$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/09721c6a-44cc-39ee-b648-6f47e10cc058.roa File: 09721c6a-44cc-39ee-b648-6f47e10cc058.roa (raw, json) Hash identifier: VaG4jGnFllbUEUZxXAuKty4ioLO08R6n1eZqOOC3z24= Subject key identifier: 01:2C:AC:7C:77:33:22:CF:2D:30:19:4C:70:BC:3B:3D:00:65:A1:E0 Certificate issuer: /CN=5eb81838-6cf7-4c1f-bf73-eeec087e471a Certificate serial: 010D0C9F4328584CB981D63B7645581F4F926DC0 Authority key identifier: 5D:78:96:26:CA:98:F9:F4:59:0D:D1:D9:DA:BA:10:1C:3F:FE:B7:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/09721c6a-44cc-39ee-b648-6f47e10cc058.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 393227 IP address blocks: 199.16.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:d6:3b:76:45:58:1f:4f:92:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eb81838-6cf7-4c1f-bf73-eeec087e471a Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=cd4755c5-0451-4896-9443-7fccb544ea8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:80:b1:b7:c2:de:15:18:dd:92:6e:a6:60:d6: 6d:28:bb:b7:a1:96:d7:4e:a6:eb:ba:3e:fa:67:44: 26:26:e1:17:d9:e9:fc:6d:f0:4d:a5:cc:45:40:bc: 70:73:b2:de:55:34:dc:de:8a:38:5f:5f:3f:24:05: 10:e9:ec:43:1f:79:8d:2f:37:c8:b3:0e:4d:86:a5: 4a:94:a4:8e:48:56:7b:01:12:ea:d9:95:cd:73:ea: 40:b7:a5:83:ab:0a:0e:f1:36:0d:7b:1c:e8:4a:e2: ce:00:54:99:b4:a0:64:cd:23:01:d7:2d:25:5e:83: ff:d1:a5:b0:90:b9:57:47:cd:ff:e8:d3:46:3d:7d: a0:17:cd:14:33:02:17:5f:47:4a:73:5e:bb:f0:c5: f7:1b:fb:55:ae:5b:96:0e:af:90:6c:14:bb:0c:c0: a2:a9:e3:4c:e3:a9:52:db:d5:fb:d6:ee:fa:bf:05: 66:d8:b0:15:0e:ae:81:db:be:b4:b8:dc:ab:20:70: d6:05:0b:70:29:9a:a1:30:ec:eb:4e:69:05:da:17: 3f:f2:2a:66:00:eb:69:d7:9c:a1:8e:8a:ed:66:a0: cb:1c:29:f4:cf:97:dc:4b:4c:6b:b4:16:39:5e:f1: 9a:10:89:91:95:15:6f:d4:0b:e7:e4:6e:5b:3d:01: e4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2C:AC:7C:77:33:22:CF:2D:30:19:4C:70:BC:3B:3D:00:65:A1:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/09721c6a-44cc-39ee-b648-6f47e10cc058.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.crl X509v3 Authority Key Identifier: keyid:5D:78:96:26:CA:98:F9:F4:59:0D:D1:D9:DA:BA:10:1C:3F:FE:B7:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer sbgp-ipAddrBlock: critical IPv4: 199.16.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:17:0b:01:a4:60:30:ce:85:8b:84:44:6f:10:96:53:5f:4f: 8a:c6:bf:10:9b:73:c5:40:c9:6d:c4:2e:2d:71:09:8f:67:11: 45:3e:3d:54:34:1a:3a:e4:22:13:83:c2:33:1a:8f:ef:a9:16: af:a4:0d:78:b3:98:b3:3c:ba:8c:72:80:45:2d:68:0e:06:ca: 37:08:50:96:d9:b6:8b:d1:48:56:73:b2:3e:bb:27:9e:72:82: bb:8f:83:0f:b6:78:67:20:ae:02:0e:7c:4c:93:54:7d:16:a6: 88:8d:ea:32:27:db:91:2e:d3:d7:9a:be:42:0b:cc:e5:da:3f: 26:b9:c4:6f:0d:70:eb:e9:1d:0e:61:30:a9:48:dc:51:5c:fb: 47:bb:92:b4:b1:3b:6e:35:b3:34:23:e5:ca:93:85:6d:45:98: ad:f4:51:cd:11:05:79:2e:08:66:4e:64:4b:33:1d:74:7b:92: dc:06:82:70:d1:77:c8:ae:8c:f6:a8:b6:ed:67:49:02:65:0c: a9:81:0f:35:58:da:70:c2:58:01:5c:39:42:64:b3:a9:61:1d: 1b:a6:92:5d:a7:dd:04:2f:e2:3b:79:74:fe:16:99:ae:dc:e0: 01:59:68:81:6f:d4:f8:69:94:6e:fa:3e:a0:5c:a4:48:9b:28: 37:6a:00:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gdY7dkVYH0+SbcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWViODE4MzgtNmNmNy00YzFmLWJmNzMtZWVlYzA4N2U0 NzFhMB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk Y2Q0NzU1YzUtMDQ1MS00ODk2LTk0NDMtN2ZjY2I1NDRlYThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4Cxt8LeFRjdkm6mYNZtKLu3oZbXTqbruj76 Z0QmJuEX2en8bfBNpcxFQLxwc7LeVTTc3oo4X18/JAUQ6exDH3mNLzfIsw5NhqVK lKSOSFZ7ARLq2ZXNc+pAt6WDqwoO8TYNexzoSuLOAFSZtKBkzSMB1y0lXoP/0aWw kLlXR83/6NNGPX2gF80UMwIXX0dKc1678MX3G/tVrluWDq+QbBS7DMCiqeNM46lS 29X71u76vwVm2LAVDq6B2760uNyrIHDWBQtwKZqhMOzrTmkF2hc/8ipmAOtp15yh jortZqDLHCn0z5fcS0xrtBY5XvGaEImRlRVv1Avn5G5bPQHkawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEsrHx3MyLPLTAZTHC8Oz0AZaHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81ZWI4 MTgzOC02Y2Y3LTRjMWYtYmY3My1lZWVjMDg3ZTQ3MWEvMDk3MjFjNmEtNDRjYy0z OWVlLWI2NDgtNmY0N2UxMGNjMDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWViODE4MzgtNmNmNy00YzFmLWJm NzMtZWVlYzA4N2U0NzFhLzVlYjgxODM4LTZjZjctNGMxZi1iZjczLWVlZWMwODdl NDcxYS5jcmwwHwYDVR0jBBgwFoAUXXiWJsqY+fRZDdHZ2roQHD/+t/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81ZWI4MTgzOC02Y2Y3LTRjMWYtYmY3My1lZWVj MDg3ZTQ3MWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxxDYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4XCwGkYDDOhYuERG8QllNfT4rGvxCbc8VAyW3ELi1xCY9nEUU+PVQ0 GjrkIhODwjMaj++pFq+kDXizmLM8uoxygEUtaA4GyjcIUJbZtovRSFZzsj67J55y gruPgw+2eGcgrgIOfEyTVH0WpoiN6jIn25Eu09eavkILzOXaPya5xG8NcOvpHQ5h MKlI3FFc+0e7krSxO241szQj5cqThW1FmK30Uc0RBXkuCGZOZEszHXR7ktwGgnDR d8iujPaotu1nSQJlDKmBDzVY2nDCWAFcOUJks6lhHRumkl2n3QQv4jt5dP4Wma7c 4AFZaIFv1PhplG76PqBcpEibKDdqAKg= -----END CERTIFICATE-----Generated at Mon Mar 2 14:26:26 2026 by rpki-client