$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa File: 509e4ddf-df6f-34cc-83d4-959041c0d418.roa (raw, json) Hash identifier: YrqSsqr6XH8mjnn4OR6CuEJN1WxudNP6fGH40zWsB+Q= Subject key identifier: DB:A5:64:CB:7A:5B:09:88:92:10:95:56:FB:C9:E6:95:0F:DE:92:9C Certificate issuer: /CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Certificate serial: 010D0C9F4328584CCBA75832469F1CA8C0CA8C00 Authority key identifier: 54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 16575 IP address blocks: 192.200.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:58:32:46:9f:1c:a8:c0:ca:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=16cc34cc-c25e-4828-8784-b2421abe23b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:27:5c:b2:2a:ee:c2:3b:37:1c:6c:c9:0f:11: ae:8d:c6:04:ad:a9:d8:a5:56:c0:50:94:e4:fc:0b: 97:a5:00:97:93:78:21:0c:ed:09:4b:76:17:1b:0d: 44:e1:3b:02:9f:eb:14:7b:bb:9e:2d:30:0e:c0:b8: 21:f2:05:14:f3:99:25:2b:75:83:d3:8e:4b:36:d9: bc:d3:2b:2e:d0:32:87:0e:58:b3:30:be:7e:ba:5f: e6:94:db:18:68:33:0f:ff:52:a0:8a:57:4d:e2:d0: 03:cf:b0:6a:ed:93:38:6c:98:c7:6b:cd:5f:47:7d: 05:5e:61:db:dd:e9:6d:d2:ac:af:bb:d0:82:d9:23: 4d:b9:a6:3b:49:a6:0c:f0:c2:11:24:c1:d5:5d:99: a8:45:52:05:91:ec:84:94:24:13:ee:70:73:f1:af: fa:23:d8:a1:96:f9:bd:55:0e:de:a3:b1:11:bd:c8: f8:03:77:23:42:6f:0c:47:b0:5b:6b:6d:36:f3:70: 39:e0:f4:04:23:04:4a:bd:1e:45:d1:f7:8d:a7:68: 2a:79:54:a9:90:5c:a6:0d:c8:d5:f1:84:f2:6f:ef: b5:f5:fc:88:00:8f:e0:40:9b:d6:0e:b6:25:ab:bd: a0:9e:3b:c2:c6:1a:49:b9:64:67:0a:ba:ca:95:ef: 68:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A5:64:CB:7A:5B:09:88:92:10:95:56:FB:C9:E6:95:0F:DE:92:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl X509v3 Authority Key Identifier: keyid:54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer sbgp-ipAddrBlock: critical IPv4: 192.200.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:0b:ed:4e:18:1d:47:b9:6c:81:d7:3a:cf:69:92:fc:12:e3: bf:44:35:5c:49:8b:03:b7:15:6d:38:27:39:20:e1:df:8c:56: 07:9d:77:cf:4c:1f:23:16:e6:bb:31:27:31:f3:d2:3a:de:d1: c7:98:60:79:30:fb:08:f1:13:10:1f:20:03:84:42:f4:2c:d4: 79:04:59:e6:41:25:0d:78:e9:d8:e4:1f:74:33:2c:52:1a:82: 0c:8e:af:6a:f6:73:05:cf:c1:8d:97:1c:cb:d8:db:94:de:8e: 64:f8:10:ef:68:33:ca:5e:96:f4:77:8d:2b:fd:1f:74:62:0c: 1e:92:88:25:3c:6b:1d:7a:ef:3b:93:18:c6:ed:4b:38:fd:0c: 01:f8:ce:97:63:98:e4:80:8f:83:22:1f:95:98:47:f7:b4:a7: 20:09:f5:77:c3:a5:50:dc:9a:55:1f:66:5c:19:4f:dd:2b:14: 37:7d:8d:ae:51:05:b5:e0:70:4f:6e:b7:f5:84:a8:59:2f:7d: 7a:28:1b:59:f3:59:f6:45:66:1f:5e:5c:41:c6:dc:96:4b:29: 3b:a8:22:9a:d2:54:53:93:bd:23:4b:ca:37:46:25:c4:2d:fb: 5f:0a:a2:d4:96:f2:f0:3a:6c:f9:81:f7:29:a2:9a:3f:24:aa: fa:77:fe:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp1gyRp8cqMDKjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQyMWZmZDgtMzZlNi00YTZiLTkwMzQtNDY3MTU5MmM1 YTRmMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk MTZjYzM0Y2MtYzI1ZS00ODI4LTg3ODQtYjI0MjFhYmUyM2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvidcsiruwjs3HGzJDxGujcYEranYpVbAUJTk /AuXpQCXk3ghDO0JS3YXGw1E4TsCn+sUe7ueLTAOwLgh8gUU85klK3WD045LNtm8 0ysu0DKHDlizML5+ul/mlNsYaDMP/1KgildN4tADz7Bq7ZM4bJjHa81fR30FXmHb 3elt0qyvu9CC2SNNuaY7SaYM8MIRJMHVXZmoRVIFkeyElCQT7nBz8a/6I9ihlvm9 VQ7eo7ERvcj4A3cjQm8MR7Bba20283A54PQEIwRKvR5F0feNp2gqeVSpkFymDcjV 8YTyb++19fyIAI/gQJvWDrYlq72gnjvCxhpJuWRnCrrKle9oCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNulZMt6WwmIkhCVVvvJ5pUP3pKcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NDIx ZmZkOC0zNmU2LTRhNmItOTAzNC00NjcxNTkyYzVhNGYvNTA5ZTRkZGYtZGY2Zi0z NGNjLTgzZDQtOTU5MDQxYzBkNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTQyMWZmZDgtMzZlNi00YTZiLTkw MzQtNDY3MTU5MmM1YTRmLzU0MjFmZmQ4LTM2ZTYtNGE2Yi05MDM0LTQ2NzE1OTJj NWE0Zi5jcmwwHwYDVR0jBBgwFoAUVBKTOoHmICO96AuZwkVU3VkRZm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NDIxZmZkOC0zNmU2LTRhNmItOTAzNC00Njcx NTkyYzVhNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwMiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQL7U4YHUe5bIHXOs9pkvwS479ENVxJiwO3FW04Jzkg4d+MVgedd89M HyMW5rsxJzHz0jre0ceYYHkw+wjxExAfIAOEQvQs1HkEWeZBJQ146djkH3QzLFIa ggyOr2r2cwXPwY2XHMvY25TejmT4EO9oM8pelvR3jSv9H3RiDB6SiCU8ax167zuT GMbtSzj9DAH4zpdjmOSAj4MiH5WYR/e0pyAJ9XfDpVDcmlUfZlwZT90rFDd9ja5R BbXgcE9ut/WEqFkvfXooG1nzWfZFZh9eXEHG3JZLKTuoIprSVFOTvSNLyjdGJcQt +18KotSW8vA6bPmB9ymimj8kqvp3/go= -----END CERTIFICATE-----Generated at Mon Mar 2 20:05:57 2026 by rpki-client