$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/1f0f7151-1a17-3c20-b5f6-6c21ad2a655a.roa File: 1f0f7151-1a17-3c20-b5f6-6c21ad2a655a.roa (raw, json) Hash identifier: 1kEXEaDh7huPnb7uvZYpdRaN2+QeeoVqXxRbrpFoUG4= Subject key identifier: 32:35:07:F0:FD:75:01:CA:E0:5A:1D:AB:82:E5:32:FE:F5:58:94:68 Certificate issuer: /CN=949c3388-1f02-441c-9195-5c40d8fd63d2 Certificate serial: 010D0C9F4328584CF157769D27B61C31C3AC7800 Authority key identifier: 68:2C:71:CE:90:9C:5F:87:15:0C:2C:E6:93:67:15:C7:A9:AF:10:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/1f0f7151-1a17-3c20-b5f6-6c21ad2a655a.roa Signing time: Sun 22 Feb 2026 02:00:32 +0000 ROA not before: Sun 22 Feb 2026 02:00:32 +0000 ROA not after: Sat 23 May 2026 01:00:32 +0000 asID: 14618 IP address blocks: 69.164.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f1:57:76:9d:27:b6:1c:31:c3:ac:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=949c3388-1f02-441c-9195-5c40d8fd63d2 Validity Not Before: Feb 22 02:00:32 2026 GMT Not After : May 23 01:00:32 2026 GMT Subject: CN=7e9342f4-d564-4575-aece-deafeff7a211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:06:8c:18:b7:90:b8:bb:5c:fd:90:47:93:18: 59:52:59:84:3f:70:0e:fc:2e:be:ce:40:05:a1:21: a5:8a:6e:e8:b6:d4:99:81:f1:42:d1:6f:e8:f2:1b: 08:00:9d:e6:4b:41:b2:2a:b4:c3:7b:6b:e2:40:25: 70:49:ac:18:c3:7d:67:61:fa:3f:54:38:62:30:fc: de:c0:33:17:ec:52:db:44:b3:16:4b:28:12:94:11: 86:dc:3d:12:0d:c2:32:41:29:28:bd:ad:4d:e0:2c: 4b:b0:ed:dc:c3:fc:c4:57:14:88:cb:7d:d3:5a:b7: 06:33:5f:7e:25:04:47:98:cf:50:f4:8b:80:ba:a6: d0:a8:b6:9b:12:dc:19:86:a9:be:76:9a:67:af:cf: 34:bd:d2:49:0f:37:1f:ac:dc:94:83:3d:fb:30:18: 41:f9:61:b7:f2:36:b7:8b:2a:80:b4:78:07:e4:c9: 5a:61:d2:35:65:a1:33:7a:bc:16:e0:84:62:56:2b: 43:0c:bb:57:07:b1:d4:55:36:25:53:31:e3:28:3a: cf:ed:6c:c9:3f:ef:a1:8f:3e:ac:58:67:19:40:d9: f5:bc:cb:90:3d:9a:b2:76:04:77:c6:f7:49:d7:92: 8f:4f:98:53:ba:67:4f:31:5c:48:73:56:55:d1:7a: e1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:35:07:F0:FD:75:01:CA:E0:5A:1D:AB:82:E5:32:FE:F5:58:94:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/1f0f7151-1a17-3c20-b5f6-6c21ad2a655a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.crl X509v3 Authority Key Identifier: keyid:68:2C:71:CE:90:9C:5F:87:15:0C:2C:E6:93:67:15:C7:A9:AF:10:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer sbgp-ipAddrBlock: critical IPv4: 69.164.