$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa File: ff5499bf-8280-386d-a55a-c494181be5f5.roa (raw, json) Hash identifier: VKZnhVnvnYrh49+/2rKjPD0L6MeGF29vFV0WH8V55FA= Subject key identifier: CE:22:07:80:7C:21:F2:B5:DA:15:B5:C9:50:14:CD:E0:7D:65:35:4B Certificate issuer: /CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Certificate serial: 010D0C9F4328584CE792224FCC3BEE7B16249E40 Authority key identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa Signing time: Wed 18 Feb 2026 14:00:41 +0000 ROA not before: Wed 18 Feb 2026 14:00:41 +0000 ROA not after: Tue 19 May 2026 13:00:41 +0000 asID: 393909 IP address blocks: 172.86.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e7:92:22:4f:cc:3b:ee:7b:16:24:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Validity Not Before: Feb 18 14:00:41 2026 GMT Not After : May 19 13:00:41 2026 GMT Subject: CN=0df27a17-1974-40e0-92c4-02fe2cdcf405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e6:5b:8a:b4:4f:3c:0c:c2:af:ca:17:c5:41: 66:70:3a:b6:47:ee:5a:a4:89:0f:46:9b:ba:14:f8: 89:6d:f3:24:8c:9c:40:78:f2:90:49:a9:ba:73:6d: 6f:ef:d6:fc:5e:8b:6d:68:42:4f:ab:55:70:6c:49: 85:02:33:73:e9:f5:b3:8f:1a:32:b8:30:65:9b:26: 64:3f:1e:bd:18:45:65:37:48:e2:5a:08:6c:ab:6f: 4a:a8:ae:02:39:3c:12:df:e3:2b:39:dc:a0:30:70: 8a:a8:e9:ca:d2:e0:10:4d:5c:d0:fa:42:db:8e:7e: 2b:08:57:70:b6:be:4e:b5:91:43:c8:89:2a:fd:29: a0:c6:e4:50:06:19:d9:68:80:39:b9:b5:31:e7:aa: 60:55:84:93:49:de:20:e6:e1:91:2a:76:eb:cc:3d: dc:6a:06:5d:1c:70:e5:d1:1a:64:2d:f1:74:90:e9: af:61:3a:df:8c:d2:f3:81:c9:ee:c5:11:be:26:f4: 04:31:00:4e:81:fc:8d:97:77:bc:f7:3a:35:18:fa: f9:33:d3:18:30:1d:e0:3d:96:d2:bb:66:02:8f:08: 22:ba:be:1e:64:b2:a0:66:ed:da:7f:87:26:13:fc: f0:be:6a:db:23:1d:0a:03:ea:05:2d:69:29:2e:6e: b3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:22:07:80:7C:21:F2:B5:DA:15:B5:C9:50:14:CD:E0:7D:65:35:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl X509v3 Authority Key Identifier: keyid:51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer sbgp-ipAddrBlock: critical IPv4: 172.86.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:25:52:62:84:45:ee:fd:d0:5b:a5:3a:37:a8:88:93:4f:91: 2f:db:7a:cb:d4:7a:4d:4e:e5:e8:9b:8d:c9:77:93:51:a2:b8: c0:01:6b:04:6a:1e:00:8c:24:66:aa:ef:f0:e0:01:87:aa:c7: 4a:c9:39:d8:6f:e4:d6:19:f3:37:c6:75:dc:35:9a:f3:47:43: 7b:ac:f5:0d:fa:3e:2d:45:b1:57:96:ac:7b:f8:dd:e2:41:f2: fa:55:e0:21:fc:ae:19:9b:32:f2:82:d2:79:a1:fc:50:2b:ea: c8:3c:d5:3f:09:d0:36:2f:e2:9f:6f:60:86:9e:10:10:f4:53: 09:98:34:99:95:99:39:5e:f6:88:f0:3d:b2:ec:cf:2e:8d:4e: b6:1f:12:e8:4d:03:e1:33:06:7e:43:88:7b:45:f6:3a:b7:60: fb:2c:a7:72:ca:ac:08:d3:f4:bd:09:8d:47:96:41:94:80:56: ee:81:1a:6c:b6:09:35:d6:4d:44:97:55:99:4b:8d:62:15:4d: bb:47:5e:58:e4:4c:90:b6:35:33:ae:76:01:52:16:c1:e1:2b: af:06:a7:03:55:cb:ff:0e:d1:21:76:dc:7f:9f:ac:be:d2:64: 79:9f:f1:51:73:a3:27:fe:a0:e3:88:10:ff:9d:57:66:e2:d8: 1b:4c:31:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEznkiJPzDvuexYknkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDExYTBkMWItNzlhNC00ZDE0LTljZDAtMDc0M2YyOWJm OTU2MB4XDTI2MDIxODE0MDA0MVoXDTI2MDUxOTEzMDA0MVowLzEtMCsGA1UEAxMk MGRmMjdhMTctMTk3NC00MGUwLTkyYzQtMDJmZTJjZGNmNDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguZbirRPPAzCr8oXxUFmcDq2R+5apIkPRpu6 FPiJbfMkjJxAePKQSam6c21v79b8XottaEJPq1VwbEmFAjNz6fWzjxoyuDBlmyZk Px69GEVlN0jiWghsq29KqK4COTwS3+MrOdygMHCKqOnK0uAQTVzQ+kLbjn4rCFdw tr5OtZFDyIkq/SmgxuRQBhnZaIA5ubUx56pgVYSTSd4g5uGRKnbrzD3cagZdHHDl 0RpkLfF0kOmvYTrfjNLzgcnuxRG+JvQEMQBOgfyNl3e89zo1GPr5M9MYMB3gPZbS u2YCjwgiur4eZLKgZu3af4cmE/zwvmrbIx0KA+oFLWkpLm6zGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4iB4B8IfK12hW1yVAUzeB9ZTVLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFh MGQxYi03OWE0LTRkMTQtOWNkMC0wNzQzZjI5YmY5NTYvZmY1NDk5YmYtODI4MC0z ODZkLWE1NWEtYzQ5NDE4MWJlNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDExYTBkMWItNzlhNC00ZDE0LTlj ZDAtMDc0M2YyOWJmOTU2LzAxMWEwZDFiLTc5YTQtNGQxNC05Y2QwLTA3NDNmMjli Zjk1Ni5jcmwwHwYDVR0jBBgwFoAUUQq891lS4iYG1wETEyKMWAPnvxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFhMGQxYi03OWE0LTRkMTQtOWNkMC0wNzQz ZjI5YmY5NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFYYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEslUmKERe790FulOjeoiJNPkS/besvUek1O5eibjcl3k1GiuMABawRq HgCMJGaq7/DgAYeqx0rJOdhv5NYZ8zfGddw1mvNHQ3us9Q36Pi1FsVeWrHv43eJB 8vpV4CH8rhmbMvKC0nmh/FAr6sg81T8J0DYv4p9vYIaeEBD0UwmYNJmVmTle9ojw PbLszy6NTrYfEuhNA+EzBn5DiHtF9jq3YPssp3LKrAjT9L0JjUeWQZSAVu6BGmy2 CTXWTUSXVZlLjWIVTbtHXljkTJC2NTOudgFSFsHhK68GpwNVy/8O0SF23H+frL7S ZHmf8VFzoyf+oOOIEP+dV2bi2BtMMa4= -----END CERTIFICATE-----Generated at Mon Mar 2 10:25:44 2026 by rpki-client