$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/1bb690cd-2388-3eaf-881d-f9de6ab12a96.roa File: 1bb690cd-2388-3eaf-881d-f9de6ab12a96.roa (raw, json) Hash identifier: fH23tEKcWfM9NDOO99cQxGp/UjT1MVMpR/BfmOrQu5Y= Subject key identifier: 0E:E3:66:AE:A7:DC:D6:85:57:E1:82:37:12:18:C2:5D:F0:AE:EE:92 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584CB81C8F3F00D7B6B0A9FB19A0 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/1bb690cd-2388-3eaf-881d-f9de6ab12a96.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 23467 IP address blocks: 162.247.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:8f:3f:00:d7:b6:b0:a9:fb:19:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=9754a3e3-74fb-4e60-8cd8-d0d211b3ad61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6b:22:f6:70:83:fb:ac:03:45:fc:93:bd:d2: 6a:e3:9e:87:5f:ff:8f:19:e8:b1:98:a7:f9:6b:8a: b5:84:14:f5:0d:19:37:df:f9:bc:23:cc:5f:09:53: fa:8b:a0:61:ae:13:29:bd:ab:56:c5:96:69:f1:51: 33:36:b1:6a:0f:ef:92:94:1a:55:38:09:41:7f:c6: 03:4e:d2:59:9d:74:d8:db:9f:ff:ef:b6:30:e4:94: f7:08:91:b3:75:e7:6d:8a:16:2f:5a:c9:34:99:55: 3b:f4:a2:bb:1b:15:2e:db:2a:9f:a1:0b:4c:39:18: d8:fa:77:ba:ac:82:5f:03:fd:a5:9a:bb:7a:10:f1: 19:76:91:da:de:7e:48:81:7d:b4:f1:b1:b3:b8:2f: 13:94:75:c9:74:4b:84:13:0d:e3:91:54:b0:bc:c9: 53:c3:3e:16:a7:26:40:e1:fc:14:4b:e4:a9:8c:79: 7b:1f:6b:81:f3:6e:9e:4f:bf:de:c7:65:b6:57:eb: e6:5a:f1:e8:86:20:fa:d9:97:45:08:59:40:06:7e: 55:07:26:cf:8d:d8:c6:08:0f:d5:ac:0b:4a:ba:af: 23:ad:3f:90:64:1a:3a:40:02:d3:44:58:cd:3f:1e: 18:0b:1f:22:38:75:3d:20:1f:93:4a:ba:12:a7:d8: 4c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E3:66:AE:A7:DC:D6:85:57:E1:82:37:12:18:C2:5D:F0:AE:EE:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/1bb690cd-2388-3eaf-881d-f9de6ab12a96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 162.247.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f4:5a:81:66:90:5b:a4:d3:48:15:7f:29:80:10:4a:7e:d2: c4:ff:90:bd:1c:3b:46:75:24:b0:68:fa:49:f5:9d:c9:77:d2: f5:c0:d7:a6:50:19:bc:20:bc:ee:e6:a8:6b:de:70:74:f7:cb: 59:66:32:1c:3e:8a:b0:41:85:c0:41:55:c7:6f:5b:82:ff:20: 03:0d:59:df:3b:34:30:dd:0f:bd:53:a5:e3:63:78:d5:8f:17: ba:2d:9a:76:f7:72:6e:8e:d4:90:1e:9d:b4:94:05:5a:3f:0d: 5f:3d:e8:97:d1:b1:1e:00:a7:e8:6d:79:29:46:4d:a7:f1:3d: 9a:a4:b1:1f:88:53:15:e9:9f:bd:c9:c9:18:26:bd:86:6f:8b: bf:eb:e8:e0:6d:b7:63:2b:fe:33:7f:b7:38:c2:f9:dd:29:e6: 06:01:86:4e:36:ae:ce:fa:d7:55:90:cd:94:d5:a7:b6:ba:cc: 2a:16:eb:e4:3f:f5:f6:de:ae:ca:65:c1:05:a1:56:8a:23:dc: 0d:90:7b:47:d4:67:97:16:a4:05:e5:a0:b7:3f:65:c0:12:a2: 71:a1:7d:da:62:12:74:31:8d:81:49:eb:c6:f1:4a:59:c5:f9: 20:33:c5:1f:7a:fe:c3:a2:2c:ec:2d:07:b6:bc:4f:f5:99:7e: 94:32:52:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HI8/ANe2sKn7GaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk OTc1NGEzZTMtNzRmYi00ZTYwLThjZDgtZDBkMjExYjNhZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWsi9nCD+6wDRfyTvdJq456HX/+PGeixmKf5 a4q1hBT1DRk33/m8I8xfCVP6i6BhrhMpvatWxZZp8VEzNrFqD++SlBpVOAlBf8YD TtJZnXTY25//77Yw5JT3CJGzdedtihYvWsk0mVU79KK7GxUu2yqfoQtMORjY+ne6 rIJfA/2lmrt6EPEZdpHa3n5IgX208bGzuC8TlHXJdEuEEw3jkVSwvMlTwz4WpyZA 4fwUS+SpjHl7H2uB826eT7/ex2W2V+vmWvHohiD62ZdFCFlABn5VBybPjdjGCA/V rAtKuq8jrT+QZBo6QALTRFjNPx4YCx8iOHU9IB+TSroSp9hMjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7jZq6n3NaFV+GCNxIYwl3wru6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMWJiNjkwY2QtMjM4OC0z ZWFmLTg4MWQtZjlkZTZhYjEyYTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz0WoFmkFuk00gVfymAEEp+0sT/kL0cO0Z1JLBo+kn1ncl30vXA16ZQ GbwgvO7mqGvecHT3y1lmMhw+irBBhcBBVcdvW4L/IAMNWd87NDDdD71TpeNjeNWP F7otmnb3cm6O1JAenbSUBVo/DV896JfRsR4Ap+hteSlGTafxPZqksR+IUxXpn73J yRgmvYZvi7/r6OBtt2Mr/jN/tzjC+d0p5gYBhk42rs7611WQzZTVp7a6zCoW6+Q/ 9fbersplwQWhVooj3A2Qe0fUZ5cWpAXloLc/ZcASonGhfdpiEnQxjYFJ68bxSlnF +SAzxR96/sOiLOwtB7a8T/WZfpQyUrM= -----END CERTIFICATE-----Generated at Mon Mar 2 06:00:29 2026 by rpki-client