$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a/d61d4995-a2ee-3c32-8651-31152a3cad87.roa File: d61d4995-a2ee-3c32-8651-31152a3cad87.roa (raw, json) Hash identifier: dMZ9roXK4PQvEqpqaa4gvUq59X5RtHSUgvU8a6wH8Bg= Subject key identifier: 2E:5D:B3:96:9A:E7:81:2D:AE:C9:AE:0A:11:B4:36:CE:B7:FA:E7:AD Certificate issuer: /CN=47a49b6d-2825-4496-8656-b42ba516140a Certificate serial: 010D0C9F4328584CF852400CD04D13232E0A1E60 Authority key identifier: 08:D8:A5:5C:65:92:8C:A1:67:51:31:D7:0A:C5:9D:A1:EB:22:06:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a/d61d4995-a2ee-3c32-8651-31152a3cad87.roa Signing time: Tue 24 Feb 2026 14:00:41 +0000 ROA not before: Tue 24 Feb 2026 14:00:41 +0000 ROA not after: Mon 25 May 2026 13:00:41 +0000 asID: 3257 IP address blocks: 107.182.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a/47a49b6d-2825-4496-8656-b42ba516140a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a/47a49b6d-2825-4496-8656-b42ba516140a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:52:40:0c:d0:4d:13:23:2e:0a:1e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47a49b6d-2825-4496-8656-b42ba516140a Validity Not Before: Feb 24 14:00:41 2026 GMT Not After : May 25 13:00:41 2026 GMT Subject: CN=ca05a020-3673-406b-aebb-e1a8ddbafef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:13:2d:7a:03:fa:86:ac:66:32:16:53:23:f7: a6:6d:f6:48:d8:28:fe:23:e6:fe:35:61:ad:46:45: ba:c6:e4:e9:b4:fe:6d:c6:f8:01:5f:c3:a0:7a:11: f6:6b:29:68:c8:6a:21:84:eb:ba:ed:3c:0c:e0:9f: 2f:9d:74:27:18:c6:84:9a:08:d5:bb:20:e8:57:6a: e0:04:e7:72:fc:c2:90:66:82:b7:4b:e0:20:b5:0d: b4:9e:8c:63:a4:6a:2a:d2:3d:d1:57:1e:21:ef:c3: 59:d4:dd:66:00:42:2b:a3:d0:f4:f0:69:bf:ef:91: af:48:85:25:13:ee:1d:e2:e3:e2:7f:b4:d9:6f:42: 76:1d:dc:4f:0d:d6:e0:87:cf:e2:f4:bb:88:b7:20: 3e:4b:e9:cc:a2:fa:d2:e5:ef:a3:40:77:6f:72:4b: 92:80:78:b1:23:e1:e8:d4:e6:4e:f9:90:88:87:ac: 06:fc:9f:d2:16:8a:78:f7:3f:7a:41:0f:0b:93:be: 2e:61:50:50:a3:1a:63:25:98:73:98:b9:76:e1:90: 4b:2e:93:25:98:b7:d9:f9:51:ba:a3:31:d7:54:eb: 15:3f:e0:a1:ce:b4:dd:f0:eb:47:a7:9b:02:b4:91: 51:38:8b:cd:db:c0:81:a3:06:13:0b:c5:fa:3e:36: 23:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5D:B3:96:9A:E7:81:2D:AE:C9:AE:0A:11:B4:36:CE:B7:FA:E7:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a/d61d4995-a2ee-3c32-8651-31152a3cad87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a/47a49b6d-2825-4496-8656-b42ba516140a.crl X509v3 Authority Key Identifier: keyid:08:D8:A5:5C:65:92:8C:A1:67:51:31:D7:0A:C5:9D:A1:EB:22:06:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a.cer sbgp-ipAddrBlock: critical IPv4: 107.182.