$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/0a3f164c-5f88-301b-adde-657863805f1c.roa File: 0a3f164c-5f88-301b-adde-657863805f1c.roa (raw, json) Hash identifier: BzsoQQ8cixhovHAsJtOyhpbKWTvs1tcCA2c8mLgFJ7s= Subject key identifier: E0:62:6B:76:EA:F3:9F:E0:DA:AC:6A:79:B1:0F:98:91:E3:92:C9:EB Certificate issuer: /CN=dd638a66-157d-4b37-b487-c2b5f4dbe940 Certificate serial: 010D0C9F4328584CA5F700C1B0806CF3CAB47240 Authority key identifier: F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/0a3f164c-5f88-301b-adde-657863805f1c.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 16509 IP address blocks: 144.86.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:00:c1:b0:80:6c:f3:ca:b4:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd638a66-157d-4b37-b487-c2b5f4dbe940 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=4e9a554c-864d-468b-b7e0-2cbd634dbe6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:20:62:8a:eb:98:eb:02:21:f4:52:75:80:17: 55:07:2a:cf:db:47:8c:7d:f4:4b:61:b2:c8:47:5f: 86:5b:2d:5c:2a:52:cd:c0:82:b6:ca:19:9b:22:95: 2a:d1:77:ee:ef:59:6a:15:37:97:ef:d4:5f:47:7b: 8c:b0:23:14:05:34:53:f9:eb:e9:fe:07:99:73:d7: e2:4c:55:48:2f:42:e3:a1:de:06:30:ec:ff:80:e9: af:f5:fd:28:ab:6b:76:fc:a9:74:1d:a1:3d:86:d6: 18:77:06:55:3d:37:b4:eb:b7:ab:a9:98:5f:4f:60: 0b:f8:d9:3d:3f:f6:47:fb:50:ca:e0:16:48:a9:09: 70:91:f1:a8:05:4a:9e:15:99:e4:a5:c7:0a:57:a3: aa:0c:cb:1b:77:8f:fc:f1:cc:2c:21:15:2e:93:40: fe:3f:1a:15:09:48:e6:3b:60:cb:bb:05:76:5a:28: 5e:5d:e5:b2:5f:63:92:6c:38:e1:56:4d:3d:41:5b: ee:a1:7e:41:8b:e5:8b:1d:47:45:f6:57:c2:b9:79: 66:13:bf:a7:16:94:67:f1:bd:a6:fb:e2:7f:d1:a6: ef:d9:40:fc:94:9a:1f:bb:b9:5a:20:c8:15:00:85: 19:80:17:52:56:7d:b3:bb:af:cd:8d:9a:f6:96:4c: 6d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:62:6B:76:EA:F3:9F:E0:DA:AC:6A:79:B1:0F:98:91:E3:92:C9:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/0a3f164c-5f88-301b-adde-657863805f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl X509v3 Authority Key Identifier: keyid:F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer sbgp-ipAddrBlock: critical IPv4: 144.86.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a0:4e:0c:ca:3f:2b:35:8d:78:78:c0:38:3a:fa:1a:2b:85: e3:c9:5b:7a:4d:6a:42:f3:26:5e:1c:16:cf:94:18:ab:e8:df: 3b:84:bf:31:b2:a3:0e:f0:4d:75:b7:96:3d:4f:b2:53:b1:e0: 0a:12:d9:cd:f9:cf:f5:ca:4c:ef:94:30:ff:16:6a:a4:90:a6: 54:45:a7:6c:48:a7:b0:d1:4a:53:e7:4a:24:cf:ee:37:87:6f: 5f:3d:b4:d2:68:8a:8f:20:80:41:b9:6b:60:39:a1:98:c9:60: e5:b5:48:20:72:cc:1e:3a:73:be:4b:c8:be:90:c2:ad:69:08: 42:88:20:d3:83:e0:a3:46:59:89:5f:8a:10:ae:54:9f:32:7b: 0d:f7:42:cf:68:25:c8:3b:e7:ce:86:ad:3c:20:8d:9b:1d:02: dd:c8:86:43:f5:55:a3:07:09:72:14:04:a9:ca:92:9d:09:74: dc:ef:03:29:30:69:dc:ca:74:61:8d:0e:d9:c4:75:03:51:a9: 36:c4:6c:03:a8:fe:1c:57:90:6d:29:09:97:3b:e1:b4:1d:aa: 7b:7f:02:07:b0:c2:f4:96:53:a8:91:c1:fa:3b:3d:c3:f9:73: a9:82:a0:bf:2b:63:c5:86:23:b4:6d:54:6c:10:04:dc:9d:fa: ab:49:9f:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9wDBsIBs88q0ckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2MzhhNjYtMTU3ZC00YjM3LWI0ODctYzJiNWY0ZGJl OTQwMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk NGU5YTU1NGMtODY0ZC00NjhiLWI3ZTAtMmNiZDYzNGRiZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiBiiuuY6wIh9FJ1gBdVByrP20eMffRLYbLI R1+GWy1cKlLNwIK2yhmbIpUq0Xfu71lqFTeX79RfR3uMsCMUBTRT+evp/geZc9fi TFVIL0Ljod4GMOz/gOmv9f0oq2t2/Kl0HaE9htYYdwZVPTe067erqZhfT2AL+Nk9 P/ZH+1DK4BZIqQlwkfGoBUqeFZnkpccKV6OqDMsbd4/88cwsIRUuk0D+PxoVCUjm O2DLuwV2WiheXeWyX2OSbDjhVk09QVvuoX5Bi+WLHUdF9lfCuXlmE7+nFpRn8b2m ++J/0abv2UD8lJofu7laIMgVAIUZgBdSVn2zu6/NjZr2lkxtYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBia3bq85/g2qxqebEPmJHjksnrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYz OGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1ZjRkYmU5NDAvMGEzZjE2NGMtNWY4OC0z MDFiLWFkZGUtNjU3ODYzODA1ZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGQ2MzhhNjYtMTU3ZC00YjM3LWI0 ODctYzJiNWY0ZGJlOTQwL2RkNjM4YTY2LTE1N2QtNGIzNy1iNDg3LWMyYjVmNGRi ZTk0MC5jcmwwHwYDVR0jBBgwFoAU8SMlgUkCtMcqnJBtJsWQEnyWtlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYzOGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1 ZjRkYmU5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFbKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGygTgzKPys1jXh4wDg6+horhePJW3pNakLzJl4cFs+UGKvo3zuEvzGy ow7wTXW3lj1PslOx4AoS2c35z/XKTO+UMP8WaqSQplRFp2xIp7DRSlPnSiTP7jeH b189tNJoio8ggEG5a2A5oZjJYOW1SCByzB46c75LyL6Qwq1pCEKIINOD4KNGWYlf ihCuVJ8yew33Qs9oJcg7586GrTwgjZsdAt3IhkP1VaMHCXIUBKnKkp0JdNzvAykw adzKdGGNDtnEdQNRqTbEbAOo/hxXkG0pCZc74bQdqnt/AgewwvSWU6iRwfo7PcP5 c6mCoL8rY8WGI7RtVGwQBNyd+qtJn40= -----END CERTIFICATE-----Generated at Mon Mar 2 17:09:57 2026 by rpki-client