$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/bdd424bd-5955-3ea4-92d6-509aa3be19fa.roa File: bdd424bd-5955-3ea4-92d6-509aa3be19fa.roa (raw, json) Hash identifier: 9djnLnq2pk6MpiO5iQ45At5kvQk/MW/aU7/LeTBBD2k= Subject key identifier: D7:1A:AE:A6:67:C3:27:7C:AE:56:1E:89:BA:5F:B1:5C:06:49:5F:57 Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584CD407A518D396BAF856AA3E80 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/bdd424bd-5955-3ea4-92d6-509aa3be19fa.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 401585 IP address blocks: 198.176.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:a5:18:d3:96:ba:f8:56:aa:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=517b0d1e-d77f-4f76-8d6d-9ece482e33a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:eb:6d:b1:fa:4e:05:86:13:50:9f:3a:3f: 47:f0:c5:e3:75:ea:2d:d9:f0:5d:24:a6:e3:b9:06: 96:38:26:7d:39:b3:58:08:e4:9d:88:33:25:84:f7: cd:d6:f8:5f:d0:b1:43:ea:85:2a:ba:3d:57:45:97: 47:cc:be:1a:cf:7d:b8:c4:b5:1f:7c:52:d4:9d:41: c7:35:8a:eb:e6:a3:2f:11:78:ba:6b:e2:2c:d2:3d: fc:eb:9e:24:eb:2c:bd:26:de:15:42:1d:97:e1:a6: 0b:a0:8f:ce:48:3d:53:e2:d3:9d:3c:5f:8a:cf:5b: ca:2b:13:c4:cc:20:a0:ec:13:b1:12:1e:67:34:34: f0:f8:0e:c3:5a:e9:0d:cb:e7:89:bc:74:e5:22:38: 81:09:99:1e:b4:76:df:ba:19:65:ce:8a:d5:10:c7: b0:25:e7:58:72:93:67:65:96:8e:2c:72:53:4b:84: c5:c3:ef:62:8e:d1:7d:2d:09:1c:33:1d:a0:28:19: 8d:8e:28:2d:6e:53:fc:c2:3c:33:f1:0c:09:7a:a6: 3e:20:9f:04:d0:ef:fb:c3:a7:48:a3:8b:1a:f9:71: 37:da:cd:e4:45:f8:11:16:32:94:74:eb:84:db:e1: be:56:26:58:28:82:ba:a4:31:13:0b:f6:0b:ca:82: 76:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1A:AE:A6:67:C3:27:7C:AE:56:1E:89:BA:5F:B1:5C:06:49:5F:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/bdd424bd-5955-3ea4-92d6-509aa3be19fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 198.176.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:51:05:3d:a5:37:9f:0b:a4:30:e8:4d:d5:47:02:fb:1a:27: 88:e1:02:ea:0b:0f:42:c6:6f:e0:1b:10:76:92:a6:a7:d1:8f: 37:ad:92:bf:df:e3:2d:28:30:36:84:4c:36:c2:ef:39:4b:bd: 4d:e9:ae:31:f9:26:30:2a:6b:a7:20:a9:de:7c:fa:83:2f:73: 10:7b:70:c9:44:79:f3:f3:69:6f:8f:f1:52:d9:70:45:dd:a7: 36:55:e5:91:ef:83:e0:7f:70:e8:83:dd:9a:10:1e:5f:da:da: 14:84:a7:6e:27:68:d1:66:bc:c7:e4:04:24:a6:7d:e4:8f:dc: a2:8b:00:3d:10:6a:c0:73:88:2f:3a:b9:cb:dd:a1:a4:87:61: 23:56:e8:01:34:fd:cf:9a:0c:b6:08:eb:ee:62:2f:67:88:50: 4a:96:cf:a2:17:d3:2c:a9:14:51:92:ed:23:f4:92:b4:59:43: 10:39:97:17:5a:f4:c5:13:94:f9:4c:f9:22:25:b6:ae:66:3c: 83:89:c8:60:17:a6:ae:86:89:f1:e2:d8:5b:7d:6d:8c:1f:1f: 97:f3:83:a4:92:f4:12:30:8d:07:0a:6b:23:ea:b4:07:c9:3d: 75:d6:79:d9:87:27:58:54:cd:f5:79:8e:dc:34:2b:87:33:bb: ef:c5:e6:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB6UY05a6+FaqPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk NTE3YjBkMWUtZDc3Zi00Zjc2LThkNmQtOWVjZTQ4MmUzM2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsczrbbH6TgWGE1CfOj9H8MXjdeot2fBdJKbj uQaWOCZ9ObNYCOSdiDMlhPfN1vhf0LFD6oUquj1XRZdHzL4az324xLUffFLUnUHH NYrr5qMvEXi6a+Is0j38654k6yy9Jt4VQh2X4aYLoI/OSD1T4tOdPF+Kz1vKKxPE zCCg7BOxEh5nNDTw+A7DWukNy+eJvHTlIjiBCZketHbfuhllzorVEMewJedYcpNn ZZaOLHJTS4TFw+9ijtF9LQkcMx2gKBmNjigtblP8wjwz8QwJeqY+IJ8E0O/7w6dI o4sa+XE32s3kRfgRFjKUdOuE2+G+ViZYKIK6pDETC/YLyoJ2ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcarqZnwyd8rlYeibpfsVwGSV9XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvYmRkNDI0YmQtNTk1NS0z ZWE0LTkyZDYtNTA5YWEzYmUxOWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExrAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhRBT2lN58LpDDoTdVHAvsaJ4jhAuoLD0LGb+AbEHaSpqfRjzetkr/f 4y0oMDaETDbC7zlLvU3prjH5JjAqa6cgqd58+oMvcxB7cMlEefPzaW+P8VLZcEXd pzZV5ZHvg+B/cOiD3ZoQHl/a2hSEp24naNFmvMfkBCSmfeSP3KKLAD0QasBziC86 ucvdoaSHYSNW6AE0/c+aDLYI6+5iL2eIUEqWz6IX0yypFFGS7SP0krRZQxA5lxda 9MUTlPlM+SIltq5mPIOJyGAXpq6GifHi2Ft9bYwfH5fzg6SS9BIwjQcKayPqtAfJ PXXWedmHJ1hUzfV5jtw0K4czu+/F5vg= -----END CERTIFICATE-----Generated at Mon Mar 2 17:04:41 2026 by rpki-client