$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3e1fd646-f6e7-363d-8ab6-8868a2b53e8a.roa File: 3e1fd646-f6e7-363d-8ab6-8868a2b53e8a.roa (raw, json) Hash identifier: LDwtp6Z1bDYzfprXjSGkzZC1RjafEnVIWcT8vbWA0zs= Subject key identifier: BB:D0:BF:FA:60:86:F3:0F:51:42:27:D1:34:53:5A:E3:A8:FF:67:6F Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584CEBC216564E156255A5071780 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3e1fd646-f6e7-363d-8ab6-8868a2b53e8a.roa Signing time: Fri 20 Feb 2026 02:00:32 +0000 ROA not before: Fri 20 Feb 2026 02:00:32 +0000 ROA not after: Thu 21 May 2026 01:00:32 +0000 asID: 81 IP address blocks: 198.86.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:eb:c2:16:56:4e:15:62:55:a5:07:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Feb 20 02:00:32 2026 GMT Not After : May 21 01:00:32 2026 GMT Subject: CN=82c59798-b0d2-4704-ab21-52c45f19b0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:41:20:a2:c7:48:7b:50:6c:70:36:35:3b:9e: cf:14:28:d4:d1:64:03:ac:43:e6:74:95:15:e8:d2: bc:69:3c:09:37:e7:4d:59:41:7f:4c:6b:4d:3b:79: 90:09:a1:2f:d5:4a:5b:c4:61:ac:4a:65:ca:38:9b: ea:ae:92:8c:0e:5a:73:27:20:9c:55:33:e1:a1:52: ee:48:fc:66:15:3c:6f:65:e3:f9:2c:3a:e0:f6:de: e3:32:c6:4a:20:27:65:0c:34:d1:1f:98:a8:c3:3d: a4:07:67:eb:6e:c5:d5:f1:1d:f9:a6:8b:5c:19:63: e9:3c:d5:c0:f8:07:49:27:40:63:cc:31:7e:a1:fc: 54:46:95:29:4e:22:aa:91:5d:14:3d:6e:b3:6c:42: d9:d1:52:b5:c6:8a:93:ab:ed:51:af:c1:f4:90:4d: bd:73:d0:ae:a7:9b:8d:26:9e:61:77:b9:87:39:3e: ad:8b:eb:9b:dc:b2:a8:3a:53:7f:9c:ee:3f:c1:87: 37:f0:06:ce:dc:a7:73:13:e7:73:a0:48:ac:2c:d2: 83:bd:b4:c7:84:a0:0e:f9:1c:8e:17:b8:7c:25:26: 09:58:c7:bb:d5:a4:93:c3:04:7e:0d:27:58:04:72: 7e:4b:dc:d3:16:79:ae:46:f2:2b:9f:2e:1d:a2:59: 13:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D0:BF:FA:60:86:F3:0F:51:42:27:D1:34:53:5A:E3:A8:FF:67:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3e1fd646-f6e7-363d-8ab6-8868a2b53e8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.86.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:6f:3b:47:f5:4d:0c:6f:b4:f5:c8:fe:c3:82:e1:65:ed:ca: c8:dd:4d:78:62:2f:7a:fa:3b:f1:20:d2:30:62:f4:c7:a0:7b: 8b:fd:04:59:9a:2b:3d:47:f6:83:2b:f4:1c:bd:58:d9:ec:9f: d3:7e:40:e4:0b:10:82:00:3e:ba:97:a9:71:7a:73:67:c9:09: 1a:03:1f:05:8f:74:a6:18:7f:d2:9a:dd:d6:4f:ce:92:83:9b: 5e:f9:2c:7b:98:4d:a9:d9:cf:69:b2:cf:d3:15:e8:d5:1e:5a: 72:84:9d:cb:ce:42:8c:6b:d8:1d:7d:e3:ba:a0:db:8f:b7:b2: 69:87:9a:1b:46:e4:ee:5e:9e:d3:78:68:64:6f:90:41:0c:83: 9b:03:54:e4:4e:3b:45:32:11:cc:18:a1:84:17:ad:c0:7f:0f: 18:7b:8d:e0:2a:f5:43:ea:76:3a:8f:85:19:5a:7d:b7:c3:54: 3e:8b:ab:4b:66:bc:65:3d:78:ba:20:02:36:e7:b4:6b:dc:6a: de:81:0a:ed:84:35:0d:04:6a:cb:11:1e:09:52:cf:ec:47:2e: 62:67:af:b9:f5:1e:38:cc:c2:0c:92:80:a2:f5:8d:33:a5:88: 48:cc:e8:c8:51:53:be:7c:48:38:b9:c7:dc:f4:b6:e7:cf:f3: 72:5e:44:18 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEzrwhZWThViVaUHF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk ODJjNTk3OTgtYjBkMi00NzA0LWFiMjEtNTJjNDVmMTliMGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEEgosdIe1BscDY1O57PFCjU0WQDrEPmdJUV 6NK8aTwJN+dNWUF/TGtNO3mQCaEv1UpbxGGsSmXKOJvqrpKMDlpzJyCcVTPhoVLu SPxmFTxvZeP5LDrg9t7jMsZKICdlDDTRH5iowz2kB2frbsXV8R35potcGWPpPNXA +AdJJ0BjzDF+ofxURpUpTiKqkV0UPW6zbELZ0VK1xoqTq+1Rr8H0kE29c9Cup5uN Jp5hd7mHOT6ti+ub3LKoOlN/nO4/wYc38AbO3KdzE+dzoEisLNKDvbTHhKAO+RyO F7h8JSYJWMe71aSTwwR+DSdYBHJ+S9zTFnmuRvIrny4dolkTZwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLvQv/pghvMPUUIn0TRTWuOo/2dvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvM2UxZmQ2NDYtZjZlNy0z NjNkLThhYjYtODg2OGEyYjUzZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxlYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAFG87R/VNDG+09cj+w4LhZe3KyN1NeGIvevo78SDSMGL0x6B7i/0EWZor PUf2gyv0HL1Y2eyf035A5AsQggA+upepcXpzZ8kJGgMfBY90phh/0prd1k/OkoOb Xvkse5hNqdnPabLP0xXo1R5acoSdy85CjGvYHX3juqDbj7eyaYeaG0bk7l6e03ho ZG+QQQyDmwNU5E47RTIRzBihhBetwH8PGHuN4Cr1Q+p2Oo+FGVp9t8NUPourS2a8 ZT14uiACNue0a9xq3oEK7YQ1DQRqyxEeCVLP7EcuYmevufUeOMzCDJKAovWNM6WI SMzoyFFTvnxIOLnH3PS258/zcl5EGA== -----END CERTIFICATE-----Generated at Mon Mar 2 09:46:53 2026 by rpki-client