$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/fa58f018-8968-3e9d-b999-74498631b831.roa File: fa58f018-8968-3e9d-b999-74498631b831.roa (raw, json) Hash identifier: UwvtWqmZbxf0tiKUzG9Ca1//10XsQDoe+VgDzV44EGM= Subject key identifier: A9:FC:EF:0A:E3:63:1E:E5:F0:29:37:F2:8A:2B:47:09:A7:A0:5B:FB Certificate issuer: /CN=dc3a2d18-b171-46fa-8693-0080d77f0579 Certificate serial: 010D0C9F4328584D037D5BAED14E4586588D3280 Authority key identifier: D4:85:C6:FD:B4:5A:7B:D6:6E:E5:30:4B:42:92:C0:89:A1:6C:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/fa58f018-8968-3e9d-b999-74498631b831.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 22686 IP address blocks: 142.132.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/dc3a2d18-b171-46fa-8693-0080d77f0579.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/dc3a2d18-b171-46fa-8693-0080d77f0579.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:5b:ae:d1:4e:45:86:58:8d:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc3a2d18-b171-46fa-8693-0080d77f0579 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=8a48d7a6-84d3-4334-8726-fe1d4b386043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4f:44:e8:dc:0a:7d:f1:97:57:21:43:ee:4e: 23:1a:30:15:cb:62:1a:5c:b3:c6:a4:2b:7f:bd:7e: a7:ec:a4:80:5d:e8:4b:06:d8:24:68:8e:5e:d4:09: e6:ba:e8:5b:d0:ef:3d:8f:66:02:27:b8:ba:65:ee: 59:cd:c4:ce:23:9f:89:e9:94:9e:82:84:9a:1d:c1: eb:00:ac:22:f8:b2:30:c7:6b:40:73:2a:0f:46:6d: 20:0b:ba:18:04:b7:6c:34:a5:5a:94:08:62:84:b7: 36:e3:34:de:80:f7:6d:b3:cd:95:51:4b:c2:88:d0: 3f:fb:fc:88:cc:8a:47:26:a2:9b:35:86:dc:6d:8a: 2d:c7:9e:1f:66:bf:0d:c2:cc:e8:f9:97:74:13:f4: 30:b0:3d:0a:d7:27:c6:54:76:cf:f0:ae:b7:2f:4f: a4:ae:3a:5b:38:b6:41:06:b7:02:fb:2d:75:9e:aa: f3:cc:df:40:bd:c1:1c:8a:52:96:5b:b9:e5:9d:6e: e8:43:ac:cb:75:cb:3f:91:5e:08:79:76:1e:9f:58: df:4a:33:22:10:07:45:6d:7e:e8:73:96:80:b8:b2: 6e:dd:d2:22:7e:d8:2e:f8:9a:d2:74:17:e4:52:f6: 63:17:7a:d2:2d:13:05:0b:13:28:41:97:14:6c:7e: f4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FC:EF:0A:E3:63:1E:E5:F0:29:37:F2:8A:2B:47:09:A7:A0:5B:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/fa58f018-8968-3e9d-b999-74498631b831.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/dc3a2d18-b171-46fa-8693-0080d77f0579.crl X509v3 Authority Key Identifier: keyid:D4:85:C6:FD:B4:5A:7B:D6:6E:E5:30:4B:42:92:C0:89:A1:6C:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579.cer sbgp-ipAddrBlock: critical IPv4: 142.132.