$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa File: 3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa (raw, json) Hash identifier: fN7XvUQPI0F85Lgg/efu4vTAM54l6uytrrJElM8t8/M= Subject key identifier: 70:37:B0:50:33:C1:A6:5B:36:7B:C7:A0:EF:7E:AF:F0:E9:31:6A:B1 Certificate issuer: /CN=1078e419-f0dc-430f-89c0-345af0a135f9 Certificate serial: 010D0C9F4328584CFB1CE1D599A6F149B8CDEC80 Authority key identifier: 8C:D1:AC:38:B2:5D:EF:AE:4A:1B:42:7B:D0:58:94:A5:F3:B2:AA:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa Signing time: Wed 25 Feb 2026 14:00:39 +0000 ROA not before: Wed 25 Feb 2026 14:00:39 +0000 ROA not after: Tue 26 May 2026 13:00:39 +0000 asID: 17298 IP address blocks: 192.91.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/1078e419-f0dc-430f-89c0-345af0a135f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/1078e419-f0dc-430f-89c0-345af0a135f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fb:1c:e1:d5:99:a6:f1:49:b8:cd:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1078e419-f0dc-430f-89c0-345af0a135f9 Validity Not Before: Feb 25 14:00:39 2026 GMT Not After : May 26 13:00:39 2026 GMT Subject: CN=a1601ebc-9ddc-4039-acc1-9dd740d480ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0a:84:30:bd:0a:89:b0:ed:d3:17:3a:a2:f1: b5:11:35:50:8d:67:8c:61:6a:1f:1f:be:4a:bd:74: 93:b9:42:47:27:1b:86:19:7b:5b:47:88:64:c9:bf: 68:ea:9d:a4:e5:38:d1:45:9d:37:74:8b:f2:fe:84: 9d:e4:78:c6:1f:17:8f:1b:5e:aa:93:2a:27:16:df: a7:a5:f1:20:6f:3c:92:7a:f6:e2:cd:ed:3f:45:7c: 5e:4e:27:5e:f6:83:16:00:5c:f1:30:bb:8a:d1:58: de:a2:b0:3e:94:1b:f0:af:91:82:4c:53:e5:07:a7: a2:aa:59:0e:3e:cb:25:0f:a1:d3:07:25:c8:d6:38: 5d:27:78:f8:a6:4d:7e:57:c7:5d:a4:aa:ab:cf:63: ee:3f:81:39:7f:35:98:6c:09:b1:16:11:61:d7:57: 44:5c:8e:67:f9:43:75:d4:72:99:22:86:89:78:cb: ed:1e:46:eb:a8:25:fb:1d:38:c3:e0:5d:41:75:ba: d9:e2:1d:74:3a:c0:fe:dd:8a:5b:48:f7:a8:89:5e: 40:32:98:8e:f1:b6:b9:fd:12:0f:a4:20:bf:e7:b3: 7d:1c:af:65:61:5e:fb:1c:c6:25:c3:1d:86:92:05: 18:87:98:97:f8:6f:d9:bd:71:37:e1:a4:79:46:fe: 09:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:37:B0:50:33:C1:A6:5B:36:7B:C7:A0:EF:7E:AF:F0:E9:31:6A:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/1078e419-f0dc-430f-89c0-345af0a135f9.crl X509v3 Authority Key Identifier: keyid:8C:D1:AC:38:B2:5D:EF:AE:4A:1B:42:7B:D0:58:94:A5:F3:B2:AA:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9.cer sbgp-ipAddrBlock: critical IPv4: 192.91.