$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/3e196079-8695-30ec-97ad-a014098a62f1.roa File: 3e196079-8695-30ec-97ad-a014098a62f1.roa (raw, json) Hash identifier: jdjwNYC2qoX+loJFgKoXbXkbbnVs46+NQAd9hsGjf04= Subject key identifier: 56:D2:0E:D1:F0:9B:EA:A1:E0:0A:8D:9E:7C:55:6B:5C:F3:47:51:4C Certificate issuer: /CN=c0311fc7-1b9e-4472-8780-7822d83e32fc Certificate serial: 010D0C9F4328584CEE8CCA881ED7B7D65C4EAC80 Authority key identifier: 24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/3e196079-8695-30ec-97ad-a014098a62f1.roa Signing time: Sat 21 Feb 2026 02:00:32 +0000 ROA not before: Sat 21 Feb 2026 02:00:32 +0000 ROA not after: Fri 22 May 2026 01:00:32 +0000 asID: 400519 IP address blocks: 198.22.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ee:8c:ca:88:1e:d7:b7:d6:5c:4e:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0311fc7-1b9e-4472-8780-7822d83e32fc Validity Not Before: Feb 21 02:00:32 2026 GMT Not After : May 22 01:00:32 2026 GMT Subject: CN=257cfb74-3c2f-4a52-b3d3-3625bc8b11b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:02:6a:9b:fe:cd:a4:57:9d:8b:d1:6f:3c:1e: f8:e6:91:46:33:0b:18:bc:d1:0c:0d:45:52:8d:01: 4c:fb:ae:46:ce:5a:6c:a9:8f:58:cb:89:1a:7b:d5: 06:b9:f7:e9:40:3f:46:64:cb:44:9f:21:6b:77:22: 6b:1c:67:fc:4a:35:78:d1:7e:4f:be:c8:63:9d:e4: c7:b5:98:53:f5:b7:55:e1:bf:9b:af:68:b3:94:06: bb:2c:f2:28:fe:ef:5d:50:3a:dd:50:de:f3:af:52: d3:54:a9:65:eb:b6:65:98:db:f8:96:6e:2e:51:4c: 15:9d:b5:64:ab:22:22:fc:37:6b:7e:3f:23:b3:ad: f5:7b:bb:e3:7b:93:c7:63:1d:e4:10:0d:0c:14:28: c8:e5:c4:06:57:8f:23:1d:58:aa:d4:81:21:75:e8: 29:b1:5b:64:35:a5:fe:d5:b7:be:55:63:24:6d:a3: 42:c0:c2:f8:cc:be:5b:2f:17:aa:4f:67:72:00:9a: 9d:f6:5c:dc:73:96:48:f1:5a:4b:b6:d8:76:35:6f: ed:64:5c:72:40:7f:6c:50:f7:9d:c7:fa:d1:51:7d: 37:b3:e8:2b:50:a5:c4:c2:a2:82:60:30:5a:38:d3: ba:35:f5:02:aa:de:cb:bb:5e:80:7e:81:e1:6f:ff: 8a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D2:0E:D1:F0:9B:EA:A1:E0:0A:8D:9E:7C:55:6B:5C:F3:47:51:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/3e196079-8695-30ec-97ad-a014098a62f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl X509v3 Authority Key Identifier: keyid:24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer sbgp-ipAddrBlock: critical IPv4: 198.22.