$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/4ea89e5e-619d-33a3-b3f1-269dad48eb46.roa File: 4ea89e5e-619d-33a3-b3f1-269dad48eb46.roa (raw, json) Hash identifier: Ludb1X64cJkvvjtMBglM8qug4HB4QXHeoFl/NksW5WU= Subject key identifier: 47:6E:59:BC:3D:64:1C:34:B3:E5:AF:55:0C:B4:B7:A5:39:4D:41:B2 Certificate issuer: /CN=7aba55ae-833a-4487-8be1-9b997adbbec9 Certificate serial: 010D0C9F4328584CEA5CD77A6E2CF0E1B1175B80 Authority key identifier: 9B:B9:AA:F7:14:07:24:F9:63:FA:BB:15:32:7F:AD:AA:C9:11:2E:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/4ea89e5e-619d-33a3-b3f1-269dad48eb46.roa Signing time: Thu 19 Feb 2026 14:00:40 +0000 ROA not before: Thu 19 Feb 2026 14:00:40 +0000 ROA not after: Wed 20 May 2026 13:00:40 +0000 asID: 7029 IP address blocks: 134.195.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ea:5c:d7:7a:6e:2c:f0:e1:b1:17:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aba55ae-833a-4487-8be1-9b997adbbec9 Validity Not Before: Feb 19 14:00:40 2026 GMT Not After : May 20 13:00:40 2026 GMT Subject: CN=965f946a-b773-4395-a571-dc573302f33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f5:4f:52:f9:c9:74:29:74:9c:1d:bd:e1:52: 71:f4:8a:ba:dd:43:7f:76:50:93:97:5b:0c:97:f2: aa:60:39:12:cd:f0:77:14:2c:c1:53:d0:02:02:7e: 74:4c:78:2a:a8:00:a4:42:f6:95:b6:37:33:d9:8c: 63:0c:f5:8d:c0:83:43:30:3e:7c:7b:d0:c9:da:78: ac:d2:7f:d7:f0:05:be:49:4a:27:62:12:a1:4d:0b: 9c:39:cf:24:dd:9e:14:17:fa:79:49:b1:6c:43:d1: 6d:e0:04:0f:76:f2:36:c5:04:e5:27:76:6c:bb:51: 1b:7b:ba:8b:fb:a3:3e:1f:c5:b0:5c:72:0d:2b:1c: 78:ae:5a:83:53:1b:81:99:b6:43:9c:cc:e5:43:f5: 28:59:6d:df:50:29:a2:f3:32:73:e4:91:21:87:4f: e3:fb:60:55:44:5c:5c:6b:cc:3f:f6:45:bb:1a:ba: 2e:21:b3:d6:02:68:36:dc:d8:f3:2c:0d:a1:e4:46: 2b:ad:a0:5e:e4:48:54:53:d9:bd:7e:25:a2:30:84: 7d:c2:47:95:25:1d:5b:3d:8c:f3:dc:bd:70:bd:a1: 2f:cc:98:c0:b0:b9:db:2c:ed:22:99:02:65:e3:09: fb:6f:40:41:67:bf:d9:a2:33:97:42:cf:dd:36:78: fb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:6E:59:BC:3D:64:1C:34:B3:E5:AF:55:0C:B4:B7:A5:39:4D:41:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/4ea89e5e-619d-33a3-b3f1-269dad48eb46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.crl X509v3 Authority Key Identifier: keyid:9B:B9:AA:F7:14:07:24:F9:63:FA:BB:15:32:7F:AD:AA:C9:11:2E:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer sbgp-ipAddrBlock: critical IPv4: 134.195.