$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8e209967-3b2e-3a58-8a91-ba33af5709ee.roa File: 8e209967-3b2e-3a58-8a91-ba33af5709ee.roa (raw, json) Hash identifier: 9qHy3pqZw56tlcScGkJQhrZykojW3UIBBxNhMoj7O60= Subject key identifier: BB:26:9E:CE:B8:34:85:2D:39:4F:73:64:B9:4E:B8:1A:14:52:C4:F1 Certificate issuer: /CN=8fc21c27-e8e6-433a-86da-315992f3e55a Certificate serial: 010D0C9F4328584CF8605F0C0A0C62015B670680 Authority key identifier: 95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8e209967-3b2e-3a58-8a91-ba33af5709ee.roa Signing time: Tue 24 Feb 2026 14:29:17 +0000 ROA not before: Tue 24 Feb 2026 14:29:17 +0000 ROA not after: Mon 25 May 2026 13:29:17 +0000 asID: 19905 IP address blocks: 67.211.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:60:5f:0c:0a:0c:62:01:5b:67:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc21c27-e8e6-433a-86da-315992f3e55a Validity Not Before: Feb 24 14:29:17 2026 GMT Not After : May 25 13:29:17 2026 GMT Subject: CN=cb2c7a08-6e4d-4cfc-84f4-47ad07ecc136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:59:7c:b6:5d:45:46:27:9f:37:1d:fc:b4:0d: d5:c7:4a:7d:0c:15:44:4f:9d:50:8a:44:e7:2f:c6: 1e:9f:4f:cc:d6:03:56:16:9b:be:23:0b:4a:c9:cc: 0e:cf:16:01:e9:bf:7b:40:0b:2f:b5:28:1b:29:87: 70:11:09:64:7a:2d:a2:9b:b1:88:c2:7b:cc:04:dd: 55:24:80:49:30:cf:6a:df:3b:24:00:18:cd:81:38: 3a:36:72:2a:3b:07:96:15:6b:5c:73:97:93:48:f6: c6:b4:35:67:d1:aa:82:09:85:c3:4a:d3:ae:53:01: c0:61:04:f5:11:71:cc:40:1b:7c:4f:42:ba:42:b7: c0:c4:75:be:b7:47:00:c7:d3:7d:41:89:75:9e:36: c4:b3:30:41:51:20:41:10:c0:28:98:46:13:bb:43: 08:3c:89:19:19:01:ef:65:66:15:2d:65:9d:ae:c9: 8d:6b:13:13:29:ed:fd:cc:10:b4:c3:30:74:8b:fb: 43:9e:07:ac:06:bd:85:1c:41:a3:8d:9d:60:e4:f7: 8c:85:a5:bb:0e:14:6a:ff:d5:13:c5:cb:1e:c7:a8: 3d:a8:11:83:e5:e6:47:16:13:64:68:16:c5:21:46: 31:e0:94:c4:26:37:a8:56:f8:18:f9:c6:99:a5:94: 14:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:26:9E:CE:B8:34:85:2D:39:4F:73:64:B9:4E:B8:1A:14:52:C4:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8e209967-3b2e-3a58-8a91-ba33af5709ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl X509v3 Authority Key Identifier: keyid:95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer sbgp-ipAddrBlock: critical IPv4: 67.211.