$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/89fdbba5-c305-3bf1-be38-0d9990f5f655.roa File: 89fdbba5-c305-3bf1-be38-0d9990f5f655.roa (raw, json) Hash identifier: iTgRHo811DlHdu3xo0ukQfO80tFBn+tHAlsQhr7CYGk= Subject key identifier: 12:C5:42:3E:A7:F3:08:F1:63:DF:B2:C2:5B:35:EF:9F:85:DB:17:44 Certificate issuer: /CN=0067e111-9d19-4c1e-a1ef-86f133669a8e Certificate serial: 010D0C9F4328584CC3473F0CADC96497A77D0500 Authority key identifier: 96:C9:16:5B:07:FA:AD:FC:DA:FD:53:09:8E:03:12:16:D4:83:92:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/89fdbba5-c305-3bf1-be38-0d9990f5f655.roa Signing time: Thu 05 Feb 2026 14:00:40 +0000 ROA not before: Thu 05 Feb 2026 14:00:40 +0000 ROA not after: Wed 06 May 2026 13:00:40 +0000 asID: 393966 IP address blocks: 204.239.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/0067e111-9d19-4c1e-a1ef-86f133669a8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/0067e111-9d19-4c1e-a1ef-86f133669a8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c3:47:3f:0c:ad:c9:64:97:a7:7d:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0067e111-9d19-4c1e-a1ef-86f133669a8e Validity Not Before: Feb 5 14:00:40 2026 GMT Not After : May 6 13:00:40 2026 GMT Subject: CN=80af1423-bc5f-45ba-bcf2-e5e52b663c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:46:3c:36:ac:43:80:98:0b:16:20:eb:38:4f: 90:54:eb:f5:77:7e:9e:50:d9:43:18:ed:47:22:e8: 39:0a:ca:e3:21:f8:39:7c:b8:03:48:b8:2d:9e:bf: 62:aa:3d:0c:ca:62:f9:06:a1:88:12:f0:fe:0b:d5: 0a:f6:32:2e:5e:e2:62:da:8d:c7:4f:d3:cc:c9:d7: ec:6e:d0:fd:0c:78:41:01:96:f3:f1:1e:2a:06:a4: 17:39:0d:b6:45:a4:52:8e:f4:71:fb:a5:61:ab:3b: c8:31:62:92:10:bf:b6:d0:1a:62:e7:b7:d6:c7:70: e5:b2:c0:b6:98:f7:6f:9b:ac:3d:d8:f8:8e:92:20: e6:d5:66:70:ed:36:17:db:9e:32:49:1a:8b:78:87: fb:43:f6:33:00:08:6f:95:33:0b:f9:8a:08:86:c6: 77:3f:4d:ea:e1:02:32:9d:b5:1d:c3:5e:d1:6d:e7: a7:39:ed:7f:e3:5b:3a:7a:7a:be:8c:00:d4:54:5a: eb:3f:ae:48:d4:35:65:2a:54:7f:60:e5:70:d7:aa: 13:a2:1b:a5:4e:4a:8c:8d:b6:0d:c7:21:78:df:22: 3f:38:5c:71:45:77:82:47:af:71:88:7a:e9:54:33: 24:5e:7b:10:fe:5b:65:1c:5d:73:43:e8:49:79:d7: de:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C5:42:3E:A7:F3:08:F1:63:DF:B2:C2:5B:35:EF:9F:85:DB:17:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/89fdbba5-c305-3bf1-be38-0d9990f5f655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/0067e111-9d19-4c1e-a1ef-86f133669a8e.crl X509v3 Authority Key Identifier: keyid:96:C9:16:5B:07:FA:AD:FC:DA:FD:53:09:8E:03:12:16:D4:83:92:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer sbgp-ipAddrBlock: critical IPv4: 204.239.