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:03:4e:88:8e:4d:35:18:39:f4:52:2e:22:c5:8f:73:33:7d: d5:dd:62:49:df:86:a4:73:09:55:2b:0b:6c:57:b3:8f:9b:19: 36:1c:59:9e:10:b0:8f:3a:fe:a8:3a:88:12:80:8b:0a:87:fe: c2:a8:a9:46:09:d4:6d:b6:17:40:24:9f:b1:ed:4b:63:80:f3: 35:70:e0:0f:2e:e1:ea:bd:f2:ec:06:f3:3e:6d:ac:62:cb:2c: 8b:6a:c4:1f:79:af:60:3f:25:4c:ba:7f:21:63:d0:70:cf:af: a2:20:22:e8:ff:2f:8b:1e:98:09:1f:8d:f7:98:54:14:35:e3: b5:35:4f:51:e2:47:7d:7b:97:c9:09:50:5b:f9:28:c9:a8:d4: a7:c1:b4:51:71:25:cd:b9:7a:44:27:89:65:7b:8c:b0:1d:e4: 88:93:d6:d3:8a:c1:ed:32:14:63:0f:32:57:8b:3c:83:8a:b9: 1a:02:90:b8:f1:6b:03:44:1d:d8:ff:56:64:e5:98:86:fa:27: fc:11:dc:d0:e2:31:c9:d8:b7:85:47:9b:9d:84:b7:d9:79:d9: 87:de:38:c4:3a:9a:e6:e2:7c:ad:1b:9c:5f:f1:e7:2d:04:4e: f0:79:08:73:b6:c0:d0:84:ed:87:da:08:02:61:2d:97:7c:72: 31:3c:f8:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4UkAM0E0TIy4KHmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdhNDliNmQtMjgyNS00NDk2LTg2NTYtYjQyYmE1MTYx NDBhMB4XDTI2MDIyNDE0MDA0MVoXDTI2MDUyNTEzMDA0MVowLzEtMCsGA1UEAxMk Y2EwNWEwMjAtMzY3My00MDZiLWFlYmItZTFhOGRkYmFmZWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRMtegP6hqxmMhZTI/embfZI2Cj+I+b+NWGt RkW6xuTptP5txvgBX8OgehH2ayloyGohhOu67TwM4J8vnXQnGMaEmgjVuyDoV2rg BOdy/MKQZoK3S+AgtQ20noxjpGoq0j3RVx4h78NZ1N1mAEIro9D08Gm/75GvSIUl E+4d4uPif7TZb0J2HdxPDdbgh8/i9LuItyA+S+nMovrS5e+jQHdvckuSgHixI+Ho 1OZO+ZCIh6wG/J/SFop49z96QQ8Lk74uYVBQoxpjJZhzmLl24ZBLLpMlmLfZ+VG6 ozHXVOsVP+ChzrTd8OtHp5sCtJFROIvN28CBowYTC8X6PjYjbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5ds5aa54EtrsmuChG0Ns63+uetMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80N2E0 OWI2ZC0yODI1LTQ0OTYtODY1Ni1iNDJiYTUxNjE0MGEvZDYxZDQ5OTUtYTJlZS0z YzMyLTg2NTEtMzExNTJhM2NhZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDdhNDliNmQtMjgyNS00NDk2LTg2 NTYtYjQyYmE1MTYxNDBhLzQ3YTQ5YjZkLTI4MjUtNDQ5Ni04NjU2LWI0MmJhNTE2 MTQwYS5jcmwwHwYDVR0jBBgwFoAUCNilXGWSjKFnUTHXCsWdoesiBhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80N2E0OWI2ZC0yODI1LTQ0OTYtODY1Ni1iNDJi YTUxNjE0MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEa7bwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcDToiOTTUYOfRSLiLFj3MzfdXdYknfhqRzCVUrC2xXs4+bGTYcWZ4Q sI86/qg6iBKAiwqH/sKoqUYJ1G22F0Akn7HtS2OA8zVw4A8u4eq98uwG8z5trGLL LItqxB95r2A/JUy6fyFj0HDPr6IgIuj/L4semAkfjfeYVBQ147U1T1HiR317l8kJ UFv5KMmo1KfBtFFxJc25ekQniWV7jLAd5IiT1tOKwe0yFGMPMleLPIOKuRoCkLjx awNEHdj/VmTlmIb6J/wR3NDiMcnYt4VHm52Et9l52YfeOMQ6mubifK0bnF/x5y0E TvB5CHO2wNCE7YfaCAJhLZd8cjE8+PY= -----END CERTIFICATE-----Generated at Mon Mar 2 14:10:32 2026 by rpki-client