$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa File: aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa (raw, json) Hash identifier: RR+JGsnufBalSGW+WLVd5vTCiHm5H0kf4fi+d1jHG1M= Subject key identifier: 48:8F:2D:90:9C:80:B0:F9:53:2F:2F:0E:F1:83:6D:71:81:34:B6:30 Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Certificate serial: 010D0C9F4328584CCBA77EA16339ECC5A1A4AE40 Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 30387 IP address blocks: 156.40.53.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:7e:a1:63:39:ec:c5:a1:a4:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=0e558861-b2fc-4988-8024-95ce2e33e184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cc:c1:48:91:fb:21:72:53:d1:0b:d7:8d:0d: 72:2b:7c:52:8a:95:d1:f7:8d:25:12:c6:bd:01:6d: d8:1e:42:6e:cd:7a:a5:13:05:86:e7:68:ca:2d:ac: d4:d5:d5:9c:d7:d1:5d:cf:4c:67:0f:93:86:fe:34: b3:f2:43:0a:e3:7e:bf:c3:eb:63:28:f7:28:28:d6: ff:20:0f:ea:78:54:8a:18:8d:83:87:dd:d8:be:fe: 36:73:4b:05:17:08:7c:fb:82:72:98:76:99:0b:69: 17:4d:d5:d3:bb:db:4f:20:9b:c9:e9:91:79:6d:e8: 32:d3:15:88:3e:d0:cd:c1:e8:eb:87:c9:79:c5:8f: a2:1b:0c:0d:fe:97:89:9d:43:e9:7b:c5:b9:ae:b8: ed:54:5f:18:97:ee:b8:1e:63:6b:b8:fd:13:45:49: 6f:66:52:16:9f:9b:d8:8a:a2:d2:a3:2d:13:59:dc: e5:8b:6b:eb:48:d3:e2:ba:78:5f:83:3c:e4:68:e4: f4:7c:dc:7d:c6:55:14:cb:3a:37:26:1c:1e:0a:ef: bd:8a:a5:7d:ec:ce:66:ea:34:7a:c3:d9:71:9d:89: 40:b3:06:3b:ce:3c:3a:55:a0:05:ed:76:ef:6c:1d: 45:bd:ff:47:1d:bb:85:85:f1:a0:d8:ca:9b:b2:0f: 81:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8F:2D:90:9C:80:B0:F9:53:2F:2F:0E:F1:83:6D:71:81:34:B6:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl X509v3 Authority Key Identifier: keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer sbgp-ipAddrBlock: critical IPv4: 156.40.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:25:a4:3d:4f:cb:a1:f3:f5:29:70:b6:76:2e:cc:91:70:56: b9:29:b5:9b:bf:58:14:3d:cc:9e:f5:6e:89:a8:db:ae:ca:ec: 18:8b:b7:54:a2:cf:8e:b6:43:ab:dd:e0:85:fa:3e:5f:2f:f1: e7:54:cf:c3:b2:8e:31:ff:51:a1:fe:19:8e:5c:fd:28:5e:b9: fb:17:b6:8a:e4:b4:82:87:d3:a8:dd:d5:6d:d9:ff:65:08:4b: df:e5:5e:dd:d4:ce:c5:dd:d1:1a:cf:83:36:5a:fd:a1:1a:88: 95:fb:22:e7:2f:2a:fc:57:43:eb:c4:37:9b:ff:79:00:f0:c0: b3:87:95:5e:24:42:73:98:af:e1:e0:ab:50:cc:db:59:dd:5f: 5c:eb:c1:56:e7:85:5f:05:30:96:bb:4a:2d:80:30:44:a1:34: 3a:b2:a5:39:71:fd:e4:9f:a5:3f:a2:69:8f:1d:c4:d4:71:95: 91:72:ba:8c:6f:7c:b8:84:69:58:0f:ef:8d:cf:da:65:bd:3c: 2f:1b:41:67:7f:da:70:c8:63:1b:c0:96:79:c4:9d:8a:0e:2a: ee:aa:bf:70:0f:23:fd:ed:d0:57:fb:eb:d3:bc:94:70:a0:58: 37:13:25:24:e5:82:b9:41:2e:29:65:72:b1:23:c3:9c:54:6e: 79:36:0a:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp36hYznsxaGkrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0 ZWE3MB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk MGU1NTg4NjEtYjJmYy00OTg4LTgwMjQtOTVjZTJlMzNlMTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiczBSJH7IXJT0QvXjQ1yK3xSipXR940lEsa9 AW3YHkJuzXqlEwWG52jKLazU1dWc19Fdz0xnD5OG/jSz8kMK436/w+tjKPcoKNb/ IA/qeFSKGI2Dh93Yvv42c0sFFwh8+4JymHaZC2kXTdXTu9tPIJvJ6ZF5begy0xWI PtDNwejrh8l5xY+iGwwN/peJnUPpe8W5rrjtVF8Yl+64HmNruP0TRUlvZlIWn5vY iqLSoy0TWdzli2vrSNPiunhfgzzkaOT0fNx9xlUUyzo3JhweCu+9iqV97M5m6jR6 w9lxnYlAswY7zjw6VaAF7XbvbB1Fvf9HHbuFhfGg2Mqbsg+BwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiPLZCcgLD5Uy8vDvGDbXGBNLYwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvYWVhMmVjYjEtMjQyYS0z NGEwLWEwZDItNzI0MGNhMzhhZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5 OWIzYzRlYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnCg1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUlpD1Py6Hz9SlwtnYuzJFwVrkptZu/WBQ9zJ71bomo267K7BiLt1Si z462Q6vd4IX6Pl8v8edUz8OyjjH/UaH+GY5c/SheufsXtorktIKH06jd1W3Z/2UI S9/lXt3UzsXd0RrPgzZa/aEaiJX7IucvKvxXQ+vEN5v/eQDwwLOHlV4kQnOYr+Hg q1DM21ndX1zrwVbnhV8FMJa7Si2AMEShNDqypTlx/eSfpT+iaY8dxNRxlZFyuoxv fLiEaVgP743P2mW9PC8bQWd/2nDIYxvAlnnEnYoOKu6qv3API/3t0Ff769O8lHCg WDcTJSTlgrlBLillcrEjw5xUbnk2CiU= -----END CERTIFICATE-----Generated at Mon Mar 2 17:08:09 2026 by rpki-client