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:f3:52:a8:03:bf:67:78:9a:8e:86:e3:2d:0b:e3:99:ec:16: 0d:7a:aa:2c:e6:4e:40:59:07:07:3c:65:ce:12:af:3f:de:cf: c1:ed:78:c9:f5:49:79:7f:d3:92:9d:e6:59:4c:ed:f5:1f:66: 63:80:02:32:05:47:5a:bd:32:a8:c8:d3:fd:17:51:00:1d:cf: 6b:fe:ff:cb:f1:04:3d:31:e1:60:11:7d:c8:e1:bf:a3:a9:e1: f7:4a:e7:42:2c:11:3c:f9:2d:40:0a:07:07:9c:cc:dd:be:8b: 6e:0c:18:1f:f4:2a:a7:99:fc:6d:e2:99:42:fc:ae:33:15:c9: 6c:1c:61:2d:78:23:59:9e:6c:e3:5d:c7:5b:a1:f3:ae:cb:c5: 1e:8c:c7:b5:d9:60:8b:28:5d:0e:93:d5:4d:dc:fb:02:f7:5d: 82:e9:82:62:9c:fa:5d:fd:dd:fb:4a:d2:6c:ba:22:fb:57:42: 09:03:01:f7:33:9a:ad:92:eb:74:e5:ca:cd:69:ac:1a:1d:79: af:9a:87:e2:e7:e3:ca:a3:b8:1a:4d:00:cc:8f:f1:80:f2:71: 83:8e:44:f2:16:c2:d0:3b:66:b5:96:72:fc:ec:f7:37:b1:df: bb:bd:d4:09:95:31:32:37:d1:f8:b2:69:31:c7:38:f7:1f:e1: a5:16:9c:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzujMqIHte31lxOrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAzMTFmYzctMWI5ZS00NDcyLTg3ODAtNzgyMmQ4M2Uz MmZjMB4XDTI2MDIyMTAyMDAzMloXDTI2MDUyMjAxMDAzMlowLzEtMCsGA1UEAxMk MjU3Y2ZiNzQtM2MyZi00YTUyLWIzZDMtMzYyNWJjOGIxMWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAJqm/7NpFedi9FvPB745pFGMwsYvNEMDUVS jQFM+65GzlpsqY9Yy4kae9UGuffpQD9GZMtEnyFrdyJrHGf8SjV40X5PvshjneTH tZhT9bdV4b+br2izlAa7LPIo/u9dUDrdUN7zr1LTVKll67ZlmNv4lm4uUUwVnbVk qyIi/Ddrfj8js631e7vje5PHYx3kEA0MFCjI5cQGV48jHViq1IEhdegpsVtkNaX+ 1be+VWMkbaNCwML4zL5bLxeqT2dyAJqd9lzcc5ZI8VpLtth2NW/tZFxyQH9sUPed x/rRUX03s+grUKXEwqKCYDBaONO6NfUCqt7Lu16AfoHhb/+KXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbSDtHwm+qh4AqNnnxVa1zzR1FMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMx MWZjNy0xYjllLTQ0NzItODc4MC03ODIyZDgzZTMyZmMvM2UxOTYwNzktODY5NS0z MGVjLTk3YWQtYTAxNDA5OGE2MmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzAzMTFmYzctMWI5ZS00NDcyLTg3 ODAtNzgyMmQ4M2UzMmZjL2MwMzExZmM3LTFiOWUtNDQ3Mi04NzgwLTc4MjJkODNl MzJmYy5jcmwwHwYDVR0jBBgwFoAUJG+C9K14hZxsbD97+fH6FxL8DjAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMxMWZjNy0xYjllLTQ0NzItODc4MC03ODIy ZDgzZTMyZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxhbMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILzUqgDv2d4mo6G4y0L45nsFg16qizmTkBZBwc8Zc4Srz/ez8HteMn1 SXl/05Kd5llM7fUfZmOAAjIFR1q9MqjI0/0XUQAdz2v+/8vxBD0x4WARfcjhv6Op 4fdK50IsETz5LUAKBweczN2+i24MGB/0KqeZ/G3imUL8rjMVyWwcYS14I1mebONd x1uh867LxR6Mx7XZYIsoXQ6T1U3c+wL3XYLpgmKc+l393ftK0my6IvtXQgkDAfcz mq2S63Tlys1prBodea+ah+Ln48qjuBpNAMyP8YDycYOORPIWwtA7ZrWWcvzs9zex 37u91AmVMTI30fiyaTHHOPcf4aUWnJI= -----END CERTIFICATE-----Generated at Mon Mar 2 17:13:00 2026 by rpki-client