$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/64bbaefe-121e-3227-8c64-63eb0383f20d.roa File: 64bbaefe-121e-3227-8c64-63eb0383f20d.roa (raw, json) Hash identifier: aW8kLk7xwZiQDbwQTzyZzzWbujND0908hI6IWSZ1lXw= Subject key identifier: 0F:64:09:5F:19:23:E8:80:08:F6:4F:9B:65:D9:01:C7:5E:5F:82:37 Certificate issuer: /CN=f8b0cb92-fb04-41d4-b39f-43c745f21faf Certificate serial: 010D0C9F4328584CD99CD6A5A198910D15A06500 Authority key identifier: 18:29:B3:63:61:A7:54:DB:72:0C:B3:00:F5:31:20:17:95:8D:5D:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/64bbaefe-121e-3227-8c64-63eb0383f20d.roa Signing time: Fri 13 Feb 2026 14:00:41 +0000 ROA not before: Fri 13 Feb 2026 14:00:41 +0000 ROA not after: Thu 14 May 2026 13:00:41 +0000 asID: 25950 IP address blocks: 192.169.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/f8b0cb92-fb04-41d4-b39f-43c745f21faf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/f8b0cb92-fb04-41d4-b39f-43c745f21faf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d9:9c:d6:a5:a1:98:91:0d:15:a0:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8b0cb92-fb04-41d4-b39f-43c745f21faf Validity Not Before: Feb 13 14:00:41 2026 GMT Not After : May 14 13:00:41 2026 GMT Subject: CN=ac296593-678f-43f1-9be2-48dc6593be88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:19:c7:cd:68:fb:51:d4:6a:91:bf:6c:33:0c: 92:9d:b4:81:59:82:63:17:b3:8f:92:32:07:c3:01: 50:21:a6:42:1a:15:a3:73:05:b8:96:27:52:a4:c7: a8:cb:42:71:50:f8:ba:57:a0:30:57:57:5c:00:2e: 4a:e7:d4:b7:17:e4:a8:54:6a:9e:12:cd:52:c3:cc: dd:30:ea:d9:48:ac:8b:46:b2:a1:af:9d:5d:71:40: 58:6e:ab:30:dd:19:35:b9:52:81:65:51:9e:7f:f1: 6c:a3:4c:2f:5f:57:85:50:16:72:f5:23:0f:dc:84: 38:e0:63:ed:eb:2f:76:18:98:00:2d:74:54:bf:54: ed:ee:96:b0:03:13:24:a0:7b:f6:d0:0f:21:8e:b3: 75:1c:ae:f8:6a:47:8e:5d:67:63:d9:23:ef:90:60: eb:41:23:22:b0:f0:2c:8f:e4:b8:87:05:1a:9e:21: 65:90:1c:18:f4:d2:7f:df:99:24:23:f5:30:d2:68: ac:0f:42:a1:33:7a:62:17:0d:5b:24:0c:5e:4f:a1: c1:37:2f:3a:13:11:c6:7a:6e:82:b5:95:04:51:b9: 4d:58:e1:69:ee:bf:b3:59:5b:8c:80:f6:76:43:74: 02:4c:db:1b:ff:f0:61:ad:12:dd:94:b0:4d:8e:df: 5b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:64:09:5F:19:23:E8:80:08:F6:4F:9B:65:D9:01:C7:5E:5F:82:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/64bbaefe-121e-3227-8c64-63eb0383f20d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/f8b0cb92-fb04-41d4-b39f-43c745f21faf.crl X509v3 Authority Key Identifier: keyid:18:29:B3:63:61:A7:54:DB:72:0C:B3:00:F5:31:20:17:95:8D:5D:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf.cer sbgp-ipAddrBlock: critical IPv4: 192.169.