$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/daa4fef1-8408-30c9-a731-41665d183354.roa File: daa4fef1-8408-30c9-a731-41665d183354.roa (raw, json) Hash identifier: lJ3IDM0GfRhVEb2KuIZktJBPX/jrSoAD43YEJFoWCNU= Subject key identifier: C2:21:E1:62:5C:C9:3F:24:DB:40:51:AF:27:73:60:C5:88:BB:1F:B1 Certificate issuer: /CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Certificate serial: 010D0C9F4328584CF8A4A3E592F686E90BBA6DA0 Authority key identifier: CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/daa4fef1-8408-30c9-a731-41665d183354.roa Signing time: Tue 24 Feb 2026 16:46:50 +0000 ROA not before: Tue 24 Feb 2026 16:46:50 +0000 ROA not after: Mon 25 May 2026 15:46:50 +0000 asID: 14618 IP address blocks: 72.57.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:a4:a3:e5:92:f6:86:e9:0b:ba:6d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Validity Not Before: Feb 24 16:46:50 2026 GMT Not After : May 25 15:46:50 2026 GMT Subject: CN=c906574a-1af4-4ea4-91ee-06d626270c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5c:d7:ae:74:31:e6:52:62:5f:07:fe:25:49: c8:8b:fb:38:b7:c1:f2:12:80:07:6a:04:9b:c1:c1: 14:2c:12:30:8c:18:4d:c8:d8:e3:6a:24:4d:b8:7f: 1d:a2:be:1b:d2:93:55:09:6b:a7:05:a8:69:66:c8: f1:d0:b4:56:04:42:e5:a2:45:45:98:63:f6:68:a0: 0a:83:e2:53:5d:09:ea:6f:09:f7:7f:62:8d:23:f7: 70:82:12:fe:f5:65:57:28:73:18:2a:e3:26:a3:37: 75:ce:c6:e3:c4:7e:70:8f:c6:a5:f1:19:eb:57:19: 7c:4a:fd:d5:76:cb:25:e2:00:17:19:a5:bc:6a:f3: 7f:ad:79:71:0d:d9:5f:2c:9b:72:69:80:fe:a8:ae: 46:9f:e4:4f:cd:9e:bd:e6:99:17:87:1c:9f:5e:dd: 2d:50:c2:f3:60:91:4a:82:9e:f0:35:72:5f:98:92: 7a:a0:18:90:0b:d4:04:21:71:68:50:43:37:d6:1f: ec:b1:63:96:b2:30:2e:60:f2:ce:5b:42:fa:d3:01: 22:0b:06:c5:48:fe:21:e2:81:19:f6:f2:30:ca:86: 58:73:70:39:ca:a9:f5:dd:d9:28:b1:90:74:fc:50: 7d:c8:38:0d:cf:80:da:3d:20:36:fa:f5:9c:c8:97: 3b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:21:E1:62:5C:C9:3F:24:DB:40:51:AF:27:73:60:C5:88:BB:1F:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/daa4fef1-8408-30c9-a731-41665d183354.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl X509v3 Authority Key Identifier: keyid:CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer sbgp-ipAddrBlock: critical IPv4: 72.57.