$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/8c1b3f62-2643-3f32-8572-fc3d23a752a9.roa File: 8c1b3f62-2643-3f32-8572-fc3d23a752a9.roa (raw, json) Hash identifier: +HOfS621U4tNkN6eZo7l2wjQSkIs7dtUCiq5VoAiZB4= Subject key identifier: 17:57:65:20:71:AD:11:6E:CB:B3:5F:1F:0B:55:B1:F7:8B:CC:77:E9 Certificate issuer: /CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd Certificate serial: 010D0C9F4328584D021798728DC9C26426F43830 Authority key identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/8c1b3f62-2643-3f32-8572-fc3d23a752a9.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 15164 IP address blocks: 192.160.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:98:72:8d:c9:c2:64:26:f4:38:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=24e656b8-1289-4556-bce3-c24b0f41331a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5e:28:af:58:f0:0a:ae:f5:80:1c:a1:6f:59: b1:bc:c1:cc:f7:f2:2c:d9:0e:4b:f7:de:0e:90:df: 1b:a4:47:fa:ae:7c:cc:7a:68:4b:4e:4f:60:f7:61: 7f:8d:fe:9b:0f:b9:2f:9b:88:30:de:5e:31:63:bb: f2:b6:79:8c:61:f9:df:f2:63:a4:64:d4:58:1f:44: 81:cd:a7:4a:8e:67:e8:e9:22:21:ad:7e:fb:0c:d4: 05:dc:38:ce:39:a8:14:4b:ab:50:6c:89:09:4f:f0: 8a:a5:14:a2:ba:2f:43:d5:aa:fb:3c:c3:29:27:9a: 6e:33:36:2b:4f:e2:60:41:4f:1b:55:3c:99:8e:b4: 9e:0d:d1:3b:0a:84:72:bd:97:44:92:68:7d:b4:5c: 69:a4:17:f3:a9:44:5b:e6:2a:a0:5f:99:fd:6d:1f: 6b:c6:1f:75:af:06:e7:1c:ff:05:36:f7:e0:c3:11: 51:ce:8d:ea:09:7a:a2:12:dc:54:fc:59:4a:4a:8c: 57:8b:35:62:61:14:2f:96:a4:95:f5:eb:41:06:3e: 67:28:cb:fc:6c:64:5c:b0:b7:47:99:12:40:91:dc: d8:f2:b0:85:4a:d8:4f:68:f5:12:eb:8e:29:9d:e7: f3:4c:1f:45:5a:e7:28:f8:80:ba:58:14:5c:d9:f6: 5d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:57:65:20:71:AD:11:6E:CB:B3:5F:1F:0B:55:B1:F7:8B:CC:77:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/8c1b3f62-2643-3f32-8572-fc3d23a752a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl X509v3 Authority Key Identifier: keyid:C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer sbgp-ipAddrBlock: critical IPv4: 192.160.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:23:7e:16:6a:2c:07:4a:9a:3c:ad:76:71:9b:78:0e:b8:8c: cd:11:0e:f6:4e:1b:b3:3f:c2:f9:5a:15:62:32:de:e2:f4:2f: 14:14:67:65:31:02:0f:3a:51:67:6c:9d:57:1c:91:52:6d:28: 6d:9e:b9:0e:fe:7e:27:69:b8:1f:00:a6:d9:d7:10:60:ce:34: 6d:95:b9:a2:ab:5b:99:46:a7:85:57:78:5e:b4:74:a7:07:71: e7:8b:1b:58:8b:8c:f2:3c:d2:4b:cf:9c:b8:36:a5:4c:07:6b: 1b:ba:f9:b0:49:2a:cc:6d:2f:a9:b9:8b:2a:16:c7:d0:b2:76: fa:eb:de:70:c6:9e:b1:be:63:21:af:91:74:bb:63:21:8b:29: 23:2e:78:03:87:ad:f9:94:57:71:74:8a:92:e6:a7:0e:09:94: b2:f7:f2:5a:f9:2b:53:aa:d1:77:d0:b6:7e:89:1e:43:37:45: 59:2a:ba:d9:d8:4f:40:ab:de:26:84:e3:c5:76:e1:10:6c:d2: f0:b0:2a:9e:45:f1:d5:76:7c:2d:62:b9:d1:e7:87:14:87:10: c2:06:56:76:7e:3a:69:35:dc:7d:d4:af:e3:c6:25:7b:60:cb: 55:ea:53:a6:15:bb:6f:a9:ef:cf:ff:ab:d2:97:7d:1a:e1:99: 87:86:8e:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF5hyjcnCZCb0ODAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmVlN2I2N2UtNWU0Zi00YTA1LWE1OWUtOWU4MjBjODk4 ZmNkMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk MjRlNjU2YjgtMTI4OS00NTU2LWJjZTMtYzI0YjBmNDEzMzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2l4or1jwCq71gByhb1mxvMHM9/Is2Q5L994O kN8bpEf6rnzMemhLTk9g92F/jf6bD7kvm4gw3l4xY7vytnmMYfnf8mOkZNRYH0SB zadKjmfo6SIhrX77DNQF3DjOOagUS6tQbIkJT/CKpRSiui9D1ar7PMMpJ5puMzYr T+JgQU8bVTyZjrSeDdE7CoRyvZdEkmh9tFxppBfzqURb5iqgX5n9bR9rxh91rwbn HP8FNvfgwxFRzo3qCXqiEtxU/FlKSoxXizViYRQvlqSV9etBBj5nKMv8bGRcsLdH mRJAkdzY8rCFSthPaPUS644pnefzTB9FWuco+IC6WBRc2fZd1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdXZSBxrRFuy7NfHwtVsfeLzHfpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZWU3 YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgyMGM4OThmY2QvOGMxYjNmNjItMjY0My0z ZjMyLTg1NzItZmMzZDIzYTc1MmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmVlN2I2N2UtNWU0Zi00YTA1LWE1 OWUtOWU4MjBjODk4ZmNkL2ZlZTdiNjdlLTVlNGYtNGEwNS1hNTllLTllODIwYzg5 OGZjZC5jcmwwHwYDVR0jBBgwFoAUyUCeXczprJIdAfK0l1qNJ/cvAbIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZWU3YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgy MGM4OThmY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4jfhZqLAdKmjytdnGbeA64jM0RDvZOG7M/wvlaFWIy3uL0LxQUZ2Ux Ag86UWdsnVcckVJtKG2euQ7+fidpuB8AptnXEGDONG2VuaKrW5lGp4VXeF60dKcH ceeLG1iLjPI80kvPnLg2pUwHaxu6+bBJKsxtL6m5iyoWx9Cydvrr3nDGnrG+YyGv kXS7YyGLKSMueAOHrfmUV3F0ipLmpw4JlLL38lr5K1Oq0XfQtn6JHkM3RVkqutnY T0Cr3iaE48V24RBs0vCwKp5F8dV2fC1iudHnhxSHEMIGVnZ+Omk13H3Ur+PGJXtg y1XqU6YVu2+p78//q9KXfRrhmYeGju8= -----END CERTIFICATE-----Generated at Mon Mar 2 17:12:56 2026 by rpki-client