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:17:d3:c5:7e:08:a5:82:4c:c0:2b:c2:e0:79:15:8c:3a:44: a2:13:52:c8:b9:bc:69:37:51:3e:b0:5c:e1:db:78:69:1f:50: b9:42:b9:b1:fa:c4:aa:93:8f:25:74:27:19:84:47:ae:d4:17: db:e3:bd:1c:9f:7c:0c:e2:ac:6f:e3:d8:ac:31:7d:92:f1:f1: 86:07:ee:2d:7c:67:7d:51:1a:1d:7c:43:d6:91:20:73:02:4d: 3e:88:73:bb:6b:0f:0f:30:78:62:db:c9:bb:7a:82:ae:f8:af: a4:81:0b:da:98:b4:40:0e:e4:0a:e2:98:be:cc:c3:cf:80:20: 45:4b:a2:04:77:c4:36:66:f0:5e:46:c4:9a:85:ae:ce:99:47: bb:62:1c:27:6a:ff:af:0b:38:37:4a:4e:df:4f:f3:11:0e:3a: 51:c3:19:be:08:58:9e:29:94:ff:ab:34:cc:ca:b0:16:e3:41: 75:77:1b:6a:80:c7:37:27:30:dd:ab:7e:92:a9:0e:a2:dd:f1: de:c5:ba:83:f5:7a:0a:68:8c:d1:ed:2d:70:0f:8b:cd:c0:e4: cc:fa:81:31:f7:38:a2:e5:0f:0c:66:d8:c5:9a:dd:32:19:32: 37:a1:e1:95:c5:4d:ef:ca:7e:3e:c6:cc:26:96:19:c2:1f:51: ad:84:c2:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzZnNaloZiRDRWgZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhiMGNiOTItZmIwNC00MWQ0LWIzOWYtNDNjNzQ1ZjIx ZmFmMB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk YWMyOTY1OTMtNjc4Zi00M2YxLTliZTItNDhkYzY1OTNiZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxnHzWj7UdRqkb9sMwySnbSBWYJjF7OPkjIH wwFQIaZCGhWjcwW4lidSpMeoy0JxUPi6V6AwV1dcAC5K59S3F+SoVGqeEs1Sw8zd MOrZSKyLRrKhr51dcUBYbqsw3Rk1uVKBZVGef/Fso0wvX1eFUBZy9SMP3IQ44GPt 6y92GJgALXRUv1Tt7pawAxMkoHv20A8hjrN1HK74akeOXWdj2SPvkGDrQSMisPAs j+S4hwUaniFlkBwY9NJ/35kkI/Uw0misD0KhM3piFw1bJAxeT6HBNy86ExHGem6C tZUEUblNWOFp7r+zWVuMgPZ2Q3QCTNsb//BhrRLdlLBNjt9b+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9kCV8ZI+iACPZPm2XZAcdeX4I3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mOGIw Y2I5Mi1mYjA0LTQxZDQtYjM5Zi00M2M3NDVmMjFmYWYvNjRiYmFlZmUtMTIxZS0z MjI3LThjNjQtNjNlYjAzODNmMjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjhiMGNiOTItZmIwNC00MWQ0LWIz OWYtNDNjNzQ1ZjIxZmFmL2Y4YjBjYjkyLWZiMDQtNDFkNC1iMzlmLTQzYzc0NWYy MWZhZi5jcmwwHwYDVR0jBBgwFoAUGCmzY2GnVNtyDLMA9TEgF5WNXcswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mOGIwY2I5Mi1mYjA0LTQxZDQtYjM5Zi00M2M3 NDVmMjFmYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwKkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcX08V+CKWCTMArwuB5FYw6RKITUsi5vGk3UT6wXOHbeGkfULlCubH6 xKqTjyV0JxmER67UF9vjvRyffAzirG/j2KwxfZLx8YYH7i18Z31RGh18Q9aRIHMC TT6Ic7trDw8weGLbybt6gq74r6SBC9qYtEAO5ArimL7Mw8+AIEVLogR3xDZm8F5G xJqFrs6ZR7tiHCdq/68LODdKTt9P8xEOOlHDGb4IWJ4plP+rNMzKsBbjQXV3G2qA xzcnMN2rfpKpDqLd8d7FuoP1egpojNHtLXAPi83A5Mz6gTH3OKLlDwxm2MWa3TIZ Mjeh4ZXFTe/Kfj7GzCaWGcIfUa2EwtY= -----END CERTIFICATE-----Generated at Mon Mar 2 09:15:56 2026 by rpki-client