$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/96c3f96c-fa15-3ebe-8307-e0e08190b905.roa File: 96c3f96c-fa15-3ebe-8307-e0e08190b905.roa (raw, json) Hash identifier: NwExtkaDf9pF4YB56H3QyR+P/SrRDXWds8560ZvRQjA= Subject key identifier: 10:34:B2:C2:FF:BC:0A:C4:80:45:15:AB:06:5D:3B:9F:97:A3:25:59 Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584CED278D89D48C77A554073540 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/96c3f96c-fa15-3ebe-8307-e0e08190b905.roa Signing time: Fri 20 Feb 2026 14:00:41 +0000 ROA not before: Fri 20 Feb 2026 14:00:41 +0000 ROA not after: Thu 21 May 2026 13:00:41 +0000 asID: 62563 IP address blocks: 198.57.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:27:8d:89:d4:8c:77:a5:54:07:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Feb 20 14:00:41 2026 GMT Not After : May 21 13:00:41 2026 GMT Subject: CN=9823ec56-89c3-4fd2-b1c5-671c33c0ebe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7b:f1:26:7c:48:1b:53:ee:86:79:73:57:2b: 6d:4d:65:4d:b8:c4:47:f3:78:94:ab:31:0e:52:52: 3e:83:5a:f1:38:b7:7b:86:96:ff:08:07:91:98:4b: cd:f7:96:76:ce:17:7a:af:e5:54:c0:6b:e2:92:15: b2:a2:0b:db:c8:43:ee:9e:1c:1e:f7:8b:4b:c5:d5: 69:b0:80:f8:43:18:e0:e4:26:c9:f6:23:be:22:9d: ee:2f:3d:c8:c5:91:16:d0:8f:d6:fe:e4:80:89:e1: ed:80:4b:91:2c:7f:20:65:8a:09:42:2f:36:82:23: e2:70:9a:a9:8a:be:d3:6d:51:d2:c3:f5:81:0b:5e: 2a:ea:81:9c:36:71:40:d8:21:0c:1b:8b:e4:99:9a: 86:08:82:75:b0:4a:e8:a2:7e:10:6e:23:09:55:7a: b2:e6:66:77:7b:38:33:f9:72:13:a2:c0:96:e0:d7: 25:cf:66:6e:d7:2d:ed:24:d1:c7:ef:fd:07:54:46: 0e:d5:87:57:e5:0d:51:d1:2d:0a:07:02:59:cd:81: 4c:cf:47:2e:09:06:5a:fd:43:eb:b0:dd:e4:30:1e: ab:5a:98:a8:56:df:92:f2:13:1d:af:40:61:f1:24: 94:04:7a:ca:7f:4c:1a:64:98:79:fb:88:27:cb:36: 99:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:34:B2:C2:FF:BC:0A:C4:80:45:15:AB:06:5D:3B:9F:97:A3:25:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/96c3f96c-fa15-3ebe-8307-e0e08190b905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv4: 198.57.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:87:10:29:87:9c:ff:9b:9b:cd:ce:1c:a9:40:80:0d:20:14: b2:a3:d7:75:22:00:90:58:97:f9:53:70:82:5b:cc:e8:ed:9b: 96:4f:66:0d:54:6a:1d:4a:ba:da:d1:3c:54:7a:2a:32:1f:6e: 65:b8:97:0c:41:8f:ff:ed:0e:64:5c:a4:f6:88:93:ef:6d:67: 5e:54:19:4a:a9:68:32:fe:75:1a:33:12:3f:73:be:26:84:70: b3:57:7f:8f:8c:26:8a:6a:aa:40:c3:50:d5:44:47:61:51:6d: 6f:65:44:2b:bf:1f:aa:ed:19:cb:8c:6a:36:17:a5:27:17:97: 19:10:0c:dc:4f:9a:b9:0c:e3:e7:e5:cd:3c:c0:a0:0f:50:58: 88:cb:dd:b3:de:43:b6:24:63:74:fb:fc:f8:a4:a7:39:f3:66: bb:ec:b4:7a:17:50:06:79:25:a4:2d:eb:bc:5c:2a:49:f8:82: 64:11:83:94:6e:e1:ee:fb:b1:71:c0:8b:a3:69:62:56:91:43: 2c:2c:a6:99:d6:fa:dc:57:9d:70:d3:f9:96:dc:b2:6b:ea:ac: 92:07:cb:d8:03:68:f9:e3:08:5d:34:e7:cc:4d:00:86:60:bf: e4:7f:6d:61:3b:23:0d:34:01:a5:5f:75:f2:1d:82:55:0b:13: a5:cd:f6:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztJ42J1Ix3pVQHNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk OTgyM2VjNTYtODljMy00ZmQyLWIxYzUtNjcxYzMzYzBlYmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3vxJnxIG1PuhnlzVyttTWVNuMRH83iUqzEO UlI+g1rxOLd7hpb/CAeRmEvN95Z2zhd6r+VUwGvikhWyogvbyEPunhwe94tLxdVp sID4Qxjg5CbJ9iO+Ip3uLz3IxZEW0I/W/uSAieHtgEuRLH8gZYoJQi82giPicJqp ir7TbVHSw/WBC14q6oGcNnFA2CEMG4vkmZqGCIJ1sEroon4QbiMJVXqy5mZ3ezgz +XITosCW4Nclz2Zu1y3tJNHH7/0HVEYO1YdX5Q1R0S0KBwJZzYFMz0cuCQZa/UPr sN3kMB6rWpioVt+S8hMdr0Bh8SSUBHrKf0waZJh5+4gnyzaZxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBA0ssL/vArEgEUVqwZdO5+XoyVZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvOTZjM2Y5NmMtZmExNS0z ZWJlLTgzMDctZTBlMDgxOTBiOTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjkbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSHECmHnP+bm83OHKlAgA0gFLKj13UiAJBYl/lTcIJbzOjtm5ZPZg1U ah1KutrRPFR6KjIfbmW4lwxBj//tDmRcpPaIk+9tZ15UGUqpaDL+dRozEj9zviaE cLNXf4+MJopqqkDDUNVER2FRbW9lRCu/H6rtGcuMajYXpScXlxkQDNxPmrkM4+fl zTzAoA9QWIjL3bPeQ7YkY3T7/PikpznzZrvstHoXUAZ5JaQt67xcKkn4gmQRg5Ru 4e77sXHAi6NpYlaRQywsppnW+txXnXDT+ZbcsmvqrJIHy9gDaPnjCF0058xNAIZg v+R/bWE7Iw00AaVfdfIdglULE6XN9mQ= -----END CERTIFICATE-----Generated at Mon Mar 2 12:44:14 2026 by rpki-client