$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/de0c75c3-d3bc-3f50-9911-fde5dd621864.roa File: de0c75c3-d3bc-3f50-9911-fde5dd621864.roa (raw, json) Hash identifier: /QpXbQfwyioBPI3OFlNCB8j2+OWFoB9HO3RKaEkOgjY= Subject key identifier: 76:DA:7F:28:84:66:9E:37:E5:E7:14:0B:B3:D4:18:65:6B:D7:F8:2D Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F4328584D00B293A4F3B2DA0CAF016B00 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/de0c75c3-d3bc-3f50-9911-fde5dd621864.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 19165 IP address blocks: 208.66.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:93:a4:f3:b2:da:0c:af:01:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=f74df863-c3de-422b-8700-2e6df3e68e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ee:5b:aa:dc:df:64:6f:2a:31:75:68:1b:11: e3:5e:52:0d:17:92:b6:5e:ef:db:3a:10:83:b3:aa: b7:28:32:51:65:ed:01:d2:58:67:04:2e:c9:02:d2: 26:d9:39:eb:13:8d:d3:19:2d:29:a7:bf:98:f5:42: 00:c9:49:71:f9:75:ff:d9:e4:a9:29:b3:f4:00:1f: ea:37:ca:39:ad:9a:d4:92:14:16:6a:fe:36:df:df: 72:41:35:02:eb:41:82:fb:7d:63:3f:d2:d5:3e:89: 6e:4d:c0:f1:ab:7c:46:5f:52:7a:5d:97:52:f9:25: 9e:cd:03:5e:a2:1d:fa:75:b3:23:e8:9d:c7:4e:ea: e5:56:09:c6:6e:71:0b:47:59:ac:db:cd:c9:db:e2: 46:ac:43:2d:c7:2c:16:cc:ea:11:08:58:23:1a:df: 6b:35:1d:fe:08:95:e5:bc:6b:50:c0:a7:53:2b:1b: d4:7b:02:f7:95:fd:85:c4:63:f6:53:45:43:b7:2a: 62:9c:3e:df:7b:bf:a4:80:9d:7f:a5:56:ef:e1:7c: 0e:63:75:68:35:da:fd:20:b6:83:f0:2c:06:75:b0: ca:c0:0b:9c:9a:96:c4:f7:57:a3:f6:6b:bd:26:b3: 94:6e:4b:75:d4:4a:26:ef:be:24:73:a5:cc:89:b1: 1d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DA:7F:28:84:66:9E:37:E5:E7:14:0B:B3:D4:18:65:6B:D7:F8:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/de0c75c3-d3bc-3f50-9911-fde5dd621864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 208.66.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:14:ee:87:0e:68:b2:84:c0:44:ed:54:ed:ac:ca:8e:30:f7: 6d:51:ec:c0:a7:9a:de:50:0d:d7:07:63:a6:e7:d5:69:33:4b: c9:bf:6a:fa:e2:53:86:5f:0c:09:01:bb:65:71:72:f9:e2:79: 73:92:2f:eb:b3:cf:f7:90:7b:21:ab:fb:18:02:78:6b:df:da: 20:00:d2:2c:ba:1d:74:43:48:9f:66:80:80:f1:d8:c2:21:39: 23:fd:9a:28:15:59:d3:81:6f:88:aa:b4:80:e0:28:ab:08:43: 23:c2:29:1a:66:47:9e:03:48:c0:35:09:82:df:8b:fd:07:0b: 0e:dd:c0:b4:8b:54:a8:60:bb:a2:fc:2b:3e:92:28:ff:a9:5a: 39:6f:76:0f:23:7f:47:6c:b7:f0:bf:08:fb:3a:93:ed:41:65: da:44:fb:6d:d0:50:4c:af:12:c7:bd:55:71:09:1e:43:8b:29: f3:bf:8d:c2:db:38:4b:99:62:0c:a6:7b:97:8d:5a:cd:9c:ea: f6:84:c9:74:7a:f6:78:ba:b6:8b:3c:ec:5c:38:03:36:d7:a9: 9a:3b:9e:2c:bf:d0:c0:12:6f:3f:51:65:e9:b9:0a:b0:56:29: b0:25:b6:1d:e1:e5:8f:71:35:a9:0f:0d:81:7b:50:7e:f4:74: 7c:dc:4a:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AspOk87LaDK8BawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk Zjc0ZGY4NjMtYzNkZS00MjJiLTg3MDAtMmU2ZGYzZTY4ZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2O5bqtzfZG8qMXVoGxHjXlINF5K2Xu/bOhCD s6q3KDJRZe0B0lhnBC7JAtIm2TnrE43TGS0pp7+Y9UIAyUlx+XX/2eSpKbP0AB/q N8o5rZrUkhQWav42399yQTUC60GC+31jP9LVPoluTcDxq3xGX1J6XZdS+SWezQNe oh36dbMj6J3HTurlVgnGbnELR1ms283J2+JGrEMtxywWzOoRCFgjGt9rNR3+CJXl vGtQwKdTKxvUewL3lf2FxGP2U0VDtypinD7fe7+kgJ1/pVbv4XwOY3VoNdr9ILaD 8CwGdbDKwAucmpbE91ej9mu9JrOUbkt11Eom774kc6XMibEdUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbafyiEZp435ecUC7PUGGVr1/gtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvZGUwYzc1YzMtZDNiYy0z ZjUwLTk5MTEtZmRlNWRkNjIxODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4U7ocOaLKEwETtVO2syo4w921R7MCnmt5QDdcHY6bn1WkzS8m/avri U4ZfDAkBu2VxcvnieXOSL+uzz/eQeyGr+xgCeGvf2iAA0iy6HXRDSJ9mgIDx2MIh OSP9migVWdOBb4iqtIDgKKsIQyPCKRpmR54DSMA1CYLfi/0HCw7dwLSLVKhgu6L8 Kz6SKP+pWjlvdg8jf0dst/C/CPs6k+1BZdpE+23QUEyvEse9VXEJHkOLKfO/jcLb OEuZYgyme5eNWs2c6vaEyXR69ni6tos87Fw4AzbXqZo7niy/0MASbz9RZem5CrBW KbAlth3h5Y9xNakPDYF7UH70dHzcSlQ= -----END CERTIFICATE-----Generated at Mon Mar 2 13:53:13 2026 by rpki-client