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:32:48:67:36:df:6d:96:0a:c4:36:e2:ae:d1:3c:51:65:3a: a1:65:97:d2:ce:eb:29:94:4e:fd:71:20:1a:aa:c6:5a:20:64: 4b:21:1b:8b:8f:79:3d:7e:4f:15:ea:a8:82:2d:d0:4b:ea:bd: 8a:03:c7:11:19:0b:cf:e8:13:41:37:0c:7c:21:6f:18:40:4d: c3:f5:e1:89:b0:ce:3e:f7:73:f5:ac:46:8f:ac:26:95:fc:e1: 36:b4:e9:bd:67:bb:a0:55:ba:03:9c:b8:b5:cb:cd:0c:55:15: cd:d6:71:49:c9:2c:17:83:e5:d6:2f:77:e5:a3:f7:3a:2a:06: d1:3d:1e:85:a3:50:d1:00:ff:ae:b2:c2:e0:e3:4a:f4:de:84: 33:6b:c7:e3:e8:d0:8a:ab:89:d6:bc:ad:d7:7d:07:70:bf:76: f8:dd:40:00:ed:d2:0a:75:7d:f9:ad:35:d3:fd:0d:c0:28:f2: bf:8e:ff:9d:e9:eb:72:f2:01:fa:88:f1:6e:67:e2:95:8f:07: 01:79:17:b6:d0:36:54:31:73:39:47:35:2e:3b:f3:90:c8:ef: 11:cd:08:9f:12:6e:d5:1e:75:45:91:95:5c:01:02:83:3c:f7: e1:87:ca:a2:f2:1c:47:f3:5f:ee:41:f2:2f:65:1e:0a:1d:c6: 17:3a:a9:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfVuu0U5FhliNMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGMzYTJkMTgtYjE3MS00NmZhLTg2OTMtMDA4MGQ3N2Yw NTc5MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk OGE0OGQ3YTYtODRkMy00MzM0LTg3MjYtZmUxZDRiMzg2MDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU9E6NwKffGXVyFD7k4jGjAVy2IaXLPGpCt/ vX6n7KSAXehLBtgkaI5e1Anmuuhb0O89j2YCJ7i6Ze5ZzcTOI5+J6ZSegoSaHcHr AKwi+LIwx2tAcyoPRm0gC7oYBLdsNKValAhihLc24zTegPdts82VUUvCiNA/+/yI zIpHJqKbNYbcbYotx54fZr8Nwszo+Zd0E/QwsD0K1yfGVHbP8K63L0+krjpbOLZB BrcC+y11nqrzzN9AvcEcilKWW7nlnW7oQ6zLdcs/kV4IeXYen1jfSjMiEAdFbX7o c5aAuLJu3dIiftgu+JrSdBfkUvZjF3rSLRMFCxMoQZcUbH70UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKn87wrjYx7l8Ck38oorRwmnoFv7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kYzNh MmQxOC1iMTcxLTQ2ZmEtODY5My0wMDgwZDc3ZjA1NzkvZmE1OGYwMTgtODk2OC0z ZTlkLWI5OTktNzQ0OTg2MzFiODMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGMzYTJkMTgtYjE3MS00NmZhLTg2 OTMtMDA4MGQ3N2YwNTc5L2RjM2EyZDE4LWIxNzEtNDZmYS04NjkzLTAwODBkNzdm MDU3OS5jcmwwHwYDVR0jBBgwFoAU1IXG/bRae9Zu5TBLQpLAiaFsszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kYzNhMmQxOC1iMTcxLTQ2ZmEtODY5My0wMDgw ZDc3ZjA1NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHjoQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQySGc2322WCsQ24q7RPFFlOqFll9LO6ymUTv1xIBqqxlogZEshG4uP eT1+TxXqqIIt0EvqvYoDxxEZC8/oE0E3DHwhbxhATcP14Ymwzj73c/WsRo+sJpX8 4Ta06b1nu6BVugOcuLXLzQxVFc3WcUnJLBeD5dYvd+Wj9zoqBtE9HoWjUNEA/66y wuDjSvTehDNrx+Po0Iqrida8rdd9B3C/dvjdQADt0gp1ffmtNdP9DcAo8r+O/53p 63LyAfqI8W5n4pWPBwF5F7bQNlQxczlHNS4785DI7xHNCJ8SbtUedUWRlVwBAoM8 9+GHyqLyHEfzX+5B8i9lHgodxhc6qQE= -----END CERTIFICATE-----Generated at Mon Mar 2 23:10:23 2026 by rpki-client