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:9b:97:96:c0:8c:7e:60:72:da:1a:cc:33:de:75:db:b0:54: e2:fe:27:ea:a2:16:c3:a1:06:8b:01:58:fb:d0:fd:20:e7:d6: d3:fd:18:f6:a1:ff:a9:01:5e:f3:1a:e2:bb:78:47:ce:92:bc: a8:c8:87:34:a3:ef:12:a6:bd:bd:55:a2:9d:b2:01:41:fd:d7: f0:1c:2b:d7:d9:9f:a0:cd:25:a3:3b:c1:c8:1d:b2:a9:dc:3e: ce:5a:be:db:5c:cd:f7:6d:37:1f:bc:50:7c:46:c1:41:4d:91: 16:6c:00:e0:58:2d:a1:7b:74:1c:24:3b:65:b1:8e:79:39:16: ae:43:74:78:70:61:f4:6a:3a:da:a3:11:16:58:61:c4:40:19: 75:f1:24:2a:7c:79:35:79:19:26:23:49:20:56:0d:a7:0b:ea: 33:ac:e1:17:c8:14:56:dc:24:15:41:3e:09:a4:40:97:ad:cc: cf:cb:53:82:1a:b6:c9:0d:53:62:67:64:33:e8:02:ce:e6:76: 44:e8:87:68:09:02:7e:24:4a:3f:9e:c9:e9:57:1b:b0:5d:ce: ac:5a:6b:86:73:5a:75:bc:12:2b:a7:5d:7d:0c:4c:7c:eb:8c: fe:e3:d2:e9:41:e9:d8:d6:d1:3b:27:ac:e8:50:d1:c2:a7:e3: 8b:61:78:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzDRz8Mrclkl6d9BQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA2N2UxMTEtOWQxOS00YzFlLWExZWYtODZmMTMzNjY5 YThlMB4XDTI2MDIwNTE0MDA0MFoXDTI2MDUwNjEzMDA0MFowLzEtMCsGA1UEAxMk ODBhZjE0MjMtYmM1Zi00NWJhLWJjZjItZTVlNTJiNjYzYzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikY8NqxDgJgLFiDrOE+QVOv1d36eUNlDGO1H Iug5CsrjIfg5fLgDSLgtnr9iqj0MymL5BqGIEvD+C9UK9jIuXuJi2o3HT9PMydfs btD9DHhBAZbz8R4qBqQXOQ22RaRSjvRx+6VhqzvIMWKSEL+20Bpi57fWx3DlssC2 mPdvm6w92PiOkiDm1WZw7TYX254ySRqLeIf7Q/YzAAhvlTML+YoIhsZ3P03q4QIy nbUdw17RbeenOe1/41s6enq+jADUVFrrP65I1DVlKlR/YOVw16oTohulTkqMjbYN xyF43yI/OFxxRXeCR69xiHrpVDMkXnsQ/ltlHF1zQ+hJedfevwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLFQj6n8wjxY9+ywls175+F2xdEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMDY3 ZTExMS05ZDE5LTRjMWUtYTFlZi04NmYxMzM2NjlhOGUvODlmZGJiYTUtYzMwNS0z YmYxLWJlMzgtMGQ5OTkwZjVmNjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDA2N2UxMTEtOWQxOS00YzFlLWEx ZWYtODZmMTMzNjY5YThlLzAwNjdlMTExLTlkMTktNGMxZS1hMWVmLTg2ZjEzMzY2 OWE4ZS5jcmwwHwYDVR0jBBgwFoAUlskWWwf6rfza/VMJjgMSFtSDko4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wMDY3ZTExMS05ZDE5LTRjMWUtYTFlZi04NmYx MzM2NjlhOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzO+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACibl5bAjH5gctoazDPedduwVOL+J+qiFsOhBosBWPvQ/SDn1tP9GPah /6kBXvMa4rt4R86SvKjIhzSj7xKmvb1Vop2yAUH91/AcK9fZn6DNJaM7wcgdsqnc Ps5avttczfdtNx+8UHxGwUFNkRZsAOBYLaF7dBwkO2Wxjnk5Fq5DdHhwYfRqOtqj ERZYYcRAGXXxJCp8eTV5GSYjSSBWDacL6jOs4RfIFFbcJBVBPgmkQJetzM/LU4Ia tskNU2JnZDPoAs7mdkToh2gJAn4kSj+eyelXG7Bdzqxaa4ZzWnW8EiunXX0MTHzr jP7j0ulB6djW0TsnrOhQ0cKn44theF4= -----END CERTIFICATE-----Generated at Mon Mar 2 14:28:01 2026 by rpki-client