$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa File: 2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa (raw, json) Hash identifier: MPj6zR9Z+5PR3ob7546/jRN6vF18eGqDny6rYx3pfss= Subject key identifier: 2C:CA:1A:25:45:20:31:67:AB:1D:37:E9:0E:EF:27:AC:2B:43:2D:E5 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584CF9B78A41400C9EE2C01AD8C0 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa Signing time: Wed 25 Feb 2026 02:00:32 +0000 ROA not before: Wed 25 Feb 2026 02:00:32 +0000 ROA not after: Tue 26 May 2026 01:00:32 +0000 asID: 398420 IP address blocks: 74.115.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:b7:8a:41:40:0c:9e:e2:c0:1a:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Feb 25 02:00:32 2026 GMT Not After : May 26 01:00:32 2026 GMT Subject: CN=1abf6c6a-7ca1-422e-ab5f-cc490d143f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:02:9d:56:8c:36:b5:9f:a0:0f:b2:da:64:21: 14:99:f8:dd:e8:3e:86:c3:94:fe:3c:36:04:eb:b9: 52:b3:26:43:5c:d1:59:c4:91:16:03:cf:c4:39:0d: 7d:2d:42:03:4c:0e:f1:e9:75:0e:bc:68:65:0a:b2: e3:dc:98:fb:71:5d:fb:a4:9f:c5:82:57:f1:ac:b7: 80:35:1a:ce:0e:df:17:fc:ba:80:fe:13:38:c0:5d: 75:ba:18:77:6e:31:d5:b7:af:2e:ea:f5:55:ac:dc: 95:82:ad:c0:01:18:6e:b7:af:9b:e0:db:61:e5:02: 4d:02:8b:5f:7b:0d:58:a4:a0:77:af:44:e4:19:50: 2b:56:c2:ef:78:53:7c:e7:0a:d7:6b:ea:39:25:f6: 23:36:97:a6:6f:9c:b9:3a:73:9e:3a:d1:b5:a4:9d: 13:b7:bc:b7:a6:fb:b9:88:85:f4:7a:3e:20:07:30: 73:b4:6e:50:7c:05:30:42:30:62:a7:49:32:c3:41: 22:cd:3e:a3:97:8c:d2:4b:5f:a7:ed:93:cd:34:b5: be:2f:13:2a:14:92:f4:49:47:91:be:73:a8:a4:bf: 4a:93:90:bf:64:9f:bb:44:08:d7:e7:67:08:57:81: ca:ce:d0:ce:f5:6d:ad:85:eb:1c:4e:bc:9b:10:52: 7e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CA:1A:25:45:20:31:67:AB:1D:37:E9:0E:EF:27:AC:2B:43:2D:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.115.80.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:88:dd:e8:d4:06:77:a0:b1:8e:d6:e0:d1:59:59:ef:1a:99: 04:29:8d:9b:35:64:5d:b7:1e:66:1a:66:dd:cd:8c:c6:fc:94: 6b:b0:77:1c:76:3c:ca:86:6b:e1:4a:97:f9:78:56:88:4c:47: d8:cf:b1:36:4c:e0:35:b7:69:d8:45:78:47:28:8d:4f:0f:b2: ae:d4:6a:d7:03:7f:87:ae:3b:3c:6e:64:6d:45:e4:ce:18:3e: b4:37:6a:aa:5d:a3:09:ef:c5:87:07:ed:15:75:db:e0:c7:2a: 63:08:18:b8:52:a7:8e:24:78:02:25:77:ad:0b:2b:bf:46:c0: 53:ed:95:9a:fb:fd:5b:7f:ba:37:3e:88:89:58:0f:f6:cf:f3: 57:07:21:d7:e7:38:4c:f6:ef:ab:95:83:c2:16:33:69:05:04: 09:9c:fe:4c:75:c3:e2:e3:f4:b8:12:1a:56:e9:5c:82:2a:b2: 5c:7b:c9:81:23:bf:b7:e6:dd:c6:0c:23:61:84:fa:22:84:42: 11:63:83:92:f7:93:da:00:26:d5:b9:8a:36:49:3e:49:4a:da: c1:5d:6f:e1:e7:bc:cc:3a:b4:82:97:76:8f:97:f9:88:b9:fb: ff:98:32:34:38:93:c6:43:e9:b4:47:b8:d4:dd:10:38:68:c2: 6b:67:f1:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz5t4pBQAye4sAa2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDIyNTAyMDAzMloXDTI2MDUyNjAxMDAzMlowLzEtMCsGA1UEAxMk MWFiZjZjNmEtN2NhMS00MjJlLWFiNWYtY2M0OTBkMTQzZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQKdVow2tZ+gD7LaZCEUmfjd6D6Gw5T+PDYE 67lSsyZDXNFZxJEWA8/EOQ19LUIDTA7x6XUOvGhlCrLj3Jj7cV37pJ/FglfxrLeA NRrODt8X/LqA/hM4wF11uhh3bjHVt68u6vVVrNyVgq3AARhut6+b4Nth5QJNAotf ew1YpKB3r0TkGVArVsLveFN85wrXa+o5JfYjNpemb5y5OnOeOtG1pJ0Tt7y3pvu5 iIX0ej4gBzBztG5QfAUwQjBip0kyw0EizT6jl4zSS1+n7ZPNNLW+LxMqFJL0SUeR vnOopL9Kk5C/ZJ+7RAjX52cIV4HKztDO9W2thescTrybEFJ+FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzKGiVFIDFnqx036Q7vJ6wrQy3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMjk0OWJjMjEtOGI4OC0z NmEzLTgwZjYtN2Q4NjJiMmYwYzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSnNQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2I3ejUBnegsY7W4NFZWe8amQQpjZs1ZF23HmYaZt3NjMb8lGuwdxx2 PMqGa+FKl/l4VohMR9jPsTZM4DW3adhFeEcojU8Psq7UatcDf4euOzxuZG1F5M4Y PrQ3aqpdownvxYcH7RV12+DHKmMIGLhSp44keAIld60LK79GwFPtlZr7/Vt/ujc+ iIlYD/bP81cHIdfnOEz276uVg8IWM2kFBAmc/kx1w+Lj9LgSGlbpXIIqslx7yYEj v7fm3cYMI2GE+iKEQhFjg5L3k9oAJtW5ijZJPklK2sFdb+HnvMw6tIKXdo+X+Yi5 +/+YMjQ4k8ZD6bRHuNTdEDhowmtn8fg= -----END CERTIFICATE-----Generated at Mon Mar 2 12:18:26 2026 by rpki-client