$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa File: 1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa (raw, json) Hash identifier: 0dERM34uMNr7Eu7ebYjaSxAtpRQA7nYCUuNNTFEvbmo= Subject key identifier: B0:96:5E:D2:A9:5C:AC:B6:AF:D9:7B:05:7E:9A:50:97:8F:D3:9A:FE Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584CE4C7702891193884E7DAFEE0 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa Signing time: Tue 17 Feb 2026 14:00:41 +0000 ROA not before: Tue 17 Feb 2026 14:00:41 +0000 ROA not after: Mon 18 May 2026 13:00:41 +0000 asID: 3756 IP address blocks: 199.109.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e4:c7:70:28:91:19:38:84:e7:da:fe:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Feb 17 14:00:41 2026 GMT Not After : May 18 13:00:41 2026 GMT Subject: CN=4c228e57-fdb5-46bc-a035-731c19912882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c9:fb:89:3d:e6:a3:68:0f:1d:f0:9b:4d:87: 02:00:8c:56:ae:92:aa:c7:67:09:62:a2:80:ac:b8: f2:74:5e:fb:83:36:d7:ee:66:2d:72:94:9f:b9:c7: 85:6b:36:6d:21:f6:b9:d5:5c:57:26:f6:ca:29:59: 87:94:6c:ac:4c:63:22:b8:4a:ac:ad:90:57:92:a9: 29:f5:ed:54:a4:20:35:4a:18:6e:f8:75:22:70:85: 9f:81:39:f7:6b:69:d4:b2:a1:46:7c:6f:4e:b9:c6: 2b:33:6f:db:c7:71:a7:80:00:5c:ca:f9:30:0c:af: ee:99:35:25:c1:22:1b:1a:71:40:b1:3b:89:7f:65: c2:f0:43:d9:a5:fa:c1:95:59:c3:8a:b9:fa:bf:be: 52:38:33:07:8b:6c:44:ac:94:7b:88:f3:1c:3c:78: 67:ba:82:3a:f7:ce:9a:e0:d9:c2:25:bd:7d:9e:7a: 89:a1:8f:c7:9e:01:ac:54:2f:93:a5:cd:04:8a:f4: 92:e0:3c:af:02:4e:b6:16:de:e7:51:5b:c1:0c:ee: cf:6d:7b:2d:c6:9f:3a:0c:eb:95:1d:2d:8c:be:4e: df:c8:ad:57:3d:82:a7:7d:45:9d:b5:c5:c4:8d:e1: 37:f3:73:6c:da:b9:b5:85:9f:b9:93:10:fb:77:b5: 15:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:96:5E:D2:A9:5C:AC:B6:AF:D9:7B:05:7E:9A:50:97:8F:D3:9A:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:25:95:f5:f6:a8:83:cc:2a:72:06:ca:8e:84:f2:9b:e9:27: 16:0c:09:71:d1:8a:12:fc:2e:00:67:17:37:5c:1e:31:6d:94: 0a:39:52:71:de:4f:0d:19:69:24:82:4f:06:6f:10:a0:e2:c5: bf:c1:24:b8:d6:d0:f8:57:99:b5:b6:31:55:11:88:3a:22:19: ac:9e:ad:d7:42:4f:61:ae:b2:8c:a4:ae:1c:aa:26:ce:43:77: f1:c8:8b:db:d3:8f:80:bd:16:8f:8c:bc:9e:50:f6:d2:c3:4e: d8:d2:5e:84:57:10:93:f0:f1:98:ae:77:6d:11:23:50:50:6c: 17:94:90:e9:c4:3a:e2:3e:08:fb:70:96:c4:f6:98:2f:11:ba: dd:eb:20:6d:b6:2a:b8:77:f9:69:48:a2:b8:36:72:9e:db:d0: e0:87:de:fc:9b:40:2f:4f:5f:8b:70:ce:94:3f:ae:74:e8:f0: 0c:1d:8d:e2:9b:40:cf:2e:0a:f8:35:d4:ad:08:9f:e3:2e:cf: 65:46:e4:06:70:2a:b2:1d:14:09:1f:d8:91:52:d4:ce:7a:cc: e1:ef:ea:22:64:c3:c5:36:71:19:7e:4e:b2:86:3b:6e:e8:d4: ac:d8:37:e6:55:22:5a:46:27:96:10:ca:59:dc:1e:da:91:15: 8f:09:35:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzkx3AokRk4hOfa/uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDIxNzE0MDA0MVoXDTI2MDUxODEzMDA0MVowLzEtMCsGA1UEAxMk NGMyMjhlNTctZmRiNS00NmJjLWEwMzUtNzMxYzE5OTEyODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcn7iT3mo2gPHfCbTYcCAIxWrpKqx2cJYqKA rLjydF77gzbX7mYtcpSfuceFazZtIfa51VxXJvbKKVmHlGysTGMiuEqsrZBXkqkp 9e1UpCA1Shhu+HUicIWfgTn3a2nUsqFGfG9OucYrM2/bx3GngABcyvkwDK/umTUl wSIbGnFAsTuJf2XC8EPZpfrBlVnDirn6v75SODMHi2xErJR7iPMcPHhnuoI6986a 4NnCJb19nnqJoY/HngGsVC+Tpc0EivSS4DyvAk62Ft7nUVvBDO7PbXstxp86DOuV HS2Mvk7fyK1XPYKnfUWdtcXEjeE383Ns2rm1hZ+5kxD7d7UVHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCWXtKpXKy2r9l7BX6aUJeP05r+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvMTE0ODIwNGQtMGM1MS0z MDYwLTgwZTItY2ZhYTk2ZWExZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx20gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsllfX2qIPMKnIGyo6E8pvpJxYMCXHRihL8LgBnFzdcHjFtlAo5UnHe Tw0ZaSSCTwZvEKDixb/BJLjW0PhXmbW2MVURiDoiGayerddCT2GusoykrhyqJs5D d/HIi9vTj4C9Fo+MvJ5Q9tLDTtjSXoRXEJPw8Ziud20RI1BQbBeUkOnEOuI+CPtw lsT2mC8Rut3rIG22Krh3+WlIorg2cp7b0OCH3vybQC9PX4twzpQ/rnTo8AwdjeKb QM8uCvg11K0In+Muz2VG5AZwKrIdFAkf2JFS1M56zOHv6iJkw8U2cRl+TrKGO27o 1KzYN+ZVIlpGJ5YQylncHtqRFY8JNVI= -----END CERTIFICATE-----Generated at Mon Mar 2 08:32:15 2026 by rpki-client