$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/d2aa202d-ca92-33b2-9fe0-1806d0f31f6b.roa File: d2aa202d-ca92-33b2-9fe0-1806d0f31f6b.roa (raw, json) Hash identifier: xhz8fECYPFJlrlz062Hh1iBjMqfodgUCTx79yHUpi4s= Subject key identifier: C1:C8:F3:80:2C:0A:54:36:E5:33:0E:E6:71:5B:89:C4:ED:20:CC:EE Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F4328584D00B26A30C561DB16F9D9E4C0 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/d2aa202d-ca92-33b2-9fe0-1806d0f31f6b.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 16509 IP address blocks: 192.135.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:6a:30:c5:61:db:16:f9:d9:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=67aeb69f-4fdf-4b3a-8e45-ea19fadfb7d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:47:3f:d0:1f:5e:e1:64:91:eb:9a:d7:c0:6e: 77:6a:0f:82:c5:7d:a2:6f:ba:e8:c7:73:20:57:51: dd:e2:bf:25:ea:da:96:04:46:9b:7c:e7:f9:5c:30: c4:37:b9:eb:60:12:7a:f1:6f:47:21:07:6f:0b:26: 9b:8a:22:78:f6:8c:c1:d0:89:4e:73:60:4e:c3:89: 3b:b3:15:5b:02:5d:c3:62:25:6a:e6:c2:88:dd:20: 48:7d:f7:a8:ab:34:52:1b:64:2e:fe:93:25:1c:5f: 22:65:1a:c1:d2:f3:10:2f:c9:eb:04:e4:8b:c5:a0: b2:00:70:43:62:17:65:3c:05:9a:47:cb:5e:e1:2a: b2:2b:ae:c5:e6:17:9d:a4:02:5d:9a:07:5c:23:50: 17:7a:cd:b8:0c:21:bc:c2:f1:a3:99:21:3e:ba:eb: be:88:b6:ef:56:68:21:72:b0:99:5b:18:21:51:4d: 98:e5:0d:90:a2:5b:75:17:02:0f:b0:79:80:f9:90: 4a:c8:9a:e4:aa:a2:ca:1e:12:d8:01:1e:30:fa:b1: 92:43:b6:4a:9f:26:b1:76:ce:c2:72:41:bd:f3:1e: a4:b5:d1:e5:3a:de:44:9a:f8:71:9b:e5:d8:42:06: 8c:63:31:91:2f:cc:d8:3d:2d:0d:64:31:0e:41:ab: 75:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C8:F3:80:2C:0A:54:36:E5:33:0E:E6:71:5B:89:C4:ED:20:CC:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/d2aa202d-ca92-33b2-9fe0-1806d0f31f6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv4: 192.135.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:57:aa:3d:36:f9:8d:2a:a0:e5:3e:37:6b:c7:69:23:ab:73: e6:8d:70:b6:87:a1:dd:12:cb:e6:e0:25:fa:0d:bf:d4:b3:85: bc:8c:01:13:07:d1:81:e0:b4:b1:35:93:96:c7:c8:69:3c:bd: 0b:8a:d5:cb:09:5d:20:aa:e2:51:d5:98:2d:56:76:fa:14:bf: 5e:73:12:f0:d1:60:9a:e5:e7:de:9d:c9:f3:f1:48:db:7f:b4: 17:0a:ce:37:ba:88:d1:d7:aa:d9:17:b2:0c:bf:37:b9:c0:e6: 0a:26:b6:7b:c3:06:e3:fd:6d:74:7a:0f:89:14:4b:ca:83:63: e9:f7:92:18:9e:08:e8:af:7b:62:4c:24:40:2f:38:9c:0b:50: 49:0b:fd:79:d1:ff:d9:27:e4:84:3f:aa:fb:de:f3:6d:22:b0: 43:9c:2d:a5:e7:ae:11:25:ac:ed:a1:be:0e:9d:dc:d1:4f:35: f8:fa:05:c0:06:22:36:58:88:4c:e3:c2:e1:c4:e6:11:62:af: dc:45:20:14:8f:11:dd:42:24:c7:e3:4c:f0:b1:54:a8:a6:3a: 26:0b:18:40:71:8f:2b:f6:2c:0c:4e:a8:31:ba:46:b3:78:11: b0:89:4c:21:6c:64:a2:f7:1f:0d:5a:a6:d5:af:6c:47:52:43: 6d:92:aa:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AsmowxWHbFvnZ5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk NjdhZWI2OWYtNGZkZi00YjNhLThlNDUtZWExOWZhZGZiN2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUc/0B9e4WSR65rXwG53ag+CxX2ib7rox3Mg V1Hd4r8l6tqWBEabfOf5XDDEN7nrYBJ68W9HIQdvCyabiiJ49ozB0IlOc2BOw4k7 sxVbAl3DYiVq5sKI3SBIffeoqzRSG2Qu/pMlHF8iZRrB0vMQL8nrBOSLxaCyAHBD YhdlPAWaR8te4SqyK67F5hedpAJdmgdcI1AXes24DCG8wvGjmSE+uuu+iLbvVmgh crCZWxghUU2Y5Q2Qolt1FwIPsHmA+ZBKyJrkqqLKHhLYAR4w+rGSQ7ZKnyaxds7C ckG98x6ktdHlOt5Emvhxm+XYQgaMYzGRL8zYPS0NZDEOQat1twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHI84AsClQ25TMO5nFbicTtIMzuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvZDJhYTIwMmQtY2E5Mi0z M2IyLTlmZTAtMTgwNmQwZjMxZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIffMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJXqj02+Y0qoOU+N2vHaSOrc+aNcLaHod0Sy+bgJfoNv9SzhbyMARMH 0YHgtLE1k5bHyGk8vQuK1csJXSCq4lHVmC1WdvoUv15zEvDRYJrl596dyfPxSNt/ tBcKzje6iNHXqtkXsgy/N7nA5gomtnvDBuP9bXR6D4kUS8qDY+n3khieCOive2JM JEAvOJwLUEkL/XnR/9kn5IQ/qvve820isEOcLaXnrhElrO2hvg6d3NFPNfj6BcAG IjZYiEzjwuHE5hFir9xFIBSPEd1CJMfjTPCxVKimOiYLGEBxjyv2LAxOqDG6RrN4 EbCJTCFsZKL3Hw1aptWvbEdSQ22Sqt8= -----END CERTIFICATE-----Generated at Mon Mar 2 02:17:51 2026 by rpki-client