$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/961e218f-e6a8-392a-bd8b-e2150dd89c85.roa File: 961e218f-e6a8-392a-bd8b-e2150dd89c85.roa (raw, json) Hash identifier: osUg35rCk8BQEweUsU8hPkhA+gzA6u7+hb3LHT5Kzzw= Subject key identifier: 95:5E:1D:96:13:43:4C:8F:5B:38:10:6B:B3:42:13:70:14:45:F1:06 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584CC6D01C25EEE16F4BAECF8780 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/961e218f-e6a8-392a-bd8b-e2150dd89c85.roa Signing time: Fri 06 Feb 2026 20:24:00 +0000 ROA not before: Fri 06 Feb 2026 20:24:00 +0000 ROA not after: Thu 07 May 2026 19:24:00 +0000 asID: 62651 IP address blocks: 207.204.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:d0:1c:25:ee:e1:6f:4b:ae:cf:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 6 20:24:00 2026 GMT Not After : May 7 19:24:00 2026 GMT Subject: CN=fee97234-e3ee-4b5d-a1c7-32214d0a82f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8d:08:8c:54:17:63:71:bf:2c:d5:1d:7c:8f: 2b:67:31:41:c3:d3:a8:f0:02:17:13:9c:d9:a9:56: f0:7b:11:f8:25:2b:f4:6a:1b:f1:76:a4:fe:7c:d7: ec:10:34:d5:f7:c5:0c:17:34:62:45:0f:42:3a:72: 73:38:15:a1:ca:0d:77:44:01:26:30:79:56:9c:59: 72:6f:b1:18:cb:3e:1f:94:08:eb:87:f7:b2:4d:41: 75:5a:c8:f7:65:12:a3:89:0b:f7:25:2d:43:5d:84: 7e:a6:c9:2a:9a:6f:2a:9b:90:7d:fc:48:78:a7:71: 27:16:be:34:ea:53:fd:63:da:8f:bc:8a:4b:69:61: 79:d4:9f:3e:86:5f:f7:00:fb:f0:55:ec:56:de:ea: 28:4e:bd:00:0d:18:0d:24:b2:f5:11:ae:3f:02:60: 94:9b:09:54:be:21:4d:45:45:48:c8:04:4f:7b:17: 2e:3c:00:f1:28:12:6f:4d:cb:83:04:5a:1b:e0:1e: b5:95:f1:ab:78:07:e5:d3:dc:84:74:78:0e:f1:34: 1e:fd:9a:4f:dc:d2:9c:0d:53:7a:db:d8:7f:fd:8a: 93:7b:0e:ec:de:e6:9c:b4:e3:0b:15:95:b9:6d:64: 03:bf:9f:97:fd:ec:09:1e:a9:3c:55:db:39:48:e1: 7a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5E:1D:96:13:43:4C:8F:5B:38:10:6B:B3:42:13:70:14:45:F1:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/961e218f-e6a8-392a-bd8b-e2150dd89c85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 207.204.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ae:4d:cf:d2:77:c4:af:d7:4a:7d:27:00:38:09:22:1f:a2: 00:90:ed:89:b3:0f:e2:f2:9e:40:81:dc:7a:30:44:2d:69:52: bc:29:3c:36:da:5b:55:e5:34:42:c6:9d:26:88:f6:6c:ee:56: 49:17:b7:3f:67:88:af:90:f4:44:cc:24:88:eb:01:4f:f8:0b: 81:17:20:75:b0:e3:2d:32:d5:46:9e:54:24:fe:e8:82:0e:ba: 82:cb:15:66:00:1d:74:00:71:6e:a9:24:ff:dc:67:f0:01:d1: 62:1c:71:7a:a2:90:ca:de:95:38:a6:81:8e:64:70:ae:57:d6: 03:07:56:03:35:35:0f:f1:6d:02:71:44:9c:2f:a0:19:2a:68: d1:c0:b6:49:df:83:1d:b8:ac:eb:39:12:55:50:68:53:ca:e8: e9:89:cf:7f:88:b0:f1:a9:2e:d6:36:b8:f8:d3:c7:1f:64:7d: 70:65:0e:5f:bb:f4:0e:1f:bc:a8:6e:1a:71:0e:e0:36:7d:77: 4a:39:56:2b:31:94:a5:ef:27:bf:69:5c:6e:15:d0:df:67:61: d8:71:c7:9b:56:c6:6f:bf:31:8e:b3:d6:6b:71:aa:e7:ab:88: 48:1f:5d:e6:e3:7c:72:3d:91:19:88:ae:91:e9:82:8b:22:2e: f9:c7:d8:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzG0Bwl7uFvS67Ph4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDIwNjIwMjQwMFoXDTI2MDUwNzE5MjQwMFowLzEtMCsGA1UEAxMk ZmVlOTcyMzQtZTNlZS00YjVkLWExYzctMzIyMTRkMGE4MmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY0IjFQXY3G/LNUdfI8rZzFBw9Oo8AIXE5zZ qVbwexH4JSv0ahvxdqT+fNfsEDTV98UMFzRiRQ9COnJzOBWhyg13RAEmMHlWnFly b7EYyz4flAjrh/eyTUF1Wsj3ZRKjiQv3JS1DXYR+pskqmm8qm5B9/Eh4p3EnFr40 6lP9Y9qPvIpLaWF51J8+hl/3APvwVexW3uooTr0ADRgNJLL1Ea4/AmCUmwlUviFN RUVIyARPexcuPADxKBJvTcuDBFob4B61lfGreAfl09yEdHgO8TQe/ZpP3NKcDVN6 29h//YqTew7s3uactOMLFZW5bWQDv5+X/ewJHqk8Vds5SOF6jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVeHZYTQ0yPWzgQa7NCE3AURfEGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvOTYxZTIxOGYtZTZhOC0z OTJhLWJkOGItZTIxNTBkZDg5Yzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8zkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKuTc/Sd8Sv10p9JwA4CSIfogCQ7YmzD+LynkCB3HowRC1pUrwpPDba W1XlNELGnSaI9mzuVkkXtz9niK+Q9ETMJIjrAU/4C4EXIHWw4y0y1UaeVCT+6IIO uoLLFWYAHXQAcW6pJP/cZ/AB0WIccXqikMrelTimgY5kcK5X1gMHVgM1NQ/xbQJx RJwvoBkqaNHAtknfgx24rOs5ElVQaFPK6OmJz3+IsPGpLtY2uPjTxx9kfXBlDl+7 9A4fvKhuGnEO4DZ9d0o5VisxlKXvJ79pXG4V0N9nYdhxx5tWxm+/MY6z1mtxquer iEgfXebjfHI9kRmIrpHpgosiLvnH2Ks= -----END CERTIFICATE-----Generated at Mon Mar 2 14:18:53 2026 by rpki-client