$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0639a3ec-6704-3229-98c1-628460a5c2f0.roa File: 0639a3ec-6704-3229-98c1-628460a5c2f0.roa (raw, json) Hash identifier: Qk01wZwKI2uikyKcT/Ms3ypTLhT0R0bb0wXyCXGlOaI= Subject key identifier: 41:09:5D:B0:2D:47:81:E7:11:08:56:6F:EE:83:25:FE:A3:EF:E4:8F Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584CCBA76BB52794A91949E4A500 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0639a3ec-6704-3229-98c1-628460a5c2f0.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 11404 IP address blocks: 192.175.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:6b:b5:27:94:a9:19:49:e4:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=c686c0b0-3b32-45ea-8172-69d0eb642553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d7:c1:14:db:f9:f6:aa:f2:08:59:a7:7f:8a: 08:60:e7:57:db:d4:54:6a:9b:3f:48:d5:7e:4c:28: 6f:73:1d:29:67:58:a3:dd:0d:9d:24:f4:ba:36:88: 30:bd:7d:c4:01:fd:75:74:b2:e9:f0:7e:27:ab:2b: 4c:b3:85:79:d2:54:fc:82:e9:d4:96:b3:e5:31:8f: d5:df:c8:31:83:3d:95:8c:2f:7e:e5:30:9a:bd:3e: 08:df:8d:6c:a5:82:ad:27:53:64:d1:f8:61:33:b5: 21:0a:d8:3d:c2:6a:db:60:88:d6:9e:31:01:e5:73: 25:84:3e:40:48:08:4d:75:7a:ea:dc:59:7b:98:af: a8:07:6a:66:66:dd:1a:a6:3f:cd:c3:94:5b:33:cf: 70:29:11:0c:65:32:1a:7d:87:02:7b:49:e6:be:82: 2f:43:19:48:be:dc:42:03:d0:35:cb:64:c8:30:45: 6a:eb:53:0d:8a:8e:92:26:61:39:4c:f5:e6:cd:21: 71:fa:92:cb:8c:a4:25:b0:90:0b:e8:f1:aa:d6:15: 95:00:11:bd:01:08:90:3f:d7:93:f9:02:7e:d7:8f: 55:8c:3b:0b:f0:35:a6:fc:c2:95:80:e3:ee:e6:85: 8a:2a:96:2b:59:c1:06:14:b3:53:ab:e1:82:97:94: ea:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:09:5D:B0:2D:47:81:E7:11:08:56:6F:EE:83:25:FE:A3:EF:E4:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0639a3ec-6704-3229-98c1-628460a5c2f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 192.175.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:69:6d:e5:85:24:13:c5:f5:33:21:f9:94:4c:8a:45:8a:26: ea:23:c4:d7:3c:c1:3b:4b:f6:7d:93:46:85:f7:6f:41:75:26: e8:93:26:0e:47:0e:61:43:0e:0f:ac:18:f1:8f:b0:6c:74:a8: 45:d8:d0:f2:2c:14:33:a4:d8:34:85:48:d4:f0:d2:02:a6:7e: 79:c2:79:31:de:a7:ed:26:cb:f3:a8:89:6f:c6:cd:72:78:95: 5f:34:c2:9c:ad:ae:79:82:76:a4:26:0a:71:89:e5:dc:2f:d7: f1:d6:53:2e:d3:54:5e:fe:8e:b3:99:97:c5:9b:0a:38:c1:76: a2:93:17:a3:f7:2c:e8:55:89:f9:79:e8:1c:be:af:89:e6:5b: 74:16:b5:3d:2d:72:00:1e:ec:68:7f:d9:3b:ac:41:cf:30:98: 63:3d:4e:23:da:4c:33:9d:6d:05:0e:c5:70:b7:ff:53:bd:dd: c3:9d:4d:c1:24:38:24:9b:5f:f5:99:e8:e8:2b:83:60:36:2e: 32:d8:ef:a3:36:14:8c:36:ab:b4:52:6c:93:5a:55:c4:52:71: 15:40:55:ab:a7:d4:cd:b4:e5:d0:7f:c8:26:98:e5:96:d4:6b: 35:07:49:7a:16:6f:0a:6f:94:9f:79:90:3f:99:e7:4c:92:1f: 1d:36:5d:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp2u1J5SpGUnkpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk YzY4NmMwYjAtM2IzMi00NWVhLTgxNzItNjlkMGViNjQyNTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdfBFNv59qryCFmnf4oIYOdX29RUaps/SNV+ TChvcx0pZ1ij3Q2dJPS6NogwvX3EAf11dLLp8H4nqytMs4V50lT8gunUlrPlMY/V 38gxgz2VjC9+5TCavT4I341spYKtJ1Nk0fhhM7UhCtg9wmrbYIjWnjEB5XMlhD5A SAhNdXrq3Fl7mK+oB2pmZt0apj/Nw5RbM89wKREMZTIafYcCe0nmvoIvQxlIvtxC A9A1y2TIMEVq61MNio6SJmE5TPXmzSFx+pLLjKQlsJAL6PGq1hWVABG9AQiQP9eT +QJ+149VjDsL8DWm/MKVgOPu5oWKKpYrWcEGFLNTq+GCl5TqGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEJXbAtR4HnEQhWb+6DJf6j7+SPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMDYzOWEzZWMtNjcwNC0z MjI5LTk4YzEtNjI4NDYwYTVjMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwK8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVpbeWFJBPF9TMh+ZRMikWKJuojxNc8wTtL9n2TRoX3b0F1JuiTJg5H DmFDDg+sGPGPsGx0qEXY0PIsFDOk2DSFSNTw0gKmfnnCeTHep+0my/OoiW/GzXJ4 lV80wpytrnmCdqQmCnGJ5dwv1/HWUy7TVF7+jrOZl8WbCjjBdqKTF6P3LOhVifl5 6By+r4nmW3QWtT0tcgAe7Gh/2TusQc8wmGM9TiPaTDOdbQUOxXC3/1O93cOdTcEk OCSbX/WZ6Ogrg2A2LjLY76M2FIw2q7RSbJNaVcRScRVAVaun1M205dB/yCaY5ZbU azUHSXoWbwpvlJ95kD+Z50ySHx02XYg= -----END CERTIFICATE-----Generated at Sun Mar 1 23:10:08 2026 by rpki-client