$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/8587a946-4c9e-3a4c-92d6-6d9e491f2569.roa File: 8587a946-4c9e-3a4c-92d6-6d9e491f2569.roa (raw, json) Hash identifier: IBo+QQKy1NEpmRtouxx4VPr0PODpV+8q1mC0YFPGH20= Subject key identifier: 7B:F9:99:C4:55:F5:A5:7D:A6:05:90:AB:67:B1:AC:64:DE:FF:CB:E8 Certificate issuer: /CN=a29a724c-0ef8-416c-bb2c-359a0122375e Certificate serial: 010D0C9F4328584CC07C983A34B1FDEDD3097F80 Authority key identifier: E2:D1:B1:1C:1C:92:10:0A:49:5E:E6:A0:9A:ED:24:A2:DC:70:58:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/8587a946-4c9e-3a4c-92d6-6d9e491f2569.roa Signing time: Wed 04 Feb 2026 14:00:39 +0000 ROA not before: Wed 04 Feb 2026 14:00:39 +0000 ROA not after: Tue 05 May 2026 13:00:39 +0000 asID: 40676 IP address blocks: 206.168.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/a29a724c-0ef8-416c-bb2c-359a0122375e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/a29a724c-0ef8-416c-bb2c-359a0122375e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c0:7c:98:3a:34:b1:fd:ed:d3:09:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a29a724c-0ef8-416c-bb2c-359a0122375e Validity Not Before: Feb 4 14:00:39 2026 GMT Not After : May 5 13:00:39 2026 GMT Subject: CN=cb5514ca-5c96-4744-8274-665cbe1e2d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1e:62:ec:a3:98:26:cf:4f:5d:c2:f7:24:9e: 5d:c2:d4:73:c7:72:01:ca:86:f8:45:a7:10:c4:35: bd:f2:ce:38:4a:c2:0b:6a:bb:48:06:55:4d:ef:3f: ab:8a:91:99:93:49:cf:09:ec:48:9b:f7:34:34:82: a6:09:01:59:8a:98:8c:69:c4:af:82:3f:dc:7f:28: 79:c8:ae:1c:67:0e:91:17:22:8c:e8:0d:ad:dc:f0: d3:1f:fb:98:5e:47:fe:a2:04:eb:d3:36:df:b8:b5: 7f:dc:39:ff:f4:82:97:ae:76:a8:3a:e0:c4:d4:ca: 7d:9d:67:42:a2:fb:f8:e3:7e:0c:bc:d5:58:e7:1c: 6d:0b:91:bd:db:b3:d1:b5:d1:f6:37:f1:b8:de:54: c5:6b:81:86:72:05:84:c9:52:01:6d:b9:ae:41:d3: 06:58:81:8a:61:e7:61:cc:06:2e:94:19:c5:6c:a2: c8:0d:07:92:45:59:95:a3:17:37:d8:b4:bd:04:03: 4d:e8:e4:cd:55:a9:6f:e7:42:ff:36:94:79:ca:c6: df:6f:6a:9e:22:63:eb:86:b8:81:c1:d9:3a:8c:8c: 9c:46:3b:88:02:5f:a9:d9:c8:d5:58:3e:6c:f2:d6: 77:cf:05:94:72:ea:cd:37:f1:8e:5f:0c:55:8c:4f: 8f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F9:99:C4:55:F5:A5:7D:A6:05:90:AB:67:B1:AC:64:DE:FF:CB:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/8587a946-4c9e-3a4c-92d6-6d9e491f2569.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/a29a724c-0ef8-416c-bb2c-359a0122375e.crl X509v3 Authority Key Identifier: keyid:E2:D1:B1:1C:1C:92:10:0A:49:5E:E6:A0:9A:ED:24:A2:DC:70:58:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e.cer sbgp-ipAddrBlock: critical IPv4: 206.168.