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:27:83:51:64:35:c3:08:20:b1:6b:6c:88:98:41:7b:d6:e6: e7:95:5e:84:d6:31:43:bd:75:ee:be:ee:15:f7:ed:dc:d8:8f: 2f:91:ed:a1:f2:4a:1f:ee:9e:f2:36:c4:83:d0:2c:10:d3:48: ae:e1:db:d8:60:ce:b1:c6:a9:b3:13:7d:e1:39:d5:04:83:db: 71:bf:92:b9:0e:43:35:dc:e9:e9:28:eb:30:37:5e:2a:d8:f7: ec:73:99:61:02:e3:ad:a4:bb:c2:05:cb:17:22:a0:5e:52:23: 9e:ec:59:c7:7e:8c:77:b9:18:51:92:e9:52:48:bd:f3:a8:9b: 9b:56:bd:2d:e1:97:5d:d6:f2:16:ed:c6:0e:78:b3:dd:6e:8a: 21:e3:e8:e7:4f:1a:de:6a:11:f1:a1:f7:fd:a7:df:e4:a9:1b: a0:dc:65:49:04:79:56:df:02:92:2e:80:b9:ae:39:da:62:43: 49:18:f7:ab:5d:e4:61:4a:b4:24:ab:2c:99:b3:60:0e:a9:8e: c3:2a:5a:1f:72:ed:92:ce:67:5c:79:85:0c:7f:c6:3f:19:51: 05:c0:a3:e3:ab:29:c7:c6:85:39:6a:b5:f2:87:37:62:ec:16: b5:b3:ee:a5:b4:4c:30:1e:8f:fd:d7:c8:a2:fc:27:64:b9:7d: 9c:f4:98:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz7HOHVmabxSbjN7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA3OGU0MTktZjBkYy00MzBmLTg5YzAtMzQ1YWYwYTEz NWY5MB4XDTI2MDIyNTE0MDAzOVoXDTI2MDUyNjEzMDAzOVowLzEtMCsGA1UEAxMk YTE2MDFlYmMtOWRkYy00MDM5LWFjYzEtOWRkNzQwZDQ4MGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wqEML0KibDt0xc6ovG1ETVQjWeMYWofH75K vXSTuUJHJxuGGXtbR4hkyb9o6p2k5TjRRZ03dIvy/oSd5HjGHxePG16qkyonFt+n pfEgbzySevbize0/RXxeTide9oMWAFzxMLuK0VjeorA+lBvwr5GCTFPlB6eiqlkO PsslD6HTByXI1jhdJ3j4pk1+V8ddpKqrz2PuP4E5fzWYbAmxFhFh11dEXI5n+UN1 1HKZIoaJeMvtHkbrqCX7HTjD4F1BdbrZ4h10OsD+3YpbSPeoiV5AMpiO8ba5/RIP pCC/57N9HK9lYV77HMYlwx2GkgUYh5iX+G/ZvXE34aR5Rv4JeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHA3sFAzwaZbNnvHoO9+r/DpMWqxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMDc4 ZTQxOS1mMGRjLTQzMGYtODljMC0zNDVhZjBhMTM1ZjkvM2IxNWE1NGEtMjAxYi0z MWY1LWJmMDktOWM1ZjU1YjY1YTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTA3OGU0MTktZjBkYy00MzBmLTg5 YzAtMzQ1YWYwYTEzNWY5LzEwNzhlNDE5LWYwZGMtNDMwZi04OWMwLTM0NWFmMGEx MzVmOS5jcmwwHwYDVR0jBBgwFoAUjNGsOLJd765KG0J70FiUpfOyqiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMDc4ZTQxOS1mMGRjLTQzMGYtODljMC0zNDVh ZjBhMTM1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFv5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADong1FkNcMIILFrbIiYQXvW5ueVXoTWMUO9de6+7hX37dzYjy+R7aHy Sh/unvI2xIPQLBDTSK7h29hgzrHGqbMTfeE51QSD23G/krkOQzXc6eko6zA3XirY 9+xzmWEC462ku8IFyxcioF5SI57sWcd+jHe5GFGS6VJIvfOom5tWvS3hl13W8hbt xg54s91uiiHj6OdPGt5qEfGh9/2n3+SpG6DcZUkEeVbfApIugLmuOdpiQ0kY96td 5GFKtCSrLJmzYA6pjsMqWh9y7ZLOZ1x5hQx/xj8ZUQXAo+OrKcfGhTlqtfKHN2Ls FrWz7qW0TDAej/3XyKL8J2S5fZz0mNE= -----END CERTIFICATE-----Generated at Tue Mar 3 03:48:36 2026 by rpki-client