$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aedfd664-7894-362b-b102-7061ab158762.roa File: aedfd664-7894-362b-b102-7061ab158762.roa (raw, json) Hash identifier: dCBh0/fsrmxxqI1DZXuvbekmNBwhSya1pBxDRhaFx5Q= Subject key identifier: 16:6E:BD:31:25:9E:64:21:C6:2C:E8:B3:86:1C:4B:58:8B:1C:17:99 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584CD99CFAB96B094DA10B1FCB40 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aedfd664-7894-362b-b102-7061ab158762.roa Signing time: Fri 13 Feb 2026 14:00:41 +0000 ROA not before: Fri 13 Feb 2026 14:00:41 +0000 ROA not after: Thu 14 May 2026 13:00:41 +0000 asID: 22516 IP address blocks: 158.62.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d9:9c:fa:b9:6b:09:4d:a1:0b:1f:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 13 14:00:41 2026 GMT Not After : May 14 13:00:41 2026 GMT Subject: CN=02931a0c-2d20-4ebf-a3ad-161c04700147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:08:c1:b5:bc:0a:11:74:d9:21:65:ed:33:83: 48:b6:43:45:f8:eb:2e:84:3e:f1:57:62:04:56:e8: b4:55:e4:26:fe:ac:65:0c:d4:a8:9d:0a:6f:25:13: 09:56:3b:23:9e:5a:6d:94:9c:76:12:d8:f3:ac:24: 02:9b:63:5c:97:ac:08:a4:97:4e:61:26:c5:f6:77: ec:ca:70:a2:aa:ab:99:69:9f:64:87:57:f5:6b:c4: 48:f1:a3:17:13:18:b4:6e:da:2a:bf:86:cc:3f:7a: 1c:2b:dd:6e:d1:d6:22:5c:88:b1:eb:85:fc:96:b3: 2a:43:2c:67:eb:5c:44:e2:dd:60:44:70:ae:fe:b5: 2d:11:f2:2f:84:a5:00:67:d6:c6:a9:e3:34:03:f1: ae:f8:b0:fa:3c:e7:27:27:8c:59:04:c0:1b:43:c2: 8b:7e:05:83:59:57:9b:96:d6:60:90:d4:99:83:21: 3f:52:2b:bd:fa:10:73:52:a0:11:05:f8:e5:e3:a6: ce:21:bb:2a:d3:6d:31:b7:7c:a0:72:1b:15:53:f6: 35:65:ee:f6:4b:c8:d2:bf:b3:48:42:1a:b7:7a:15: 6d:8b:91:89:6c:1a:88:d5:18:c4:5b:ea:58:02:a2: ed:cc:39:eb:d8:ec:22:78:77:bb:35:71:ef:27:80: 1d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6E:BD:31:25:9E:64:21:C6:2C:E8:B3:86:1C:4B:58:8B:1C:17:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aedfd664-7894-362b-b102-7061ab158762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 158.62.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:04:1e:2b:90:eb:68:23:dd:9a:64:d2:b6:e5:25:15:97:e8: 52:e4:2d:ea:a3:b5:7f:79:eb:4e:5e:99:38:34:ac:15:c1:58: 5d:33:69:e0:ea:1f:63:da:1b:dc:65:44:45:27:1a:83:dd:89: 42:8e:56:67:8a:52:b6:f5:56:12:0e:d9:16:31:a1:16:a7:d6: 88:22:aa:fd:d1:2b:ed:f2:a7:7c:49:aa:ed:d0:af:d2:29:6d: 14:fa:ea:89:ba:e2:40:8c:69:d9:e9:31:3d:7c:07:eb:28:3d: 12:42:32:98:d7:56:e8:12:07:ee:16:16:40:39:ac:c7:8f:4e: 22:fd:d0:54:0b:1b:2c:45:f6:42:f8:5f:35:11:00:17:80:26: 15:87:fa:82:bd:32:0b:d9:f1:a1:41:da:5f:a9:56:bf:02:65: 23:c7:c2:15:71:c5:d1:d0:81:d7:0c:cf:5b:c0:3e:c4:95:ff: 6d:0b:36:b6:b5:fc:6c:f6:8c:1b:1b:02:c1:b8:55:02:98:96: 6d:bc:90:71:e1:ea:a0:0d:a8:f4:7c:94:aa:a7:d5:65:44:25: 2a:b8:f4:4c:d3:61:c6:cb:6a:e7:fd:8a:db:3e:b1:9c:61:b2: ce:53:6f:5c:44:da:06:c3:76:c4:9f:06:d1:97:76:66:ba:cf: d0:7f:6b:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzZnPq5awlNoQsfy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk MDI5MzFhMGMtMmQyMC00ZWJmLWEzYWQtMTYxYzA0NzAwMTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QjBtbwKEXTZIWXtM4NItkNF+OsuhD7xV2IE Vui0VeQm/qxlDNSonQpvJRMJVjsjnlptlJx2EtjzrCQCm2Ncl6wIpJdOYSbF9nfs ynCiqquZaZ9kh1f1a8RI8aMXExi0btoqv4bMP3ocK91u0dYiXIix64X8lrMqQyxn 61xE4t1gRHCu/rUtEfIvhKUAZ9bGqeM0A/Gu+LD6POcnJ4xZBMAbQ8KLfgWDWVeb ltZgkNSZgyE/Uiu9+hBzUqARBfjl46bOIbsq020xt3ygchsVU/Y1Ze72S8jSv7NI Qhq3ehVti5GJbBqI1RjEW+pYAqLtzDnr2OwieHe7NXHvJ4AdGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZuvTElnmQhxizos4YcS1iLHBeZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYWVkZmQ2NjQtNzg5NC0z NjJiLWIxMDItNzA2MWFiMTU4NzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYEHiuQ62gj3Zpk0rblJRWX6FLkLeqjtX95605emTg0rBXBWF0zaeDq H2PaG9xlREUnGoPdiUKOVmeKUrb1VhIO2RYxoRan1ogiqv3RK+3yp3xJqu3Qr9Ip bRT66om64kCMadnpMT18B+soPRJCMpjXVugSB+4WFkA5rMePTiL90FQLGyxF9kL4 XzURABeAJhWH+oK9MgvZ8aFB2l+pVr8CZSPHwhVxxdHQgdcMz1vAPsSV/20LNra1 /Gz2jBsbAsG4VQKYlm28kHHh6qANqPR8lKqn1WVEJSq49EzTYcbLauf9its+sZxh ss5Tb1xE2gbDdsSfBtGXdma6z9B/awc= -----END CERTIFICATE-----Generated at Mon Mar 2 15:52:56 2026 by rpki-client