$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/d80ef02b-cec6-37d9-b0c8-a74861f7e1d9.roa File: d80ef02b-cec6-37d9-b0c8-a74861f7e1d9.roa (raw, json) Hash identifier: r9VvLn6aN+U/jDbHPJnamI+WqYGUMbY4gvP5qNV6N2g= Subject key identifier: 84:2B:2C:CE:2D:B1:13:19:17:35:50:E4:78:9D:D1:FD:CD:9D:D4:2F Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584CFC823E5B376BE0583AA28B00 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/d80ef02b-cec6-37d9-b0c8-a74861f7e1d9.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 11377 IP address blocks: 216.20.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:3e:5b:37:6b:e0:58:3a:a2:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=8760b62d-a35e-4c7f-8443-865d5b37e957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c5:c8:ea:82:f0:41:86:23:5b:b9:db:c1:bd: e8:e8:95:13:9b:6c:ec:45:85:7c:59:ab:14:a9:aa: 4a:2e:c1:08:10:e6:78:41:c4:4c:10:90:ed:48:48: 9c:52:65:e8:30:0d:3c:bf:44:02:cb:9f:28:0b:35: ba:b4:f3:01:80:2f:11:7c:d6:49:df:c8:bd:24:a0: 54:8b:cc:75:c8:f0:06:f5:35:f5:bf:1d:2c:6c:c3: 25:0d:df:e4:54:71:7a:c2:29:46:99:a8:b8:eb:2c: f9:23:04:a7:e2:8c:56:ba:af:1c:ed:15:b3:8f:ed: c5:8e:38:4b:68:bf:8e:df:ec:69:02:d2:c3:b6:d6: 91:93:4b:7a:6c:7a:77:e4:c1:61:cb:5c:d0:93:51: b4:54:4f:bd:bc:80:4f:89:32:a0:9a:56:bd:11:b6: aa:d1:7e:ab:bd:a5:8b:d2:96:99:b8:de:6a:5b:57: 22:90:70:1e:ba:27:6c:7f:05:7f:22:83:0a:00:9f: b2:9b:36:26:ca:9e:d6:95:ea:1f:93:e3:76:de:bd: 25:45:9f:1d:60:c9:01:3e:fb:92:25:d0:1c:1e:1f: 83:9f:0b:32:d8:64:3d:c6:b9:66:80:ac:37:8a:38: 8d:2d:1d:b5:0f:5e:ed:0a:e7:a9:96:02:b2:03:73: df:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2B:2C:CE:2D:B1:13:19:17:35:50:E4:78:9D:D1:FD:CD:9D:D4:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/d80ef02b-cec6-37d9-b0c8-a74861f7e1d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:52:f2:4b:8e:16:b2:63:ec:53:f6:d6:a0:02:3a:ab:05:18: 8c:be:e8:70:4a:2e:73:bc:c0:16:84:03:69:f2:41:66:10:b2: 6d:52:d1:70:69:13:5c:f8:54:62:d0:c8:64:a2:5e:d6:f1:1f: 76:a3:6d:22:44:48:58:41:e7:ee:3d:e3:7c:1c:6f:8f:82:d1: 8d:2b:14:16:5d:a0:bb:5b:e2:33:c1:d3:0e:05:14:00:b3:33: ed:9f:4d:89:11:62:f1:47:7f:25:5a:93:23:5f:f9:16:5b:d7: bf:06:8f:3c:42:25:ef:85:7e:38:1e:fc:db:d9:d5:98:37:2b: f9:8b:6b:7c:0a:27:b5:df:f3:25:14:e3:ea:74:8a:60:1c:86: 50:ae:a0:67:18:d1:50:f9:30:b6:d5:92:b6:c5:87:64:85:71: fb:d9:ec:d6:e2:ca:e2:31:71:bf:4c:ed:fd:94:89:df:0b:e9: a0:62:60:e3:31:28:9d:8d:b1:77:87:8a:6f:2a:25:76:d2:6d: 0d:ee:f4:2f:f4:61:a9:b0:03:3a:a3:2a:64:cd:aa:db:b7:29: b0:43:d9:aa:eb:86:25:4b:ad:9c:d4:93:8b:e5:a6:21:ea:62: 93:12:5c:4a:15:dc:8d:35:1c:65:b0:18:24:cd:4d:4c:de:fe: d7:d3:4f:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gj5bN2vgWDqiiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk ODc2MGI2MmQtYTM1ZS00YzdmLTg0NDMtODY1ZDViMzdlOTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcXI6oLwQYYjW7nbwb3o6JUTm2zsRYV8WasU qapKLsEIEOZ4QcRMEJDtSEicUmXoMA08v0QCy58oCzW6tPMBgC8RfNZJ38i9JKBU i8x1yPAG9TX1vx0sbMMlDd/kVHF6wilGmai46yz5IwSn4oxWuq8c7RWzj+3FjjhL aL+O3+xpAtLDttaRk0t6bHp35MFhy1zQk1G0VE+9vIBPiTKgmla9Ebaq0X6rvaWL 0paZuN5qW1cikHAeuidsfwV/IoMKAJ+ymzYmyp7Wleofk+N23r0lRZ8dYMkBPvuS JdAcHh+Dnwsy2GQ9xrlmgKw3ijiNLR21D17tCueplgKyA3PfOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQrLM4tsRMZFzVQ5Hid0f3NndQvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvZDgwZWYwMmItY2VjNi0z N2Q5LWIwYzgtYTc0ODYxZjdlMWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxS8kuOFrJj7FP21qACOqsFGIy+6HBKLnO8wBaEA2nyQWYQsm1S0XBp E1z4VGLQyGSiXtbxH3ajbSJESFhB5+4943wcb4+C0Y0rFBZdoLtb4jPB0w4FFACz M+2fTYkRYvFHfyVakyNf+RZb178GjzxCJe+Ffjge/NvZ1Zg3K/mLa3wKJ7Xf8yUU 4+p0imAchlCuoGcY0VD5MLbVkrbFh2SFcfvZ7NbiyuIxcb9M7f2Uid8L6aBiYOMx KJ2NsXeHim8qJXbSbQ3u9C/0YamwAzqjKmTNqtu3KbBD2arrhiVLrZzUk4vlpiHq YpMSXEoV3I01HGWwGCTNTUze/tfTT80= -----END CERTIFICATE-----Generated at Mon Mar 2 16:28:28 2026 by rpki-client