$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa File: b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa (raw, json) Hash identifier: akJzLQM8Pm7xE1Ec9FrTnwdAg72zpeM20Y3A6lgbEOo= Subject key identifier: 85:88:87:E8:19:1B:2E:73:34:68:24:B2:ED:7F:66:4A:82:53:F6:AD Certificate issuer: /CN=a2ca3b16-f470-4287-8db9-b28e0667efdb Certificate serial: 010D0C9F4328584CF4222F156F4A6BAECD71B240 Authority key identifier: 4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa Signing time: Mon 23 Feb 2026 02:00:31 +0000 ROA not before: Mon 23 Feb 2026 02:00:31 +0000 ROA not after: Sun 24 May 2026 01:00:31 +0000 asID: 32931 IP address blocks: 199.91.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:22:2f:15:6f:4a:6b:ae:cd:71:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ca3b16-f470-4287-8db9-b28e0667efdb Validity Not Before: Feb 23 02:00:31 2026 GMT Not After : May 24 01:00:31 2026 GMT Subject: CN=19ed6170-50c8-4596-acd0-93cd44252aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:09:bf:99:99:79:2b:2a:e7:ea:81:e9:4f:b8: c6:fc:df:fa:93:f8:a6:d1:a2:9d:c2:c8:4d:09:bc: 26:41:b2:ba:30:58:63:12:5a:82:a7:7c:34:30:43: 70:6a:c5:7b:b1:b1:e7:27:43:88:0c:30:22:49:6b: a6:f6:bc:2c:64:63:cf:45:39:e8:55:c1:82:a5:c9: ad:c5:bb:26:68:6a:57:ec:48:3d:11:47:83:69:62: 63:1c:c5:c5:ca:c7:28:6a:8e:a8:dd:55:6e:88:5b: 66:63:9c:d7:9f:33:fa:6d:95:44:82:d4:19:48:5a: 67:49:1e:dd:57:ef:47:1b:7b:45:4a:f1:a2:24:51: 08:4e:9a:24:55:1d:73:ae:82:36:0c:41:1c:32:12: 7f:55:94:5a:e4:8f:32:41:20:fc:a1:0c:ec:28:8f: 47:c0:d2:52:ff:74:aa:d4:a1:b8:54:d3:3a:27:f2: c7:f4:4b:6f:c9:37:66:91:cd:66:9e:1b:08:cc:77: 1b:b3:26:ed:46:d2:c0:73:8f:57:8d:93:91:ae:15: 74:33:b4:e3:c5:ac:1e:24:ff:5b:9f:f3:0b:51:c5: 11:60:81:0a:7e:27:53:d2:85:4c:94:f6:60:da:e6: 0b:32:b2:f0:72:68:ef:e6:dd:38:81:23:f3:5a:da: 1e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:88:87:E8:19:1B:2E:73:34:68:24:B2:ED:7F:66:4A:82:53:F6:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl X509v3 Authority Key Identifier: keyid:4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer sbgp-ipAddrBlock: critical IPv4: 199.91.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:fb:cb:d3:fa:f2:2e:60:ce:13:b4:82:38:ec:77:f5:18:ee: 89:7f:4f:19:99:8b:72:a7:ae:29:02:95:58:1a:b5:f2:b8:13: 93:10:da:35:c4:4f:7f:d2:6f:ef:27:43:af:d1:46:80:84:f4: b9:7c:cd:d7:84:06:2d:a6:77:c1:6f:d8:7b:10:13:63:8a:54: 70:22:f8:03:e2:09:66:a0:cd:35:6e:05:41:91:d1:f2:66:21: a6:5f:6e:c5:9f:d4:8d:34:10:3b:f9:47:f1:cb:26:3b:8d:08: 35:31:6a:05:d0:64:6a:7e:e0:16:11:2a:96:35:38:c8:12:fd: a3:4f:97:05:22:a7:8b:d6:61:9b:14:ca:62:91:6a:f1:24:d7: 9c:6f:c3:28:b8:3a:51:b3:20:1b:22:a9:0f:e1:c9:35:c2:eb: 26:1c:ed:97:ec:5d:a8:58:96:db:66:2b:92:e3:f9:f8:bc:c4: e2:af:9b:d5:59:8c:13:c4:4b:2f:0e:36:0c:9e:72:af:28:ce: c3:b9:4d:b6:c0:58:f7:db:c2:1d:6e:7b:e3:02:7b:5e:1a:55: 27:3a:bb:2d:56:93:8d:44:98:9f:78:03:98:3f:64:a6:16:ff: 78:91:07:62:4a:ae:09:b4:9b:9c:ef:8f:7a:14:bb:f4:8b:33: 79:b7:3c:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0Ii8Vb0prrs1xskAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJjYTNiMTYtZjQ3MC00Mjg3LThkYjktYjI4ZTA2Njdl ZmRiMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk MTllZDYxNzAtNTBjOC00NTk2LWFjZDAtOTNjZDQ0MjUyYWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQm/mZl5Kyrn6oHpT7jG/N/6k/im0aKdwshN CbwmQbK6MFhjElqCp3w0MENwasV7sbHnJ0OIDDAiSWum9rwsZGPPRTnoVcGCpcmt xbsmaGpX7Eg9EUeDaWJjHMXFyscoao6o3VVuiFtmY5zXnzP6bZVEgtQZSFpnSR7d V+9HG3tFSvGiJFEITpokVR1zroI2DEEcMhJ/VZRa5I8yQSD8oQzsKI9HwNJS/3Sq 1KG4VNM6J/LH9EtvyTdmkc1mnhsIzHcbsybtRtLAc49XjZORrhV0M7TjxaweJP9b n/MLUcURYIEKfidT0oVMlPZg2uYLMrLwcmjv5t04gSPzWtoexQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWIh+gZGy5zNGgksu1/ZkqCU/atMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmNh M2IxNi1mNDcwLTQyODctOGRiOS1iMjhlMDY2N2VmZGIvYjZhNmE5NjEtZjRlMi0z NTE1LWEzZTMtNDRhOWI4NDMzNDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTJjYTNiMTYtZjQ3MC00Mjg3LThk YjktYjI4ZTA2NjdlZmRiL2EyY2EzYjE2LWY0NzAtNDI4Ny04ZGI5LWIyOGUwNjY3 ZWZkYi5jcmwwHwYDVR0jBBgwFoAUSt1qgiobNX7xW4Ql5YRVUPlCaK0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmNhM2IxNi1mNDcwLTQyODctOGRiOS1iMjhl MDY2N2VmZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1toMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANj7y9P68i5gzhO0gjjsd/UY7ol/TxmZi3KnrikClVgatfK4E5MQ2jXE T3/Sb+8nQ6/RRoCE9Ll8zdeEBi2md8Fv2HsQE2OKVHAi+APiCWagzTVuBUGR0fJm IaZfbsWf1I00EDv5R/HLJjuNCDUxagXQZGp+4BYRKpY1OMgS/aNPlwUip4vWYZsU ymKRavEk15xvwyi4OlGzIBsiqQ/hyTXC6yYc7ZfsXahYlttmK5Lj+fi8xOKvm9VZ jBPESy8ONgyecq8ozsO5TbbAWPfbwh1ue+MCe14aVSc6uy1Wk41EmJ94A5g/ZKYW /3iRB2JKrgm0m5zvj3oUu/SLM3m3PME= -----END CERTIFICATE-----Generated at Mon Mar 2 15:44:38 2026 by rpki-client