$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/b002da1d-ce1d-3cc3-9a65-5663ca7dbcbb.roa File: b002da1d-ce1d-3cc3-9a65-5663ca7dbcbb.roa (raw, json) Hash identifier: u5OUkuLez8xHjqB2E3FgH1NgMzJK+q0O+Ep0X7LRAcU= Subject key identifier: 2A:09:20:7B:7B:47:89:19:36:CC:91:69:2E:9C:D3:4D:95:86:44:29 Certificate issuer: /CN=6458e920-a559-49b5-bb6e-4c2bb89943a3 Certificate serial: 010D0C9F4328584CF422209FFF7DEFE2A1AF6280 Authority key identifier: D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/b002da1d-ce1d-3cc3-9a65-5663ca7dbcbb.roa Signing time: Mon 23 Feb 2026 02:00:31 +0000 ROA not before: Mon 23 Feb 2026 02:00:31 +0000 ROA not after: Sun 24 May 2026 01:00:31 +0000 asID: 14618 IP address blocks: 185.224.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:22:20:9f:ff:7d:ef:e2:a1:af:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6458e920-a559-49b5-bb6e-4c2bb89943a3 Validity Not Before: Feb 23 02:00:31 2026 GMT Not After : May 24 01:00:31 2026 GMT Subject: CN=0dc016cc-4435-4570-bc34-9d0d8541e135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:26:22:16:b4:40:8e:79:3a:7a:9d:06:cb:95: 49:21:c9:d4:d2:63:c6:6b:dd:59:5b:c7:fa:1f:df: bc:74:a5:4c:15:ec:02:7b:2d:db:05:1e:db:34:f5: cc:70:69:26:4c:f3:17:b6:e5:5c:c6:9c:9c:bc:0c: a7:1b:4e:78:16:e2:ed:dc:37:86:d7:9c:da:71:db: c1:5a:49:b1:a2:35:10:47:32:a0:90:6d:1b:e1:de: c1:e9:df:1d:5a:35:ff:38:b7:91:7a:2a:c6:00:c0: 89:52:34:9a:33:b8:bb:86:af:ef:66:92:e0:a8:a1: f3:80:3b:a1:cc:0f:1a:d8:48:55:34:a0:f4:cd:80: f2:0a:42:0b:5b:23:99:b9:a2:92:6c:5e:e9:8d:d3: 84:3d:1e:ad:94:5c:a7:ff:3e:ec:7a:f2:6f:3c:b2: 47:84:b2:8a:59:32:80:f3:8f:cd:ee:5f:8d:ee:01: 1b:50:a4:c9:90:87:40:1b:df:c1:13:1e:e4:6b:13: ec:f7:7c:a2:ce:6b:8e:7c:15:85:09:43:74:f9:97: 2d:a5:d8:e5:1e:1a:c6:22:22:41:be:a7:31:7d:51: 50:13:c4:be:42:6b:8c:c4:af:90:38:de:ca:21:63: a3:fa:2f:81:af:ec:15:c3:f2:67:41:f6:e1:65:73: 42:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:09:20:7B:7B:47:89:19:36:CC:91:69:2E:9C:D3:4D:95:86:44:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/b002da1d-ce1d-3cc3-9a65-5663ca7dbcbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.crl X509v3 Authority Key Identifier: keyid:D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer sbgp-ipAddrBlock: critical IPv4: 185.224.