$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/df479898-67d4-3ee5-ab7e-b9a811a3a140.roa File: df479898-67d4-3ee5-ab7e-b9a811a3a140.roa (raw, json) Hash identifier: EnB9YfmGXdrk5xtE6zXApmmFT+f0UZIn8gib81QFTpA= Subject key identifier: 19:B4:32:AE:8A:6E:33:87:62:E5:91:86:E1:16:3A:66:F1:FF:44:EA Certificate issuer: /CN=28bc3af1-87e7-4ad5-ba9c-7eebdbd820db Certificate serial: 010D0C9F4328584CE362128CE2DC8E4A4BECF880 Authority key identifier: 78:BD:2E:9E:0F:6D:71:DF:A1:7A:6B:F4:02:24:03:50:B3:19:7C:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/df479898-67d4-3ee5-ab7e-b9a811a3a140.roa Signing time: Tue 17 Feb 2026 02:00:31 +0000 ROA not before: Tue 17 Feb 2026 02:00:31 +0000 ROA not after: Mon 18 May 2026 01:00:31 +0000 asID: 33228 IP address blocks: 208.92.236.0/22 maxlen: 24 2602:f85e::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e3:62:12:8c:e2:dc:8e:4a:4b:ec:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28bc3af1-87e7-4ad5-ba9c-7eebdbd820db Validity Not Before: Feb 17 02:00:31 2026 GMT Not After : May 18 01:00:31 2026 GMT Subject: CN=86f7e4b9-9a88-4b7b-984b-03cf63312f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a7:b8:a9:e4:80:2e:1c:98:51:5a:ab:88:88: 09:6e:0e:bc:2a:d6:1e:f7:ec:1a:c0:af:5b:2c:c1: ab:b3:80:24:9f:0e:d8:19:c5:79:25:c4:4a:bb:a3: 01:58:c2:2e:3f:2f:be:20:cf:ba:39:f4:44:98:a3: 87:7b:85:c5:4f:69:bc:c1:3e:81:d9:22:7b:8a:f2: 27:58:46:c6:b7:55:1a:6f:a3:78:4d:b3:be:37:65: cd:da:49:06:ef:bd:09:e6:07:46:d3:d2:a9:65:40: 7a:1e:c5:75:8d:6b:5b:90:2b:9b:3b:c8:38:86:7e: df:6d:34:db:ac:d3:cf:da:75:b3:d0:f5:b8:cf:7c: 80:6a:64:95:3e:b8:03:1e:42:eb:2b:90:80:ad:4b: b9:0c:9c:61:e3:8f:6f:bc:18:c6:80:17:f9:f6:2b: a5:c4:e9:39:9a:dc:26:f1:3e:cb:89:06:06:a3:0e: e1:24:f1:80:b6:2c:8a:24:b2:28:29:f6:c5:ad:af: 00:35:cf:79:d8:7b:41:80:55:f5:55:c6:c5:16:64: 20:ac:66:4f:b3:b3:b4:26:f4:e3:73:6a:0b:26:29: dd:66:b3:57:cc:88:34:0c:e8:36:86:75:1e:3d:1c: b5:c7:13:e4:e0:78:65:0c:d3:33:31:9f:42:bd:ed: 5a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B4:32:AE:8A:6E:33:87:62:E5:91:86:E1:16:3A:66:F1:FF:44:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/df479898-67d4-3ee5-ab7e-b9a811a3a140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.crl X509v3 Authority Key Identifier: keyid:78:BD:2E:9E:0F:6D:71:DF:A1:7A:6B:F4:02:24:03:50:B3:19:7C:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer sbgp-ipAddrBlock: critical IPv4: 208.92.236.0/22 IPv6: 2602:f85e::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:da:c5:05:bf:ff:4b:ac:e4:08:0d:59:6c:70:88:e0:88:3b: