$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/e4f21359-fbdd-3835-adf4-0aa226c665da.roa File: e4f21359-fbdd-3835-adf4-0aa226c665da.roa (raw, json) Hash identifier: ggJtieA1vsjXCUDz5qYioaBoGBL6DFhlKpzL4PAcUWw= Subject key identifier: E1:CD:21:72:37:1F:AE:25:01:3E:8D:A6:49:CE:CA:93:96:1F:D7:4B Certificate issuer: /CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919 Certificate serial: 010D0C9F4328584CBF172D662FC8DBD9D8747B00 Authority key identifier: 13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/e4f21359-fbdd-3835-adf4-0aa226c665da.roa Signing time: Wed 04 Feb 2026 02:00:31 +0000 ROA not before: Wed 04 Feb 2026 02:00:31 +0000 ROA not after: Tue 05 May 2026 01:00:31 +0000 asID: 202 IP address blocks: 205.233.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bf:17:2d:66:2f:c8:db:d9:d8:74:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919 Validity Not Before: Feb 4 02:00:31 2026 GMT Not After : May 5 01:00:31 2026 GMT Subject: CN=3a53dd28-b909-4b7c-9f1c-39653c6e4a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:20:85:06:77:94:dd:f0:57:ae:b0:b9:e3:90: c7:39:52:6e:d1:4d:97:75:6c:6d:6c:7e:c0:5d:8b: 29:82:dc:fd:3d:c9:e2:03:c6:62:8c:e5:d1:b2:57: 9e:94:8b:81:0f:4b:bc:ae:d9:09:80:eb:18:cb:89: 3c:f0:29:a3:f4:47:03:52:f4:67:9d:20:3b:e3:dd: b4:bc:77:ec:d9:9b:e8:20:c7:a6:b2:81:25:10:a3: 24:63:41:47:c7:63:f0:da:34:1b:55:62:e8:3a:8e: 8f:24:16:4e:8f:d2:ee:7c:be:35:17:49:36:64:49: f5:78:37:85:8c:f4:e8:8d:14:01:61:e8:2b:22:4e: 2e:ab:6e:a9:a5:10:43:cd:f3:62:fe:a2:d8:fd:96: 7b:3a:f8:9c:b9:c9:8f:4e:70:3f:c7:53:ba:d7:5e: 07:75:af:a0:93:77:d4:22:b4:33:79:55:bf:76:45: f8:ef:9a:fc:81:88:a9:5f:64:2d:87:ce:b0:77:cd: eb:a4:62:93:d4:f7:1b:ea:6f:24:19:14:b6:54:7b: a7:96:77:66:47:af:0a:d6:6e:b5:bd:b7:08:0f:58: 6b:c7:e1:33:88:cd:d7:1f:34:3a:d4:30:43:3a:d7: bb:8e:fd:7d:4a:47:e3:a7:3c:3f:9e:bb:c8:9e:86: 7c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CD:21:72:37:1F:AE:25:01:3E:8D:A6:49:CE:CA:93:96:1F:D7:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/e4f21359-fbdd-3835-adf4-0aa226c665da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl X509v3 Authority Key Identifier: keyid:13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer sbgp-ipAddrBlock: critical IPv4: 205.233.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:af:23:c8:44:c3:4b:a9:0d:d8:06:ff:bd:af:29:4e:72:94: b0:1d:34:24:cc:ea:5a:2a:6c:e0:81:cc:15:a9:fd:18:b1:39: 62:61:7f:a7:c8:6a:2e:50:5a:a5:a7:0a:db:2d:34:60:ee:14: 42:91:22:65:0a:c6:cb:ad:92:39:5c:44:29:fd:47:74:a4:34: d5:fb:78:be:9f:fa:aa:91:25:da:09:0e:51:4b:8e:31:58:2b: e6:90:34:65:9b:a4:77:c8:2e:6b:01:5f:29:e2:7d:65:df:b2: 41:14:63:39:f6:6f:d2:95:f0:e3:cd:1d:e1:1f:a1:90:58:80: 3f:93:ee:ac:c0:39:d4:72:dd:29:5f:5d:50:b8:54:b7:f7:1f: 03:e9:70:7f:f5:5b:0c:47:fc:93:24:1e:19:f4:eb:3d:36:c3: b3:e4:52:30:c0:d4:ed:75:e4:e3:22:d1:3a:d0:47:0d:e1:a4: ed:2e:d9:2d:16:ab:a4:91:2d:5f:99:c5:86:4f:b7:0d:3b:83: 4a:93:dc:33:8e:d2:71:24:46:ab:d9:07:8d:53:e6:3d:a3:fd: bc:0f:45:37:44:75:e6:36:b1:12:4e:35:92:79:89:67:30:32: 95:c2:1b:46:98:a8:5c:93:99:00:85:ee:1a:5f:33:17:57:12: 16:55:88:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy/Fy1mL8jb2dh0ewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVhMDg0OTItYjNiMS00YWExLWI1NmQtMDFhOThmN2Qw OTE5MB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk M2E1M2RkMjgtYjkwOS00YjdjLTlmMWMtMzk2NTNjNmU0YTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCCFBneU3fBXrrC545DHOVJu0U2XdWxtbH7A XYspgtz9PcniA8ZijOXRsleelIuBD0u8rtkJgOsYy4k88Cmj9EcDUvRnnSA74920 vHfs2ZvoIMemsoElEKMkY0FHx2Pw2jQbVWLoOo6PJBZOj9LufL41F0k2ZEn1eDeF jPTojRQBYegrIk4uq26ppRBDzfNi/qLY/ZZ7OvicucmPTnA/x1O6114Hda+gk3fU IrQzeVW/dkX475r8gYipX2Qth86wd83rpGKT1Pcb6m8kGRS2VHunlndmR68K1m61 vbcID1hrx+EziM3XHzQ61DBDOte7jv19Skfjpzw/nrvInoZ8yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHNIXI3H64lAT6NpknOypOWH9dLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNWEw ODQ5Mi1iM2IxLTRhYTEtYjU2ZC0wMWE5OGY3ZDA5MTkvZTRmMjEzNTktZmJkZC0z ODM1LWFkZjQtMGFhMjI2YzY2NWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjVhMDg0OTItYjNiMS00YWExLWI1 NmQtMDFhOThmN2QwOTE5LzI1YTA4NDkyLWIzYjEtNGFhMS1iNTZkLTAxYTk4Zjdk MDkxOS5jcmwwHwYDVR0jBBgwFoAUEwn6IXzXjp6k3qQG3jOvyyTaawYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNWEwODQ5Mi1iM2IxLTRhYTEtYjU2ZC0wMWE5 OGY3ZDA5MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzen0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOvI8hEw0upDdgG/72vKU5ylLAdNCTM6loqbOCBzBWp/RixOWJhf6fI ai5QWqWnCtstNGDuFEKRImUKxsutkjlcRCn9R3SkNNX7eL6f+qqRJdoJDlFLjjFY K+aQNGWbpHfILmsBXynifWXfskEUYzn2b9KV8OPNHeEfoZBYgD+T7qzAOdRy3Slf XVC4VLf3HwPpcH/1WwxH/JMkHhn06z02w7PkUjDA1O115OMi0TrQRw3hpO0u2S0W q6SRLV+ZxYZPtw07g0qT3DOO0nEkRqvZB41T5j2j/bwPRTdEdeY2sRJONZJ5iWcw MpXCG0aYqFyTmQCF7hpfMxdXEhZViKQ= -----END CERTIFICATE-----Generated at Mon Mar 2 11:58:37 2026 by rpki-client