$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/475361da-0a9c-37ab-933e-f38cea3fe0d3.roa File: 475361da-0a9c-37ab-933e-f38cea3fe0d3.roa (raw, json) Hash identifier: E+YIIEiijX3wy4Zr3V/OMxLVkMq2nDLd3ne4m746zmw= Subject key identifier: 9E:E1:36:99:C4:06:B1:6C:20:7C:EC:7B:36:3C:E4:F9:9B:40:AB:F9 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D560E6F7555B4C4F53FC0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/475361da-0a9c-37ab-933e-f38cea3fe0d3.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 23.255.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:56:0e:6f:75:55:b4:c4:f5:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=83b99947-b663-4ed2-9732-3727d79a0726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dc:94:55:e6:b4:8b:69:c8:5c:eb:7e:60:e7: d3:22:a8:87:34:50:c6:28:4a:8b:ed:39:81:b0:37: bc:01:bb:9f:cc:01:1e:60:b0:98:87:05:19:70:76: 72:86:c2:33:cd:5a:61:fc:ab:3f:86:f1:3f:79:ab: da:88:35:71:a3:31:36:70:28:2b:cb:fb:bd:fa:87: 1e:b0:e6:4a:8b:aa:e3:e4:64:ba:bd:8b:81:92:b6: ea:4a:74:77:8e:f3:7a:ab:42:b5:54:f6:72:36:d8: cd:ec:cc:e1:05:c4:23:49:69:7c:f7:08:30:ca:07: c5:c6:2b:ba:19:15:0f:ab:8f:e1:84:e8:d9:f0:9d: f2:d6:cf:db:8b:a6:42:d2:4c:65:e9:2c:ac:85:8f: 50:2c:3e:98:f6:14:f7:31:dc:71:fd:80:9e:a8:04: 94:b4:dd:08:68:f2:5f:79:5a:fc:6b:16:1d:d4:9e: 17:8a:19:a1:09:de:b8:1c:54:c9:de:eb:14:2b:eb: 10:5b:f4:2b:ce:cd:86:61:1f:64:c2:0c:c5:f3:dd: 20:59:59:5b:50:4e:4a:78:57:c7:1a:da:eb:79:fa: 8e:1c:fa:38:fb:29:58:58:3a:4a:df:ef:bd:49:b4: 8b:af:a1:fa:c3:34:5f:8d:a6:65:18:62:cb:9b:38: 1b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E1:36:99:C4:06:B1:6C:20:7C:EC:7B:36:3C:E4:F9:9B:40:AB:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/475361da-0a9c-37ab-933e-f38cea3fe0d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 23.255.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:64:01:b3:28:e0:5f:32:bd:17:1b:01:3e:6f:2f:84:c6:3b: 07:4b:00:61:0f:b2:42:3e:10:59:cb:34:f3:ab:bc:86:1f:73: 90:3b:72:67:e5:35:d0:98:ed:2f:04:35:9c:0f:4e:fd:a2:b9: ff:73:4c:55:cf:98:a4:8d:aa:e9:2e:85:a3:9d:49:43:14:01: 21:2f:fb:5f:bc:27:02:36:60:04:69:fe:7c:e7:6f:c6:90:e5: d1:27:7a:f6:12:2f:65:25:13:9a:46:e4:69:38:02:28:f5:3a: 97:81:88:28:6b:e6:e8:a5:03:8a:1f:68:c1:3c:98:ac:d1:8c: f2:31:9a:b4:f5:f3:0b:93:b2:1c:9d:8b:07:a2:e5:a9:14:ff: cd:8e:64:4b:53:a2:97:d9:4a:81:be:fe:32:ea:d4:6d:f1:55: 6a:27:37:a7:bf:7a:0d:57:be:6b:30:a1:af:24:e9:b2:95:24: e3:fa:41:f6:67:03:23:f5:b4:5a:60:9c:19:c5:ef:48:b4:25: ac:ff:f9:68:fa:5c:74:21:05:36:b2:12:a8:75:7a:43:e9:18: 0d:f0:85:cc:f7:4b:2b:f6:15:f1:ee:64:ce:4e:c0:7c:43:78: a6:94:f7:ca:c6:40:8a:92:83:78:80:d1:40:e2:39:e2:24:4c: d5:a4:72:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfVYOb3VVtMT1P8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk ODNiOTk5NDctYjY2My00ZWQyLTk3MzItMzcyN2Q3OWEwNzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdyUVea0i2nIXOt+YOfTIqiHNFDGKEqL7TmB sDe8AbufzAEeYLCYhwUZcHZyhsIzzVph/Ks/hvE/eavaiDVxozE2cCgry/u9+oce sOZKi6rj5GS6vYuBkrbqSnR3jvN6q0K1VPZyNtjN7MzhBcQjSWl89wgwygfFxiu6 GRUPq4/hhOjZ8J3y1s/bi6ZC0kxl6SyshY9QLD6Y9hT3Mdxx/YCeqASUtN0IaPJf eVr8axYd1J4XihmhCd64HFTJ3usUK+sQW/Qrzs2GYR9kwgzF890gWVlbUE5KeFfH GtrrefqOHPo4+ylYWDpK3++9SbSLr6H6wzRfjaZlGGLLmzgb9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7hNpnEBrFsIHzsezY85PmbQKv5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDc1MzYxZGEtMGE5Yy0z N2FiLTkzM2UtZjM4Y2VhM2ZlMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHF/+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtkAbMo4F8yvRcbAT5vL4TGOwdLAGEPskI+EFnLNPOrvIYfc5A7cmfl NdCY7S8ENZwPTv2iuf9zTFXPmKSNqukuhaOdSUMUASEv+1+8JwI2YARp/nznb8aQ 5dEnevYSL2UlE5pG5Gk4Aij1OpeBiChr5uilA4ofaME8mKzRjPIxmrT18wuTshyd iwei5akU/82OZEtTopfZSoG+/jLq1G3xVWonN6e/eg1Xvmswoa8k6bKVJOP6QfZn AyP1tFpgnBnF70i0Jaz/+Wj6XHQhBTayEqh1ekPpGA3whcz3Syv2FfHuZM5OwHxD eKaU98rGQIqSg3iA0UDiOeIkTNWkcnI= -----END CERTIFICATE-----Generated at Mon Mar 2 10:41:53 2026 by rpki-client