5:b5:14:34:7b:01:81:c7:26:cb:ed:c9:56: 5f:89:fd:14:37:c4:20:b8:2e:70:83:79:e5:28:7b: 22:fc:ba:fd:7d:0d:ea:f8:7e:9a:f9:d5:da:1c:92: 9f:c4:11:7d:7a:9b:24:b3:cf:62:ed:3c:78:b4:7c: 1f:4d:0d:c2:fa:cc:55:66:c8:b3:26:93:e3:a2:f7: 90:56:43:07:99:c8:25:44:70:ae:d4:c8:5c:38:2f: a0:df:e0:d2:bf:06:13:a5:22:39:4e:aa:cf:80:9d: ba:8d:57:f3:56:17:df:9f:32:d3:9a:ea:ed:88:4b: d0:30:35:09:ad:40:17:d1:b1:de:e3:7a:91:01:11: 4d:f5:4f:1c:d5:a5:31:42:b6:57:96:8c:61:07:0b: 6a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D6:42:93:27:37:B4:7E:40:BA:3A:0A:0D:F7:F1:FB:85:B6:8C:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a59a4b39-5f64-366e-8310-41f56bd1475a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.241.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:72:72:6c:25:da:b6:45:c4:b6:48:06:1a:20:52:3a:48:72: f4:9f:76:7d:8e:93:c6:41:3e:85:dd:19:d0:b5:a0:80:d1:f2: 1e:d4:92:4b:06:df:8b:e1:4e:d7:ac:87:ef:f0:a4:22:50:14: 48:f9:68:87:b3:59:4b:ca:2d:11:f6:f7:16:f7:18:d8:c4:4e: 8a:56:6a:04:80:77:bc:a4:9f:76:a9:c5:ee:79:93:44:26:86: 21:b5:1c:f3:b6:26:08:6c:a2:3e:93:b6:59:08:eb:39:be:5a: 2a:b3:5f:5b:90:89:42:d4:ca:6f:c4:27:51:4d:d2:81:74:96: 41:15:6a:52:8e:a2:31:aa:48:ba:d4:ef:a5:30:5c:ff:6f:42: 6a:e3:39:80:2e:60:95:9e:1f:a6:0b:7d:d8:01:96:12:0f:e4: 82:43:59:a3:be:07:b8:0d:fe:ea:13:63:fe:6f:09:2f:47:86: a1:eb:7a:7a:8f:ae:da:18:0f:e6:da:0d:8d:b2:f2:c8:f5:a4: 8b:2a:d7:69:e6:1a:bc:fe:41:a3:eb:6d:ca:2d:de:fe:1c:45: 19:d4:33:7d:bd:a5:19:51:5a:bf:36:1f:5c:39:44:29:cf:cd: 0d:59:45:cb:ad:6b:40:38:39:35:32:ba:2d:d9:24:e6:93:04: 2a:cf:21:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzjYgAPyd2PSiFUEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDIxNzAyMDAzMVoXDTI2MDUxODAxMDAzMVowLzEtMCsGA1UEAxMk OGI3Zjc3N2MtZTJlYi00YmIyLWFmMWUtNjlhYzFiMDZmMWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuz21KUWcbbYw5yHRHiTVrhKWv7gyAU+aEfE upZ3NbDa3dWLmqW76gIOU0ivvjAGaAP66xr2VJItRX+gIVl18nwEcotx8J9RLU++ YEeMEYYZti163qfJXIZ1RxZIir2IkCZRCWxlqByqlOW1FDR7AYHHJsvtyVZfif0U N8QguC5wg3nlKHsi/Lr9fQ3q+H6a+dXaHJKfxBF9epsks89i7Tx4tHwfTQ3C+sxV ZsizJpPjoveQVkMHmcglRHCu1MhcOC+g3+DSvwYTpSI5TqrPgJ26jVfzVhffnzLT murtiEvQMDUJrUAX0bHe43qRARFN9U8c1aUxQrZXloxhBwtq9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3WQpMnN7R+QLo6Cg338fuFtoxaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYTU5YTRiMzktNWY2NC0z NjZlLTgzMTAtNDFmNTZiZDE0NzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgPHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBycmwl2rZFxLZIBhogUjpIcvSfdn2Ok8ZBPoXdGdC1oIDR8h7UkksG 34vhTtesh+/wpCJQFEj5aIezWUvKLRH29xb3GNjETopWagSAd7ykn3apxe55k0Qm hiG1HPO2Jghsoj6TtlkI6zm+WiqzX1uQiULUym/EJ1FN0oF0lkEValKOojGqSLrU 76UwXP9vQmrjOYAuYJWeH6YLfdgBlhIP5IJDWaO+B7gN/uoTY/5vCS9HhqHrenqP rtoYD+baDY2y8sj1pIsq12nmGrz+QaPrbcot3v4cRRnUM329pRlRWr82H1w5RCnP zQ1ZRcuta0A4OTUyui3ZJOaTBCrPIWk= -----END CERTIFICATE-----Generated at Mon Mar 2 00:56:39 2026 by rpki-client