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:75:d3:bc:a1:73:80:c1:02:8c:1b:fd:d2:06:12:bf:9f:77: a3:ca:9a:f7:d1:85:b1:9c:89:ff:67:59:8b:c1:85:78:ec:fc: 17:9a:69:5a:b3:c6:e8:23:80:a6:23:b6:fb:35:2f:5c:de:3e: 07:7a:1c:ae:95:9b:43:68:59:09:de:a3:9c:50:b0:22:78:58: 71:de:ca:4d:5e:62:e1:fe:31:92:e5:35:d7:ca:68:cc:c0:94: 62:31:cd:4d:b5:78:37:b5:d6:bc:e1:f3:bb:e8:c1:19:87:dc: da:11:4e:9f:78:5a:76:59:88:66:d1:ac:c9:15:40:b8:1b:c4: 9e:87:25:03:81:a6:bc:31:c1:c9:f3:e6:90:40:c7:75:a0:2d: b1:7b:4a:b5:a8:c0:82:92:a5:c1:b8:ea:eb:46:5a:1c:a1:fe: cc:82:c4:93:ea:f1:dd:ff:5c:e4:91:d4:70:88:1f:79:69:b7: 60:ea:7c:3d:24:4b:87:b9:33:26:18:2b:ce:e2:a2:74:9d:5c: 53:24:10:8f:65:99:1b:9c:20:47:96:31:16:8d:6c:cc:d8:1f: 02:25:b6:eb:34:62:0e:1e:d5:d6:f4:cd:01:4b:d2:3f:60:e1: 3f:ab:6c:09:c6:17:43:ed:5c:e9:77:20:ef:6f:e2:09:53:58: 01:23:65:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4YF8MCgxiAVtnBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZjMjFjMjctZThlNi00MzNhLTg2ZGEtMzE1OTkyZjNl NTVhMB4XDTI2MDIyNDE0MjkxN1oXDTI2MDUyNTEzMjkxN1owLzEtMCsGA1UEAxMk Y2IyYzdhMDgtNmU0ZC00Y2ZjLTg0ZjQtNDdhZDA3ZWNjMTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVl8tl1FRiefNx38tA3Vx0p9DBVET51QikTn L8Yen0/M1gNWFpu+IwtKycwOzxYB6b97QAsvtSgbKYdwEQlkei2im7GIwnvMBN1V JIBJMM9q3zskABjNgTg6NnIqOweWFWtcc5eTSPbGtDVn0aqCCYXDStOuUwHAYQT1 EXHMQBt8T0K6QrfAxHW+t0cAx9N9QYl1njbEszBBUSBBEMAomEYTu0MIPIkZGQHv ZWYVLWWdrsmNaxMTKe39zBC0wzB0i/tDngesBr2FHEGjjZ1g5PeMhaW7DhRq/9UT xcsex6g9qBGD5eZHFhNkaBbFIUYx4JTEJjeoVvgY+caZpZQUiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsmns64NIUtOU9zZLlOuBoUUsTxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZmMy MWMyNy1lOGU2LTQzM2EtODZkYS0zMTU5OTJmM2U1NWEvOGUyMDk5NjctM2IyZS0z YTU4LThhOTEtYmEzM2FmNTcwOWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGZjMjFjMjctZThlNi00MzNhLTg2 ZGEtMzE1OTkyZjNlNTVhLzhmYzIxYzI3LWU4ZTYtNDMzYS04NmRhLTMxNTk5MmYz ZTU1YS5jcmwwHwYDVR0jBBgwFoAUlUhx7ra/NDrkjpxLXkLjOlgb9bUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZmMyMWMyNy1lOGU2LTQzM2EtODZkYS0zMTU5 OTJmM2U1NWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9NiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANl107yhc4DBAowb/dIGEr+fd6PKmvfRhbGcif9nWYvBhXjs/BeaaVqz xugjgKYjtvs1L1zePgd6HK6Vm0NoWQneo5xQsCJ4WHHeyk1eYuH+MZLlNdfKaMzA lGIxzU21eDe11rzh87vowRmH3NoRTp94WnZZiGbRrMkVQLgbxJ6HJQOBprwxwcnz 5pBAx3WgLbF7SrWowIKSpcG46utGWhyh/syCxJPq8d3/XOSR1HCIH3lpt2DqfD0k S4e5MyYYK87ionSdXFMkEI9lmRucIEeWMRaNbMzYHwIltus0Yg4e1db0zQFL0j9g 4T+rbAnGF0PtXOl3IO9v4glTWAEjZTg= -----END CERTIFICATE-----Generated at Mon Mar 2 22:31:22 2026 by rpki-client