$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa File: 9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa (raw, json) Hash identifier: dv6kAjMUys8EF58J8EUQV/4UcRDoBufmNAyHcoOVQhU= Subject key identifier: A7:67:A6:C4:8F:92:0D:3E:9D:8D:E6:D7:26:B4:C3:38:17:91:51:EB Certificate issuer: /CN=f7f8499b-2456-4be8-bad9-ced434198fa0 Certificate serial: 010D0C9F4328584CF6ECD9BB70ED5F944804A7A0 Authority key identifier: 35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 7896 IP address blocks: 144.216.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:d9:bb:70:ed:5f:94:48:04:a7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7f8499b-2456-4be8-bad9-ced434198fa0 Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=4a4d90fe-f430-40d5-b344-8bdb0f619788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5d:51:85:2f:a1:ce:08:fd:b5:74:02:e9:d7: e4:0d:14:0c:9b:15:0c:2d:ff:2d:67:55:06:39:0b: f1:ae:e5:a7:62:f3:d6:2a:d3:ff:a4:4e:ad:76:73: b4:55:3e:36:72:be:7b:82:c3:3c:43:30:d8:fc:fe: 4c:f9:0c:6f:eb:13:4f:f9:f1:36:fa:be:52:12:94: 46:7b:f6:fa:00:4a:6a:c1:65:d1:74:66:fa:60:f2: 8c:f1:6d:f1:32:d3:da:35:56:5b:52:ec:01:d7:8a: c7:0c:4b:c7:76:a4:f2:36:a2:ff:3a:26:3e:d1:71: 53:57:63:bb:9e:a1:56:7f:3d:10:94:a0:e3:4c:a0: fc:7a:5e:7e:d2:5a:e0:b4:45:47:a7:9f:b7:af:4d: bb:fa:98:3a:cf:7a:98:63:77:99:4e:a2:3c:ab:57: a8:24:28:6e:93:62:62:56:ae:5a:86:58:38:e2:21: 16:6e:25:3a:40:1c:4f:c8:e8:63:e5:89:46:63:ff: f7:91:5a:cb:0b:03:67:93:c7:42:1a:a1:e7:dc:cd: da:9e:ad:a3:02:20:ac:c3:f2:56:77:3b:0b:0c:2b: 74:18:92:48:4f:6d:11:fe:22:0c:35:dd:14:3c:79: b6:3f:03:6b:3a:5a:be:38:99:fa:0d:6a:d5:bb:dc: a8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:67:A6:C4:8F:92:0D:3E:9D:8D:E6:D7:26:B4:C3:38:17:91:51:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl X509v3 Authority Key Identifier: keyid:35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer sbgp-ipAddrBlock: critical IPv4: 144.216.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:9b:43:58:fb:b3:c4:b1:0d:a5:62:11:2e:a4:b9:e6:86:b0: 16:2b:66:36:ac:6d:62:7c:37:c7:de:93:57:c1:3d:25:ab:01: 83:06:95:12:e6:30:eb:73:1d:f6:70:aa:72:ba:97:d3:2f:57: 12:30:05:8e:49:04:80:45:ab:88:45:d3:53:97:1a:52:74:48: 11:b0:07:82:a1:73:77:b4:e3:6c:c4:4b:13:58:2c:97:5b:4f: 75:d5:5d:19:65:52:0e:e8:85:6e:5e:ed:41:d2:af:dd:43:0d: 25:f3:61:7b:d5:24:c1:3c:7e:a6:14:af:32:e7:cf:36:72:88: 71:b4:a2:d3:81:3b:64:32:78:64:91:94:96:cf:7e:00:40:ee: 08:6d:32:cc:5a:7d:4e:9a:50:b0:63:68:4e:06:c8:40:33:77: 1b:f2:65:19:58:24:9d:5d:31:52:2e:4b:a9:57:75:fa:dd:5b: ea:a9:d9:e5:0d:4e:23:5c:6d:93:c9:61:89:81:bd:05:7a:96: d4:94:ed:5a:80:a0:e3:3a:37:5a:ec:09:76:f2:3c:f3:f0:29: 2a:d8:87:76:3e:c8:a2:e4:0c:0d:6e:1b:30:fc:3e:fc:1e:f9: 1c:f7:47:f0:cd:3b:cf:0b:00:d1:d4:8e:c9:52:ed:2b:22:5f: b3:18:ea:6d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEz27Nm7cO1flEgEp6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjdmODQ5OWItMjQ1Ni00YmU4LWJhZDktY2VkNDM0MTk4 ZmEwMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk NGE0ZDkwZmUtZjQzMC00MGQ1LWIzNDQtOGJkYjBmNjE5Nzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF1RhS+hzgj9tXQC6dfkDRQMmxUMLf8tZ1UG OQvxruWnYvPWKtP/pE6tdnO0VT42cr57gsM8QzDY/P5M+Qxv6xNP+fE2+r5SEpRG e/b6AEpqwWXRdGb6YPKM8W3xMtPaNVZbUuwB14rHDEvHdqTyNqL/OiY+0XFTV2O7 nqFWfz0QlKDjTKD8el5+0lrgtEVHp5+3r027+pg6z3qYY3eZTqI8q1eoJChuk2Ji Vq5ahlg44iEWbiU6QBxPyOhj5YlGY//3kVrLCwNnk8dCGqHn3M3anq2jAiCsw/JW dzsLDCt0GJJIT20R/iIMNd0UPHm2PwNrOlq+OJn6DWrVu9yoiQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKdnpsSPkg0+nY3m1ya0wzgXkVHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mN2Y4 NDk5Yi0yNDU2LTRiZTgtYmFkOS1jZWQ0MzQxOThmYTAvOWRlYWZhN2MtZTk3NC0z ZmNiLWJkNmItMTRmMmEwYjY2YjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjdmODQ5OWItMjQ1Ni00YmU4LWJh ZDktY2VkNDM0MTk4ZmEwL2Y3Zjg0OTliLTI0NTYtNGJlOC1iYWQ5LWNlZDQzNDE5 OGZhMC5jcmwwHwYDVR0jBBgwFoAUNY08X4pzlnRC8WBNZVfaIPilZJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mN2Y4NDk5Yi0yNDU2LTRiZTgtYmFkOS1jZWQ0 MzQxOThmYTAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkNgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAM5tDWPuzxLENpWIRLqS55oawFitmNqxtYnw3x96TV8E9JasBgwaVEuYw 63Md9nCqcrqX0y9XEjAFjkkEgEWriEXTU5caUnRIEbAHgqFzd7TjbMRLE1gsl1tP ddVdGWVSDuiFbl7tQdKv3UMNJfNhe9UkwTx+phSvMufPNnKIcbSi04E7ZDJ4ZJGU ls9+AEDuCG0yzFp9TppQsGNoTgbIQDN3G/JlGVgknV0xUi5LqVd1+t1b6qnZ5Q1O I1xtk8lhiYG9BXqW1JTtWoCg4zo3WuwJdvI88/ApKtiHdj7IouQMDW4bMPw+/B75 HPdH8M07zwsA0dSOyVLtKyJfsxjqbQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:41:02 2026 by rpki-client