f8:90:9b:40:b2:0f:0e:02:e6:95:53:23:5e:09:f1:78:23:e0: ed:48:b1:85:cf:e1:df:69:2f:ac:9c:fd:d8:11:fa:c4:35:d8: 1d:b7:da:a2:4e:33:af:aa:94:75:cd:ec:63:84:a6:34:56:f3: f2:e1:0f:40:8f:fd:ea:8d:c0:af:cc:42:92:8c:2a:d9:d4:56: 8a:42:83:83:df:8e:c9:e2:19:d7:79:77:84:af:a1:4b:cd:8c: a3:e6:6f:98:c9:7f:2e:bd:f5:f1:f0:f6:ed:07:c7:a1:ff:bd: ab:85:21:17:88:1a:42:cd:09:db:7a:1e:05:16:a6:2f:b3:7b: 8a:37:e4:b2:02:07:95:8a:3a:1a:51:08:ea:50:22:7c:87:f3: 82:5c:0e:3c:eb:ac:b2:8a:9e:2f:ae:df:2f:77:b7:5a:0b:70: eb:a0:d4:5c:4f:4a:6e:69:14:e2:71:82:43:50:50:98:be:71: 42:f6:1b:d3:3c:79:e6:17:0c:91:38:d0:37:8f:f9:57:e0:d5: 8d:94:60:80:03:ad:63:c3:b0:3a:e1:74:c0:60:e9:2d:39:35: 4e:c4:35:72:8a:b0:3f:7c:a1:5f:34:78:1a:99:65:ea:12:83: a2:5e:e1:19 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEzjYhKM4tyOSkvs+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhiYzNhZjEtODdlNy00YWQ1LWJhOWMtN2VlYmRiZDgy MGRiMB4XDTI2MDIxNzAyMDAzMVoXDTI2MDUxODAxMDAzMVowLzEtMCsGA1UEAxMk ODZmN2U0YjktOWE4OC00YjdiLTk4NGItMDNjZjYzMzEyZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqe4qeSALhyYUVqriIgJbg68KtYe9+wawK9b LMGrs4Aknw7YGcV5JcRKu6MBWMIuPy++IM+6OfREmKOHe4XFT2m8wT6B2SJ7ivIn WEbGt1Uab6N4TbO+N2XN2kkG770J5gdG09KpZUB6HsV1jWtbkCubO8g4hn7fbTTb rNPP2nWz0PW4z3yAamSVPrgDHkLrK5CArUu5DJxh449vvBjGgBf59iulxOk5mtwm 8T7LiQYGow7hJPGAtiyKJLIoKfbFra8ANc952HtBgFX1VcbFFmQgrGZPs7O0JvTj c2oLJindZrNXzIg0DOg2hnUePRy1xxPk4HhlDNMzMZ9Cve1aGQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBm0Mq6KbjOHYuWRhuEWOmbx/0TqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yOGJj M2FmMS04N2U3LTRhZDUtYmE5Yy03ZWViZGJkODIwZGIvZGY0Nzk4OTgtNjdkNC0z ZWU1LWFiN2UtYjlhODExYTNhMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjhiYzNhZjEtODdlNy00YWQ1LWJh OWMtN2VlYmRiZDgyMGRiLzI4YmMzYWYxLTg3ZTctNGFkNS1iYTljLTdlZWJkYmQ4 MjBkYi5jcmwwHwYDVR0jBBgwFoAUeL0ung9tcd+hemv0AiQDULMZfHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8yOGJjM2FmMS04N2U3LTRhZDUtYmE5Yy03ZWVi ZGJkODIwZGIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQC0FzsMA4E AgACMAgDBgQmAvheADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/2sUFv/9LrOQIDVlscIjgiDv4kJtAsg8O AuaVUyNeCfF4I+DtSLGFz+HfaS+snP3YEfrENdgdt9qiTjOvqpR1zexjhKY0VvPy 4Q9Aj/3qjcCvzEKSjCrZ1FaKQoOD347J4hnXeXeEr6FLzYyj5m+YyX8uvfXx8Pbt B8eh/72rhSEXiBpCzQnbeh4FFqYvs3uKN+SyAgeVijoaUQjqUCJ8h/OCXA4866yy ip4vrt8vd7daC3DroNRcT0puaRTicYJDUFCYvnFC9hvTPHnmFwyRONA3j/lX4NWN lGCAA61jw7A64XTAYOktOTVOxDVyirA/fKFfNHgamWXqEoOiXuEZ -----END CERTIFICATE-----Generated at Mon Mar 2 19:52:45 2026 by rpki-client