$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/28dd8de9-ccc5-3bf3-bf52-26369ef16956.roa File: 28dd8de9-ccc5-3bf3-bf52-26369ef16956.roa (raw, json) Hash identifier: C3TLuS3wGiBxkm5naJq0ESABwXl3Scac8rqgkFFNVjU= Subject key identifier: A1:BE:D3:55:34:90:F0:22:E5:2F:74:6F:32:D6:C8:C1:2C:A9:F9:A7 Certificate issuer: /CN=7f9f70ac-2c51-4fbe-b73a-a81973e583e3 Certificate serial: 010D0C9F4328584CE8F75E058E8783CB11EA4500 Authority key identifier: DC:8B:26:D0:11:03:66:6D:54:34:8D:33:2F:16:39:6E:4E:52:76:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/28dd8de9-ccc5-3bf3-bf52-26369ef16956.roa Signing time: Thu 19 Feb 2026 02:00:32 +0000 ROA not before: Thu 19 Feb 2026 02:00:32 +0000 ROA not after: Wed 20 May 2026 01:00:32 +0000 asID: 16851 IP address blocks: 199.36.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e8:f7:5e:05:8e:87:83:cb:11:ea:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f9f70ac-2c51-4fbe-b73a-a81973e583e3 Validity Not Before: Feb 19 02:00:32 2026 GMT Not After : May 20 01:00:32 2026 GMT Subject: CN=4c95f2ba-2771-46fe-bad5-64f8ed38b593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4d:f5:0f:4a:83:4f:28:26:26:e4:57:0e:5f: 8a:fc:ac:7d:58:78:3d:9b:61:aa:8d:db:7c:30:01: 2c:5e:c6:0e:6b:c8:0c:94:e1:7c:83:bb:57:0e:ca: 65:88:43:52:e4:21:c4:a7:e8:23:d4:c2:10:6d:34: 36:45:08:9b:49:f0:dd:c8:9b:28:d1:30:9e:20:1b: 45:f8:ab:5f:a2:75:cd:58:92:a0:56:85:f7:2a:5a: d8:a8:fb:d1:3b:20:1a:6a:96:2a:1c:45:40:81:8c: d6:91:34:80:c9:8e:7e:c2:0e:99:85:e3:6d:89:39: f6:90:f6:f9:5f:d5:9b:07:3d:78:a6:6f:36:38:7c: 6e:87:22:78:fa:cb:c6:e5:bc:38:41:39:cf:e1:32: 0d:b3:44:56:94:e4:d7:9f:8c:8b:95:8a:6d:9d:7c: ed:cd:68:d2:56:d5:d7:ae:2e:dc:c1:70:e8:e9:f2: 96:d7:6f:78:f2:b9:ad:5d:d9:98:25:95:68:1c:fd: dd:b1:b6:26:da:54:91:71:e9:1a:db:29:46:e9:e4: 90:39:c0:e4:d2:68:19:b4:fd:79:92:42:db:77:57: d0:9c:16:0d:d6:9e:c6:e1:b9:a0:b5:aa:8c:d8:2b: d3:0c:75:dd:84:6b:21:78:ac:e7:57:59:17:93:e7: 24:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BE:D3:55:34:90:F0:22:E5:2F:74:6F:32:D6:C8:C1:2C:A9:F9:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/28dd8de9-ccc5-3bf3-bf52-26369ef16956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.crl X509v3 Authority Key Identifier: keyid:DC:8B:26:D0:11:03:66:6D:54:34:8D:33:2F:16:39:6E:4E:52:76:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer sbgp-ipAddrBlock: critical IPv4: 199.36.