$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/f4e1b64e-1ca2-3a91-a765-c3b8e0e260f3.roa File: f4e1b64e-1ca2-3a91-a765-c3b8e0e260f3.roa (raw, json) Hash identifier: phBFnr9DQVrF7PtFbpt0gjacV5UofvDYCDwsN0XLyOs= Subject key identifier: 77:58:8A:1A:CF:C7:E7:FD:43:07:5A:A3:F7:24:AB:FB:59:10:5C:33 Certificate issuer: /CN=063abcef-47ff-4267-9198-eb628aba7842 Certificate serial: 010D0C9F4328584CF5879E15F5F2A7D0DA90BB40 Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/f4e1b64e-1ca2-3a91-a765-c3b8e0e260f3.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 397976 IP address blocks: 74.214.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:9e:15:f5:f2:a7:d0:da:90:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=ec5f75df-3b37-40e9-8441-f79369e062c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:3d:2c:97:11:47:fc:e6:27:5b:cd:2e:b0: 1b:a2:10:03:be:72:63:08:a2:7a:2f:b6:a0:e1:78: 55:77:ad:74:7e:11:bb:db:e1:f9:0d:9f:ad:7c:0a: 62:f8:5c:33:1c:8c:8c:6d:1a:44:d2:9c:43:10:7c: 9f:88:61:f9:8b:2d:b7:64:a5:2c:02:ee:c2:c3:3a: 74:f4:e5:c5:51:e3:07:a0:19:42:71:d5:55:74:ce: d6:55:cf:8e:13:27:fd:b8:26:c3:24:fe:e3:ba:a2: de:c8:43:a0:7e:64:91:20:54:16:05:be:02:bd:50: 9d:ac:db:57:13:41:85:bd:8f:4f:20:62:1c:da:84: aa:5b:f2:99:47:ba:a0:11:83:87:71:5a:cb:5f:77: b6:16:d0:29:c3:53:bb:a4:de:00:03:8b:1a:af:25: bf:bd:5c:d8:72:ae:82:c3:55:95:67:19:5a:4a:8c: 7d:60:3c:d8:f0:cb:1b:a1:51:b6:3b:77:8b:fa:70: ca:67:8e:71:a2:28:8c:27:a0:b2:79:c9:6d:a2:a5: 82:87:dd:33:ec:e3:9e:68:98:6c:4e:98:82:de:cc: 50:0b:fc:20:6b:3f:ea:60:23:14:58:61:d7:8f:17: ad:a5:21:d0:62:a5:ef:77:a0:ff:ab:68:45:a1:0e: 8b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:58:8A:1A:CF:C7:E7:FD:43:07:5A:A3:F7:24:AB:FB:59:10:5C:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/f4e1b64e-1ca2-3a91-a765-c3b8e0e260f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl X509v3 Authority Key Identifier: keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer sbgp-ipAddrBlock: critical IPv4: 74.214.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:2e:41:ca:64:8f:84:93:ba:bf:0d:da:6a:df:c9:af:62:9d: 17:92:7a:c4:4d:02:50:62:48:76:e2:25:06:42:f6:ac:7f:cb: d0:46:6b:fc:0e:78:ad:8e:ff:8f:6c:3f:e2:21:b1:77:fd:95: d4:60:2f:99:48:cf:62:dc:82:42:2c:cb:24:5f:52:d8:66:9e: e0:c4:e6:54:9b:e4:e5:c3:6f:9c:c9:79:e8:52:10:21:5c:07: 48:fb:4b:df:54:09:14:22:cf:45:e8:59:16:df:a4:74:d3:62: e4:04:c4:72:d5:7c:32:38:77:7c:40:fc:4b:ca:14:d7:98:17: 2f:bb:b1:ce:76:5b:13:08:15:b2:00:ef:d9:8d:e2:36:12:a0: cc:93:c1:ca:33:01:fa:06:e4:5a:03:6d:1f:34:a3:30:2a:0c: 6b:22:22:58:7c:a2:65:cd:18:45:a2:ea:ec:34:ab:27:61:87: c6:5e:e9:2f:34:0f:14:86:77:f8:75:f6:bd:7a:8a:4f:fe:15: 18:07:a2:71:18:77:ac:0e:1f:b5:a0:2f:3e:23:80:5c:e8:b1: 67:10:38:90:03:cc:81:ea:b9:0e:b5:24:97:f3:de:5d:59:0c: bb:b0:f7:a4:f9:c2:73:4c:c0:ce:38:01:f9:9c:d7:0b:6b:57: ec:b7:fa:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h54V9fKn0NqQu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzYWJjZWYtNDdmZi00MjY3LTkxOTgtZWI2MjhhYmE3 ODQyMB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk ZWM1Zjc1ZGYtM2IzNy00MGU5LTg0NDEtZjc5MzY5ZTA2MmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOA9LJcRR/zmJ1vNLrAbohADvnJjCKJ6L7ag 4XhVd610fhG72+H5DZ+tfApi+FwzHIyMbRpE0pxDEHyfiGH5iy23ZKUsAu7Cwzp0 9OXFUeMHoBlCcdVVdM7WVc+OEyf9uCbDJP7juqLeyEOgfmSRIFQWBb4CvVCdrNtX E0GFvY9PIGIc2oSqW/KZR7qgEYOHcVrLX3e2FtApw1O7pN4AA4saryW/vVzYcq6C w1WVZxlaSox9YDzY8MsboVG2O3eL+nDKZ45xoiiMJ6CyecltoqWCh90z7OOeaJhs TpiC3sxQC/wgaz/qYCMUWGHXjxetpSHQYqXvd6D/q2hFoQ6L1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdYihrPx+f9Qwdao/ckq/tZEFwzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNh YmNlZi00N2ZmLTQyNjctOTE5OC1lYjYyOGFiYTc4NDIvZjRlMWI2NGUtMWNhMi0z YTkxLWE3NjUtYzNiOGUwZTI2MGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDYzYWJjZWYtNDdmZi00MjY3LTkx OTgtZWI2MjhhYmE3ODQyLzA2M2FiY2VmLTQ3ZmYtNDI2Ny05MTk4LWViNjI4YWJh Nzg0Mi5jcmwwHwYDVR0jBBgwFoAULT+tbVsf5f5/PtsiKw72zM1ofcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNhYmNlZi00N2ZmLTQyNjctOTE5OC1lYjYy OGFiYTc4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEStYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0uQcpkj4STur8N2mrfya9inReSesRNAlBiSHbiJQZC9qx/y9BGa/wO eK2O/49sP+IhsXf9ldRgL5lIz2LcgkIsyyRfUthmnuDE5lSb5OXDb5zJeehSECFc B0j7S99UCRQiz0XoWRbfpHTTYuQExHLVfDI4d3xA/EvKFNeYFy+7sc52WxMIFbIA 79mN4jYSoMyTwcozAfoG5FoDbR80ozAqDGsiIlh8omXNGEWi6uw0qydhh8Ze6S80 DxSGd/h19r16ik/+FRgHonEYd6wOH7WgLz4jgFzosWcQOJADzIHquQ61JJfz3l1Z DLuw96T5wnNMwM44Afmc1wtrV+y3+tc= -----END CERTIFICATE-----Generated at Mon Mar 2 06:32:42 2026 by rpki-client