$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/47952d11-1499-36e4-bd1b-cccf5890c931.roa File: 47952d11-1499-36e4-bd1b-cccf5890c931.roa (raw, json) Hash identifier: HbLwE7REypBQeAEpf9eQAU2vDQZW3qDgNYDWOYXX+S4= Subject key identifier: 28:6F:21:7F:AF:EC:09:F8:D0:5D:86:3C:F7:66:26:0D:A2:C9:CC:F2 Certificate issuer: /CN=8fc21c27-e8e6-433a-86da-315992f3e55a Certificate serial: 010D0C9F4328584CFB290714A5AA94A6B6419D00 Authority key identifier: 95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/47952d11-1499-36e4-bd1b-cccf5890c931.roa Signing time: Wed 25 Feb 2026 14:25:12 +0000 ROA not before: Wed 25 Feb 2026 14:25:12 +0000 ROA not after: Tue 26 May 2026 13:25:12 +0000 asID: 14537 IP address blocks: 162.223.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fb:29:07:14:a5:aa:94:a6:b6:41:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc21c27-e8e6-433a-86da-315992f3e55a Validity Not Before: Feb 25 14:25:12 2026 GMT Not After : May 26 13:25:12 2026 GMT Subject: CN=c3034e26-5b15-400e-8ddf-83db02459362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:78:a5:f0:1a:9d:af:8f:97:b0:21:60:d4:a2: bc:3f:a4:e2:32:60:4a:45:51:a4:6e:5e:b0:e0:2c: 4a:6c:fd:7e:0d:a5:a3:ed:fa:bc:48:a1:68:5d:ea: 29:f5:cd:fc:ff:96:ce:69:35:f3:22:26:73:58:b0: a6:49:99:65:4f:fa:f3:75:34:43:f0:9f:b0:82:da: 88:98:e9:fe:6e:2a:26:03:c5:0d:7a:1b:69:0a:fe: 6d:d5:96:ab:d5:c8:82:9d:8a:5c:52:73:d0:a3:05: d2:c9:3b:83:e7:f0:ee:d2:8f:0c:f4:3a:d0:6a:db: 8e:33:46:ff:86:f0:7b:16:c6:7c:5b:1a:39:2a:9b: 19:c1:90:80:b0:53:f0:96:4d:e1:93:4c:ff:dd:0d: f7:4a:0b:72:4f:19:2e:12:97:35:6d:1d:b2:96:78: 8c:ee:0a:0c:46:b2:33:da:59:3f:3f:7f:26:f0:f1: 53:ba:34:d9:a3:74:80:36:fb:1d:19:36:28:52:c8: bd:98:c5:f7:2c:d9:4d:70:a9:9a:b0:00:59:29:61: 56:cb:cd:9f:6e:51:9a:8e:ba:d2:f3:65:57:c1:4e: d3:86:9c:26:a0:1a:e0:63:3e:0f:66:f5:51:53:b8: be:6f:48:d3:b8:22:ed:61:9a:01:62:75:54:d8:7c: 23:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6F:21:7F:AF:EC:09:F8:D0:5D:86:3C:F7:66:26:0D:A2:C9:CC:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/47952d11-1499-36e4-bd1b-cccf5890c931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl X509v3 Authority Key Identifier: keyid:95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer sbgp-ipAddrBlock: critical IPv4: 162.223.