$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/bdc3f3bf-11b9-36cd-9fc9-813d5cd26786.roa File: bdc3f3bf-11b9-36cd-9fc9-813d5cd26786.roa (raw, json) Hash identifier: maNx7mHrvcoCBKyvZLx+cTSTGqZA/Oupckv6MuEnJDg= Subject key identifier: 36:45:AE:E0:A8:96:CE:78:47:49:A0:5F:AC:63:DC:F5:27:DA:0D:3F Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584CE50D88566B097C53406E6CE0 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/bdc3f3bf-11b9-36cd-9fc9-813d5cd26786.roa Signing time: Tue 17 Feb 2026 16:22:01 +0000 ROA not before: Tue 17 Feb 2026 16:22:01 +0000 ROA not after: Mon 18 May 2026 15:22:01 +0000 asID: 21949 IP address blocks: 167.254.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e5:0d:88:56:6b:09:7c:53:40:6e:6c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Feb 17 16:22:01 2026 GMT Not After : May 18 15:22:01 2026 GMT Subject: CN=da2e871d-2e37-478d-adda-66414613a6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:85:8e:5c:1a:49:5d:05:26:57:de:84:15:94: 51:58:96:f7:5b:1d:0f:c0:fa:5c:e5:74:85:07:91: e9:7c:83:ce:88:b0:82:a3:f5:9b:4f:ac:a7:21:ab: 70:73:df:6c:63:43:96:03:13:a6:2f:a9:f6:e7:f2: 63:fd:3c:47:a9:43:c5:86:6d:48:98:40:c2:01:5f: f6:e6:ee:74:38:66:89:8d:71:19:51:7a:db:59:93: 9a:ed:f7:12:c0:54:1a:37:c1:a4:ae:6e:03:e7:65: dc:54:51:d1:3b:34:df:e8:65:03:c8:dc:fc:b8:70: 4d:6d:13:b6:be:1f:32:16:94:43:81:ef:1f:71:03: 7c:f7:86:44:a9:27:d0:62:6f:7e:10:30:cf:49:42: b7:47:75:c2:7a:7e:a4:50:9e:29:bf:89:5d:20:37: cd:b5:86:33:93:00:56:59:90:98:57:23:31:cd:17: 5b:0e:d4:ca:e7:45:1d:a5:f9:f6:c4:44:82:9d:58: 22:2a:2c:8d:58:87:18:2a:59:c3:d5:d2:f6:aa:c1: a5:bf:b0:18:d3:5f:f5:b8:c7:4f:c6:68:44:8a:c5: d6:c8:fb:d2:2d:7f:a1:5c:15:c5:d8:b3:ce:b3:bd: a1:49:84:4a:9b:60:a7:e7:d1:e6:90:40:05:cd:8f: 02:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:45:AE:E0:A8:96:CE:78:47:49:A0:5F:AC:63:DC:F5:27:DA:0D:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/bdc3f3bf-11b9-36cd-9fc9-813d5cd26786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 167.254.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:5f:6c:73:f3:16:94:18:7d:1c:8b:2e:b5:59:0b:81:7d:c0: 01:2f:67:3c:3e:35:81:0f:3e:af:81:e4:6f:9a:a9:0c:8d:bf: c1:81:72:28:c0:c7:b6:fd:d6:39:88:ed:53:05:6f:4c:40:b5: 14:d7:32:91:5b:20:81:b3:1a:b5:fc:54:08:63:65:32:88:e9: d7:0d:15:64:d2:9f:3f:38:7c:71:8d:d2:b7:5b:18:f8:f4:1f: a1:7a:c7:42:fd:05:00:3c:7a:64:65:a0:17:54:48:93:2f:b3: 4c:85:92:b6:cc:f1:5f:77:6f:3d:f2:c5:0b:5a:78:7c:9c:72: 31:55:cd:05:15:bc:22:19:19:c2:8c:60:31:49:d5:e4:dd:5b: 95:21:c7:25:f5:d0:7a:bc:c3:dc:ba:ac:4a:5e:5f:30:f3:4e: d4:26:40:ee:9a:86:41:4b:ec:1f:df:8c:c6:82:b1:43:81:03: 61:8d:12:ed:9c:dd:9c:a6:a2:3f:8e:5a:e2:68:40:28:c0:a9: f9:3c:01:95:4a:3a:13:37:e2:1a:18:bd:81:c5:dc:96:34:e3: 65:72:6f:07:91:6f:a5:6c:eb:03:ad:6a:a3:71:2a:76:18:3d: 4c:43:56:cd:9d:e3:7e:a9:b0:01:54:ad:de:c4:56:56:6d:24: b7:ed:3a:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzlDYhWawl8U0BubOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDIxNzE2MjIwMVoXDTI2MDUxODE1MjIwMVowLzEtMCsGA1UEAxMk ZGEyZTg3MWQtMmUzNy00NzhkLWFkZGEtNjY0MTQ2MTNhNmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14WOXBpJXQUmV96EFZRRWJb3Wx0PwPpc5XSF B5HpfIPOiLCCo/WbT6ynIatwc99sY0OWAxOmL6n25/Jj/TxHqUPFhm1ImEDCAV/2 5u50OGaJjXEZUXrbWZOa7fcSwFQaN8Gkrm4D52XcVFHROzTf6GUDyNz8uHBNbRO2 vh8yFpRDge8fcQN894ZEqSfQYm9+EDDPSUK3R3XCen6kUJ4pv4ldIDfNtYYzkwBW WZCYVyMxzRdbDtTK50Udpfn2xESCnVgiKiyNWIcYKlnD1dL2qsGlv7AY01/1uMdP xmhEisXWyPvSLX+hXBXF2LPOs72hSYRKm2Cn59HmkEAFzY8CGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZFruCols54R0mgX6xj3PUn2g0/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYmRjM2YzYmYtMTFiOS0z NmNkLTlmYzktODEzZDVjZDI2Nzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEp/6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5fbHPzFpQYfRyLLrVZC4F9wAEvZzw+NYEPPq+B5G+aqQyNv8GBcijA x7b91jmI7VMFb0xAtRTXMpFbIIGzGrX8VAhjZTKI6dcNFWTSnz84fHGN0rdbGPj0 H6F6x0L9BQA8emRloBdUSJMvs0yFkrbM8V93bz3yxQtaeHyccjFVzQUVvCIZGcKM YDFJ1eTdW5UhxyX10Hq8w9y6rEpeXzDzTtQmQO6ahkFL7B/fjMaCsUOBA2GNEu2c 3Zymoj+OWuJoQCjAqfk8AZVKOhM34hoYvYHF3JY042VybweRb6Vs6wOtaqNxKnYY PUxDVs2d436psAFUrd7EVlZtJLftOlw= -----END CERTIFICATE-----Generated at Mon Mar 2 05:53:13 2026 by rpki-client