$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/2d0be8a3-9645-3e36-a363-99c5bc3a1007.roa File: 2d0be8a3-9645-3e36-a363-99c5bc3a1007.roa (raw, json) Hash identifier: 1193OuYSgn5wTywo4yKFhKfxSJB0DcYeveBt1K/ARtk= Subject key identifier: E9:3B:3C:B7:46:80:8B:E3:FE:73:56:77:78:F8:31:A9:D0:18:D9:49 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584CFC822CF2109B87D1E9C27300 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/2d0be8a3-9645-3e36-a363-99c5bc3a1007.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 11377 IP address blocks: 216.20.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:2c:f2:10:9b:87:d1:e9:c2:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=eed21cc9-f5cc-4918-9379-e0a13871e546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b8:27:75:37:c8:05:16:65:47:4c:18:e0:a2: 6b:d4:ba:c2:5b:6e:3e:7e:78:d7:89:fa:62:d0:30: 08:cb:56:72:de:1a:17:c6:cc:48:8a:c3:75:3d:5b: dd:8b:6c:b1:a1:e8:08:9f:61:ba:31:80:99:40:71: 9d:ec:f0:fa:59:8b:cd:ed:bb:0a:d5:16:2d:7f:1a: e9:aa:75:45:a1:d5:02:e1:a3:c8:b3:09:e5:e8:6d: ff:4a:ef:05:52:8f:b7:52:7c:db:e4:e5:e2:90:26: ea:1c:33:5d:79:22:f9:0d:c7:96:98:ea:bc:0c:b1: 14:30:4d:99:2a:2c:0a:9f:d8:9a:38:f6:00:bf:5f: 93:2a:b2:8b:36:0f:36:d1:26:f7:b2:af:33:05:53: cf:c6:85:c7:b0:a8:8f:33:3e:e3:e5:ca:02:08:84: f5:29:e2:db:5a:2a:14:ae:f5:be:24:cf:66:4e:93: 6a:10:de:20:9e:31:89:c0:5c:50:e8:7a:21:9c:a4: e6:51:c3:c7:75:b3:02:27:4a:11:e0:82:36:45:41: a3:64:3c:e5:07:81:90:45:bd:86:f0:ea:22:4c:5d: 3d:6d:23:4f:aa:38:13:55:9f:62:77:69:7d:3b:f0: 58:00:55:8d:a5:19:4d:28:1c:6a:49:b0:70:26:22: 72:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3B:3C:B7:46:80:8B:E3:FE:73:56:77:78:F8:31:A9:D0:18:D9:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/2d0be8a3-9645-3e36-a363-99c5bc3a1007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:06:f2:6a:35:75:70:cb:37:5b:40:4a:22:34:8a:53:c6:6f: 5a:6e:19:5b:8e:ec:1f:26:a1:3d:9d:5e:61:79:f1:41:dd:bb: 65:d7:68:9e:64:65:c4:f6:d7:ee:a3:1a:58:5f:6e:30:e5:65: d3:2d:d7:a3:11:17:61:ad:d4:1d:33:2d:b8:9e:b1:fd:12:11: ca:91:07:8c:fe:04:08:af:43:55:96:f5:c0:0e:80:f6:8e:43: 5c:37:9a:a5:aa:f1:16:f7:a5:75:f4:f0:8d:d2:b9:4b:6a:a7: c2:32:92:c0:4d:21:c2:26:63:87:21:3f:1f:72:1f:ae:88:bf: ea:16:c2:60:d6:29:8b:16:2a:ed:14:07:41:97:78:40:56:6e: ec:eb:b7:cc:51:cd:cb:d8:b5:d2:7c:49:a0:27:17:ae:44:83: 8a:e1:f7:ef:9d:7f:e5:fa:f9:5e:a6:0a:fd:62:5a:85:18:94: a3:d4:6c:1c:e0:a6:d1:73:f8:ec:45:9a:7e:47:c2:34:ed:a7: e5:38:f2:5f:28:59:5b:c8:e7:56:66:7d:5c:c7:66:3c:dd:4a: 2c:46:5c:27:c2:90:fa:13:6e:5f:b1:c7:a5:cf:16:2c:87:bf: 71:ef:7a:5f:c3:16:00:79:6e:f2:00:29:58:d2:86:9e:9f:d4: 13:11:02:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gizyEJuH0enCcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk ZWVkMjFjYzktZjVjYy00OTE4LTkzNzktZTBhMTM4NzFlNTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbgndTfIBRZlR0wY4KJr1LrCW24+fnjXifpi 0DAIy1Zy3hoXxsxIisN1PVvdi2yxoegIn2G6MYCZQHGd7PD6WYvN7bsK1RYtfxrp qnVFodUC4aPIswnl6G3/Su8FUo+3Unzb5OXikCbqHDNdeSL5DceWmOq8DLEUME2Z KiwKn9iaOPYAv1+TKrKLNg820Sb3sq8zBVPPxoXHsKiPMz7j5coCCIT1KeLbWioU rvW+JM9mTpNqEN4gnjGJwFxQ6HohnKTmUcPHdbMCJ0oR4II2RUGjZDzlB4GQRb2G 8OoiTF09bSNPqjgTVZ9id2l9O/BYAFWNpRlNKBxqSbBwJiJy+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOk7PLdGgIvj/nNWd3j4ManQGNlJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvMmQwYmU4YTMtOTY0NS0z ZTM2LWEzNjMtOTljNWJjM2ExMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMG8mo1dXDLN1tASiI0ilPGb1puGVuO7B8moT2dXmF58UHdu2XXaJ5k ZcT21+6jGlhfbjDlZdMt16MRF2Gt1B0zLbiesf0SEcqRB4z+BAivQ1WW9cAOgPaO Q1w3mqWq8Rb3pXX08I3SuUtqp8IyksBNIcImY4chPx9yH66Iv+oWwmDWKYsWKu0U B0GXeEBWbuzrt8xRzcvYtdJ8SaAnF65Eg4rh9++df+X6+V6mCv1iWoUYlKPUbBzg ptFz+OxFmn5HwjTtp+U48l8oWVvI51ZmfVzHZjzdSixGXCfCkPoTbl+xx6XPFiyH v3Hvel/DFgB5bvIAKVjShp6f1BMRAgk= -----END CERTIFICATE-----Generated at Mon Mar 2 09:21:40 2026 by rpki-client