$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa File: cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa (raw, json) Hash identifier: dLQRh2EvDcaS9aPwCT44oNpCo8wSMFVUaDEeA9gGh+s= Subject key identifier: BD:0D:8D:04:B3:41:3C:4F:E6:1A:ED:FA:96:C4:51:17:01:A3:1C:AA Certificate issuer: /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Certificate serial: 010D0C9F4328584CDC6771FB3219046D0216A100 Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 202888 IP address blocks: 174.136.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:71:fb:32:19:04:6d:02:16:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=5b752556-abab-4beb-9b1d-9dc00a9d09b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:28:8a:8b:47:1d:a0:e3:40:af:8d:14:43:1e: 54:a4:85:1e:01:9e:20:7e:19:ac:9a:32:c5:98:3b: 04:23:30:c0:1e:6f:c4:a5:4d:38:36:ed:31:23:df: 41:03:fe:f5:d0:76:fb:3b:ad:ac:46:01:4a:37:8b: 27:37:9d:34:7e:14:3c:a9:c0:83:64:fd:b9:d0:2b: a2:0b:44:97:67:73:6f:0d:cf:4f:f9:c9:57:9e:12: 79:bf:85:f4:67:6e:52:f8:9c:7a:02:a8:25:59:37: 31:2f:91:82:be:83:64:5a:8d:1f:37:a5:9e:de:67: 04:5f:0f:6e:6c:58:3c:da:ae:59:28:0a:3e:63:53: 34:79:c9:47:b1:4f:14:66:02:9d:16:af:19:da:cd: a8:e6:a8:60:2a:22:12:48:8f:f1:4a:0a:8a:fb:86: f4:13:36:e4:b8:fb:3c:34:e5:95:85:79:46:dd:81: 6d:e6:d1:6a:c3:57:4b:ce:4e:e6:59:3f:fd:fa:87: 13:64:92:92:4c:7e:05:81:a8:7e:93:e3:5e:02:05: 1d:cb:c4:db:f2:2f:ee:d1:9a:32:b4:d1:90:79:33: 64:e4:0a:5c:cd:ff:07:24:cc:78:3c:e0:6d:08:8c: 08:d9:fa:f3:f4:0f:6c:46:a1:82:77:6f:3c:11:e4: 05:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0D:8D:04:B3:41:3C:4F:E6:1A:ED:FA:96:C4:51:17:01:A3:1C:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl X509v3 Authority Key Identifier: keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer sbgp-ipAddrBlock: critical IPv4: 174.136.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:4e:64:04:27:f2:9c:05:e3:a1:32:f4:c3:bf:21:d9:56:28: 0e:ce:e4:96:6e:e7:eb:5a:63:44:ce:db:4a:c0:1f:72:0f:f7: b7:cb:f9:05:b3:85:30:5b:5c:f9:7b:4d:b1:6d:0b:9a:64:55: 85:07:a0:9d:a1:8d:4e:9f:5e:d4:16:2e:15:b6:a4:4f:c4:28: 59:4d:b4:f5:04:d2:1b:3b:1d:b9:d0:bd:92:6f:ef:42:2c:cc: 70:ea:41:9a:10:66:b0:b5:9f:50:e5:c6:47:b3:ae:f4:a5:c1: f3:2a:1d:51:92:f3:f6:99:1b:03:40:f3:b7:5f:34:31:6e:a8: 1b:fc:65:70:a6:74:42:53:63:c7:41:88:db:4b:6e:a8:6f:90: c8:2b:08:cb:11:7f:c8:b7:5a:43:00:89:23:cd:e2:10:40:44: f5:5a:dc:f7:08:83:b6:f8:42:bd:03:d1:72:b7:76:5b:cd:30: f9:ba:a4:48:b7:5f:a7:a8:b7:ea:69:3e:8c:be:25:10:2e:d1: 49:02:32:41:38:86:f6:ad:24:63:c5:ff:e4:f6:c0:5b:4b:d4: 04:f2:28:22:13:ae:11:a2:c5:d9:a6:46:42:61:b5:1b:1b:4b: d7:60:78:00:e2:3b:30:ff:33:31:6d:e1:1a:85:80:cf:e5:fc: 9f:1e:2c:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ3H7MhkEbQIWoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYxOTM3M2ItMmNjNS00MGY0LWE2ZDAtN2NjYWNjNjM0 ODU3MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk NWI3NTI1NTYtYWJhYi00YmViLTliMWQtOWRjMDBhOWQwOWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCiKi0cdoONAr40UQx5UpIUeAZ4gfhmsmjLF mDsEIzDAHm/EpU04Nu0xI99BA/710Hb7O62sRgFKN4snN500fhQ8qcCDZP250Cui C0SXZ3NvDc9P+clXnhJ5v4X0Z25S+Jx6AqglWTcxL5GCvoNkWo0fN6We3mcEXw9u bFg82q5ZKAo+Y1M0eclHsU8UZgKdFq8Z2s2o5qhgKiISSI/xSgqK+4b0EzbkuPs8 NOWVhXlG3YFt5tFqw1dLzk7mWT/9+ocTZJKSTH4Fgah+k+NeAgUdy8Tb8i/u0Zoy tNGQeTNk5Apczf8HJMx4POBtCIwI2frz9A9sRqGCd288EeQFiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0NjQSzQTxP5hrt+pbEURcBoxyqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5 MzczYi0yY2M1LTQwZjQtYTZkMC03Y2NhY2M2MzQ4NTcvY2IzMmNlNjktYmU0OC0z NGU1LTlmOTAtNmE1YWZiOGZhOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGYxOTM3M2ItMmNjNS00MGY0LWE2 ZDAtN2NjYWNjNjM0ODU3LzBmMTkzNzNiLTJjYzUtNDBmNC1hNmQwLTdjY2FjYzYz NDg1Ny5jcmwwHwYDVR0jBBgwFoAUp46RWPy5WfebiT1L1fsMf5AC/TMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5MzczYi0yY2M1LTQwZjQtYTZkMC03Y2Nh Y2M2MzQ4NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArojuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxOZAQn8pwF46Ey9MO/IdlWKA7O5JZu5+taY0TO20rAH3IP97fL+QWz hTBbXPl7TbFtC5pkVYUHoJ2hjU6fXtQWLhW2pE/EKFlNtPUE0hs7HbnQvZJv70Is zHDqQZoQZrC1n1DlxkezrvSlwfMqHVGS8/aZGwNA87dfNDFuqBv8ZXCmdEJTY8dB iNtLbqhvkMgrCMsRf8i3WkMAiSPN4hBARPVa3PcIg7b4Qr0D0XK3dlvNMPm6pEi3 X6eot+ppPoy+JRAu0UkCMkE4hvatJGPF/+T2wFtL1ATyKCITrhGixdmmRkJhtRsb S9dgeADiOzD/MzFt4RqFgM/l/J8eLAA= -----END CERTIFICATE-----Generated at Mon Mar 2 08:20:31 2026 by rpki-client