$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a0ef1a13-49d9-3439-878e-d98f51f1c08d.roa File: a0ef1a13-49d9-3439-878e-d98f51f1c08d.roa (raw, json) Hash identifier: GGTbCDq6IvZ0FNxtZs+KuKD+tZiKk7FwcO9GsdU8N24= Subject key identifier: 61:C6:F4:26:C5:03:E1:8F:DC:38:D1:EB:A1:63:A0:A3:58:07:06:E5 Certificate issuer: /CN=d498318a-7059-42be-9b60-234aedba5e34 Certificate serial: 010D0C9F4328584CE4C7825D065A6F9F18EEF4C0 Authority key identifier: 1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a0ef1a13-49d9-3439-878e-d98f51f1c08d.roa Signing time: Tue 17 Feb 2026 14:00:41 +0000 ROA not before: Tue 17 Feb 2026 14:00:41 +0000 ROA not after: Mon 18 May 2026 13:00:41 +0000 asID: 16787 IP address blocks: 192.219.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e4:c7:82:5d:06:5a:6f:9f:18:ee:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d498318a-7059-42be-9b60-234aedba5e34 Validity Not Before: Feb 17 14:00:41 2026 GMT Not After : May 18 13:00:41 2026 GMT Subject: CN=7881e69c-1853-4f20-844c-b1edf1196cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8b:b4:8b:c7:9a:d3:8b:f0:8b:8c:a8:f9:9c: a7:6c:0d:ad:53:8c:79:10:73:0b:4e:63:f6:53:30: b2:0c:d3:b7:b4:93:1f:13:06:16:9c:43:68:6c:2c: ec:97:9e:9b:80:db:9b:2e:bf:1e:43:2b:1c:df:32: 90:cc:a6:26:52:a0:38:10:98:ec:5a:f4:a1:6d:1b: 36:2c:e1:40:49:7b:46:8c:dd:ac:2d:1e:cb:88:2f: d0:4e:c8:b3:09:96:6b:d7:d6:f4:db:0d:6c:4a:5f: 53:55:c9:4e:87:64:cd:10:21:a8:b2:6a:7e:50:95: 65:ea:f9:8a:24:67:07:3a:0e:d2:e8:0f:70:81:e0: c0:0c:db:e8:a3:e4:56:7c:18:34:4e:25:09:0e:be: c5:9b:7a:8f:6c:c3:99:5f:05:21:15:b9:ad:91:1a: 99:e8:79:95:47:ca:8c:32:55:3f:67:00:e1:87:0b: 6e:65:55:b7:2b:52:a8:d1:14:b7:56:ea:75:a1:e3: 2d:5a:ef:8c:49:88:77:27:58:6c:1c:94:fc:2c:f1: 2b:d0:4a:a5:56:4c:3f:3e:a4:8a:72:8f:78:13:ae: 37:40:89:c5:16:e2:9c:b9:93:29:49:d7:c1:ae:f5: 88:b6:ae:63:b4:c8:61:bc:2b:98:10:f0:d0:93:30: b2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C6:F4:26:C5:03:E1:8F:DC:38:D1:EB:A1:63:A0:A3:58:07:06:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a0ef1a13-49d9-3439-878e-d98f51f1c08d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl X509v3 Authority Key Identifier: keyid:1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer sbgp-ipAddrBlock: critical IPv4: 192.219.