$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/af676e91-f574-3a35-a1eb-6f87b5a96c8e.roa File: af676e91-f574-3a35-a1eb-6f87b5a96c8e.roa (raw, json) Hash identifier: Ew5DIGZCvbGa0q3rd2Bi5CAtj6aVRZkeWZmq4RkR2is= Subject key identifier: 07:A7:16:C6:6D:A4:EB:28:D8:B3:C4:A4:57:0A:22:ED:E0:2E:87:85 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584CFC823C21801995054B0D6B00 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/af676e91-f574-3a35-a1eb-6f87b5a96c8e.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 11377 IP address blocks: 216.20.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:3c:21:80:19:95:05:4b:0d:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=1c34f841-1cae-4910-a5fb-e2615738d749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:eb:44:89:f2:f9:86:63:f5:f3:90:e8:84:15: 78:5e:2b:45:7a:d4:c2:5e:4b:29:d8:57:e4:2e:13: 65:60:0c:6e:fb:d9:f4:ac:49:40:ca:13:0d:d8:ed: 54:a6:61:4e:9a:e3:1f:f0:b8:8f:a4:20:f2:5a:76: bd:37:4a:36:7f:8d:f4:aa:cb:fc:c3:38:e1:62:2c: 3a:fa:fc:4d:c0:ab:e3:87:a5:d6:7e:41:9d:2c:ed: df:37:91:a9:0d:5c:78:59:e2:53:40:8a:9d:84:1c: 03:b3:84:c8:be:0b:a5:d4:c4:38:c6:5d:7f:79:70: fb:42:a7:75:14:2f:fa:bf:39:be:a5:9e:c2:11:39: ba:ed:0c:f5:d1:99:c0:d5:c3:8f:75:c5:12:fd:7f: 5c:10:e2:7f:d1:cf:89:0b:df:e9:e0:f4:67:c5:ac: cd:49:11:48:f1:9c:3d:24:7a:62:e4:10:da:87:2c: 58:66:db:e8:9f:0d:92:a6:f8:f9:af:08:02:fe:22: 27:b9:e2:2f:f1:70:fe:5c:39:6f:f3:6f:60:a8:70: aa:92:47:02:b9:1e:6b:82:82:3e:65:1d:63:4c:a6: 42:c8:fb:9b:1a:e5:ed:3a:e9:02:2f:0c:21:f7:85: 7e:48:c8:54:b2:9e:df:72:d6:32:d7:76:a3:8f:80: df:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A7:16:C6:6D:A4:EB:28:D8:B3:C4:A4:57:0A:22:ED:E0:2E:87:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/af676e91-f574-3a35-a1eb-6f87b5a96c8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:0a:1d:15:76:4d:bb:88:76:b9:63:8a:3a:e5:96:3e:e4:ec: b4:a6:0e:7e:0b:f9:aa:62:01:28:74:58:d3:3b:d5:67:2e:d1: ff:47:a6:bf:76:b3:96:2d:ea:72:30:00:d6:50:bc:03:ec:bd: f9:5a:e7:e3:b9:2a:77:06:dd:7a:4f:e7:50:d8:58:25:fa:f5: 92:1a:5c:5d:fc:7c:d2:1d:d1:20:10:02:52:f2:3a:ae:45:fb: e5:69:fc:80:62:23:35:f4:46:7c:6d:d4:cb:36:e1:b6:17:a9: 18:21:1e:94:b4:e7:90:f0:a1:ea:04:43:11:3d:75:ac:18:6d: da:85:61:25:d4:f9:a9:20:43:b7:1e:bb:5a:89:3e:88:92:34: d5:ac:06:df:d1:c4:30:52:68:21:e3:f6:89:00:2d:45:6e:41: cf:67:6c:6b:2d:74:8a:f0:9b:c7:14:a1:b0:90:f0:dc:c0:8f: e4:d0:e0:b6:f0:a0:80:ab:56:aa:42:f6:2d:2b:d9:cb:47:43: 0f:f5:b8:11:3e:a8:ea:3c:9d:b8:6f:f5:56:eb:6d:60:ac:88: b1:d8:ac:b6:01:6e:13:21:35:92:b3:05:b6:50:88:b8:be:f1: 9c:ae:e1:d9:27:1f:31:6c:fb:de:44:a5:93:15:89:49:f0:6d: a1:0e:b9:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gjwhgBmVBUsNawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk MWMzNGY4NDEtMWNhZS00OTEwLWE1ZmItZTI2MTU3MzhkNzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+tEifL5hmP185DohBV4XitFetTCXksp2Ffk LhNlYAxu+9n0rElAyhMN2O1UpmFOmuMf8LiPpCDyWna9N0o2f430qsv8wzjhYiw6 +vxNwKvjh6XWfkGdLO3fN5GpDVx4WeJTQIqdhBwDs4TIvgul1MQ4xl1/eXD7Qqd1 FC/6vzm+pZ7CETm67Qz10ZnA1cOPdcUS/X9cEOJ/0c+JC9/p4PRnxazNSRFI8Zw9 JHpi5BDahyxYZtvonw2Spvj5rwgC/iInueIv8XD+XDlv829gqHCqkkcCuR5rgoI+ ZR1jTKZCyPubGuXtOukCLwwh94V+SMhUsp7fctYy13ajj4DfAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAenFsZtpOso2LPEpFcKIu3gLoeFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvYWY2NzZlOTEtZjU3NC0z YTM1LWExZWItNmY4N2I1YTk2YzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYKHRV2TbuIdrljijrllj7k7LSmDn4L+apiASh0WNM71Wcu0f9Hpr92 s5Yt6nIwANZQvAPsvfla5+O5KncG3XpP51DYWCX69ZIaXF38fNId0SAQAlLyOq5F ++Vp/IBiIzX0Rnxt1Ms24bYXqRghHpS055DwoeoEQxE9dawYbdqFYSXU+akgQ7ce u1qJPoiSNNWsBt/RxDBSaCHj9okALUVuQc9nbGstdIrwm8cUobCQ8NzAj+TQ4Lbw oICrVqpC9i0r2ctHQw/1uBE+qOo8nbhv9VbrbWCsiLHYrLYBbhMhNZKzBbZQiLi+ 8Zyu4dknHzFs+95EpZMViUnwbaEOuQk= -----END CERTIFICATE-----Generated at Mon Mar 2 11:02:11 2026 by rpki-client