$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2c9098e1-8590-3ce4-a313-bf25729c2190.roa File: 2c9098e1-8590-3ce4-a313-bf25729c2190.roa (raw, json) Hash identifier: WVdqe/5cXcD6+7u9j0lXWRHyfbRnY0D1sAp8p5r38Hk= Subject key identifier: FA:17:E7:F4:76:E0:C4:36:13:7E:6E:5D:65:9A:D7:6B:C4:71:9F:33 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584CF9B78605A11BF9AF3D10B380 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2c9098e1-8590-3ce4-a313-bf25729c2190.roa Signing time: Wed 25 Feb 2026 02:00:32 +0000 ROA not before: Wed 25 Feb 2026 02:00:32 +0000 ROA not after: Tue 26 May 2026 01:00:32 +0000 asID: 398420 IP address blocks: 216.246.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:b7:86:05:a1:1b:f9:af:3d:10:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Feb 25 02:00:32 2026 GMT Not After : May 26 01:00:32 2026 GMT Subject: CN=5181723d-28e7-4fa3-b437-29c5175af9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1a:7b:e2:32:44:a1:e1:28:b4:22:3e:c6:55: b0:f6:e2:b6:e2:20:af:28:6a:3b:52:f8:e8:5d:1a: ee:5a:66:c6:56:26:28:c8:6f:9f:9c:86:da:85:d4: f3:17:e7:ca:8b:7d:e3:b7:0b:5e:98:17:ff:39:eb: db:3b:d1:a9:16:63:8e:2b:c6:d7:fd:f4:30:a1:cc: 1a:db:ea:2f:69:71:da:8e:75:9f:e1:1a:87:8f:54: 02:e0:0d:0b:bb:f1:b0:5d:7a:0a:04:1d:74:4e:09: 4b:fd:20:91:a8:04:91:01:d2:72:b8:3f:c5:56:15: a0:e5:7e:17:c7:f2:81:b7:c2:f1:79:f1:34:ce:a1: 0f:97:62:c2:c9:0b:44:4e:f9:6c:6a:38:17:12:42: 03:82:40:4f:7c:c5:e6:00:49:3d:23:9c:f3:87:c9: c9:f9:e1:fc:f3:1d:12:76:a4:50:7d:69:38:66:ea: 31:7f:b8:93:ca:1b:56:82:6d:c8:8b:d3:bb:04:0f: fa:a6:fa:fd:7c:a2:aa:dd:c3:88:86:ba:72:43:97: 3e:e2:3a:08:a3:14:92:e1:52:f7:95:a1:9c:9b:d9: 27:c1:44:29:b0:45:14:7a:6f:c8:ff:de:5b:99:77: f5:24:08:9a:44:54:4b:d0:d3:32:4c:6e:86:d7:f4: f2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:17:E7:F4:76:E0:C4:36:13:7E:6E:5D:65:9A:D7:6B:C4:71:9F:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2c9098e1-8590-3ce4-a313-bf25729c2190.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:0c:fa:06:0e:ea:0a:4e:53:52:6f:3f:0b:f7:4e:46:fa:77: cb:b4:e4:1e:a3:86:1c:bf:e7:ec:1d:b5:9d:53:73:78:1d:8b: 4c:0b:99:51:a4:20:72:a6:a0:11:61:8c:1f:df:31:a1:af:67: 16:80:15:6d:a5:9c:90:be:5c:f2:71:69:04:b4:93:d1:26:c5: ac:e5:73:fc:d3:c1:33:2f:00:4e:5b:a3:82:37:47:65:d8:9c: 59:e4:b3:21:4d:37:56:bb:23:9a:cf:67:15:57:5d:4e:e0:3c: bd:70:c2:55:e9:d1:d8:72:0e:1e:de:ed:0c:10:40:f4:82:18: 63:f2:fe:2d:6a:ee:7f:bb:4b:81:b4:37:56:47:43:91:d9:39: 0f:1a:6f:a4:8b:ed:3d:7c:7b:43:f3:f3:3e:27:8f:ab:ea:35: 77:99:4c:9c:9c:b9:80:1d:ef:e0:4d:fd:6a:8e:a6:c9:14:06: 90:80:35:39:17:a1:3e:64:9e:91:d1:fb:dc:7b:0c:26:3f:8b: 07:05:59:a6:f1:86:6f:ff:2a:44:e3:72:8d:a0:99:27:03:67: 9a:d6:fe:7b:90:30:69:97:3c:e2:03:c2:aa:90:fc:14:f1:cb: 0a:1b:a4:a6:03:ec:23:c2:a4:e7:10:a8:35:f4:47:96:7d:16: 4f:1a:b4:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz5t4YFoRv5rz0Qs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDIyNTAyMDAzMloXDTI2MDUyNjAxMDAzMlowLzEtMCsGA1UEAxMk NTE4MTcyM2QtMjhlNy00ZmEzLWI0MzctMjljNTE3NWFmOWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRp74jJEoeEotCI+xlWw9uK24iCvKGo7Uvjo XRruWmbGViYoyG+fnIbahdTzF+fKi33jtwtemBf/OevbO9GpFmOOK8bX/fQwocwa 2+ovaXHajnWf4RqHj1QC4A0Lu/GwXXoKBB10TglL/SCRqASRAdJyuD/FVhWg5X4X x/KBt8LxefE0zqEPl2LCyQtETvlsajgXEkIDgkBPfMXmAEk9I5zzh8nJ+eH88x0S dqRQfWk4Zuoxf7iTyhtWgm3Ii9O7BA/6pvr9fKKq3cOIhrpyQ5c+4joIoxSS4VL3 laGcm9knwUQpsEUUem/I/95bmXf1JAiaRFRL0NMyTG6G1/TyEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoX5/R24MQ2E35uXWWa12vEcZ8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMmM5MDk4ZTEtODU5MC0z Y2U0LWEzMTMtYmYyNTcyOWMyMTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUM+gYO6gpOU1JvPwv3Tkb6d8u05B6jhhy/5+wdtZ1Tc3gdi0wLmVGk IHKmoBFhjB/fMaGvZxaAFW2lnJC+XPJxaQS0k9Emxazlc/zTwTMvAE5bo4I3R2XY nFnksyFNN1a7I5rPZxVXXU7gPL1wwlXp0dhyDh7e7QwQQPSCGGPy/i1q7n+7S4G0 N1ZHQ5HZOQ8ab6SL7T18e0Pz8z4nj6vqNXeZTJycuYAd7+BN/WqOpskUBpCANTkX oT5knpHR+9x7DCY/iwcFWabxhm//KkTjco2gmScDZ5rW/nuQMGmXPOIDwqqQ/BTx ywobpKYD7CPCpOcQqDX0R5Z9Fk8atJU= -----END CERTIFICATE-----Generated at Mon Mar 2 13:22:28 2026 by rpki-client