$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/2b3883b2-c6e6-3b24-8778-4efa7262e3d2.roa File: 2b3883b2-c6e6-3b24-8778-4efa7262e3d2.roa (raw, json) Hash identifier: FLwVPVrYtuTQPmYhcD+HRAwfa9EkV7E6o7y0WwAE7Zs= Subject key identifier: E4:DD:A9:F9:04:08:66:C0:B0:8E:DF:81:2A:9B:97:59:8D:15:1D:56 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584D037D51CA1FA6DA1ECC937100 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/2b3883b2-c6e6-3b24-8778-4efa7262e3d2.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 10794 IP address blocks: 171.162.86.0/24 maxlen: 24 171.162.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:51:ca:1f:a6:da:1e:cc:93:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=df69aabd-babf-43c6-9bc2-a1b52be16384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:47:a7:98:e0:4a:ce:73:10:b9:5c:bc:40:44: be:96:91:18:d3:25:fe:10:65:56:d2:01:af:a9:e2: 0c:03:92:30:a4:75:ea:ab:ec:24:2f:3f:19:47:eb: 16:d4:c8:21:e4:25:b8:32:97:9b:91:ca:ec:55:dc: 8e:f7:c3:c7:20:f2:0a:f5:ad:6b:b0:67:90:e8:e8: c8:e2:d8:90:c1:e8:03:97:99:d0:48:f2:bf:1a:e5: 8f:83:09:8f:64:3b:9b:4b:78:69:cf:59:41:5e:fb: ce:3c:a8:58:14:ed:92:3d:f4:15:45:9b:f5:f1:34: 9a:e5:a5:45:3a:ef:ba:75:02:5d:6f:20:83:dd:c2: c8:48:75:ef:8d:e7:30:b9:cb:ca:b4:98:36:5f:d6: 5a:11:56:96:77:46:aa:75:f0:ae:34:54:15:7e:1f: 23:31:87:fe:eb:d0:b9:43:06:f3:f5:ae:34:e4:c6: 1a:d8:70:94:57:5a:97:e4:fc:21:d9:c4:4b:1c:54: d6:2f:a4:78:26:d8:c6:a8:c7:3e:a5:a5:c2:8f:a7: 69:a8:77:71:1e:72:32:07:82:2a:54:bd:bc:00:db: b7:07:03:d5:f5:62:1e:07:9b:7b:55:7a:c2:25:c0: 1e:5c:c6:86:7e:5c:03:95:1a:f1:72:a4:54:10:41: 20:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DD:A9:F9:04:08:66:C0:B0:8E:DF:81:2A:9B:97:59:8D:15:1D:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/2b3883b2-c6e6-3b24-8778-4efa7262e3d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:bc:28:52:54:e8:bc:9f:e2:c2:cc:6a:35:7d:39:f4:97:6a: 46:a6:ed:ce:c1:9e:83:ef:6b:21:0f:e5:a3:7d:11:2b:02:b3: ed:e0:56:3c:51:25:ab:21:88:9a:dd:43:60:47:21:94:f7:da: f3:50:ac:c0:f7:30:11:48:d3:d2:d0:b1:54:33:ad:28:4a:03: 89:ea:a6:b6:69:89:e6:35:67:cc:b9:29:5c:ed:60:10:d5:92: dc:a8:c6:53:ed:ff:76:bb:6c:f3:e8:e0:4b:2a:7d:dc:80:bd: 10:56:de:5b:82:1f:08:fd:c7:67:b6:fa:2c:44:b9:4f:af:b2: be:35:2d:62:d0:50:b1:d8:97:84:9d:97:94:ad:24:af:57:7a: f4:95:4b:3f:4a:c5:2b:24:13:19:6e:76:9e:4e:3e:b5:99:03: 8c:eb:02:6b:c4:ba:fa:1f:85:4e:97:1e:80:cc:ac:59:ee:3c: 00:8b:b0:8a:a5:46:64:dc:e9:ff:d0:6d:04:64:ad:4e:53:4c: 52:ef:ac:29:c8:ad:35:24:bd:4f:35:c3:ea:3e:61:11:e0:61: 85:e4:66:2b:d8:73:7b:72:3b:36:d5:83:5a:f7:3c:e2:e6:a4: 68:03:44:6e:67:a2:2e:21:15:f3:ab:bf:cd:8f:fc:43:5a:bc: 21:95:ba:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfVHKH6baHsyTcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk ZGY2OWFhYmQtYmFiZi00M2M2LTliYzItYTFiNTJiZTE2Mzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkenmOBKznMQuVy8QES+lpEY0yX+EGVW0gGv qeIMA5IwpHXqq+wkLz8ZR+sW1Mgh5CW4MpebkcrsVdyO98PHIPIK9a1rsGeQ6OjI 4tiQwegDl5nQSPK/GuWPgwmPZDubS3hpz1lBXvvOPKhYFO2SPfQVRZv18TSa5aVF Ou+6dQJdbyCD3cLISHXvjecwucvKtJg2X9ZaEVaWd0aqdfCuNFQVfh8jMYf+69C5 Qwbz9a405MYa2HCUV1qX5Pwh2cRLHFTWL6R4JtjGqMc+paXCj6dpqHdxHnIyB4Iq VL28ANu3BwPV9WIeB5t7VXrCJcAeXMaGflwDlRrxcqRUEEEgJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTdqfkECGbAsI7fgSqbl1mNFR1WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMmIzODgzYjItYzZlNi0z YjI0LTg3NzgtNGVmYTcyNjJlM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBq6JWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa8KFJU6Lyf4sLMajV9OfSXakam7c7BnoPvayEP5aN9ESsCs+3gVjxR JashiJrdQ2BHIZT32vNQrMD3MBFI09LQsVQzrShKA4nqprZpieY1Z8y5KVztYBDV ktyoxlPt/3a7bPPo4EsqfdyAvRBW3luCHwj9x2e2+ixEuU+vsr41LWLQULHYl4Sd l5StJK9XevSVSz9KxSskExludp5OPrWZA4zrAmvEuvofhU6XHoDMrFnuPACLsIql RmTc6f/QbQRkrU5TTFLvrCnIrTUkvU81w+o+YRHgYYXkZivYc3tyOzbVg1r3POLm pGgDRG5noi4hFfOrv82P/ENavCGVujk= -----END CERTIFICATE-----Generated at Mon Mar 2 00:15:44 2026 by rpki-client