$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa File: 4049b2cc-3517-376c-bb5b-5b5249957e1e.roa (raw, json) Hash identifier: /vrmRX7eZesuJB24bh5c97bk6/tNjqCtn1MwBhOxTqw= Subject key identifier: 58:85:4C:26:06:24:FB:45:D5:46:C9:33:A0:D7:13:21:DE:D2:3A:7B Certificate issuer: /CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Certificate serial: 010D0C9F4328584CEFF246410CD415ED3AC70600 Authority key identifier: 43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 7850 IP address blocks: 198.187.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:46:41:0c:d4:15:ed:3a:c7:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=09551fc7-48e5-49c8-b452-23935eedd012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fe:a0:f2:1c:b7:e7:25:dd:0b:55:1f:cc:ed: a0:46:0e:1b:e0:50:6c:fd:2a:d6:15:0e:d3:1a:07: c7:19:5a:bd:d8:f9:9b:1e:6c:00:db:56:93:af:a4: 39:60:76:a9:29:d8:ea:4f:56:c7:5c:7d:c6:a3:f2: a8:e6:b8:3d:c0:87:68:9c:39:c4:ef:f6:37:a0:b6: 12:16:82:2d:87:e7:1f:f2:1c:99:27:e4:97:4b:85: 74:49:73:71:24:5f:42:7f:4f:86:0d:bb:f3:9a:d1: 42:90:9e:b5:f1:48:5a:96:1e:5e:7a:22:8e:be:fa: fa:51:0c:1a:a2:2e:43:98:31:b2:d8:fb:9f:c2:95: 5b:5a:08:33:23:58:64:db:4c:64:2d:e7:83:54:6b: 41:6a:55:f6:a5:39:e9:33:8e:7f:f0:03:18:a6:34: 32:de:d0:eb:6f:6e:c2:3c:7f:9e:fc:f5:59:be:94: 15:27:ed:02:80:18:7b:49:e8:c9:f3:e5:91:6a:fd: 01:cf:e8:c5:30:08:b8:e3:37:f8:69:74:bd:51:25: 3d:3c:d6:de:18:b6:b3:60:75:8f:0c:b6:71:17:fe: 42:71:09:7b:0f:c4:e5:13:50:9f:9e:13:f3:66:2c: 3a:fa:a3:31:3e:0d:a2:33:8a:6d:3d:66:d8:25:0b: 68:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:85:4C:26:06:24:FB:45:D5:46:C9:33:A0:D7:13:21:DE:D2:3A:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl X509v3 Authority Key Identifier: keyid:43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer sbgp-ipAddrBlock: critical IPv4: 198.187.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:65:ce:08:9c:c7:d4:a1:75:12:bd:a4:98:d0:48:4a:1b:5b: 47:8b:bd:b0:11:53:e5:7a:df:7f:12:83:8b:a3:54:96:41:b7: f1:0f:d6:bc:00:31:c2:8c:e8:54:cf:69:b4:d8:04:84:61:e4: 57:99:90:e5:db:a7:d3:0b:1f:15:e1:9c:f4:eb:2a:f4:2b:90: a7:18:b3:e1:9f:62:d4:92:7c:71:9c:18:ab:c2:d6:48:9d:80: 0c:66:84:3d:ce:10:3b:2e:59:ef:08:54:3a:d3:d5:74:64:35: d4:9e:6b:f8:cf:ac:d1:f5:b2:43:98:8c:90:18:f3:a2:99:ea: 45:b4:5b:b2:5a:de:45:f0:5e:52:01:c4:21:9c:dc:99:5f:2a: 39:4e:ad:41:1b:1b:1d:fe:ba:51:fe:04:e7:22:f8:35:8e:e3: 5e:18:a6:04:29:b7:d3:d5:b5:2f:30:59:99:d5:48:0f:30:06: c5:84:a1:e6:8a:46:98:72:4a:2f:b4:76:c3:ef:b3:60:ef:2b: 09:6f:75:d7:3e:db:04:e2:d8:2d:02:c3:eb:fa:c6:23:73:8b: 22:99:93:56:8e:96:8e:eb:d6:53:a8:8f:1b:4b:41:6d:88:60: 7a:56:ec:df:18:58:33:2b:e4:e2:91:02:a1:d2:a9:f1:68:88: cd:66:d9:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8kZBDNQV7TrHBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQwMDQ3OGUtNmE5ZS00NTcwLTk3MGEtZjBhNWJhZWZj MzIzMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk MDk1NTFmYzctNDhlNS00OWM4LWI0NTItMjM5MzVlZWRkMDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf6g8hy35yXdC1UfzO2gRg4b4FBs/SrWFQ7T GgfHGVq92PmbHmwA21aTr6Q5YHapKdjqT1bHXH3Go/Ko5rg9wIdonDnE7/Y3oLYS FoIth+cf8hyZJ+SXS4V0SXNxJF9Cf0+GDbvzmtFCkJ618Uhalh5eeiKOvvr6UQwa oi5DmDGy2PufwpVbWggzI1hk20xkLeeDVGtBalX2pTnpM45/8AMYpjQy3tDrb27C PH+e/PVZvpQVJ+0CgBh7SejJ8+WRav0Bz+jFMAi44zf4aXS9USU9PNbeGLazYHWP DLZxF/5CcQl7D8TlE1CfnhPzZiw6+qMxPg2iM4ptPWbYJQtoCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiFTCYGJPtF1UbJM6DXEyHe0jp7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZDAw NDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1YmFlZmMzMjMvNDA0OWIyY2MtMzUxNy0z NzZjLWJiNWItNWI1MjQ5OTU3ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmQwMDQ3OGUtNmE5ZS00NTcwLTk3 MGEtZjBhNWJhZWZjMzIzLzJkMDA0NzhlLTZhOWUtNDU3MC05NzBhLWYwYTViYWVm YzMyMy5jcmwwHwYDVR0jBBgwFoAUQwIxL+ZnSBE6D2CkA5HZ1QFmQPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZDAwNDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1 YmFlZmMzMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrv9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAllzgicx9ShdRK9pJjQSEobW0eLvbARU+V6338Sg4ujVJZBt/EP1rwA McKM6FTPabTYBIRh5FeZkOXbp9MLHxXhnPTrKvQrkKcYs+GfYtSSfHGcGKvC1kid gAxmhD3OEDsuWe8IVDrT1XRkNdSea/jPrNH1skOYjJAY86KZ6kW0W7Ja3kXwXlIB xCGc3JlfKjlOrUEbGx3+ulH+BOci+DWO414YpgQpt9PVtS8wWZnVSA8wBsWEoeaK RphySi+0dsPvs2DvKwlvddc+2wTi2C0Cw+v6xiNziyKZk1aOlo7r1lOojxtLQW2I YHpW7N8YWDMr5OKRAqHSqfFoiM1m2UI= -----END CERTIFICATE-----Generated at Tue Mar 3 02:43:26 2026 by rpki-client