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:dc:fc:4f:f1:75:3c:c0:ae:a0:14:0c:70:e7:53:ae:6a:f6: 6c:39:4f:3c:b6:94:d6:93:ca:41:e6:33:2c:53:9a:48:7d:1b: a0:00:ef:ba:7a:3b:3a:f3:94:7a:c2:5c:0e:a6:23:a7:94:c4: c5:e8:4a:f6:9d:d7:43:9d:7d:07:6b:ae:70:4a:45:e7:76:54: 5f:66:f7:45:ca:7f:5a:c9:d9:13:fc:44:b0:22:38:29:7f:6a: d3:6c:d6:03:97:5b:10:09:2b:50:51:57:9d:89:ee:75:9f:af: 6c:ee:09:a8:c4:fb:2c:8c:1a:56:72:eb:14:ca:a7:bb:8d:77: 03:98:fc:85:f4:e1:4e:e7:bd:11:45:6f:10:e7:44:c3:28:e4: 9a:01:8c:ce:d0:f9:e2:14:bb:6b:3c:61:09:2a:43:04:ce:ee: ef:06:e7:7b:c0:bf:ed:f7:99:7c:c7:b2:4c:7b:72:c4:cb:ce: c7:5f:11:e2:33:90:d4:12:1e:9b:c3:de:61:34:c8:6d:1e:4f: 43:00:cf:b6:06:2b:16:df:14:ff:11:7d:59:1f:d1:c8:5e:df: fa:04:d4:4d:9d:dc:55:c8:cd:9f:ea:86:85:4b:24:65:1a:aa: 66:46:33:9c:43:94:a2:e0:0a:cd:fa:4c:2d:ed:0d:57:a3:c5: 30:00:c8:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0IiCf/33v4qGvYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OGU5MjAtYTU1OS00OWI1LWJiNmUtNGMyYmI4OTk0 M2EzMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk MGRjMDE2Y2MtNDQzNS00NTcwLWJjMzQtOWQwZDg1NDFlMTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSYiFrRAjnk6ep0Gy5VJIcnU0mPGa91ZW8f6 H9+8dKVMFewCey3bBR7bNPXMcGkmTPMXtuVcxpycvAynG054FuLt3DeG15zacdvB WkmxojUQRzKgkG0b4d7B6d8dWjX/OLeReirGAMCJUjSaM7i7hq/vZpLgqKHzgDuh zA8a2EhVNKD0zYDyCkILWyOZuaKSbF7pjdOEPR6tlFyn/z7sevJvPLJHhLKKWTKA 84/N7l+N7gEbUKTJkIdAG9/BEx7kaxPs93yizmuOfBWFCUN0+ZctpdjlHhrGIiJB vqcxfVFQE8S+QmuMxK+QON7KIWOj+i+Br+wVw/JnQfbhZXNC9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoJIHt7R4kZNsyRaS6c002VhkQpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU4 ZTkyMC1hNTU5LTQ5YjUtYmI2ZS00YzJiYjg5OTQzYTMvYjAwMmRhMWQtY2UxZC0z Y2MzLTlhNjUtNTY2M2NhN2RiY2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjQ1OGU5MjAtYTU1OS00OWI1LWJi NmUtNGMyYmI4OTk0M2EzLzY0NThlOTIwLWE1NTktNDliNS1iYjZlLTRjMmJiODk5 NDNhMy5jcmwwHwYDVR0jBBgwFoAU15LEqYpxiqpObFvygchiSxHeBD4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU4ZTkyMC1hNTU5LTQ5YjUtYmI2ZS00YzJi Yjg5OTQzYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBueBCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDc/E/xdTzArqAUDHDnU65q9mw5Tzy2lNaTykHmMyxTmkh9G6AA77p6 OzrzlHrCXA6mI6eUxMXoSvad10OdfQdrrnBKRed2VF9m90XKf1rJ2RP8RLAiOCl/ atNs1gOXWxAJK1BRV52J7nWfr2zuCajE+yyMGlZy6xTKp7uNdwOY/IX04U7nvRFF bxDnRMMo5JoBjM7Q+eIUu2s8YQkqQwTO7u8G53vAv+33mXzHskx7csTLzsdfEeIz kNQSHpvD3mE0yG0eT0MAz7YGKxbfFP8RfVkf0che3/oE1E2d3FXIzZ/qhoVLJGUa qmZGM5xDlKLgCs36TC3tDVejxTAAyJY= -----END CERTIFICATE-----Generated at Sun Mar 1 22:59:30 2026 by rpki-client