$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/e240baa6-82c8-35cf-bea1-7070aa352e51.roa File: e240baa6-82c8-35cf-bea1-7070aa352e51.roa (raw, json) Hash identifier: kZlLRDTlvHb+3nHETRfnV+amXDt0JvZ+LoxspOeL014= Subject key identifier: 4E:9D:03:3E:A0:58:79:0E:2E:F0:01:79:75:D0:5E:57:FD:4A:4E:2C Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee Certificate serial: 010D0C9F4328584CD4075FE2412D916E988A7280 Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/e240baa6-82c8-35cf-bea1-7070aa352e51.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 16504 IP address blocks: 172.85.128.0/17 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:5f:e2:41:2d:91:6e:98:8a:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=24f91b5f-ed0f-43bb-a861-4ac5561d73d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:f7:a3:a4:3b:bc:74:61:c6:9d:d6:a3:f6: a0:05:ae:a7:a3:f0:0c:a5:d4:b4:20:8f:7e:95:42: 8f:0d:74:c0:12:38:31:a8:ae:96:4b:fb:14:ca:a2: 7c:23:d3:81:30:01:f3:2e:ec:ff:74:db:57:8f:0b: 13:bb:b0:0c:3c:be:f2:00:25:1d:82:e6:0d:3c:99: 9e:f3:2a:f8:d1:3f:ca:22:0a:31:eb:56:61:cb:7f: c1:99:6f:d9:14:a8:37:c1:a8:fd:20:e4:a0:56:6c: 73:5b:78:83:ae:53:08:9b:79:16:41:5f:5d:86:ed: 75:c7:f2:99:03:eb:40:5b:1e:73:1d:a0:06:c1:9c: f6:ce:bb:67:17:03:a6:ab:19:27:f5:d4:80:86:de: 32:fc:c9:ac:af:2d:28:3f:9d:b6:cf:9e:2f:09:e5: 2a:0d:a1:ef:75:49:33:88:dd:d1:08:97:6d:aa:f4: 60:f4:76:1a:fe:f6:29:99:3e:6b:8a:ef:f0:76:96: 58:f4:d2:29:1b:1e:c7:cf:f6:4e:73:14:b9:c8:93: 81:d7:29:1e:69:1d:fe:db:be:1c:bf:7f:d2:e7:22: aa:19:56:4e:16:df:a0:50:dc:5c:1e:c8:01:8c:1d: f0:83:84:05:63:ea:9e:25:f4:eb:85:58:77:07:57: 23:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9D:03:3E:A0:58:79:0E:2E:F0:01:79:75:D0:5E:57:FD:4A:4E:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/e240baa6-82c8-35cf-bea1-7070aa352e51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl X509v3 Authority Key Identifier: keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer sbgp-ipAddrBlock: critical IPv4: 172.85.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:0a:94:21:c9:92:76:db:a2:21:01:78:ab:a7:fb:58:33:ca: 30:be:65:60:fb:da:da:d5:93:ea:e0:fb:af:87:e5:61:6e:f7: 5b:d0:9f:c9:e2:51:c2:b6:6a:23:37:16:3b:ae:09:26:98:d8: b0:7c:be:2a:2d:2b:b4:3d:b0:67:7c:79:3a:95:44:91:11:4d: d6:be:12:00:1a:37:db:4e:9c:40:1d:be:b8:a9:74:9f:9a:ec: 87:bb:26:68:dc:e3:f6:c3:a6:5b:5c:0a:65:b4:f6:41:8e:37: 8c:dd:d8:46:03:7b:9d:41:7f:d3:57:c1:0a:cc:f1:4b:54:44: 78:a6:21:56:2e:48:1f:c7:41:c7:56:c6:07:4d:4b:96:7f:1c: 87:a9:ae:78:ef:c7:bc:bf:ef:ce:8a:d6:23:e9:29:b9:8d:ef: d3:c1:06:5c:68:d8:bc:cf:46:e1:79:24:0a:e4:d1:53:cc:da: 8d:c8:82:9c:07:7e:17:17:99:63:21:54:63:ab:8c:ab:86:a2: 52:ff:5b:39:18:3e:e5:fa:f5:e1:54:74:65:59:37:c1:4c:58: d9:76:3a:be:b7:42:a1:67:60:80:2d:f6:62:b8:09:dd:3b:78: 1a:94:79:de:af:71:29:f3:f2:6f:01:f4:bc:92:4f:74:e7:d7: e7:c9:72:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB1/iQS2RbpiKcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw YWVlMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk MjRmOTFiNWYtZWQwZi00M2JiLWE4NjEtNGFjNTU2MWQ3M2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBv3o6Q7vHRhxp3Wo/agBa6no/AMpdS0II9+ lUKPDXTAEjgxqK6WS/sUyqJ8I9OBMAHzLuz/dNtXjwsTu7AMPL7yACUdguYNPJme 8yr40T/KIgox61Zhy3/BmW/ZFKg3waj9IOSgVmxzW3iDrlMIm3kWQV9dhu11x/KZ A+tAWx5zHaAGwZz2zrtnFwOmqxkn9dSAht4y/Mmsry0oP522z54vCeUqDaHvdUkz iN3RCJdtqvRg9HYa/vYpmT5riu/wdpZY9NIpGx7Hz/ZOcxS5yJOB1ykeaR3+274c v3/S5yKqGVZOFt+gUNxcHsgBjB3wg4QFY+qeJfTrhVh3B1cj8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6dAz6gWHkOLvABeXXQXlf9Sk4sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvZTI0MGJhYTYtODJjOC0z NWNmLWJlYTEtNzA3MGFhMzUyZTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0 M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2 ZGZiMjBhZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrFWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEKlCHJknbboiEBeKun+1gzyjC+ZWD72trVk+rg+6+H5WFu91vQn8ni UcK2aiM3FjuuCSaY2LB8viotK7Q9sGd8eTqVRJERTda+EgAaN9tOnEAdvripdJ+a 7Ie7Jmjc4/bDpltcCmW09kGON4zd2EYDe51Bf9NXwQrM8UtURHimIVYuSB/HQcdW xgdNS5Z/HIeprnjvx7y/786K1iPpKbmN79PBBlxo2LzPRuF5JArk0VPM2o3IgpwH fhcXmWMhVGOrjKuGolL/WzkYPuX69eFUdGVZN8FMWNl2Or63QqFnYIAt9mK4Cd07 eBqUed6vcSnz8m8B9LyST3Tn1+fJclA= -----END CERTIFICATE-----Generated at Mon Mar 2 15:16:46 2026 by rpki-client