$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7fafc48a-67c4-3f2b-b12b-26df3b394690.roa File: 7fafc48a-67c4-3f2b-b12b-26df3b394690.roa (raw, json) Hash identifier: 7Np9ovjMSlILEie+LR1NHeBHNiJNZBjC7XLpdefL8sU= Subject key identifier: AC:0B:0B:EE:1E:04:CB:71:5E:E8:52:5E:01:86:04:AD:22:21:C3:24 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584CCBA77B48E15E07E7B53CEC40 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7fafc48a-67c4-3f2b-b12b-26df3b394690.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 54858 IP address blocks: 199.127.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:7b:48:e1:5e:07:e7:b5:3c:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=90ec2d8a-8902-4ab3-bd07-865e4892f00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c9:8e:ce:ae:d7:f3:cb:42:2e:04:d5:07:7a: f4:77:9b:d1:66:34:5c:24:46:6a:ad:4b:a9:f4:9c: 10:af:4d:b7:04:3a:ea:2f:8c:d6:9d:42:9c:07:2a: 4f:24:ef:0b:a8:ff:d4:26:15:41:e3:bf:70:b2:a4: 33:22:67:21:1e:cb:e1:1b:76:27:90:e2:0a:cb:b0: 4e:7e:c6:fa:f6:03:50:54:35:61:28:1f:55:ae:e1: fe:50:e8:65:32:be:ed:6a:03:2b:64:b4:0a:a6:12: 29:ce:29:6d:7a:4e:a2:ae:57:b3:fe:2b:eb:84:2f: e3:13:31:d9:66:97:82:3b:58:90:94:2e:42:78:a4: b0:72:40:09:a1:5d:69:52:f3:1b:ba:2f:af:42:91: 91:60:58:82:6e:de:45:2d:cc:2e:0a:82:f3:cd:ed: de:6b:b8:0b:2c:e9:20:10:1d:b7:b4:5c:40:86:0c: 34:7c:2d:35:68:03:13:b0:ab:a1:cf:a6:d0:8b:61: b0:05:e4:32:5d:0c:7b:f8:29:6d:0c:eb:0e:72:9c: 0b:19:3f:cb:94:52:7e:07:d4:08:b6:27:49:23:b5: 24:86:0c:5d:32:71:7e:f8:b2:67:6e:0c:3a:47:83: 06:ad:b2:03:db:61:b9:ac:12:24:0c:cd:ca:90:39: fd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0B:0B:EE:1E:04:CB:71:5E:E8:52:5E:01:86:04:AD:22:21:C3:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7fafc48a-67c4-3f2b-b12b-26df3b394690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.127.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b9:91:58:3f:af:db:79:13:cf:21:e3:b7:12:aa:dc:a7:4d: 6c:f5:bb:3c:6b:7d:c2:67:f4:4b:ba:b3:9e:d6:05:0e:44:09: ea:86:5a:16:00:9c:ab:65:f2:d7:c2:ef:6c:97:c1:d1:3b:c6: ea:89:dd:bd:46:95:bd:f4:55:7b:d2:7e:d1:60:d6:71:34:be: 05:ce:83:26:04:28:82:6d:4d:9a:43:8e:2c:ae:99:14:d8:26: 6a:75:7d:dc:a8:4d:92:88:63:a4:89:bd:dd:eb:96:8e:f6:dd: 40:71:e0:db:01:16:c7:56:dc:f3:c0:1d:3f:a9:ca:2c:c3:1c: 60:57:31:4e:16:43:0c:60:18:95:8e:79:3a:cd:c0:a5:5f:6e: 4f:84:e0:20:17:e4:d4:76:46:af:d4:c9:a6:1d:51:9f:be:7b: 32:f1:a8:83:12:4f:63:e8:0d:76:ae:81:59:72:9e:e1:36:c1: 5d:53:92:aa:ac:05:4f:9d:15:c3:d8:a2:75:41:e0:2d:3c:af: d5:95:9e:1c:1a:61:99:d7:bd:f1:a0:a8:ed:22:9a:c6:0a:db: 31:15:69:de:9f:28:eb:67:89:7f:fc:1d:a9:ba:a3:b7:b9:f3: e7:a0:dc:78:02:d2:9e:80:15:25:56:00:ac:cd:d2:2e:19:5e: 1c:03:f7:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp3tI4V4H57U87EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk OTBlYzJkOGEtODkwMi00YWIzLWJkMDctODY1ZTQ4OTJmMDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMmOzq7X88tCLgTVB3r0d5vRZjRcJEZqrUup 9JwQr023BDrqL4zWnUKcBypPJO8LqP/UJhVB479wsqQzImchHsvhG3YnkOIKy7BO fsb69gNQVDVhKB9VruH+UOhlMr7tagMrZLQKphIpziltek6irlez/ivrhC/jEzHZ ZpeCO1iQlC5CeKSwckAJoV1pUvMbui+vQpGRYFiCbt5FLcwuCoLzze3ea7gLLOkg EB23tFxAhgw0fC01aAMTsKuhz6bQi2GwBeQyXQx7+CltDOsOcpwLGT/LlFJ+B9QI tidJI7UkhgxdMnF++LJnbgw6R4MGrbID22G5rBIkDM3KkDn9pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwLC+4eBMtxXuhSXgGGBK0iIcMkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvN2ZhZmM0OGEtNjdjNC0z ZjJiLWIxMmItMjZkZjNiMzk0NjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx39oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADO5kVg/r9t5E88h47cSqtynTWz1uzxrfcJn9Eu6s57WBQ5ECeqGWhYA nKtl8tfC72yXwdE7xuqJ3b1Glb30VXvSftFg1nE0vgXOgyYEKIJtTZpDjiyumRTY Jmp1fdyoTZKIY6SJvd3rlo723UBx4NsBFsdW3PPAHT+pyizDHGBXMU4WQwxgGJWO eTrNwKVfbk+E4CAX5NR2Rq/UyaYdUZ++ezLxqIMST2PoDXaugVlynuE2wV1Tkqqs BU+dFcPYonVB4C08r9WVnhwaYZnXvfGgqO0imsYK2zEVad6fKOtniX/8Ham6o7e5 8+eg3HgC0p6AFSVWAKzN0i4ZXhwD9zA= -----END CERTIFICATE-----Generated at Mon Mar 2 09:19:45 2026 by rpki-client