$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/70eb5e9f-12ce-32ec-a793-f001a2116bb6.roa File: 70eb5e9f-12ce-32ec-a793-f001a2116bb6.roa (raw, json) Hash identifier: LrpHRPCYHVhrnCVJGWnOwrpCoglum2VHJjk4Bl44XwY= Subject key identifier: BC:D2:41:B6:AF:FB:22:FF:7B:04:FF:45:EC:06:07:19:E0:56:56:37 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584CEA5D030CB58ABC9AE1D88740 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/70eb5e9f-12ce-32ec-a793-f001a2116bb6.roa Signing time: Thu 19 Feb 2026 14:00:40 +0000 ROA not before: Thu 19 Feb 2026 14:00:40 +0000 ROA not after: Wed 20 May 2026 13:00:40 +0000 asID: 20001 IP address blocks: 199.250.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ea:5d:03:0c:b5:8a:bc:9a:e1:d8:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 19 14:00:40 2026 GMT Not After : May 20 13:00:40 2026 GMT Subject: CN=cbc7d068-6dfa-4522-9692-c65f6f1d9d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:95:57:d2:79:9a:ac:12:06:75:8a:74:0b:ec: 0f:79:5c:94:91:75:9b:e3:aa:2c:d6:53:61:3d:b7: c1:be:9b:e3:96:43:cb:86:4f:61:b0:25:d7:d3:50: 1a:09:8d:6a:3e:86:e4:97:70:0e:6e:00:34:6f:6e: a9:8c:d0:b9:00:16:da:44:0f:38:19:8d:f3:57:07: f5:87:ca:79:9b:09:ae:65:54:20:f9:2b:e4:11:13: d5:b9:7b:d5:fe:85:35:20:d6:b8:fd:01:5d:c5:9d: 2f:2d:c2:ae:65:e5:35:d0:32:4b:41:f9:c6:26:07: ae:d6:3f:25:4f:59:76:2e:31:02:a4:7a:2e:45:c2: 94:75:9f:40:a2:b8:df:2f:0a:fb:a2:e1:40:77:e6: d9:d4:1e:ac:b6:bf:a2:1b:cc:48:ab:9f:98:57:05: 72:d3:0d:2d:23:53:0b:5a:f0:ab:52:13:98:f3:10: 4d:1e:9f:5b:77:a0:ff:3a:03:b9:db:fe:09:42:82: a9:b4:9b:8c:c8:8a:47:1d:f6:10:7b:b8:d0:0e:f1: 33:b0:04:df:c1:4f:50:ec:25:a3:32:fe:f0:06:1b: 76:5c:fc:d8:16:5d:0e:3d:7e:74:4b:66:e1:1d:e3: 46:7c:3b:ae:1c:c9:d7:61:39:44:c7:d6:0c:26:c8: 25:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D2:41:B6:AF:FB:22:FF:7B:04:FF:45:EC:06:07:19:E0:56:56:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/70eb5e9f-12ce-32ec-a793-f001a2116bb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 199.250.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:6f:d3:55:72:54:24:63:20:84:98:dc:da:a6:87:f0:e4:9c: a0:5d:71:f9:42:e6:d6:57:48:41:b5:b1:c2:d2:09:bf:0c:f4: 64:be:9b:84:aa:cf:a4:bc:d1:31:03:f9:a7:9a:35:3c:e0:8c: af:82:f1:da:51:43:a1:c9:54:72:05:56:85:aa:9d:9e:ee:a6: 0c:f2:d2:32:bb:66:18:65:fb:cd:07:7d:a7:bc:d9:36:4a:be: 2e:dd:41:0b:e2:bd:25:59:36:de:75:4a:42:f1:87:a8:e2:29: dd:e4:d3:5b:8d:5a:13:f9:cb:af:8b:9f:ab:0a:20:3e:1c:0a: aa:30:ed:02:11:86:2f:87:7d:be:75:42:3d:61:4b:20:75:98: 44:3b:28:bf:5e:d7:5b:db:b2:07:97:28:77:84:0e:7a:0a:2a: 78:26:fa:34:08:b0:1b:c9:f7:f0:95:a4:8d:d7:9d:70:d8:a7: d4:0b:e4:7a:3c:9d:f9:03:02:78:3e:ec:7c:25:1a:00:b7:4b: 50:29:68:16:3f:f9:aa:55:b0:a8:a5:2a:5f:88:e1:4a:6c:b2: 45:6b:1d:7e:b6:8e:fa:44:2c:33:5e:23:49:a8:94:6b:14:20: 55:4c:0f:b0:cc:1b:ee:59:d2:b8:2d:24:1f:86:79:6e:2a:bc: f4:26:4f:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXQMMtYq8muHYh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk Y2JjN2QwNjgtNmRmYS00NTIyLTk2OTItYzY1ZjZmMWQ5ZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5VX0nmarBIGdYp0C+wPeVyUkXWb46os1lNh PbfBvpvjlkPLhk9hsCXX01AaCY1qPobkl3AObgA0b26pjNC5ABbaRA84GY3zVwf1 h8p5mwmuZVQg+SvkERPVuXvV/oU1INa4/QFdxZ0vLcKuZeU10DJLQfnGJgeu1j8l T1l2LjECpHouRcKUdZ9AorjfLwr7ouFAd+bZ1B6str+iG8xIq5+YVwVy0w0tI1ML WvCrUhOY8xBNHp9bd6D/OgO52/4JQoKptJuMyIpHHfYQe7jQDvEzsATfwU9Q7CWj Mv7wBht2XPzYFl0OPX50S2bhHeNGfDuuHMnXYTlEx9YMJsgluwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzSQbav+yL/ewT/RewGBxngVlY3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNzBlYjVlOWYtMTJjZS0z MmVjLWE3OTMtZjAwMWEyMTE2YmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/q9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdv01VyVCRjIISY3Nqmh/DknKBdcflC5tZXSEG1scLSCb8M9GS+m4Sq z6S80TED+aeaNTzgjK+C8dpRQ6HJVHIFVoWqnZ7upgzy0jK7Zhhl+80Hfae82TZK vi7dQQvivSVZNt51SkLxh6jiKd3k01uNWhP5y6+Ln6sKID4cCqow7QIRhi+Hfb51 Qj1hSyB1mEQ7KL9e11vbsgeXKHeEDnoKKngm+jQIsBvJ9/CVpI3XnXDYp9QL5Ho8 nfkDAng+7HwlGgC3S1ApaBY/+apVsKilKl+I4UpsskVrHX62jvpELDNeI0molGsU IFVMD7DMG+5Z0rgtJB+GeW4qvPQmT1U= -----END CERTIFICATE-----Generated at Mon Mar 2 13:55:13 2026 by rpki-client