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:9e:de:90:d2:31:79:bd:8c:20:70:88:d1:b4:61:2a:b4:13: 41:e6:97:07:e4:0c:7a:02:03:f6:75:02:63:0e:0c:46:d4:7b: e3:1c:4e:16:5b:23:5a:3c:2c:60:55:7a:68:cd:52:f9:3a:c8: b8:5c:43:34:f2:9a:25:48:73:c7:6a:f6:ae:18:be:09:91:81: 55:e4:5e:32:a5:52:13:5c:82:75:4f:cf:6c:07:d0:65:7e:3d: 47:dd:78:c4:b2:41:55:17:ea:48:a4:37:81:a7:c8:39:ef:78: f0:b4:0a:1d:c7:ae:96:bf:99:ed:3d:c4:47:95:65:cb:6d:41: 9d:87:56:ed:ff:7f:ea:e6:b0:bb:d8:47:09:ee:e3:01:e8:05: 5a:35:1d:02:a6:9f:e4:e1:f7:c0:6f:f9:b8:25:f2:f4:33:25: 73:5a:18:45:13:de:fb:2e:25:06:77:d7:6a:c1:04:b0:e6:cb: 0f:5a:6c:01:72:cd:1c:82:2c:9e:ac:e9:88:55:22:37:fe:ae: f3:3b:64:8a:52:5e:56:ae:d0:73:4b:61:de:af:83:67:06:e3: 0f:ea:64:03:b7:fd:c7:7f:20:e7:ec:ce:5a:77:9e:8d:58:c2: 75:c8:9c:02:bd:dc:34:5f:93:f1:4f:d3:4b:4b:6e:20:4c:25: bf:61:9d:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzxV3adJ7YcMcOseAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ5YzMzODgtMWYwMi00NDFjLTkxOTUtNWM0MGQ4ZmQ2 M2QyMB4XDTI2MDIyMjAyMDAzMloXDTI2MDUyMzAxMDAzMlowLzEtMCsGA1UEAxMk N2U5MzQyZjQtZDU2NC00NTc1LWFlY2UtZGVhZmVmZjdhMjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgaMGLeQuLtc/ZBHkxhZUlmEP3AO/C6+zkAF oSGlim7ottSZgfFC0W/o8hsIAJ3mS0GyKrTDe2viQCVwSawYw31nYfo/VDhiMPze wDMX7FLbRLMWSygSlBGG3D0SDcIyQSkova1N4CxLsO3cw/zEVxSIy33TWrcGM19+ JQRHmM9Q9IuAuqbQqLabEtwZhqm+dppnr880vdJJDzcfrNyUgz37MBhB+WG38ja3 iyqAtHgH5MlaYdI1ZaEzerwW4IRiVitDDLtXB7HUVTYlUzHjKDrP7WzJP++hjz6s WGcZQNn1vMuQPZqydgR3xvdJ15KPT5hTumdPMVxIc1ZV0XrhmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDI1B/D9dQHK4Fodq4LlMv71WJRoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85NDlj MzM4OC0xZjAyLTQ0MWMtOTE5NS01YzQwZDhmZDYzZDIvMWYwZjcxNTEtMWExNy0z YzIwLWI1ZjYtNmMyMWFkMmE2NTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTQ5YzMzODgtMWYwMi00NDFjLTkx OTUtNWM0MGQ4ZmQ2M2QyLzk0OWMzMzg4LTFmMDItNDQxYy05MTk1LTVjNDBkOGZk NjNkMi5jcmwwHwYDVR0jBBgwFoAUaCxxzpCcX4cVDCzmk2cVx6mvEOowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85NDljMzM4OC0xZjAyLTQ0MWMtOTE5NS01YzQw ZDhmZDYzZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARaRkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFye3pDSMXm9jCBwiNG0YSq0E0HmlwfkDHoCA/Z1AmMODEbUe+McThZb I1o8LGBVemjNUvk6yLhcQzTymiVIc8dq9q4YvgmRgVXkXjKlUhNcgnVPz2wH0GV+ PUfdeMSyQVUX6kikN4GnyDnvePC0Ch3Hrpa/me09xEeVZcttQZ2HVu3/f+rmsLvY Rwnu4wHoBVo1HQKmn+Th98Bv+bgl8vQzJXNaGEUT3vsuJQZ312rBBLDmyw9abAFy zRyCLJ6s6YhVIjf+rvM7ZIpSXlau0HNLYd6vg2cG4w/qZAO3/cd/IOfszlp3no1Y wnXInAK93DRfk/FP00tLbiBMJb9hnZY= -----END CERTIFICATE-----Generated at Mon Mar 2 13:54:50 2026 by rpki-client