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:98:7c:95:d2:18:7e:1d:d2:75:2f:e0:93:3e:1d:e0:35:32: 24:c1:e0:65:3c:ca:f3:8a:89:19:ad:0a:9a:36:4c:d9:70:c1: 95:7a:a1:1f:90:39:89:c3:5e:67:24:95:00:04:ca:9f:ed:fe: 7d:1c:ff:37:fa:59:dd:db:09:13:f9:af:a7:d8:d7:f8:73:94: c1:15:a3:5c:b7:cf:e4:18:fe:17:2a:c6:2f:88:ad:46:66:90: 12:e9:7f:dd:b5:8d:91:1e:71:0b:fd:25:7a:d3:b6:08:4d:3c: 05:11:b5:52:a1:e8:ed:95:97:af:0c:8e:98:a2:63:00:ba:a2: ee:e2:c4:b4:0e:83:a0:9d:29:dc:d1:54:a5:9e:3d:7a:b7:80: 40:88:ca:e9:9c:ab:e1:86:dc:fb:c1:ab:f7:b8:f1:02:02:58: 7d:21:30:02:d2:a3:50:20:70:f7:3e:56:d6:8f:68:19:1a:b4: 4f:f0:8a:b6:6d:ff:90:20:cf:88:0c:82:00:42:85:5a:21:72: 23:b0:4b:04:4b:2f:4a:f4:a5:ba:cd:1c:69:e7:e8:be:68:54: e9:d9:60:ea:68:28:06:e0:65:30:e7:d6:eb:62:0e:f7:c1:25: 72:ed:3c:e8:50:9f:fc:a6:20:63:9f:e1:3f:04:4b:16:e0:f1: d2:e4:24:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXNd6bizw4bEXW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FiYTU1YWUtODMzYS00NDg3LThiZTEtOWI5OTdhZGJi ZWM5MB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk OTY1Zjk0NmEtYjc3My00Mzk1LWE1NzEtZGM1NzMzMDJmMzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/VPUvnJdCl0nB294VJx9Iq63UN/dlCTl1sM l/KqYDkSzfB3FCzBU9ACAn50THgqqACkQvaVtjcz2YxjDPWNwINDMD58e9DJ2nis 0n/X8AW+SUonYhKhTQucOc8k3Z4UF/p5SbFsQ9Ft4AQPdvI2xQTlJ3Zsu1Ebe7qL +6M+H8WwXHINKxx4rlqDUxuBmbZDnMzlQ/UoWW3fUCmi8zJz5JEhh0/j+2BVRFxc a8w/9kW7GrouIbPWAmg23NjzLA2h5EYrraBe5EhUU9m9fiWiMIR9wkeVJR1bPYzz 3L1wvaEvzJjAsLnbLO0imQJl4wn7b0BBZ7/ZojOXQs/dNnj7TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEduWbw9ZBw0s+WvVQy0t6U5TUGyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YWJh NTVhZS04MzNhLTQ0ODctOGJlMS05Yjk5N2FkYmJlYzkvNGVhODllNWUtNjE5ZC0z M2EzLWIzZjEtMjY5ZGFkNDhlYjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2FiYTU1YWUtODMzYS00NDg3LThi ZTEtOWI5OTdhZGJiZWM5LzdhYmE1NWFlLTgzM2EtNDQ4Ny04YmUxLTliOTk3YWRi YmVjOS5jcmwwHwYDVR0jBBgwFoAUm7mq9xQHJPlj+rsVMn+tqskRLrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YWJhNTVhZS04MzNhLTQ0ODctOGJlMS05Yjk5 N2FkYmJlYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKeYfJXSGH4d0nUv4JM+HeA1MiTB4GU8yvOKiRmtCpo2TNlwwZV6oR+Q OYnDXmcklQAEyp/t/n0c/zf6Wd3bCRP5r6fY1/hzlMEVo1y3z+QY/hcqxi+IrUZm kBLpf921jZEecQv9JXrTtghNPAURtVKh6O2Vl68MjpiiYwC6ou7ixLQOg6CdKdzR VKWePXq3gECIyumcq+GG3PvBq/e48QICWH0hMALSo1AgcPc+VtaPaBkatE/wirZt /5Agz4gMggBChVohciOwSwRLL0r0pbrNHGnn6L5oVOnZYOpoKAbgZTDn1utiDvfB JXLtPOhQn/ymIGOf4T8ESxbg8dLkJPk= -----END CERTIFICATE-----Generated at Sun Mar 1 23:28:28 2026 by rpki-client