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:82:86:04:98:1e:e5:29:36:44:ed:40:00:92:9b:e7:3a:c1: 6e:77:70:62:c1:bd:fe:f7:63:91:8c:59:d1:45:83:8e:f7:64: 53:42:d4:14:7e:cf:1e:ec:f1:2e:fc:ed:db:20:1a:3f:6e:81: 2f:2e:cd:b2:9f:0a:3e:37:91:52:fb:ba:3d:80:01:a7:bb:0c: 90:db:cc:a1:73:35:cb:48:b1:69:eb:69:eb:fe:a2:ad:a7:c8: d9:20:58:20:a5:e8:c8:f7:3b:3a:ed:94:3f:43:b6:20:94:e1: 25:02:27:74:45:fd:7a:42:87:ae:94:af:5e:3b:f4:a1:36:c9: c0:3c:77:ae:d9:04:15:30:66:b5:74:d9:df:d8:b4:d3:0b:f6: 4e:07:b3:01:10:9f:af:df:ba:6e:9d:ae:35:e1:4e:ea:92:74: ce:b2:fb:1d:98:07:8c:f6:27:f0:9d:94:2c:32:1c:15:9c:37: e4:0f:ac:33:40:ee:b4:4d:e1:a4:56:99:85:0c:72:b8:59:f6: 5d:5b:8d:64:cf:2d:63:44:80:32:f3:30:a9:02:09:c0:e9:12: 4f:02:8d:ec:23:32:a7:97:72:2b:b1:21:65:41:6e:38:c9:2c: 89:5a:15:29:3c:5f:02:50:50:66:01:d8:b3:23:c6:fc:be:83: 95:22:29:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzo914FjoeDyxHqRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5ZjcwYWMtMmM1MS00ZmJlLWI3M2EtYTgxOTczZTU4 M2UzMB4XDTI2MDIxOTAyMDAzMloXDTI2MDUyMDAxMDAzMlowLzEtMCsGA1UEAxMk NGM5NWYyYmEtMjc3MS00NmZlLWJhZDUtNjRmOGVkMzhiNTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU31D0qDTygmJuRXDl+K/Kx9WHg9m2Gqjdt8 MAEsXsYOa8gMlOF8g7tXDspliENS5CHEp+gj1MIQbTQ2RQibSfDdyJso0TCeIBtF +KtfonXNWJKgVoX3KlrYqPvROyAaapYqHEVAgYzWkTSAyY5+wg6ZheNtiTn2kPb5 X9WbBz14pm82OHxuhyJ4+svG5bw4QTnP4TINs0RWlOTXn4yLlYptnXztzWjSVtXX ri7cwXDo6fKW12948rmtXdmYJZVoHP3dsbYm2lSRceka2ylG6eSQOcDk0mgZtP15 kkLbd1fQnBYN1p7G4bmgtaqM2CvTDHXdhGsheKznV1kXk+ckjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKG+01U0kPAi5S90bzLWyMEsqfmnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83Zjlm NzBhYy0yYzUxLTRmYmUtYjczYS1hODE5NzNlNTgzZTMvMjhkZDhkZTktY2NjNS0z YmYzLWJmNTItMjYzNjllZjE2OTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2Y5ZjcwYWMtMmM1MS00ZmJlLWI3 M2EtYTgxOTczZTU4M2UzLzdmOWY3MGFjLTJjNTEtNGZiZS1iNzNhLWE4MTk3M2U1 ODNlMy5jcmwwHwYDVR0jBBgwFoAU3Ism0BEDZm1UNI0zLxY5bk5SdgcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZjlmNzBhYy0yYzUxLTRmYmUtYjczYS1hODE5 NzNlNTgzZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyR0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWChgSYHuUpNkTtQACSm+c6wW53cGLBvf73Y5GMWdFFg473ZFNC1BR+ zx7s8S787dsgGj9ugS8uzbKfCj43kVL7uj2AAae7DJDbzKFzNctIsWnraev+oq2n yNkgWCCl6Mj3OzrtlD9DtiCU4SUCJ3RF/XpCh66Ur1479KE2ycA8d67ZBBUwZrV0 2d/YtNML9k4HswEQn6/fum6drjXhTuqSdM6y+x2YB4z2J/CdlCwyHBWcN+QPrDNA 7rRN4aRWmYUMcrhZ9l1bjWTPLWNEgDLzMKkCCcDpEk8CjewjMqeXciuxIWVBbjjJ LIlaFSk8XwJQUGYB2LMjxvy+g5UiKTc= -----END CERTIFICATE-----Generated at Mon Mar 2 13:00:24 2026 by rpki-client