$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa File: a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa (raw, json) Hash identifier: vFuBF2WKUGkLYU/JF0tH2qMFQ5QaB1AoQHm9RKJOVfM= Subject key identifier: A2:55:65:FD:24:3A:06:62:A2:6E:C0:76:11:5C:B7:40:1B:DF:49:D2 Certificate issuer: /CN=d49742e8-8d0c-4209-b76f-403554b0e6b4 Certificate serial: 010D0C9F4328584CF2BCF9BB17D4B2518CC33700 Authority key identifier: C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 992 IP address blocks: 198.169.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bc:f9:bb:17:d4:b2:51:8c:c3:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d49742e8-8d0c-4209-b76f-403554b0e6b4 Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=f4d71c26-4ec7-4730-8712-b1c6889ecb4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:b4:91:ec:1b:5e:40:47:bc:a4:65:f9:63:85: fd:e6:59:01:5c:1e:e5:62:54:a7:cd:29:47:c5:71: 06:62:45:4e:47:fc:99:05:2a:ae:1c:8d:6e:4a:45: e4:e8:fe:b8:5d:dc:50:b1:b7:c3:0d:67:3d:33:77: da:d1:52:0c:57:ae:c8:4e:c5:bd:6b:3f:1f:fe:6c: f0:8d:99:bb:53:bf:64:6c:6e:54:58:33:45:a0:0c: 58:44:fd:44:44:3b:1c:27:91:4b:35:69:93:46:c2: cd:7a:97:7e:e6:0f:0d:78:50:90:22:0a:5d:fb:01: 7e:88:3a:7a:a8:bb:37:02:f7:4a:c4:3a:89:b5:0e: 65:a7:2b:4b:dd:ce:4b:cd:df:a6:57:83:73:35:4a: 49:f8:23:17:22:86:a6:e8:12:fe:ab:bf:05:d0:ee: 8d:60:b5:57:fd:90:5a:40:21:46:38:59:71:5b:bc: 6f:5f:2e:c2:9c:e1:f8:c1:d8:55:35:c8:f7:77:29: 65:65:7f:aa:18:df:6f:61:5f:97:7c:1c:75:54:0b: 49:79:fe:64:e1:82:bf:dd:b9:c3:99:3d:51:29:0f: 09:7f:2c:81:4c:9c:fb:6d:22:4b:73:b6:f7:34:ec: a8:83:13:0c:9a:7d:35:e4:64:6c:5d:3a:cc:33:8d: f0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:55:65:FD:24:3A:06:62:A2:6E:C0:76:11:5C:B7:40:1B:DF:49:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl X509v3 Authority Key Identifier: keyid:C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer sbgp-ipAddrBlock: critical IPv4: 198.169.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:83:2e:91:84:d0:b2:d8:a0:58:b8:1a:34:60:e0:38:b4:78: ef:43:7d:ad:47:51:02:ae:27:1f:60:e3:5b:3c:87:30:cd:87: 65:d2:0f:81:75:f9:88:14:02:ee:d8:0c:56:10:0e:42:39:91: 10:58:ca:b4:ae:54:c0:1c:26:43:26:fe:fe:f2:06:13:bb:23: b9:80:99:f0:b6:5a:23:e9:ac:e8:95:cf:6e:d2:c8:df:3e:b2: 3c:3a:70:73:75:6a:1c:61:17:58:40:4a:bf:4f:50:ce:2b:81: a4:f6:e1:10:51:45:4d:b2:8a:23:72:42:be:6d:43:37:0c:58: 6f:c9:4a:03:dc:e8:5d:dc:b8:76:64:8b:26:d1:7c:a2:36:81: 90:9c:ae:6b:b0:5e:b5:f3:c1:a9:3b:67:14:d6:21:56:e9:59: 1f:72:11:a6:ef:55:2c:15:cf:92:c9:cf:71:84:45:38:cb:f3: 21:96:8a:cd:b6:1a:fe:ae:76:b8:f7:4a:93:45:dc:23:6f:a6: 28:2a:aa:cf:ce:1a:35:a8:04:c0:32:04:29:5d:8f:d6:a7:e4: d3:0c:0c:f9:97:36:45:b8:47:d5:02:ab:b6:99:65:a3:a0:e6: d9:db:b7:c0:ba:4b:42:86:53:01:09:52:59:c9:08:96:3c:d0: 02:dd:fd:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvPm7F9SyUYzDNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5NzQyZTgtOGQwYy00MjA5LWI3NmYtNDAzNTU0YjBl NmI0MB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk ZjRkNzFjMjYtNGVjNy00NzMwLTg3MTItYjFjNjg4OWVjYjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+rSR7BteQEe8pGX5Y4X95lkBXB7lYlSnzSlH xXEGYkVOR/yZBSquHI1uSkXk6P64XdxQsbfDDWc9M3fa0VIMV67ITsW9az8f/mzw jZm7U79kbG5UWDNFoAxYRP1ERDscJ5FLNWmTRsLNepd+5g8NeFCQIgpd+wF+iDp6 qLs3AvdKxDqJtQ5lpytL3c5Lzd+mV4NzNUpJ+CMXIoam6BL+q78F0O6NYLVX/ZBa QCFGOFlxW7xvXy7CnOH4wdhVNcj3dyllZX+qGN9vYV+XfBx1VAtJef5k4YK/3bnD mT1RKQ8JfyyBTJz7bSJLc7b3NOyogxMMmn015GRsXTrMM43w/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJVZf0kOgZiom7AdhFct0Ab30nSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk3 NDJlOC04ZDBjLTQyMDktYjc2Zi00MDM1NTRiMGU2YjQvYTI3ZmM2MjEtNWMwMi0z MjZjLTgxYWUtYzllOWUyYzY2OWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ5NzQyZTgtOGQwYy00MjA5LWI3 NmYtNDAzNTU0YjBlNmI0L2Q0OTc0MmU4LThkMGMtNDIwOS1iNzZmLTQwMzU1NGIw ZTZiNC5jcmwwHwYDVR0jBBgwFoAUyXTCOGJ1ZdT2dzWU5jbMl87yC+wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk3NDJlOC04ZDBjLTQyMDktYjc2Zi00MDM1 NTRiMGU2YjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqmtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCDLpGE0LLYoFi4GjRg4Di0eO9Dfa1HUQKuJx9g41s8hzDNh2XSD4F1 +YgUAu7YDFYQDkI5kRBYyrSuVMAcJkMm/v7yBhO7I7mAmfC2WiPprOiVz27SyN8+ sjw6cHN1ahxhF1hASr9PUM4rgaT24RBRRU2yiiNyQr5tQzcMWG/JSgPc6F3cuHZk iybRfKI2gZCcrmuwXrXzwak7ZxTWIVbpWR9yEabvVSwVz5LJz3GERTjL8yGWis22 Gv6udrj3SpNF3CNvpigqqs/OGjWoBMAyBCldj9an5NMMDPmXNkW4R9UCq7aZZaOg 5tnbt8C6S0KGUwEJUlnJCJY80ALd/Zk= -----END CERTIFICATE-----Generated at Sun Mar 1 22:50:53 2026 by rpki-client