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ed:18:0f:5b:4a:7f:ab:7f:74:37:ce:29:6d:d3:a1:61:4e: 7b:62:3c:e8:ea:e2:16:2d:90:24:56:01:7a:d0:e6:59:35:6c: b9:00:12:72:6b:63:da:55:84:92:37:80:a9:a0:1e:9f:7f:c2: 7f:60:f7:15:b6:0d:28:4f:54:e3:54:42:e7:b1:a5:2e:b7:c8: d3:2f:f0:da:35:29:96:5e:4a:91:a9:9d:6a:ed:f8:7e:46:66: c0:ab:a0:5e:d7:89:91:eb:6d:e8:d8:d0:77:12:f6:79:1c:43: 5f:56:5f:b4:28:89:cc:f9:8a:5f:49:da:a8:b7:f9:d0:ed:69: 57:8f:6e:45:eb:6f:96:ca:07:23:bd:38:cf:2e:6d:cd:51:d1: 07:4b:03:52:14:9a:37:a1:dc:51:ef:60:5b:79:00:da:2b:36: e1:e4:0a:34:33:c8:43:de:89:7f:31:98:33:f7:bf:33:47:ea: 77:9c:54:61:bd:98:c9:a3:0a:27:5c:da:bb:08:b6:cf:e4:8c: 1b:35:df:b2:20:c3:e7:8a:47:ed:84:6b:22:48:52:ec:64:83: be:18:1a:a6:2e:e7:c3:d5:48:b5:6f:b9:e6:0d:6c:96:74:bc: fe:33:3a:3b:af:1f:b0:dd:0f:ec:de:70:ca:cc:0e:ca:40:cd: 33:94:45:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzkx4JdBlpvnxju9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5ODMxOGEtNzA1OS00MmJlLTliNjAtMjM0YWVkYmE1 ZTM0MB4XDTI2MDIxNzE0MDA0MVoXDTI2MDUxODEzMDA0MVowLzEtMCsGA1UEAxMk Nzg4MWU2OWMtMTg1My00ZjIwLTg0NGMtYjFlZGYxMTk2Y2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4u0i8ea04vwi4yo+ZynbA2tU4x5EHMLTmP2 UzCyDNO3tJMfEwYWnENobCzsl56bgNubLr8eQysc3zKQzKYmUqA4EJjsWvShbRs2 LOFASXtGjN2sLR7LiC/QTsizCZZr19b02w1sSl9TVclOh2TNECGosmp+UJVl6vmK JGcHOg7S6A9wgeDADNvoo+RWfBg0TiUJDr7Fm3qPbMOZXwUhFbmtkRqZ6HmVR8qM MlU/ZwDhhwtuZVW3K1Ko0RS3Vup1oeMtWu+MSYh3J1hsHJT8LPEr0EqlVkw/PqSK co94E643QInFFuKcuZMpSdfBrvWItq5jtMhhvCuYEPDQkzCyNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHG9CbFA+GP3DjR66FjoKNYBwblMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk4 MzE4YS03MDU5LTQyYmUtOWI2MC0yMzRhZWRiYTVlMzQvYTBlZjFhMTMtNDlkOS0z NDM5LTg3OGUtZDk4ZjUxZjFjMDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ5ODMxOGEtNzA1OS00MmJlLTli NjAtMjM0YWVkYmE1ZTM0L2Q0OTgzMThhLTcwNTktNDJiZS05YjYwLTIzNGFlZGJh NWUzNC5jcmwwHwYDVR0jBBgwFoAUG1izrEgJ1ISdOmbgXwic0hDBEWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk4MzE4YS03MDU5LTQyYmUtOWI2MC0yMzRh ZWRiYTVlMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwNvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEftGA9bSn+rf3Q3zilt06FhTntiPOjq4hYtkCRWAXrQ5lk1bLkAEnJr Y9pVhJI3gKmgHp9/wn9g9xW2DShPVONUQuexpS63yNMv8No1KZZeSpGpnWrt+H5G ZsCroF7XiZHrbejY0HcS9nkcQ19WX7Qoicz5il9J2qi3+dDtaVePbkXrb5bKByO9 OM8ubc1R0QdLA1IUmjeh3FHvYFt5ANorNuHkCjQzyEPeiX8xmDP3vzNH6necVGG9 mMmjCidc2rsIts/kjBs137Igw+eKR+2EayJIUuxkg74YGqYu58PVSLVvueYNbJZ0 vP4zOjuvH7DdD+zecMrMDspAzTOURc4= -----END CERTIFICATE-----Generated at Mon Mar 2 18:34:56 2026 by rpki-client