$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa File: 33a3b984-a77f-3d78-88ae-30ae68813e02.roa (raw, json) Hash identifier: V2pCStCDbFSoO2hGyFZ1QOgb5hcBrj5o7h9+VpJNoZc= Subject key identifier: 1F:FD:CD:39:DB:6B:F1:BC:4E:F8:5D:D5:38:66:04:1A:86:4D:18:4A Certificate issuer: /CN=a7001425-6965-4c1f-8e35-f578d112295c Certificate serial: 010D0C9F4328584CF1577874365E3E2EBE6D6A80 Authority key identifier: F4:6C:4D:F0:5E:17:96:E6:79:88:21:0F:C0:BA:29:70:32:D6:2B:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa Signing time: Sun 22 Feb 2026 02:00:32 +0000 ROA not before: Sun 22 Feb 2026 02:00:32 +0000 ROA not after: Sat 23 May 2026 01:00:32 +0000 asID: 16920 IP address blocks: 128.224.254.0/24 maxlen: 24 128.224.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f1:57:78:74:36:5e:3e:2e:be:6d:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7001425-6965-4c1f-8e35-f578d112295c Validity Not Before: Feb 22 02:00:32 2026 GMT Not After : May 23 01:00:32 2026 GMT Subject: CN=eab40ab2-0f33-42dc-85b4-a3d9fa3b43a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d8:21:6f:15:54:53:ee:f9:39:9e:0e:da:2b: e6:d4:5c:29:86:1f:39:1d:c1:25:18:84:03:be:f6: d7:b1:34:92:04:da:00:6c:e0:86:c2:00:d8:49:b9: 00:b7:a9:a6:9c:44:bc:52:2e:b6:ab:76:20:dd:1e: f5:29:f7:e5:93:40:35:14:1d:52:a0:f7:65:fb:f9: 36:39:bf:8e:e7:d4:55:1c:46:00:50:f8:3d:44:45: d6:93:0e:2c:0f:c8:70:91:5a:f2:fc:cb:6d:c4:d6: b6:05:ea:8c:0d:89:e1:50:9d:93:f6:41:15:e2:34: 3e:17:49:36:12:6c:95:a0:c5:5e:c3:7e:e4:0c:46: 15:d1:5f:55:d3:dd:d1:06:c4:77:68:38:33:8a:c4: d7:13:61:be:d3:7e:b6:fa:53:48:1b:be:ce:0d:fd: 42:03:dd:d0:fc:5a:5f:0e:84:7e:45:2d:a5:b5:39: fd:27:b1:76:2e:db:f7:3d:52:c3:a2:23:a6:e6:6a: 27:f3:d1:ac:61:f5:f3:c3:4f:fb:bb:97:d3:11:15: 47:70:80:f1:03:67:b1:81:4c:6a:ae:c6:77:dc:2c: da:78:dd:8f:c4:b7:b5:ea:af:96:60:d5:dc:b4:85: 21:07:9e:01:15:0a:bf:cd:2b:e2:10:ce:19:2b:bf: 3b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FD:CD:39:DB:6B:F1:BC:4E:F8:5D:D5:38:66:04:1A:86:4D:18:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.crl X509v3 Authority Key Identifier: keyid:F4:6C:4D:F0:5E:17:96:E6:79:88:21:0F:C0:BA:29:70:32:D6:2B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer sbgp-ipAddrBlock: critical IPv4: 128.224.