$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0/2fdc2e62-cbc2-34e6-a8a3-d03e46438f89.roa File: 2fdc2e62-cbc2-34e6-a8a3-d03e46438f89.roa (raw, json) Hash identifier: zAYv5sOE2hP0vzFBgeHGkzfNAB6hw5OiWahFjn1Lycs= Subject key identifier: A8:DB:D8:2B:55:CB:DB:46:CA:BB:9E:1E:F7:B6:DC:C2:95:85:EC:43 Certificate issuer: /CN=28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0 Certificate serial: 010D0C9F4328584D02178235F29B212FB858CF98 Authority key identifier: 68:0C:3E:64:98:6C:59:FC:C6:FB:4F:C2:65:48:47:2D:A1:96:54:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0/2fdc2e62-cbc2-34e6-a8a3-d03e46438f89.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 398479 IP address blocks: 66.118.8.0/22 maxlen: 24 162.253.208.0/22 maxlen: 24 199.46.120.0/22 maxlen: 24 2605:e3c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:82:35:f2:9b:21:2f:b8:58:cf:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=b552ca50-781a-4dc2-8019-ed6f81f5899f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9f:44:fd:0a:ad:d1:eb:88:5a:80:f7:dc:6a: dd:5a:3b:aa:b7:55:e7:ad:d6:a3:1f:94:de:88:4b: cf:c0:da:34:79:bd:a6:75:41:07:5e:e1:7a:67:7c: 6b:6d:b4:5b:4a:f2:f1:a2:01:da:2c:2d:ba:12:58: 44:f5:3d:7e:24:7b:6c:fe:e1:ac:27:fc:15:ef:2e: 6d:a0:96:78:d4:5e:d0:7f:bb:39:c1:a6:4b:f8:27: c4:a5:50:b1:54:dc:44:76:d1:55:3f:dd:c1:45:33: be:0e:3e:f7:c6:99:ef:13:7d:92:a2:95:38:42:8e: 13:70:2e:70:41:a7:7f:8f:47:19:44:9f:6c:cf:6e: 81:90:50:4d:e1:fc:a8:86:ce:ef:29:ee:4c:5c:33: 3e:7f:56:3c:df:bb:fe:78:6f:87:be:38:63:2a:d4: fe:ca:33:14:98:c2:4e:fc:ba:fb:ba:d5:88:ba:0b: a6:0b:4d:c2:9f:c9:57:de:01:00:47:58:e6:b0:f8: d6:d9:5f:66:75:3b:82:71:d1:1d:fb:6d:5e:25:46: 8c:bf:a3:33:0b:57:67:cc:94:7f:67:48:04:5b:07: f5:b0:8a:5f:80:68:3f:79:b8:6f:01:e6:a1:41:38: be:0a:9f:b0:38:9b:18:b7:1f:4f:e5:a3:df:24:7a: 9c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DB:D8:2B:55:CB:DB:46:CA:BB:9E:1E:F7:B6:DC:C2:95:85:EC:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0/2fdc2e62-cbc2-34e6-a8a3-d03e46438f89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0.crl X509v3 Authority Key Identifier: keyid:68:0C:3E:64:98:6C:59:FC:C6:FB:4F:C2:65:48:47:2D:A1:96:54:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0.cer sbgp-ipAddrBlock: critical IPv4: 66.118.8.0/22 162.253.208.0/22 199.46.120.0/22 IPv6: 2605:e3c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:76:dc:45:c2:65:b6:68:f3:2b:b3:d1:e7:4b:b6:82:38:95: af:3c:a7:bb:e8:79:68:e3:7d:74:f5:a1:9f:ec:36:94:b1:a8: 