$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa File: dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa (raw, json) Hash identifier: noPrb+30WH9bPGjwdCDzeWTdRSrUI2Ctgf5sfF0+41Y= Subject key identifier: 44:F4:C8:97:8B:63:2D:61:3E:8F:23:84:95:F7:63:65:84:DA:FD:74 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584CEFF2390F38BD24F95EACC880 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 212238 IP address blocks: 172.102.218.0/24 maxlen: 24 216.158.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:39:0f:38:bd:24:f9:5e:ac:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=42d81fe6-2ef2-4191-999b-3a4322da2206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:06:10:3d:49:7c:70:60:66:28:43:26:f1:ed: 5e:06:31:cb:a5:57:ca:f2:40:76:f3:89:86:23:d3: b6:cf:f2:ca:98:e3:09:fe:3f:51:26:37:31:15:a5: a5:aa:a9:7f:3a:5e:2d:af:9f:80:78:db:1a:37:00: f4:17:38:d5:9e:fa:80:77:a4:ac:ea:67:2f:93:a7: 91:97:d3:77:15:f1:6d:c9:61:24:ed:41:d6:d0:9b: 03:e5:2a:ac:cf:36:2c:1e:0a:4e:58:f4:f2:29:28: 98:9f:01:13:4a:e4:6f:97:f3:a1:5a:21:0b:ca:26: 37:2c:e8:75:0b:86:8f:37:0b:06:ea:84:f7:9e:a8: 34:2f:5e:ee:db:a9:4b:f9:cb:2e:c6:dd:95:6a:b9: 3a:24:ef:55:67:57:ca:68:bd:08:b9:86:43:a5:95: 51:f2:b0:d9:5a:90:08:1d:59:97:e7:c1:cb:a0:4b: e0:ad:1a:cf:f2:e7:c5:7a:2d:62:5b:68:4f:cf:d7: a0:3f:1e:10:21:4f:d2:94:4b:d9:b8:6c:92:17:cf: 3d:98:88:6c:8d:7e:40:0e:e2:bb:ef:43:75:3d:51: 5c:a4:4e:6c:88:fb:59:fd:c6:34:4b:39:43:f9:e7: 2a:a1:48:bb:af:ce:70:8e:29:ff:15:0e:55:11:e2: 34:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F4:C8:97:8B:63:2D:61:3E:8F:23:84:95:F7:63:65:84:DA:FD:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.218.0/24 216.158.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:e0:7e:f6:2d:e1:23:93:bf:0a:d1:35:b5:92:13:9d:18:ee: 2b:17:d5:e9:11:5b:ee:79:0c:eb:36:ac:2a:72:7a:e7:02:31: 8c:3c:b4:b2:a1:89:0c:e7:d2:aa:2b:26:91:6c:d2:f0:f3:62: 13:89:fc:dc:82:6e:87:66:98:ce:ad:02:36:76:3b:50:44:35: a8:0f:79:66:a8:e8:59:94:8c:d3:d4:4c:9c:10:3a:3f:d4:31: 64:89:15:d3:b1:77:9b:ab:09:0f:ed:d6:b9:a2:d4:9a:33:b3: 4a:55:6b:fa:af:c1:b9:b8:29:3f:84:f3:68:f7:a8:cb:e8:21: 6d:6a:99:bf:ea:b4:59:1b:ab:e7:32:ec:c8:69:56:69:d1:33: 4c:4b:86:f7:6c:90:4e:e0:14:a2:4a:75:b7:5d:0d:c8:fd:94: b0:46:66:d1:67:2a:57:1b:92:70:b7:1c:44:7d:fe:aa:dd:08: 91:7d:a7:73:dd:1b:cc:09:a3:42:b8:c9:08:ea:d4:bb:06:48: 21:9a:74:27:0d:d7:45:f3:da:63:e6:5c:8f:46:14:84:d8:09: 08:8f:14:59:f8:8c:79:f0:d1:2d:f8:28:ad:b7:81:e9:84:e3: 99:29:50:3a:1d:a4:e6:e3:01:06:a5:62:71:bd:50:8c:86:6b: 30:b4:f1:e0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEzv8jkPOL0k+V6syIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk NDJkODFmZTYtMmVmMi00MTkxLTk5OWItM2E0MzIyZGEyMjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAYQPUl8cGBmKEMm8e1eBjHLpVfK8kB284mG I9O2z/LKmOMJ/j9RJjcxFaWlqql/Ol4tr5+AeNsaNwD0FzjVnvqAd6Ss6mcvk6eR l9N3FfFtyWEk7UHW0JsD5SqszzYsHgpOWPTyKSiYnwETSuRvl/OhWiELyiY3LOh1 C4aPNwsG6oT3nqg0L17u26lL+csuxt2Vark6JO9VZ1fKaL0IuYZDpZVR8rDZWpAI HVmX58HLoEvgrRrP8ufFei1iW2hPz9egPx4QIU/SlEvZuGySF889mIhsjX5ADuK7 70N1PVFcpE5siPtZ/cY0SzlD+ecqoUi7r85wjin/FQ5VEeI0iQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFET0yJeLYy1hPo8jhJX3Y2WE2v10MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvZGMwMGUxOGQtMjgzNS0z MGIyLWFlZGMtMGY4MTg1ZWM0YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArGbaAwQA 2J7NMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIbgfvYt4SOTvwrRNbWSE50Y7isX1ekRW+55DOs2rCpyeucC MYw8tLKhiQzn0qorJpFs0vDzYhOJ/NyCbodmmM6tAjZ2O1BENagPeWao6FmUjNPU TJwQOj/UMWSJFdOxd5urCQ/t1rmi1Jozs0pVa/qvwbm4KT+E82j3qMvoIW1qmb/q tFkbq+cy7MhpVmnRM0xLhvdskE7gFKJKdbddDcj9lLBGZtFnKlcbknC3HER9/qrd CJF9p3PdG8wJo0K4yQjq1LsGSCGadCcN10Xz2mPmXI9GFITYCQiPFFn4jHnw0S34 KK23gemE45kpUDodpObjAQalYnG9UIyGazC08eA= -----END CERTIFICATE-----Generated at Mon Mar 2 08:34:16 2026 by rpki-client