$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b9395f62-c1cf-3e94-8786-53a487982b1e.roa File: b9395f62-c1cf-3e94-8786-53a487982b1e.roa (raw, json) Hash identifier: +pEFaZHSHor17u5WYajfjXXnILJeMvJ+sWRdHIu0xVM= Subject key identifier: A2:9D:FB:E3:15:99:BC:D8:5E:C8:7E:E6:5F:8F:73:16:06:2C:E8:9C Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584CFDE7B04F72F659E5797EED80 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b9395f62-c1cf-3e94-8786-53a487982b1e.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 13536 IP address blocks: 216.238.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e7:b0:4f:72:f6:59:e5:79:7e:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=bbab2a23-7a7e-407f-ac26-22324a426c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:dd:ed:6f:74:87:52:b4:3e:9f:89:0b:e8:af: 4d:97:81:23:f8:fb:d3:06:b7:97:25:33:04:48:1b: 78:da:f0:db:3d:4c:25:b9:4a:47:44:aa:14:29:1a: 20:f8:b8:c1:9b:42:ce:3d:d5:92:8d:80:2b:a3:6d: 82:50:0f:14:2a:02:fb:b8:21:6a:ef:1d:fc:dd:50: a0:9d:fb:a7:fc:b8:a6:33:84:33:f9:47:96:03:fc: b5:6e:8c:f8:88:a8:86:cf:36:32:c8:c5:17:cc:aa: b4:9f:ec:fb:9b:ca:e2:4e:e6:7f:7b:29:1b:40:64: 9a:4c:cb:a8:86:15:c9:0d:44:fb:35:78:76:30:81: df:7f:19:a2:78:57:42:73:7a:ba:04:39:e2:42:9a: 42:0d:16:90:ec:43:c4:7d:4b:bd:42:49:7e:c9:e1: ca:b2:d2:82:51:8e:04:71:bb:04:e8:e5:75:4b:e2: e9:09:f2:ec:dd:ec:f2:c0:c6:4b:20:14:9d:cd:8a: d8:66:93:55:dc:9e:c2:33:eb:16:ec:d5:fe:b0:69: 48:ac:b2:91:09:84:4b:ef:fa:f0:b9:e3:b9:3a:9e: ac:ee:4e:04:5b:e8:f6:09:53:e4:7c:26:39:f9:73: 06:dd:04:14:14:85:6d:e2:66:1c:b5:f6:fe:f1:7d: aa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9D:FB:E3:15:99:BC:D8:5E:C8:7E:E6:5F:8F:73:16:06:2C:E8:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b9395f62-c1cf-3e94-8786-53a487982b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.238.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:26:3c:6c:38:8c:ae:4b:fe:f7:ba:12:b7:f1:bd:af:64:3f: 61:d0:81:8e:62:b9:15:b5:30:0e:14:8a:78:3b:27:c6:8b:38: 92:6c:15:22:b9:c4:23:cf:de:36:8d:ab:e8:ea:47:ae:94:12: 52:fa:f9:f3:4d:d6:52:8b:50:b7:1c:c5:e4:79:ee:d2:a7:cd: 4a:ec:c1:eb:8d:d8:e1:4e:2f:f1:b3:0d:70:51:7f:66:1b:08: 98:94:2f:6d:7e:ce:e2:cd:ac:6b:07:1b:a0:ca:70:b6:20:74: 03:0d:f0:3b:43:d3:e3:6a:b9:2d:0d:8a:40:e5:43:68:85:73: bb:00:a4:97:79:7b:87:88:14:a8:1c:43:6b:15:4b:d7:4f:44: 36:49:e2:d0:d0:f0:a1:9c:b8:dd:41:94:d5:13:20:03:2a:9e: 12:ef:06:43:08:f7:c3:64:5b:79:3f:04:f0:ff:21:7e:e6:28: 8a:46:cf:94:fb:30:db:ce:cf:b3:13:f3:2e:fc:1e:87:b7:0b: dc:0f:15:c8:5c:5d:ec:82:35:2a:9a:18:d5:97:d8:fb:cc:99: 67:94:88:70:bd:06:5f:69:1e:8f:56:ab:f7:fc:24:16:19:cd: 92:9e:93:2b:a1:df:69:df:d5:02:13:99:9e:39:c5:9d:bf:08: 59:48:dc:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz957BPcvZZ5Xl+7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk YmJhYjJhMjMtN2E3ZS00MDdmLWFjMjYtMjIzMjRhNDI2YzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t3tb3SHUrQ+n4kL6K9Nl4Ej+PvTBreXJTME SBt42vDbPUwluUpHRKoUKRog+LjBm0LOPdWSjYAro22CUA8UKgL7uCFq7x383VCg nfun/LimM4Qz+UeWA/y1boz4iKiGzzYyyMUXzKq0n+z7m8riTuZ/eykbQGSaTMuo hhXJDUT7NXh2MIHffxmieFdCc3q6BDniQppCDRaQ7EPEfUu9Qkl+yeHKstKCUY4E cbsE6OV1S+LpCfLs3ezywMZLIBSdzYrYZpNV3J7CM+sW7NX+sGlIrLKRCYRL7/rw ueO5Op6s7k4EW+j2CVPkfCY5+XMG3QQUFIVt4mYctfb+8X2qxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKd++MVmbzYXsh+5l+PcxYGLOicMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvYjkzOTVmNjItYzFjZi0z ZTk0LTg3ODYtNTNhNDg3OTgyYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2O6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0mPGw4jK5L/ve6Erfxva9kP2HQgY5iuRW1MA4Uing7J8aLOJJsFSK5 xCPP3jaNq+jqR66UElL6+fNN1lKLULccxeR57tKnzUrsweuN2OFOL/GzDXBRf2Yb CJiUL21+zuLNrGsHG6DKcLYgdAMN8DtD0+NquS0NikDlQ2iFc7sApJd5e4eIFKgc Q2sVS9dPRDZJ4tDQ8KGcuN1BlNUTIAMqnhLvBkMI98NkW3k/BPD/IX7mKIpGz5T7 MNvOz7MT8y78Hoe3C9wPFchcXeyCNSqaGNWX2PvMmWeUiHC9Bl9pHo9Wq/f8JBYZ zZKekyuh32nf1QITmZ45xZ2/CFlI3LU= -----END CERTIFICATE-----Generated at Mon Mar 2 21:12:14 2026 by rpki-client