$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/2cfc07a7-9790-3c1f-8f4a-56efc35ac620.roa File: 2cfc07a7-9790-3c1f-8f4a-56efc35ac620.roa (raw, json) Hash identifier: FY+I9Ub9LnwVYbJ3pP7gOPpgApAWA8/pPanLSlSoD1w= Subject key identifier: C5:C0:3F:F7:F8:B7:51:AA:7A:16:14:35:F4:53:39:44:98:9A:57:38 Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Certificate serial: 010D0C9F4328584CEA5CD46388D54C0072C4E500 Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/2cfc07a7-9790-3c1f-8f4a-56efc35ac620.roa Signing time: Thu 19 Feb 2026 14:00:40 +0000 ROA not before: Thu 19 Feb 2026 14:00:40 +0000 ROA not after: Wed 20 May 2026 13:00:40 +0000 asID: 399244 IP address blocks: 104.204.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ea:5c:d4:63:88:d5:4c:00:72:c4:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Validity Not Before: Feb 19 14:00:40 2026 GMT Not After : May 20 13:00:40 2026 GMT Subject: CN=6b9c9a03-1ed1-4663-91f6-e27c1ffe8200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9f:14:15:a2:e9:b3:f1:f4:d1:46:c5:85:a3: 80:d8:5b:37:cc:85:e4:54:a1:c0:d4:f5:70:30:c7: 66:d3:74:49:1f:07:cf:45:b2:0f:4f:15:0b:ee:8f: 85:11:b9:33:a2:24:e2:b3:43:50:c6:3a:84:9c:fb: d6:d5:1b:5c:ae:f9:0d:83:fa:3f:a4:9d:0b:95:0c: 94:6b:df:b3:90:dd:c0:57:86:9d:b6:66:f3:ec:23: e8:57:d6:ca:4f:06:b8:82:1a:06:7a:c9:f1:bc:01: f0:77:29:7b:8e:73:16:f4:dd:d0:55:af:32:a3:66: 8d:19:71:fd:9f:6b:50:2d:f2:e4:5a:40:d5:8f:c5: 3d:9f:fb:66:be:e2:f5:db:56:6b:49:c6:ae:52:2b: 1b:66:9e:e8:83:d1:b8:27:0e:34:dc:89:04:ff:1f: e2:db:47:d2:30:e7:3d:d3:f9:db:ba:7a:1d:0e:f8: 2d:fd:c1:e0:91:d5:9a:4b:9b:94:d8:4a:1a:f3:74: 5f:fe:65:16:27:90:07:d1:d2:d3:45:08:75:9e:e0: 15:06:ff:56:cf:f5:23:dc:48:8f:4c:b3:c3:dc:09: a5:12:4b:f8:20:90:9f:f1:00:38:9d:ab:51:7e:75: 2d:27:63:34:21:0d:f0:42:37:76:63:cf:5b:e3:4f: 77:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C0:3F:F7:F8:B7:51:AA:7A:16:14:35:F4:53:39:44:98:9A:57:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/2cfc07a7-9790-3c1f-8f4a-56efc35ac620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl X509v3 Authority Key Identifier: keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer sbgp-ipAddrBlock: critical IPv4: 104.204.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:9b:40:59:06:47:0a:f6:be:a0:9f:05:79:fe:ef:f5:9a:d1: cb:18:37:d3:4f:83:88:6b:f0:d4:ab:fc:ff:aa:d8:a3:8a:f9: 68:9b:02:40:b8:22:75:02:19:d6:6a:31:9a:ff:72:be:b9:b7: 17:b5:58:5a:da:e1:fe:be:48:ff:51:37:d3:e2:ae:01:22:8e: d0:9a:9e:01:ab:a2:01:59:fe:f2:98:1e:56:52:ea:a1:4a:a5: 43:07:b3:f5:5b:e2:ca:a9:9d:3b:24:56:f6:41:e8:3b:a2:be: f3:e9:56:56:a1:20:da:08:40:1b:d5:64:b7:76:b3:2e:e6:db: 1e:07:00:d2:02:a8:0a:b4:bf:87:00:68:87:11:ec:34:53:88: bb:c8:fe:61:0e:c5:6c:44:1a:fa:9b:af:74:fa:5a:34:fb:be: 9b:37:66:c6:66:6b:40:e1:e3:f8:92:30:ad:0b:54:04:35:37: 45:23:e8:57:4a:53:03:5d:bf:93:7b:3a:7d:f7:ee:c9:d1:66: 14:d3:57:12:1b:53:0b:a5:71:66:9b:a9:55:82:68:e6:67:e1: 65:7c:84:48:90:18:d4:fe:b1:50:39:af:89:a1:19:e8:32:0c: 65:ed:84:a7:b4:c4:65:4f:51:8a:4d:db:a2:3e:ff:ea:1d:4b: 38:30:1d:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXNRjiNVMAHLE5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh MzhkMB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk NmI5YzlhMDMtMWVkMS00NjYzLTkxZjYtZTI3YzFmZmU4MjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr58UFaLps/H00UbFhaOA2Fs3zIXkVKHA1PVw MMdm03RJHwfPRbIPTxUL7o+FEbkzoiTis0NQxjqEnPvW1RtcrvkNg/o/pJ0LlQyU a9+zkN3AV4adtmbz7CPoV9bKTwa4ghoGesnxvAHwdyl7jnMW9N3QVa8yo2aNGXH9 n2tQLfLkWkDVj8U9n/tmvuL121ZrScauUisbZp7og9G4Jw403IkE/x/i20fSMOc9 0/nbunodDvgt/cHgkdWaS5uU2Eoa83Rf/mUWJ5AH0dLTRQh1nuAVBv9Wz/Uj3EiP TLPD3AmlEkv4IJCf8QA4natRfnUtJ2M0IQ3wQjd2Y89b4093rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXAP/f4t1GqehYUNfRTOUSYmlc4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvMmNmYzA3YTctOTc5MC0z YzFmLThmNGEtNTZlZmMzNWFjNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaMzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACybQFkGRwr2vqCfBXn+7/Wa0csYN9NPg4hr8NSr/P+q2KOK+WibAkC4 InUCGdZqMZr/cr65txe1WFra4f6+SP9RN9PirgEijtCangGrogFZ/vKYHlZS6qFK pUMHs/Vb4sqpnTskVvZB6DuivvPpVlahINoIQBvVZLd2sy7m2x4HANICqAq0v4cA aIcR7DRTiLvI/mEOxWxEGvqbr3T6WjT7vps3ZsZma0Dh4/iSMK0LVAQ1N0Uj6FdK UwNdv5N7On337snRZhTTVxIbUwulcWabqVWCaOZn4WV8hEiQGNT+sVA5r4mhGegy DGXthKe0xGVPUYpN26I+/+odSzgwHYM= -----END CERTIFICATE-----Generated at Mon Mar 2 05:58:38 2026 by rpki-client