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ae:11:9d:b0:57:fc:fd:2a:5d:66:bf:17:84:75:f1:5f:f3: b5:82:87:a2:3f:c9:45:eb:7c:03:2a:15:bc:e4:9a:70:c9:4b: e6:2b:04:c5:3e:a6:64:ed:f8:86:f1:b6:d1:4a:bf:7e:9f:8a: a1:87:ee:60:b1:7c:2d:dd:ac:dc:91:b0:22:64:f5:a4:e0:42: 43:83:26:1d:26:7f:7d:82:75:b9:6a:c8:cf:d2:29:45:13:e5: e4:55:fb:82:d6:6a:84:5f:cd:51:ba:8a:20:9d:43:da:7d:23: 5f:24:1a:e1:7d:cb:a4:e4:5e:f3:ad:fe:4b:8f:f3:4a:06:01: 4b:9d:09:74:b5:34:88:04:ef:f9:d9:a3:54:89:07:fa:8e:5c: d2:ba:ef:f5:ea:34:59:eb:81:90:09:7f:e1:a2:63:b2:e2:b5: 34:08:b3:e7:11:0b:05:c7:06:e4:19:97:8f:77:3b:cb:2d:0c: 83:d5:a0:57:01:ae:fb:23:cd:d3:f8:ac:db:1f:ab:5a:50:37: 36:fe:16:e1:78:0c:36:15:89:de:f9:c9:5d:12:42:89:f4:27: da:d7:6a:ab:7c:fe:be:56:cd:06:eb:28:26:05:00:3d:c6:2f: fc:dd:5f:f8:df:7e:dd:57:0d:18:8f:ee:70:0b:f2:8a:a7:a8: 0b:dc:8c:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4pKPlkvaG6Qu6baAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5Y2U4YmUtN2JiZS00MThiLWI3OGUtNDJkZTg5NDEz M2E1MB4XDTI2MDIyNDE2NDY1MFoXDTI2MDUyNTE1NDY1MFowLzEtMCsGA1UEAxMk YzkwNjU3NGEtMWFmNC00ZWE0LTkxZWUtMDZkNjI2MjcwYzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFzXrnQx5lJiXwf+JUnIi/s4t8HyEoAHagSb wcEULBIwjBhNyNjjaiRNuH8dor4b0pNVCWunBahpZsjx0LRWBELlokVFmGP2aKAK g+JTXQnqbwn3f2KNI/dwghL+9WVXKHMYKuMmozd1zsbjxH5wj8al8RnrVxl8Sv3V dssl4gAXGaW8avN/rXlxDdlfLJtyaYD+qK5Gn+RPzZ695pkXhxyfXt0tUMLzYJFK gp7wNXJfmJJ6oBiQC9QEIXFoUEM31h/ssWOWsjAuYPLOW0L60wEiCwbFSP4h4oEZ 9vIwyoZYc3A5yqn13dkosZB0/FB9yDgNz4DaPSA2+vWcyJc7mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIh4WJcyT8k20BRrydzYMWIux+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjlj ZThiZS03YmJlLTQxOGItYjc4ZS00MmRlODk0MTMzYTUvZGFhNGZlZjEtODQwOC0z MGM5LWE3MzEtNDE2NjVkMTgzMzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGY5Y2U4YmUtN2JiZS00MThiLWI3 OGUtNDJkZTg5NDEzM2E1LzBmOWNlOGJlLTdiYmUtNDE4Yi1iNzhlLTQyZGU4OTQx MzNhNS5jcmwwHwYDVR0jBBgwFoAUyou/QT84PnG2tRXF0Ztn1tRgssYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjljZThiZS03YmJlLTQxOGItYjc4ZS00MmRl ODk0MTMzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSDkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2uEZ2wV/z9Kl1mvxeEdfFf87WCh6I/yUXrfAMqFbzkmnDJS+YrBMU+ pmTt+IbxttFKv36fiqGH7mCxfC3drNyRsCJk9aTgQkODJh0mf32CdblqyM/SKUUT 5eRV+4LWaoRfzVG6iiCdQ9p9I18kGuF9y6TkXvOt/kuP80oGAUudCXS1NIgE7/nZ o1SJB/qOXNK67/XqNFnrgZAJf+GiY7LitTQIs+cRCwXHBuQZl493O8stDIPVoFcB rvsjzdP4rNsfq1pQNzb+FuF4DDYVid75yV0SQon0J9rXaqt8/r5WzQbrKCYFAD3G L/zdX/jfft1XDRiP7nAL8oqnqAvcjHs= -----END CERTIFICATE-----Generated at Mon Mar 2 13:56:50 2026 by rpki-client