$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/8ecaa99a-3e0c-3bf4-bab1-0d4f80164888.roa File: 8ecaa99a-3e0c-3bf4-bab1-0d4f80164888.roa (raw, json) Hash identifier: Um5q1DS1HDiET77eQyHZtJ1uFaTqllDvZ/EPiS8Qpls= Subject key identifier: 49:82:23:4D:6F:42:0C:6C:2D:4F:32:7E:E2:FC:60:D6:40:4B:C5:CC Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584CFC823039383E6B4029457C50 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/8ecaa99a-3e0c-3bf4-bab1-0d4f80164888.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 11377 IP address blocks: 216.20.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:30:39:38:3e:6b:40:29:45:7c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=96677ac3-38d6-43b4-87fe-afac739a7463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f2:bb:85:dc:0c:0c:dd:b1:21:5f:10:49:db: 54:94:46:58:64:ac:ff:f4:ec:24:a9:ea:ed:02:43: 15:4c:d3:ed:09:3c:1f:b4:02:96:cf:31:e6:8e:bd: dc:7a:fe:1f:f3:2e:45:49:94:92:fb:64:54:61:e1: de:c5:b1:eb:41:f6:b5:0b:20:81:cf:dc:ee:47:32: 3a:b0:60:5b:28:0b:30:d8:d5:fa:89:0f:85:54:be: bb:16:2d:ed:7b:93:58:95:6d:d8:08:c8:a0:4f:03: bd:dc:5b:e5:c4:0e:a4:70:a7:15:ad:cd:40:a0:f0: 2d:63:0e:8a:b9:d9:69:57:d1:b1:45:6e:68:76:e6: 70:d5:c4:0a:25:89:c2:cc:26:48:9d:f7:5a:0e:9d: 04:ca:c2:de:ed:ac:86:bf:24:01:10:ab:c8:42:ed: ed:bf:d0:69:2e:82:8f:69:02:a0:91:24:73:7c:c1: 15:41:7a:9d:08:12:c6:88:a6:b9:72:34:f5:2d:87: a3:39:5c:46:c2:76:53:02:0b:25:0c:e3:10:b5:aa: f1:24:70:ae:18:49:49:26:9f:8a:c8:e6:33:a4:da: b7:03:09:f4:32:3b:78:4d:59:ff:23:6f:d7:ab:8a: 55:e8:84:f1:6a:71:14:77:a7:9a:0f:84:df:77:c4: 31:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:82:23:4D:6F:42:0C:6C:2D:4F:32:7E:E2:FC:60:D6:40:4B:C5:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/8ecaa99a-3e0c-3bf4-bab1-0d4f80164888.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c5:44:65:e1:f5:ef:ea:fe:7a:83:6a:37:c2:fc:c4:7d:a6: e3:18:3c:7a:82:fe:16:43:5f:d7:05:ac:37:0d:c9:17:5d:52: 21:48:b5:c6:57:67:78:ca:c5:0e:95:46:68:cb:24:fa:2f:a8: 2d:6c:77:28:9a:7c:cd:42:32:f8:f6:7f:8a:c0:a7:58:b7:08: 4e:c4:a3:43:77:37:af:d7:79:1a:43:01:1c:8c:78:1b:b8:5b: 51:e7:03:af:2d:6e:63:d9:4c:b9:0e:a5:0f:15:98:af:82:34: 77:f3:65:f1:9d:79:36:61:7e:97:e0:58:15:0d:bb:d0:f6:3a: f1:4b:31:09:28:e6:df:42:70:f6:13:08:9b:81:85:4b:d7:33: 96:cf:d1:93:a3:89:bb:41:ae:9a:f7:3e:b9:62:f7:53:d4:ae: f2:61:9e:d3:1b:c5:5f:b1:7a:a1:88:71:c5:13:a1:50:15:10: 97:27:4d:5c:82:2c:1f:49:e8:0c:21:bd:57:64:ac:12:00:f3: 8b:48:48:17:fd:26:17:60:6a:5c:d2:e7:6e:3e:0d:77:ea:80: 47:59:ac:49:04:a0:26:37:37:0b:d9:62:26:56:45:8e:80:d4: 01:2f:68:5d:25:dd:b7:b9:71:83:23:55:c5:74:56:ff:70:1b: 63:f5:b1:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gjA5OD5rQClFfFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk OTY2NzdhYzMtMzhkNi00M2I0LTg3ZmUtYWZhYzczOWE3NDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPK7hdwMDN2xIV8QSdtUlEZYZKz/9Owkqert AkMVTNPtCTwftAKWzzHmjr3cev4f8y5FSZSS+2RUYeHexbHrQfa1CyCBz9zuRzI6 sGBbKAsw2NX6iQ+FVL67Fi3te5NYlW3YCMigTwO93FvlxA6kcKcVrc1AoPAtYw6K udlpV9GxRW5oduZw1cQKJYnCzCZInfdaDp0EysLe7ayGvyQBEKvIQu3tv9BpLoKP aQKgkSRzfMEVQXqdCBLGiKa5cjT1LYejOVxGwnZTAgslDOMQtarxJHCuGElJJp+K yOYzpNq3Awn0Mjt4TVn/I2/Xq4pV6ITxanEUd6eaD4Tfd8QxDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmCI01vQgxsLU8yfuL8YNZAS8XMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvOGVjYWE5OWEtM2UwYy0z YmY0LWJhYjEtMGQ0ZjgwMTY0ODg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHFRGXh9e/q/nqDajfC/MR9puMYPHqC/hZDX9cFrDcNyRddUiFItcZX Z3jKxQ6VRmjLJPovqC1sdyiafM1CMvj2f4rAp1i3CE7Eo0N3N6/XeRpDARyMeBu4 W1HnA68tbmPZTLkOpQ8VmK+CNHfzZfGdeTZhfpfgWBUNu9D2OvFLMQko5t9CcPYT CJuBhUvXM5bP0ZOjibtBrpr3Prli91PUrvJhntMbxV+xeqGIccUToVAVEJcnTVyC LB9J6AwhvVdkrBIA84tISBf9JhdgalzS524+DXfqgEdZrEkEoCY3NwvZYiZWRY6A 1AEvaF0l3be5cYMjVcV0Vv9wG2P1sfI= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:59 2026 by rpki-client