$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/a7aefd4a-4120-3eaf-bc68-aa2a0da6951a.roa File: a7aefd4a-4120-3eaf-bc68-aa2a0da6951a.roa (raw, json) Hash identifier: 9jbJBQITOggM4pLRSCIFwGRe/mbB1yjcj5OcqZlTtNE= Subject key identifier: 9F:BE:C8:8C:E5:CD:0A:57:9B:52:45:AC:2E:20:D5:F9:39:D0:5A:D9 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584CF9B78657FFEA52C994890300 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/a7aefd4a-4120-3eaf-bc68-aa2a0da6951a.roa Signing time: Wed 25 Feb 2026 02:00:32 +0000 ROA not before: Wed 25 Feb 2026 02:00:32 +0000 ROA not after: Tue 26 May 2026 01:00:32 +0000 asID: 398420 IP address blocks: 216.246.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:b7:86:57:ff:ea:52:c9:94:89:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Feb 25 02:00:32 2026 GMT Not After : May 26 01:00:32 2026 GMT Subject: CN=31e4a01a-8581-454b-b812-0c9c5b7d9409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:80:9c:73:49:21:19:0e:4b:c3:e5:46:47:d8: 52:06:e5:71:e1:4c:be:81:20:8b:61:7a:ec:c3:18: ca:2e:df:9c:80:62:78:3d:a0:0d:35:51:ee:ad:40: a3:75:35:0d:47:66:b1:8c:a7:0b:b5:bc:b3:c1:4d: 18:0a:59:9b:09:71:4c:5c:ec:7e:14:75:78:a9:52: 41:12:66:d3:c5:16:51:0b:e5:50:6b:3d:30:d3:7d: 33:6f:5e:92:09:62:15:61:db:f3:09:31:4e:da:39: d3:8a:8a:80:9c:c3:34:25:af:2c:87:d4:54:ae:d0: 98:44:98:6a:18:87:1a:cc:98:a4:47:73:32:e8:d1: ab:41:d3:4b:e1:be:7f:66:2a:be:11:b2:7a:93:11: 70:c2:0c:b7:cb:f3:8b:d8:f1:52:82:86:56:e0:f1: 0b:65:88:ff:9c:a9:af:6a:94:aa:b7:c3:cc:4e:f3: 19:6d:31:19:37:3f:76:fd:56:b3:2d:a0:4f:a0:8d: fa:99:4a:dd:20:2d:b3:08:d7:14:3f:88:55:6c:78: 41:e3:e4:d9:16:08:c8:98:b1:55:49:1b:db:30:46: 23:19:b4:91:6c:58:cf:1d:4a:ed:fe:47:eb:9c:0b: 7a:32:d5:1f:15:f2:59:6f:11:f3:91:34:03:28:c2: d1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BE:C8:8C:E5:CD:0A:57:9B:52:45:AC:2E:20:D5:F9:39:D0:5A:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/a7aefd4a-4120-3eaf-bc68-aa2a0da6951a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:36:95:3e:6f:02:f1:ea:45:2b:96:0a:d0:c3:ff:27:54:28: 78:6d:f6:62:bd:28:93:c9:fe:bf:55:ea:2f:fc:ba:7f:d5:90: 39:06:d2:e0:c2:5e:52:8f:61:bc:7d:f9:e8:a4:f2:98:e2:e6: c0:2a:8d:a1:b2:4b:65:b1:75:ad:1f:41:40:c4:45:60:94:7e: 4f:49:0e:90:b7:54:6e:f3:6d:61:35:b2:f0:21:d4:e9:89:6a: 6a:62:41:18:0c:f3:9a:6e:75:5d:a8:3d:83:24:e9:74:a4:b9: b9:e7:ec:1e:66:ff:16:9e:ce:b5:67:49:16:87:e5:7d:6d:da: 02:71:a5:1c:0d:e2:d2:69:9c:0c:3e:25:36:d0:68:ec:c4:1f: cf:32:39:e3:e0:49:93:22:9f:45:d6:bc:90:58:e3:3a:87:86: bb:23:bd:09:87:58:29:b3:87:17:e0:69:32:1f:e5:03:c2:ed: bd:4c:83:b7:42:f7:93:4d:c3:c1:25:98:cd:da:a7:83:d6:6b: 91:c7:2d:2c:e9:c7:c5:80:e3:94:be:04:9b:2f:ea:fc:b2:73: 66:33:f6:85:48:65:c8:ee:4b:3a:2f:02:a6:07:e6:ef:e7:e2: 84:b7:94:34:8b:96:50:65:6e:cd:bc:c5:3a:70:fd:1d:dc:d9: b4:31:31:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz5t4ZX/+pSyZSJAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDIyNTAyMDAzMloXDTI2MDUyNjAxMDAzMlowLzEtMCsGA1UEAxMk MzFlNGEwMWEtODU4MS00NTRiLWI4MTItMGM5YzViN2Q5NDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoCcc0khGQ5Lw+VGR9hSBuVx4Uy+gSCLYXrs wxjKLt+cgGJ4PaANNVHurUCjdTUNR2axjKcLtbyzwU0YClmbCXFMXOx+FHV4qVJB EmbTxRZRC+VQaz0w030zb16SCWIVYdvzCTFO2jnTioqAnMM0Ja8sh9RUrtCYRJhq GIcazJikR3My6NGrQdNL4b5/Ziq+EbJ6kxFwwgy3y/OL2PFSgoZW4PELZYj/nKmv apSqt8PMTvMZbTEZNz92/VazLaBPoI36mUrdIC2zCNcUP4hVbHhB4+TZFgjImLFV SRvbMEYjGbSRbFjPHUrt/kfrnAt6MtUfFfJZbxHzkTQDKMLR7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ++yIzlzQpXm1JFrC4g1fk50FrZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvYTdhZWZkNGEtNDEyMC0z ZWFmLWJjNjgtYWEyYTBkYTY5NTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PbfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG02lT5vAvHqRSuWCtDD/ydUKHht9mK9KJPJ/r9V6i/8un/VkDkG0uDC XlKPYbx9+eik8pji5sAqjaGyS2Wxda0fQUDERWCUfk9JDpC3VG7zbWE1svAh1OmJ ampiQRgM85pudV2oPYMk6XSkubnn7B5m/xaezrVnSRaH5X1t2gJxpRwN4tJpnAw+ JTbQaOzEH88yOePgSZMin0XWvJBY4zqHhrsjvQmHWCmzhxfgaTIf5QPC7b1Mg7dC 95NNw8ElmM3ap4PWa5HHLSzpx8WA45S+BJsv6vyyc2Yz9oVIZcjuSzovAqYH5u/n 4oS3lDSLllBlbs28xTpw/R3c2bQxMbo= -----END CERTIFICATE-----Generated at Mon Mar 2 13:19:49 2026 by rpki-client