$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa File: 2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa (raw, json) Hash identifier: 89qia9FYHdwQcUnkbZkHlnRipUHmYedB/prRZE0sT6M= Subject key identifier: 34:8D:6A:9B:C0:0E:78:5C:25:5C:59:BF:A0:CF:D4:FD:FC:FA:EF:6E Certificate issuer: /CN=0c71d09c-b853-44b9-8b34-8d5283774a5a Certificate serial: 010D0C9F4328584CF2BCF7C5A518382C0E2FD080 Authority key identifier: 32:3A:C9:26:DD:08:FC:97:E4:9D:F6:2A:A4:C0:C0:FA:26:AB:40:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 14721 IP address blocks: 208.86.116.0/22 maxlen: 24 208.91.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bc:f7:c5:a5:18:38:2c:0e:2f:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c71d09c-b853-44b9-8b34-8d5283774a5a Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=6d9072c4-ae69-42ab-8a30-0b96601b8e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:13:6d:d1:8c:77:6d:55:1d:57:fb:35:bc:f7: 2f:b7:5f:e3:f6:89:fd:b7:b7:14:1c:01:b8:ad:6c: 23:bb:7d:5c:36:c7:f4:32:77:6d:ab:93:94:ec:fd: 28:ac:30:64:6d:1c:e4:30:12:df:3d:4e:67:9d:7b: 21:8c:d2:b5:bc:38:0e:b2:bf:62:58:3b:8d:f5:d0: 7b:ac:69:3c:a5:c3:64:9c:03:53:12:24:36:a8:91: c8:69:83:d7:11:82:80:fc:f6:ed:90:f3:90:83:27: 78:06:b0:0d:02:20:68:c6:b8:3d:da:4d:07:8e:c6: 30:36:3e:7f:a5:d0:de:bc:73:8d:e8:b4:65:e4:de: 8f:c9:83:40:0d:57:38:1d:2c:72:dd:9b:15:f8:35: f9:7a:a5:21:e9:62:44:48:f6:fa:f5:cc:53:6f:b6: 25:7b:fd:2d:0a:d6:7e:63:f2:62:6c:e2:76:44:dc: 1d:d3:ed:aa:6c:f4:8e:98:31:c0:e5:61:57:94:15: e0:1e:97:2d:fb:5e:d3:fa:a1:06:76:af:31:25:2f: f6:bf:6d:cf:d4:3a:ff:48:13:dc:7e:5f:54:ae:8a: 20:1f:66:18:ea:0f:57:65:f3:21:46:8f:be:f7:40: a4:0f:ad:b4:43:51:30:3d:60:68:83:3f:ed:94:f0: 20:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8D:6A:9B:C0:0E:78:5C:25:5C:59:BF:A0:CF:D4:FD:FC:FA:EF:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.crl X509v3 Authority Key Identifier: keyid:32:3A:C9:26:DD:08:FC:97:E4:9D:F6:2A:A4:C0:C0:FA:26:AB:40:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer sbgp-ipAddrBlock: critical IPv4: 208.86.116.0/22 208.91.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:06:82:e4:77:03:1f:f4:40:2f:f0:11:64:d6:48:ff:d6:e1: 10:be:09:c2:fa:01:e6:c4:ad:cb:d7:72:31:5a:bb:69:09:f6: 57:9f:11:59:a7:8a:e5:83:ed:54:31:27:be:39:fd:40:fe:a6: 14:66:cb:63:e1:ec:44:ae:7e:3b:ed:60:35:25:a5:3a:ee:d2: 11:ae:2c:33:cf:d0:0f:20:96:dd:99:d1:ea:34:5d:be:fe:83: ac:98:56:2f:ae:98:46:f8:c7:1a:16:a6:a6:0c:c7:59:ae:fe: 0f:49:e6:b6:42:75:23:2b:3c:4e:90:a9:c0:d9:df:6b:0c:f5: cb:bc:21:56:45:d7:e2:70:0d:6a:32:eb:60:7e:0e:76:00:4d: 1f:10:25:01:1c:45:12:94:49:c3:52:63:ec:a9:4e:6e:26:c3: 42:c2:0e:f4:67:a7:4e:13:ac:40:12:49:1b:52:85:fd:a5:a4: a0:0c:a2:fa:ee:9c:74:0f:8e:74:2d:06:b1:fb:78:af:37:8f: a6:75:2d:d8:27:38:ca:65:61:7c:f3:9b:55:15:8a:1e:56:7c: 61:87:8d:08:b6:f0:94:3a:75:6e:fa:52:79:6c:3c:1c:d9:fe: bb:16:11:ed:20:03:d7:4c:ba:0a:e3:71:f0:05:7c:01:b6:80: e1:05:5b:f9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEzyvPfFpRg4LA4v0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM3MWQwOWMtYjg1My00NGI5LThiMzQtOGQ1MjgzNzc0 YTVhMB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk NmQ5MDcyYzQtYWU2OS00MmFiLThhMzAtMGI5NjYwMWI4ZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxNt0Yx3bVUdV/s1vPcvt1/j9on9t7cUHAG4 rWwju31cNsf0Mndtq5OU7P0orDBkbRzkMBLfPU5nnXshjNK1vDgOsr9iWDuN9dB7 rGk8pcNknANTEiQ2qJHIaYPXEYKA/PbtkPOQgyd4BrANAiBoxrg92k0HjsYwNj5/ pdDevHON6LRl5N6PyYNADVc4HSxy3ZsV+DX5eqUh6WJESPb69cxTb7Yle/0tCtZ+ Y/JibOJ2RNwd0+2qbPSOmDHA5WFXlBXgHpct+17T+qEGdq8xJS/2v23P1Dr/SBPc fl9UroogH2YY6g9XZfMhRo++90CkD620Q1EwPWBogz/tlPAgyQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDSNapvADnhcJVxZv6DP1P38+u9uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzcx ZDA5Yy1iODUzLTQ0YjktOGIzNC04ZDUyODM3NzRhNWEvMmEyZjA1OWQtZTE4MS0z M2JmLThiYmQtMmM0YTVkMDkwODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGM3MWQwOWMtYjg1My00NGI5LThi MzQtOGQ1MjgzNzc0YTVhLzBjNzFkMDljLWI4NTMtNDRiOS04YjM0LThkNTI4Mzc3 NGE1YS5jcmwwHwYDVR0jBBgwFoAUMjrJJt0I/JfknfYqpMDA+iarQNswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzcxZDA5Yy1iODUzLTQ0YjktOGIzNC04ZDUy ODM3NzRhNWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC0FZ0AwQC 0FuYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAK4GguR3Ax/0QC/wEWTWSP/W4RC+CcL6AebErcvXcjFau2kJ 9lefEVmniuWD7VQxJ745/UD+phRmy2Ph7ESufjvtYDUlpTru0hGuLDPP0A8glt2Z 0eo0Xb7+g6yYVi+umEb4xxoWpqYMx1mu/g9J5rZCdSMrPE6QqcDZ32sM9cu8IVZF 1+JwDWoy62B+DnYATR8QJQEcRRKUScNSY+ypTm4mw0LCDvRnp04TrEASSRtShf2l pKAMovrunHQPjnQtBrH7eK83j6Z1LdgnOMplYXzzm1UVih5WfGGHjQi28JQ6dW76 UnlsPBzZ/rsWEe0gA9dMugrjcfAFfAG2gOEFW/k= -----END CERTIFICATE-----Generated at Mon Mar 2 06:37:03 2026 by rpki-client