$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/d024c0fe-f70d-3486-bd2c-a80515d83f4a.roa File: d024c0fe-f70d-3486-bd2c-a80515d83f4a.roa (raw, json) Hash identifier: SeL+qS71irG5o0nQexMArTNbX6OBHp4BxUylrFDXsRA= Subject key identifier: 68:A8:9D:DD:3F:80:00:B3:8A:D4:50:7C:AB:6B:4F:00:F8:89:28:7B Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F4328584CE4C78301432CBA32E3E40D00 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/d024c0fe-f70d-3486-bd2c-a80515d83f4a.roa Signing time: Tue 17 Feb 2026 14:00:41 +0000 ROA not before: Tue 17 Feb 2026 14:00:41 +0000 ROA not after: Mon 18 May 2026 13:00:41 +0000 asID: 16509 IP address blocks: 170.200.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e4:c7:83:01:43:2c:ba:32:e3:e4:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: Feb 17 14:00:41 2026 GMT Not After : May 18 13:00:41 2026 GMT Subject: CN=c4f5779b-8695-486d-b304-31e8b5246d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:35:bc:76:1e:bd:6a:5b:35:ed:ac:af:4b:91: 9c:b0:9c:1c:89:22:b2:ec:e7:15:19:73:95:59:cd: ce:d6:34:b4:4e:1d:7b:ee:e2:5f:74:37:ac:50:92: ab:45:ed:63:4c:f8:54:89:32:03:1a:ce:aa:fc:cb: 21:4f:4c:ab:80:86:61:ba:aa:fa:ff:c8:e3:fd:43: 0e:b0:66:cd:b7:6e:1e:59:66:dc:fc:05:3a:eb:6a: 47:29:e0:b1:87:3c:7a:0a:2d:b4:2c:7a:1a:cc:9f: fb:bb:eb:9a:18:4d:5b:a5:5b:d1:66:18:9e:7e:f5: 97:f6:c4:be:1e:b3:f6:c2:09:94:f4:83:fc:de:51: 23:21:7d:21:cb:a9:31:37:a5:8f:02:96:ee:23:65: 19:86:ed:77:0e:5b:9f:04:09:50:76:ff:67:34:a2: 52:c6:0e:c0:85:5d:11:2e:d1:6c:09:31:1f:97:6c: 90:cd:c3:fc:74:27:15:ce:f5:9b:df:14:dc:48:12: 07:87:18:02:fa:6a:ff:03:61:d0:f9:30:64:96:b5: fa:e0:6a:a7:cb:c6:bf:98:2e:9e:b3:d6:eb:23:c0: cf:fa:ec:11:4b:bb:82:49:c2:ec:01:4a:24:3a:11: d0:f3:2a:de:55:04:63:ff:42:d5:fe:1b:fb:d8:d3: e0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A8:9D:DD:3F:80:00:B3:8A:D4:50:7C:AB:6B:4F:00:F8:89:28:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/d024c0fe-f70d-3486-bd2c-a80515d83f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:66:07:7c:8c:f3:76:48:f4:86:51:81:22:cf:dc:2b:9f:58: 2b:4a:32:ee:eb:52:12:68:5e:81:51:d9:f4:18:3e:7a:42:11: b3:95:05:0d:11:08:c8:1c:75:ba:74:6f:af:0a:02:9e:ac:8b: a3:06:49:b1:b2:8b:1c:05:76:c6:e1:ae:59:56:02:d9:71:0d: 95:01:b6:f9:5d:11:bb:38:11:47:ba:32:f2:86:67:94:cc:eb: 02:fc:22:44:35:3c:b3:bf:d8:f4:5d:d9:1b:4d:8a:e6:d4:25: a1:8b:49:fa:6b:39:52:3c:34:4b:73:75:58:7b:72:41:bd:36: 47:15:84:ea:0a:a6:78:ab:47:5b:42:3f:5a:17:d7:0c:83:6a: 45:e4:08:f1:bb:a9:ca:c2:28:66:0b:c1:2d:89:09:b8:4f:ad: d5:7e:1d:37:9e:11:f3:38:17:4f:47:08:d2:63:c5:c6:93:5e: 05:5f:f7:90:dd:a9:33:01:b5:1f:62:f8:2a:4d:0a:f8:ed:8f: b8:7f:ff:36:35:28:12:d0:c5:00:72:d8:8b:ec:91:cb:11:98: f8:6b:54:f2:04:d8:c3:bf:ea:85:56:d4:12:c0:00:5b:fe:0d: d8:96:bd:e4:bd:84:e5:49:45:a6:f6:c9:7e:b7:5c:0d:93:40: d4:a4:b3:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzkx4MBQyy6MuPkDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI2MDIxNzE0MDA0MVoXDTI2MDUxODEzMDA0MVowLzEtMCsGA1UEAxMk YzRmNTc3OWItODY5NS00ODZkLWIzMDQtMzFlOGI1MjQ2ZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojW8dh69als17ayvS5GcsJwciSKy7OcVGXOV Wc3O1jS0Th177uJfdDesUJKrRe1jTPhUiTIDGs6q/MshT0yrgIZhuqr6/8jj/UMO sGbNt24eWWbc/AU662pHKeCxhzx6Ci20LHoazJ/7u+uaGE1bpVvRZhiefvWX9sS+ HrP2wgmU9IP83lEjIX0hy6kxN6WPApbuI2UZhu13DlufBAlQdv9nNKJSxg7AhV0R LtFsCTEfl2yQzcP8dCcVzvWb3xTcSBIHhxgC+mr/A2HQ+TBklrX64Gqny8a/mC6e s9brI8DP+uwRS7uCScLsAUokOhHQ8yreVQRj/0LV/hv72NPgnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiond0/gACzitRQfKtrTwD4iSh7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvZDAyNGMwZmUtZjcwZC0z NDg2LWJkMmMtYTgwNTE1ZDgzZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqsi8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1mB3yM83ZI9IZRgSLP3CufWCtKMu7rUhJoXoFR2fQYPnpCEbOVBQ0R CMgcdbp0b68KAp6si6MGSbGyixwFdsbhrllWAtlxDZUBtvldEbs4EUe6MvKGZ5TM 6wL8IkQ1PLO/2PRd2RtNiubUJaGLSfprOVI8NEtzdVh7ckG9NkcVhOoKpnirR1tC P1oX1wyDakXkCPG7qcrCKGYLwS2JCbhPrdV+HTeeEfM4F09HCNJjxcaTXgVf95Dd qTMBtR9i+CpNCvjtj7h//zY1KBLQxQBy2IvskcsRmPhrVPIE2MO/6oVW1BLAAFv+ DdiWveS9hOVJRab2yX63XA2TQNSks7I= -----END CERTIFICATE-----Generated at Mon Mar 2 09:33:22 2026 by rpki-client