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:82:49:98:07:4e:4c:5f:ce:2f:40:5c:05:f5:56:e4:38:bc: 39:ff:c9:0a:1e:32:ab:cf:5a:7e:e5:d4:4b:f8:9e:48:fb:8e: 14:06:6f:9c:ca:f2:be:9b:52:8a:bf:62:c1:4e:96:6f:78:0f: 98:14:9d:74:1e:e1:c8:20:ed:d6:bc:ff:63:90:ff:e9:31:33: 6a:e1:8b:92:de:09:c5:28:b3:00:6c:ce:35:ff:9a:c4:3e:4b: 58:6a:b1:c2:9a:53:ba:7e:41:8c:e8:bb:c0:73:99:95:21:ab: 5e:f9:7d:ea:df:28:c1:ac:95:75:b4:37:1f:97:93:1e:29:c6: 89:14:93:33:96:c5:93:ea:3c:d0:5f:77:94:e5:30:86:e9:c0: b7:97:3f:9d:b0:69:c3:c6:52:68:a5:eb:b8:53:f5:4a:14:fb: fc:be:51:40:c5:64:dc:37:93:d3:ad:20:e4:59:1d:b8:29:e4: 5a:18:ba:37:40:3a:24:66:2f:04:83:41:ca:4e:19:52:52:f5: 8d:bd:cc:9c:18:3d:4c:89:1d:d1:be:af:c1:aa:e4:bf:7a:ee: ac:a1:52:65:69:34:29:6f:7b:21:f9:96:7b:8c:68:e7:03:8e: b3:c4:c7:87:e8:67:bc:b5:b4:03:6f:40:e0:6d:7a:26:ea:d1: 1d:8f:3b:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzAfJg6NLH97dMJf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5YTcyNGMtMGVmOC00MTZjLWJiMmMtMzU5YTAxMjIz NzVlMB4XDTI2MDIwNDE0MDAzOVoXDTI2MDUwNTEzMDAzOVowLzEtMCsGA1UEAxMk Y2I1NTE0Y2EtNWM5Ni00NzQ0LTgyNzQtNjY1Y2JlMWUyZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h5i7KOYJs9PXcL3JJ5dwtRzx3IByob4RacQ xDW98s44SsILartIBlVN7z+ripGZk0nPCexIm/c0NIKmCQFZipiMacSvgj/cfyh5 yK4cZw6RFyKM6A2t3PDTH/uYXkf+ogTr0zbfuLV/3Dn/9IKXrnaoOuDE1Mp9nWdC ovv4434MvNVY5xxtC5G927PRtdH2N/G43lTFa4GGcgWEyVIBbbmuQdMGWIGKYedh zAYulBnFbKLIDQeSRVmVoxc32LS9BANN6OTNValv50L/NpR5ysbfb2qeImPrhriB wdk6jIycRjuIAl+p2cjVWD5s8tZ3zwWUcurNN/GOXwxVjE+PyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHv5mcRV9aV9pgWQq2exrGTe/8voMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMjlh NzI0Yy0wZWY4LTQxNmMtYmIyYy0zNTlhMDEyMjM3NWUvODU4N2E5NDYtNGM5ZS0z YTRjLTkyZDYtNmQ5ZTQ5MWYyNTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTI5YTcyNGMtMGVmOC00MTZjLWJi MmMtMzU5YTAxMjIzNzVlL2EyOWE3MjRjLTBlZjgtNDE2Yy1iYjJjLTM1OWEwMTIy Mzc1ZS5jcmwwHwYDVR0jBBgwFoAU4tGxHBySEApJXuagmu0kotxwWLcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hMjlhNzI0Yy0wZWY4LTQxNmMtYmIyYy0zNTlh MDEyMjM3NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKCSZgHTkxfzi9AXAX1VuQ4vDn/yQoeMqvPWn7l1Ev4nkj7jhQGb5zK 8r6bUoq/YsFOlm94D5gUnXQe4cgg7da8/2OQ/+kxM2rhi5LeCcUoswBszjX/msQ+ S1hqscKaU7p+QYzou8BzmZUhq175ferfKMGslXW0Nx+Xkx4pxokUkzOWxZPqPNBf d5TlMIbpwLeXP52wacPGUmil67hT9UoU+/y+UUDFZNw3k9OtIORZHbgp5FoYujdA OiRmLwSDQcpOGVJS9Y29zJwYPUyJHdG+r8Gq5L967qyhUmVpNClveyH5lnuMaOcD jrPEx4foZ7y1tANvQOBteibq0R2POys= -----END CERTIFICATE-----Generated at Mon Mar 2 11:24:42 2026 by rpki-client