$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/789da6a0-2c7a-3a3d-9143-50da694cacaa.roa File: 789da6a0-2c7a-3a3d-9143-50da694cacaa.roa (raw, json) Hash identifier: we/0E+WLtaB8GqmM1PWp+75Od1pcMEY6xtdbD61urcM= Subject key identifier: 04:83:33:93:FA:8C:7E:68:15:E1:3C:0E:F9:20:50:A7:54:13:CF:EF Certificate issuer: /CN=e2311284-478e-4111-8d73-27148a01fa21 Certificate serial: 010D0C9F4328584D0217AB420A3E0E535D099BB0 Authority key identifier: 8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/789da6a0-2c7a-3a3d-9143-50da694cacaa.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 17056 IP address blocks: 199.168.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:ab:42:0a:3e:0e:53:5d:09:9b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2311284-478e-4111-8d73-27148a01fa21 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=2ec9c5d2-b905-4e2c-bba5-7746e99199e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:67:4f:85:b1:20:99:d0:4b:d8:24:a3:7e:75: 85:19:14:a8:44:d9:52:0c:b8:16:91:b9:72:a4:04: 3b:97:ce:48:0a:36:0b:0e:e4:ec:9d:e1:0f:a3:a0: 5a:12:30:a0:48:a9:7e:e0:be:48:9d:50:a8:0b:8c: 19:3a:fa:7b:3f:cb:49:85:40:a1:15:35:eb:fa:9d: 18:34:c1:22:ac:d7:40:3a:e9:02:48:8b:2e:d0:fe: 96:cc:3c:65:6d:ba:5e:45:3b:38:e9:bb:10:c5:19: dc:6f:9b:45:e5:3e:76:6e:a7:98:e8:21:cc:b2:a3: 21:89:bd:89:d1:2d:4c:94:18:ba:c0:fa:77:2e:9d: f5:16:79:ae:d0:34:52:cf:56:0e:00:e0:05:b8:66: 60:4f:27:49:99:32:64:4c:91:cf:a9:3e:e4:56:d6: f0:93:78:01:6a:65:a3:d4:6a:83:ac:cf:23:22:84: ea:46:f8:07:83:a2:81:82:23:f0:c1:fe:f3:6a:bd: 61:51:87:42:ea:e6:b5:f4:fe:eb:f8:ad:a1:5f:a3: 57:9a:ed:ee:7e:57:0d:1b:e5:4b:be:33:be:86:ca: 69:73:f5:74:0a:69:35:3f:9e:7e:40:3b:d2:48:bf: fd:75:f2:f8:fd:68:b3:f0:af:1f:cb:51:63:9d:84: 78:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:83:33:93:FA:8C:7E:68:15:E1:3C:0E:F9:20:50:A7:54:13:CF:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/789da6a0-2c7a-3a3d-9143-50da694cacaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl X509v3 Authority Key Identifier: keyid:8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer sbgp-ipAddrBlock: critical IPv4: 199.168.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f8:f9:02:5d:a0:69:49:20:6e:59:9b:76:1f:fe:8a:cb:c5: 0e:a7:83:27:b1:34:89:97:86:bf:e0:e1:61:72:5e:71:48:6d: b2:6f:77:89:1b:57:45:4d:6d:02:3e:fd:15:8f:1c:6c:f5:1a: 02:40:66:0c:ec:1e:09:44:de:61:01:1b:ba:5a:a3:95:4f:69: 2b:60:cc:bc:e9:9a:ed:ef:f2:2a:7f:ab:db:ee:e0:9a:50:67: 14:a0:c3:cd:5f:94:3d:0e:ca:01:31:ad:f1:e2:7f:cf:8a:fd: e0:5f:0a:ad:84:62:d3:0d:1b:db:ac:25:b3:9c:2f:b2:fb:4f: 55:9e:9f:c7:3b:a7:3d:fa:11:20:10:52:97:56:19:78:b1:76: 08:5e:24:3b:de:42:c5:81:11:e0:43:16:29:52:79:f1:bc:c9: e1:f1:75:0d:a4:16:c6:c9:14:2f:c8:28:02:e1:1d:fe:21:be: 55:0a:35:a6:69:85:ad:c7:d8:df:01:b6:5a:de:95:27:f2:52: 79:00:56:a0:80:34:de:a3:df:13:59:22:41:81:f4:cf:43:08: 50:92:81:68:3e:15:97:63:67:59:81:1f:24:f3:79:5b:30:ec: 28:fc:12:d0:37:69:b0:3c:4a:e5:4b:16:30:bf:ee:62:fc:20: 19:d0:5f:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF6tCCj4OU10Jm7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIzMTEyODQtNDc4ZS00MTExLThkNzMtMjcxNDhhMDFm YTIxMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk MmVjOWM1ZDItYjkwNS00ZTJjLWJiYTUtNzc0NmU5OTE5OWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmdPhbEgmdBL2CSjfnWFGRSoRNlSDLgWkbly pAQ7l85ICjYLDuTsneEPo6BaEjCgSKl+4L5InVCoC4wZOvp7P8tJhUChFTXr+p0Y NMEirNdAOukCSIsu0P6WzDxlbbpeRTs46bsQxRncb5tF5T52bqeY6CHMsqMhib2J 0S1MlBi6wPp3Lp31Fnmu0DRSz1YOAOAFuGZgTydJmTJkTJHPqT7kVtbwk3gBamWj 1GqDrM8jIoTqRvgHg6KBgiPwwf7zar1hUYdC6ua19P7r+K2hX6NXmu3uflcNG+VL vjO+hsppc/V0Cmk1P55+QDvSSL/9dfL4/Wiz8K8fy1FjnYR4gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASDM5P6jH5oFeE8DvkgUKdUE8/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lMjMx MTI4NC00NzhlLTQxMTEtOGQ3My0yNzE0OGEwMWZhMjEvNzg5ZGE2YTAtMmM3YS0z YTNkLTkxNDMtNTBkYTY5NGNhY2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTIzMTEyODQtNDc4ZS00MTExLThk NzMtMjcxNDhhMDFmYTIxL2UyMzExMjg0LTQ3OGUtNDExMS04ZDczLTI3MTQ4YTAx ZmEyMS5jcmwwHwYDVR0jBBgwFoAUjPBojc3iLqg2nDEwEA+YdRqH274wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lMjMxMTI4NC00NzhlLTQxMTEtOGQ3My0yNzE0 OGEwMWZhMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6jgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAED4+QJdoGlJIG5Zm3Yf/orLxQ6ngyexNImXhr/g4WFyXnFIbbJvd4kb V0VNbQI+/RWPHGz1GgJAZgzsHglE3mEBG7pao5VPaStgzLzpmu3v8ip/q9vu4JpQ ZxSgw81flD0OygExrfHif8+K/eBfCq2EYtMNG9usJbOcL7L7T1Wen8c7pz36ESAQ UpdWGXixdgheJDveQsWBEeBDFilSefG8yeHxdQ2kFsbJFC/IKALhHf4hvlUKNaZp ha3H2N8BtlrelSfyUnkAVqCANN6j3xNZIkGB9M9DCFCSgWg+FZdjZ1mBHyTzeVsw 7Cj8EtA3abA8SuVLFjC/7mL8IBnQX3E= -----END CERTIFICATE-----Generated at Mon Mar 2 10:54:02 2026 by rpki-client