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:3a:25:ff:bb:c0:ca:60:3c:53:c1:63:42:c0:dd:bc:ad:bf: 6a:3a:ca:93:a9:5f:17:18:cd:3d:fe:8e:0d:e9:b1:7a:97:c8: 30:90:8c:d3:b0:a9:25:16:8f:bc:28:f8:a4:af:7a:52:80:b0: 48:81:13:20:dd:5f:7e:bc:d2:bf:6e:b2:bb:39:36:5b:2a:87: 33:5f:93:f9:59:59:a9:9b:60:a6:81:0c:c0:a4:45:8c:33:f1: 81:8f:2f:c5:a2:98:c0:12:98:65:76:9f:63:45:3a:87:c5:9f: 3c:0a:ed:23:eb:d3:99:92:10:dc:90:4f:11:3e:b0:77:62:e3: 10:82:b6:61:fd:67:ba:84:46:80:b4:62:8a:0f:38:46:3a:8c: 97:92:80:2d:91:49:0a:62:0f:0e:6e:f7:50:b3:42:24:07:f5: 6d:59:d7:6d:3d:59:21:e9:d6:84:50:7e:e9:64:99:a7:f5:13: 24:56:5b:f4:f2:7b:98:38:c6:97:5b:65:38:78:f8:68:ca:98: 95:84:ac:9f:8e:35:a7:87:59:80:bd:1d:08:d2:1a:a4:4e:7f: a9:e9:68:9b:b3:62:19:38:8f:13:7f:bd:30:7d:8c:31:52:4c: 07:81:7f:d9:84:2b:ee:63:ac:8e:1f:1e:55:38:69:99:e5:01: ba:e5:15:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz7KQcUpaqUprZBnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZjMjFjMjctZThlNi00MzNhLTg2ZGEtMzE1OTkyZjNl NTVhMB4XDTI2MDIyNTE0MjUxMloXDTI2MDUyNjEzMjUxMlowLzEtMCsGA1UEAxMk YzMwMzRlMjYtNWIxNS00MDBlLThkZGYtODNkYjAyNDU5MzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23il8Bqdr4+XsCFg1KK8P6TiMmBKRVGkbl6w 4CxKbP1+DaWj7fq8SKFoXeop9c38/5bOaTXzIiZzWLCmSZllT/rzdTRD8J+wgtqI mOn+biomA8UNehtpCv5t1Zar1ciCnYpcUnPQowXSyTuD5/Du0o8M9DrQatuOM0b/ hvB7FsZ8Wxo5KpsZwZCAsFPwlk3hk0z/3Q33SgtyTxkuEpc1bR2ylniM7goMRrIz 2lk/P38m8PFTujTZo3SANvsdGTYoUsi9mMX3LNlNcKmasABZKWFWy82fblGajrrS 82VXwU7ThpwmoBrgYz4PZvVRU7i+b0jTuCLtYZoBYnVU2Hwj0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChvIX+v7An40F2GPPdmJg2iyczyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZmMy MWMyNy1lOGU2LTQzM2EtODZkYS0zMTU5OTJmM2U1NWEvNDc5NTJkMTEtMTQ5OS0z NmU0LWJkMWItY2NjZjU4OTBjOTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGZjMjFjMjctZThlNi00MzNhLTg2 ZGEtMzE1OTkyZjNlNTVhLzhmYzIxYzI3LWU4ZTYtNDMzYS04NmRhLTMxNTk5MmYz ZTU1YS5jcmwwHwYDVR0jBBgwFoAUlUhx7ra/NDrkjpxLXkLjOlgb9bUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZmMyMWMyNy1lOGU2LTQzM2EtODZkYS0zMTU5 OTJmM2U1NWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDot9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH06Jf+7wMpgPFPBY0LA3bytv2o6ypOpXxcYzT3+jg3psXqXyDCQjNOw qSUWj7wo+KSvelKAsEiBEyDdX3680r9usrs5NlsqhzNfk/lZWambYKaBDMCkRYwz 8YGPL8WimMASmGV2n2NFOofFnzwK7SPr05mSENyQTxE+sHdi4xCCtmH9Z7qERoC0 YooPOEY6jJeSgC2RSQpiDw5u91CzQiQH9W1Z1209WSHp1oRQfulkmaf1EyRWW/Ty e5g4xpdbZTh4+GjKmJWErJ+ONaeHWYC9HQjSGqROf6npaJuzYhk4jxN/vTB9jDFS TAeBf9mEK+5jrI4fHlU4aZnlAbrlFYQ= -----END CERTIFICATE-----Generated at Mon Mar 2 13:42:13 2026 by rpki-client