96:1a:46:4b:25:67:28:d4:23:43:89:55:7d:93:47:e5:cd:e8: de:9f:98:47:37:c8:a1:68:3c:c3:15:46:94:ba:87:0c:eb:43: c5:91:91:75:84:ad:df:77:9e:81:66:3a:be:70:ac:87:f3:49: 20:2f:7f:f4:53:fa:a8:8c:09:7d:a8:73:54:d4:82:0b:7e:f9: 32:34:d3:3e:0d:26:53:fa:e6:6f:f6:9f:4f:f7:11:ca:1e:90: ea:e0:d4:49:97:c5:f2:12:bc:50:74:9f:00:9f:4e:f9:49:ee: e1:76:44:de:c6:15:95:5c:1c:a7:1a:67:6f:dc:36:92:c3:76: 17:f3:bb:cd:76:66:15:54:00:c8:69:5a:c5:13:45:99:db:5a: 37:ef:65:3e:d5:8d:e8:6e:5e:65:06:0b:92:f0:19:59:16:1e: 31:81:24:19:ae:cd:e6:5e:54:af:fc:d1:96:dd:4a:25:6f:c1: 82:47:96:b9:0f:6f:99:f1:f1:0b:19:5f:ce:d2:b2:73:e0:86: f0:b6:5e:fb:e8:c5:34:eb:09:5c:26:39:e3:ac:e9:44:e6:77: 49:e8:22:8c -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE0CF4I18pshL7hYz5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkNGRlZDItZmIyZi00N2JjLWI5Y2QtYzQ1YzllMTIw ZmYwMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk YjU1MmNhNTAtNzgxYS00ZGMyLTgwMTktZWQ2ZjgxZjU4OTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ9E/Qqt0euIWoD33GrdWjuqt1XnrdajH5Te iEvPwNo0eb2mdUEHXuF6Z3xrbbRbSvLxogHaLC26ElhE9T1+JHts/uGsJ/wV7y5t oJZ41F7Qf7s5waZL+CfEpVCxVNxEdtFVP93BRTO+Dj73xpnvE32SopU4Qo4TcC5w Qad/j0cZRJ9sz26BkFBN4fyohs7vKe5MXDM+f1Y837v+eG+HvjhjKtT+yjMUmMJO /Lr7utWIugumC03Cn8lX3gEAR1jmsPjW2V9mdTuCcdEd+21eJUaMv6MzC1dnzJR/ Z0gEWwf1sIpfgGg/ebhvAeahQTi+Cp+wOJsYtx9P5aPfJHqctwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFKjb2CtVy9tGyrueHve23MKVhexDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yOGQ0 ZGVkMi1mYjJmLTQ3YmMtYjljZC1jNDVjOWUxMjBmZjAvMmZkYzJlNjItY2JjMi0z NGU2LWE4YTMtZDAzZTQ2NDM4Zjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjhkNGRlZDItZmIyZi00N2JjLWI5 Y2QtYzQ1YzllMTIwZmYwLzI4ZDRkZWQyLWZiMmYtNDdiYy1iOWNkLWM0NWM5ZTEy MGZmMC5jcmwwHwYDVR0jBBgwFoAUaAw+ZJhsWfzG+0/CZUhHLaGWVHEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yOGQ0ZGVkMi1mYjJmLTQ3YmMtYjljZC1jNDVj OWUxMjBmZjAuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCQnYIAwQC ov3QAwQCxy54MA0EAgACMAcDBQAmBePAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIR23EXCZbZo8yuz0edL toI4la88p7voeWjjfXT1oZ/sNpSxqJYaRkslZyjUI0OJVX2TR+XN6N6fmEc3yKFo PMMVRpS6hwzrQ8WRkXWErd93noFmOr5wrIfzSSAvf/RT+qiMCX2oc1TUggt++TI0 0z4NJlP65m/2n0/3EcoekOrg1EmXxfISvFB0nwCfTvlJ7uF2RN7GFZVcHKcaZ2/c NpLDdhfzu812ZhVUAMhpWsUTRZnbWjfvZT7VjehuXmUGC5LwGVkWHjGBJBmuzeZe VK/80ZbdSiVvwYJHlrkPb5nx8QsZX87SsnPghvC2XvvoxTTrCVwmOeOs6UTmd0no Iow= -----END CERTIFICATE-----Generated at Sun Mar 1 22:10:43 2026 by rpki-client