$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a3aeee48-4949-36bc-a7ed-c62ac2ae6a4a.roa File: a3aeee48-4949-36bc-a7ed-c62ac2ae6a4a.roa (raw, json) Hash identifier: RhZTZljQbtVkmnKZu5q0qdIEAW+JvtoL9QbDbSJwWW8= Subject key identifier: EE:B6:EC:E0:6B:A3:4C:41:2D:4A:4F:1A:49:ED:84:95:C1:B1:7C:43 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584CD407A202688C73BCA82D2800 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a3aeee48-4949-36bc-a7ed-c62ac2ae6a4a.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 54113 IP address blocks: 23.235.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:a2:02:68:8c:73:bc:a8:2d:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=967503fe-1fd5-48b8-a5eb-fbdf7da05e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bb:43:be:62:3b:e0:78:d9:42:54:a2:3d:b6: a6:ff:c8:06:cf:66:23:e0:cf:fc:b6:dd:13:d0:0e: 63:71:0f:e2:1e:3f:cc:4c:b2:14:71:b4:71:ca:98: 7a:28:8f:b7:22:42:5b:35:fa:34:0b:e5:26:65:2a: 31:14:d8:92:80:2f:b4:5b:68:05:0e:1c:f5:60:9f: bb:ed:2e:cc:56:2c:8c:eb:df:7b:c0:a6:02:9e:a5: bf:fc:7c:58:27:7d:74:37:32:8f:e3:81:27:d4:71: 6a:e3:25:8d:91:b5:a4:16:aa:de:13:ea:a2:50:09: 9e:26:f7:b7:f4:4b:c3:42:77:d0:69:f6:2a:07:d4: ae:df:5e:b5:43:02:84:69:38:63:49:a7:8b:08:dc: 38:93:79:1d:1d:40:3b:e4:53:40:ef:5e:f9:8c:44: 9d:35:3e:c7:4f:2c:23:9f:f4:1a:91:0e:63:96:b8: 5c:f9:ed:38:15:ec:95:cd:83:4e:57:41:24:51:a5: c8:24:91:d4:57:9f:60:83:64:97:89:55:c0:16:d0: 6e:d7:de:46:a1:f2:13:51:8b:90:df:97:f9:c8:49: 82:d5:9a:79:bc:30:1e:e2:b4:3c:fd:93:1f:77:72: e0:31:8f:aa:97:3c:a1:2c:34:96:c8:01:43:9d:7c: f5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B6:EC:E0:6B:A3:4C:41:2D:4A:4F:1A:49:ED:84:95:C1:B1:7C:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a3aeee48-4949-36bc-a7ed-c62ac2ae6a4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 23.235.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:7e:29:c0:28:12:63:f2:7a:89:bf:8b:ed:e6:f4:57:93:fb: 92:6f:90:00:57:66:e1:78:6b:e5:0e:b6:2d:91:1e:78:4a:8b: aa:1c:bd:d9:43:fd:32:a5:f1:08:92:5f:63:4a:e9:f0:07:b4: 27:fe:36:27:dd:ad:be:c3:d3:59:16:ee:d0:fd:3e:7d:b1:af: 07:28:29:d8:e0:7f:44:59:ca:f4:87:28:89:d0:8c:64:3c:34: b5:41:bb:be:a4:02:2f:d0:ee:2a:1c:5e:be:96:32:8e:98:75: 4d:1e:49:b2:7f:ef:47:a5:7a:f6:7d:18:85:4e:3a:ae:6b:07: d3:7d:ea:99:4c:d8:70:06:d7:44:2e:f7:f0:d7:85:3d:69:32: df:4d:13:d9:04:08:2c:99:4a:89:73:05:ac:2b:74:6a:8f:30: e1:bd:bd:24:d2:90:b6:aa:a8:48:9c:e3:6b:7b:d7:a8:23:3b: 6f:3e:1c:70:e0:67:40:e0:6e:30:9c:d7:cc:6e:84:47:1b:10: 2c:d1:7a:f7:59:76:9b:67:1c:d4:29:ea:30:5a:52:be:9a:36: a0:2c:f0:35:67:14:fe:1d:12:11:f2:46:07:79:1b:47:44:c3: b3:5e:a2:ba:89:a8:d4:3a:8a:41:37:ff:ff:4c:29:16:a6:71: 7e:76:0f:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB6ICaIxzvKgtKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk OTY3NTAzZmUtMWZkNS00OGI4LWE1ZWItZmJkZjdkYTA1ZTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7tDvmI74HjZQlSiPbam/8gGz2Yj4M/8tt0T 0A5jcQ/iHj/MTLIUcbRxyph6KI+3IkJbNfo0C+UmZSoxFNiSgC+0W2gFDhz1YJ+7 7S7MViyM6997wKYCnqW//HxYJ310NzKP44En1HFq4yWNkbWkFqreE+qiUAmeJve3 9EvDQnfQafYqB9Su3161QwKEaThjSaeLCNw4k3kdHUA75FNA7175jESdNT7HTywj n/QakQ5jlrhc+e04FeyVzYNOV0EkUaXIJJHUV59gg2SXiVXAFtBu195GofITUYuQ 35f5yEmC1Zp5vDAe4rQ8/ZMfd3LgMY+qlzyhLDSWyAFDnXz1dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO627OBro0xBLUpPGknthJXBsXxDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYTNhZWVlNDgtNDk0OS0z NmJjLWE3ZWQtYzYyYWMyYWU2YTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF+sgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9+KcAoEmPyeom/i+3m9FeT+5JvkABXZuF4a+UOti2RHnhKi6ocvdlD /TKl8QiSX2NK6fAHtCf+Nifdrb7D01kW7tD9Pn2xrwcoKdjgf0RZyvSHKInQjGQ8 NLVBu76kAi/Q7iocXr6WMo6YdU0eSbJ/70elevZ9GIVOOq5rB9N96plM2HAG10Qu 9/DXhT1pMt9NE9kECCyZSolzBawrdGqPMOG9vSTSkLaqqEic42t716gjO28+HHDg Z0DgbjCc18xuhEcbECzRevdZdptnHNQp6jBaUr6aNqAs8DVnFP4dEhHyRgd5G0dE w7NeorqJqNQ6ikE3//9MKRamcX52D0I= -----END CERTIFICATE-----Generated at Mon Mar 2 13:36:09 2026 by rpki-client