$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/0867b451-b315-3f3b-bed4-0121ba565f01.roa File: 0867b451-b315-3f3b-bed4-0121ba565f01.roa (raw, json) Hash identifier: 1MF2xlTLcmEGWVVWLUuImic/BGDOeuJJXGKts8xjWlM= Subject key identifier: 47:0B:FD:87:D0:B5:87:B6:94:71:4A:39:11:49:2E:2F:BD:63:C6:01 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584CF9B78636EF8DDB2F555B4640 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/0867b451-b315-3f3b-bed4-0121ba565f01.roa Signing time: Wed 25 Feb 2026 02:00:32 +0000 ROA not before: Wed 25 Feb 2026 02:00:32 +0000 ROA not after: Tue 26 May 2026 01:00:32 +0000 asID: 398420 IP address blocks: 216.246.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:b7:86:36:ef:8d:db:2f:55:5b:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Feb 25 02:00:32 2026 GMT Not After : May 26 01:00:32 2026 GMT Subject: CN=d591b1f5-951e-4f40-8309-9a41966c0941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e5:57:05:d7:8c:d6:53:ec:22:78:af:42:d0: 89:0f:c3:5a:5d:fb:7d:48:bb:cf:87:48:2a:bf:54: 4b:b3:5f:0a:5a:ee:55:19:b0:29:00:ec:d6:2a:b8: 8b:37:62:9f:93:e5:f6:b7:e3:ec:c0:07:29:cd:3e: 7d:f5:49:f2:f0:39:29:9d:32:87:cd:59:37:aa:d5: 93:75:32:ef:eb:85:c8:eb:b2:9f:8b:74:b2:fa:d6: ed:28:49:10:db:8b:50:a2:94:c2:84:b3:88:f5:74: a7:28:37:af:27:0a:ba:9b:26:8b:54:55:a6:65:54: 28:89:ee:74:3d:56:03:3e:5f:2b:a2:0e:5b:61:53: dd:04:26:b0:02:42:05:9d:43:a2:43:a6:a6:6e:91: fa:9e:5e:f3:19:b2:5a:69:7d:1a:2c:fa:fd:74:66: 97:99:2c:c0:63:57:3e:0f:86:5e:54:f1:32:42:c4: 57:cb:6c:d9:14:4c:4b:b6:aa:80:d7:9f:ab:3b:02: ca:fe:f6:26:22:3e:c3:a4:7c:04:f5:73:a6:f9:ec: 30:3c:f9:ba:a8:bc:b5:b3:75:6f:08:84:c4:2f:f9: ae:8f:93:89:7d:5d:48:23:57:ad:59:4c:73:a0:eb: ca:55:04:c7:6a:7d:6c:08:6f:f5:a6:6d:10:ea:5c: 9f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0B:FD:87:D0:B5:87:B6:94:71:4A:39:11:49:2E:2F:BD:63:C6:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/0867b451-b315-3f3b-bed4-0121ba565f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:67:a4:e4:9f:ea:1f:25:71:52:50:4c:a4:e7:74:22:86:0f: a6:5c:55:04:bb:ac:c2:19:29:63:89:f9:aa:34:8b:41:6b:35: dd:1b:c7:9b:48:bd:42:f9:57:43:80:9f:48:d9:52:c4:14:0f: 11:e3:b1:ea:8d:5a:77:38:5e:a4:e8:32:bd:f1:93:e3:6b:f4: f3:08:e1:73:a0:58:0a:62:12:2a:6c:fa:ea:fe:bc:89:9b:ee: f9:a4:4d:95:a8:d9:51:a7:3f:17:81:ad:f6:a9:ef:85:0a:f2: 42:da:70:5c:e9:f1:52:cb:31:81:b2:72:d4:34:16:e7:fa:7e: 34:ca:fd:a3:83:e9:8b:55:66:94:06:53:1f:94:e6:dd:ce:e0: 60:4e:84:86:b2:84:02:7e:10:59:52:8a:f3:7c:75:67:a6:5d: 3f:51:17:6d:b3:54:98:81:92:b7:b4:9d:8e:c2:db:97:a6:91: ee:15:d4:f4:9e:24:28:6b:72:2b:93:6a:79:5e:f3:4d:a5:c9: cb:ed:02:0d:de:48:9b:6a:17:eb:50:13:c3:e3:5c:6a:62:06: 36:17:72:34:e7:6f:05:05:07:58:cb:0b:db:50:c2:71:c3:84: e8:76:c5:b2:d2:c5:2a:cd:5c:f4:f3:cd:24:93:ff:69:06:e2: 67:85:5b:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz5t4Y2743bL1VbRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDIyNTAyMDAzMloXDTI2MDUyNjAxMDAzMlowLzEtMCsGA1UEAxMk ZDU5MWIxZjUtOTUxZS00ZjQwLTgzMDktOWE0MTk2NmMwOTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOVXBdeM1lPsInivQtCJD8NaXft9SLvPh0gq v1RLs18KWu5VGbApAOzWKriLN2Kfk+X2t+PswAcpzT599Uny8DkpnTKHzVk3qtWT dTLv64XI67Kfi3Sy+tbtKEkQ24tQopTChLOI9XSnKDevJwq6myaLVFWmZVQoie50 PVYDPl8rog5bYVPdBCawAkIFnUOiQ6ambpH6nl7zGbJaaX0aLPr9dGaXmSzAY1c+ D4ZeVPEyQsRXy2zZFExLtqqA15+rOwLK/vYmIj7DpHwE9XOm+ewwPPm6qLy1s3Vv CITEL/muj5OJfV1II1etWUxzoOvKVQTHan1sCG/1pm0Q6lyf9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcL/YfQtYe2lHFKORFJLi+9Y8YBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMDg2N2I0NTEtYjMxNS0z ZjNiLWJlZDQtMDEyMWJhNTY1ZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PbdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1npOSf6h8lcVJQTKTndCKGD6ZcVQS7rMIZKWOJ+ao0i0FrNd0bx5tI vUL5V0OAn0jZUsQUDxHjseqNWnc4XqToMr3xk+Nr9PMI4XOgWApiEips+ur+vImb 7vmkTZWo2VGnPxeBrfap74UK8kLacFzp8VLLMYGyctQ0Fuf6fjTK/aOD6YtVZpQG Ux+U5t3O4GBOhIayhAJ+EFlSivN8dWemXT9RF22zVJiBkre0nY7C25emke4V1PSe JChrciuTanle802lycvtAg3eSJtqF+tQE8PjXGpiBjYXcjTnbwUFB1jLC9tQwnHD hOh2xbLSxSrNXPTzzSST/2kG4meFW7M= -----END CERTIFICATE-----Generated at Mon Mar 2 11:11:39 2026 by rpki-client