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a2:0b:41:c9:f9:92:e3:82:90:91:0f:c0:6e:8d:8d:f5:f1: 45:3b:17:0c:02:96:49:a2:8d:93:19:cf:7d:83:9a:53:4f:66: 58:c9:eb:14:16:93:fe:1c:12:86:a1:10:1b:aa:30:5e:3f:a9: 9b:a6:c6:bf:62:58:c6:6e:96:10:44:d0:01:40:37:ba:f7:96: 5d:85:9c:fb:cc:33:31:3e:2e:89:0b:4b:88:69:a9:8b:14:49: 28:a9:00:a3:0e:42:f6:c0:e2:d2:45:7f:08:e5:05:c2:66:d6: f8:b3:1d:b9:f9:60:81:70:d4:77:5c:cb:73:81:b8:b4:37:ef: c3:0f:61:65:8b:c5:96:7d:d4:eb:61:25:3d:99:d6:25:0d:99: d8:ca:11:b5:f1:35:f7:8c:17:cc:be:e6:18:6e:30:42:5e:28: dd:9a:9e:cc:23:1d:ec:7b:51:ca:69:e4:f8:d2:21:e2:4c:c9: 2e:52:20:42:f3:a9:05:26:97:dc:be:f3:10:73:b4:df:85:a5: 16:de:d8:ba:82:0d:19:c2:91:77:ca:6b:b9:44:9e:c4:b9:9c: 99:ef:62:1b:1a:6d:2f:69:3d:88:f3:5b:59:3e:c2:89:f7:61: 52:2c:8e:41:35:b7:ec:03:5e:a8:f5:27:8c:1c:e2:96:d0:2c: 16:df:03:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzxV3h0Nl4+Lr5taoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcwMDE0MjUtNjk2NS00YzFmLThlMzUtZjU3OGQxMTIy OTVjMB4XDTI2MDIyMjAyMDAzMloXDTI2MDUyMzAxMDAzMlowLzEtMCsGA1UEAxMk ZWFiNDBhYjItMGYzMy00MmRjLTg1YjQtYTNkOWZhM2I0M2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNghbxVUU+75OZ4O2ivm1Fwphh85HcElGIQD vvbXsTSSBNoAbOCGwgDYSbkAt6mmnES8Ui62q3Yg3R71Kfflk0A1FB1SoPdl+/k2 Ob+O59RVHEYAUPg9REXWkw4sD8hwkVry/MttxNa2BeqMDYnhUJ2T9kEV4jQ+F0k2 EmyVoMVew37kDEYV0V9V093RBsR3aDgzisTXE2G+0362+lNIG77ODf1CA93Q/Fpf DoR+RS2ltTn9J7F2Ltv3PVLDoiOm5mon89GsYfXzw0/7u5fTERVHcIDxA2exgUxq rsZ33CzaeN2PxLe16q+WYNXctIUhB54BFQq/zSviEM4ZK787YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/9zTnba/G8Tvhd1ThmBBqGTRhKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNzAw MTQyNS02OTY1LTRjMWYtOGUzNS1mNTc4ZDExMjI5NWMvMzNhM2I5ODQtYTc3Zi0z ZDc4LTg4YWUtMzBhZTY4ODEzZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTcwMDE0MjUtNjk2NS00YzFmLThl MzUtZjU3OGQxMTIyOTVjL2E3MDAxNDI1LTY5NjUtNGMxZi04ZTM1LWY1NzhkMTEy Mjk1Yy5jcmwwHwYDVR0jBBgwFoAU9GxN8F4XluZ5iCEPwLopcDLWK8swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hNzAwMTQyNS02OTY1LTRjMWYtOGUzNS1mNTc4 ZDExMjI5NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgOD+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqiC0HJ+ZLjgpCRD8BujY318UU7FwwClkmijZMZz32DmlNPZljJ6xQW k/4cEoahEBuqMF4/qZumxr9iWMZulhBE0AFAN7r3ll2FnPvMMzE+LokLS4hpqYsU SSipAKMOQvbA4tJFfwjlBcJm1vizHbn5YIFw1Hdcy3OBuLQ378MPYWWLxZZ91Oth JT2Z1iUNmdjKEbXxNfeMF8y+5hhuMEJeKN2answjHex7Ucpp5PjSIeJMyS5SIELz qQUml9y+8xBztN+FpRbe2LqCDRnCkXfKa7lEnsS5nJnvYhsabS9pPYjzW1k+won3 YVIsjkE1t+wDXqj1J4wc4pbQLBbfA1g= -----END CERTIFICATE-----Generated at Mon Mar 2 17:42:02 2026 by rpki-client