$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b3625256-44b4-3157-9295-429fdd6c780c.roa File: b3625256-44b4-3157-9295-429fdd6c780c.roa (raw, json) Hash identifier: b3fTL1NrQONfs4eEWA2mRirndnQDic/kGdBhBMxy3gU= Subject key identifier: 0A:86:56:2E:B1:9E:D2:F6:BB:B1:95:20:CC:65:81:EC:EC:3D:40:25 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584CEFF244F770FB9338DEAA7F40 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b3625256-44b4-3157-9295-429fdd6c780c.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 16462 IP address blocks: 206.12.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:44:f7:70:fb:93:38:de:aa:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=d66cdeba-1ef5-42f8-8f2a-52204ca29cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:06:0f:9e:90:96:d0:63:8d:b3:bb:54:b8:96: 31:7c:bb:cb:47:55:40:ed:e9:f1:d4:7c:48:ce:55: 37:19:7c:51:13:fa:75:1a:56:7b:48:46:6c:99:db: b4:72:a0:cf:97:6d:8c:61:d8:78:31:58:23:81:5b: e7:78:94:d7:b8:a3:1a:23:66:b5:2b:00:35:7e:04: 58:e7:b0:f8:36:7a:3f:87:04:f2:ed:bd:6d:a2:1a: 26:82:8a:7e:5f:69:25:ab:61:98:82:f6:54:04:08: ca:1a:65:16:75:61:3d:90:d7:37:6e:da:3d:1d:1f: ea:4c:07:9a:da:65:75:21:68:2f:5c:71:19:12:bf: 39:5c:36:d4:ec:22:c3:06:f6:ab:b6:d8:5f:37:ea: af:ca:f7:db:ac:6f:9f:f3:07:db:61:c3:af:97:4b: a6:2c:f1:54:9d:84:34:32:e4:0f:fa:9d:98:de:8e: 94:af:25:2b:7e:ee:25:76:fb:39:ce:39:5e:69:d1: 23:bb:d2:88:a1:66:69:5b:79:83:80:8b:62:a0:b8: dd:4d:4b:98:36:3b:77:89:ed:89:b4:06:38:50:99: 9f:08:ee:5f:de:9c:4b:57:93:8b:44:89:5f:28:22: 25:5d:4f:cb:ec:ce:c4:df:eb:ef:57:84:50:35:fb: 7a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:86:56:2E:B1:9E:D2:F6:BB:B1:95:20:CC:65:81:EC:EC:3D:40:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b3625256-44b4-3157-9295-429fdd6c780c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 206.12.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:1b:8b:83:bf:7f:dc:2c:83:06:91:4e:7f:97:20:5c:9b:9f: 44:c2:5a:d2:67:6b:a5:bb:c9:bc:32:8e:d7:0b:72:7f:2a:c0: 7b:77:ff:00:82:11:04:bf:67:60:34:20:f4:db:4b:21:2b:04: 68:ec:0c:a9:67:54:e2:bf:dc:88:98:a9:22:75:69:f2:0a:bc: 32:9e:20:f3:2c:90:98:0a:4f:11:f6:22:dc:88:e5:25:70:68: 7d:eb:dd:39:93:77:55:98:9a:f9:e3:ce:5e:be:20:1b:45:2d: 70:de:ee:5e:6b:d1:2f:67:cc:f2:e0:cb:bd:59:67:f8:2b:ac: a2:de:2e:4b:33:52:43:77:41:20:6b:71:6d:1d:af:14:ad:06: 97:f4:5c:d1:86:a2:77:05:40:e7:fc:c5:4e:69:fd:4d:4c:48: 09:0d:e4:68:9d:65:b0:23:9f:32:ed:ea:1c:a5:35:2a:7d:62: 3d:8e:63:8d:7f:62:58:2e:82:13:7f:9d:8a:22:bf:c1:9c:14: 19:02:59:0b:1d:30:ae:e2:dc:89:7d:1b:35:d7:8b:51:0e:59: e1:86:f0:41:d6:d0:55:3a:6a:3d:10:cb:b5:e5:6e:19:a2:b2: 59:98:af:31:81:65:9c:3a:73:5b:df:f4:cd:18:6c:e6:e5:ea: 82:96:9c:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8kT3cPuTON6qf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk ZDY2Y2RlYmEtMWVmNS00MmY4LThmMmEtNTIyMDRjYTI5Y2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigYPnpCW0GONs7tUuJYxfLvLR1VA7enx1HxI zlU3GXxRE/p1GlZ7SEZsmdu0cqDPl22MYdh4MVgjgVvneJTXuKMaI2a1KwA1fgRY 57D4Nno/hwTy7b1tohomgop+X2klq2GYgvZUBAjKGmUWdWE9kNc3bto9HR/qTAea 2mV1IWgvXHEZEr85XDbU7CLDBvartthfN+qvyvfbrG+f8wfbYcOvl0umLPFUnYQ0 MuQP+p2Y3o6UryUrfu4ldvs5zjleadEju9KIoWZpW3mDgItioLjdTUuYNjt3ie2J tAY4UJmfCO5f3pxLV5OLRIlfKCIlXU/L7M7E3+vvV4RQNft6UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqGVi6xntL2u7GVIMxlgezsPUAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYjM2MjUyNTYtNDRiNC0z MTU3LTkyOTUtNDI5ZmRkNmM3ODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzgyaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIbi4O/f9wsgwaRTn+XIFybn0TCWtJna6W7ybwyjtcLcn8qwHt3/wCC EQS/Z2A0IPTbSyErBGjsDKlnVOK/3IiYqSJ1afIKvDKeIPMskJgKTxH2ItyI5SVw aH3r3TmTd1WYmvnjzl6+IBtFLXDe7l5r0S9nzPLgy71ZZ/grrKLeLkszUkN3QSBr cW0drxStBpf0XNGGoncFQOf8xU5p/U1MSAkN5GidZbAjnzLt6hylNSp9Yj2OY41/ YlgughN/nYoiv8GcFBkCWQsdMK7i3Il9GzXXi1EOWeGG8EHW0FU6aj0Qy7Xlbhmi slmYrzGBZZw6c1vf9M0YbObl6oKWnNY= -----END CERTIFICATE-----Generated at Mon Mar 2 17:58:12 2026 by rpki-client