$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa File: aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa (raw, json) Hash identifier: qzQ07fpDHKrzd/GJtHr3EyltbQrYV5piZ7K43cvWiZM= Subject key identifier: 44:EC:37:CA:E9:3F:34:CA:64:2E:B5:EA:69:F2:EC:8D:65:B9:4F:F9 Certificate issuer: /CN=4a06d1f9-0d04-482f-a665-8c270260e2c1 Certificate serial: 010D0C9F4328584CFDE7A1B6384257FF1B6CF400 Authority key identifier: 7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 399103 IP address blocks: 192.240.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e7:a1:b6:38:42:57:ff:1b:6c:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a06d1f9-0d04-482f-a665-8c270260e2c1 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=8bf5ddd2-be3d-4287-812d-498a916ff54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3d:91:a7:8e:73:37:c4:6f:fd:6d:60:60:5f: c7:e4:01:39:ae:2a:b1:47:76:b8:9a:52:df:d3:d3: 15:a9:f7:4e:9c:56:88:d3:da:91:4c:6b:ff:30:82: c8:d1:19:99:45:e7:d8:aa:66:b4:31:e8:60:be:60: 01:62:1e:31:c9:67:5f:3a:ac:f9:a7:f4:28:a7:08: 93:15:2e:1c:a1:bd:97:bf:d3:d3:03:c4:ab:2f:3e: 94:f5:bc:89:f0:a0:e9:e5:54:21:b8:ca:1d:5c:6a: 7f:85:e3:bc:b7:12:6e:df:57:db:c2:e1:5c:89:fc: 5e:ac:4c:22:2f:2d:42:13:22:ad:3d:f4:64:1e:29: 30:a4:45:71:82:88:4e:f8:7d:30:4d:c8:e6:4a:50: d0:1b:92:31:2e:90:77:fe:b1:4d:44:5e:d4:47:96: d3:29:8c:28:31:da:31:a4:66:d9:8d:52:23:84:3c: fa:79:3d:62:b0:06:9e:92:94:f9:4f:70:93:8e:b5: 5d:70:86:0a:00:67:9c:a3:69:b9:b8:9b:ef:4e:20: 25:28:96:b6:e4:8b:89:33:b5:1a:76:87:df:f5:71: ea:48:e5:4b:0d:2b:99:7a:64:96:35:63:9e:fe:0f: 36:c1:a6:a5:e2:e5:39:7d:8e:b4:f8:42:90:d6:38: 9e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EC:37:CA:E9:3F:34:CA:64:2E:B5:EA:69:F2:EC:8D:65:B9:4F:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl X509v3 Authority Key Identifier: keyid:7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer sbgp-ipAddrBlock: critical IPv4: 192.240.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e2:5f:01:59:28:5e:9d:e1:ac:1d:30:1b:46:94:cd:8d:e3: 9c:d5:5f:fb:38:07:8e:f9:35:1d:37:b3:83:30:fe:89:52:59: 68:5e:b2:e2:97:fc:bb:75:9f:ad:89:1d:9b:ec:c1:1c:92:71: 2c:d4:d9:95:22:5f:e7:fe:c2:c1:4f:d1:51:df:56:c5:49:64: dc:16:ca:a4:49:1f:ce:00:f2:b0:a2:78:61:26:5e:84:d3:d6: 73:a2:fb:10:76:19:06:24:13:a8:05:f6:1e:13:6e:0e:15:8d: 50:0b:43:38:19:84:06:30:26:58:d1:cb:94:a1:af:20:53:02: 55:83:93:34:f1:18:29:bd:9c:d0:e1:b4:91:1c:9b:1f:64:55: 31:a6:94:67:8a:0c:d4:fa:7a:b9:6a:9f:21:6b:e4:39:f6:97: a4:ae:4d:68:e7:d5:4c:47:39:73:b8:d0:98:45:da:71:c5:b2: 4b:94:57:53:f6:3b:ac:6f:ae:53:45:8a:72:c7:94:3b:14:d3: b4:d4:c6:9f:96:ec:0c:dd:88:6a:83:b7:6b:07:cb:db:15:05: b9:9d:ca:30:46:40:4f:9b:99:3e:3a:55:b3:1d:2d:be:0d:23: f3:7d:1b:d9:bd:a3:34:f0:0a:a5:b8:b4:ba:07:dd:fd:5b:16: 76:7e:a8:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz956G2OEJX/xts9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwNmQxZjktMGQwNC00ODJmLWE2NjUtOGMyNzAyNjBl MmMxMB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk OGJmNWRkZDItYmUzZC00Mjg3LTgxMmQtNDk4YTkxNmZmNTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD2Rp45zN8Rv/W1gYF/H5AE5riqxR3a4mlLf 09MVqfdOnFaI09qRTGv/MILI0RmZRefYqma0MehgvmABYh4xyWdfOqz5p/QopwiT FS4cob2Xv9PTA8SrLz6U9byJ8KDp5VQhuModXGp/heO8txJu31fbwuFcifxerEwi Ly1CEyKtPfRkHikwpEVxgohO+H0wTcjmSlDQG5IxLpB3/rFNRF7UR5bTKYwoMdox pGbZjVIjhDz6eT1isAaekpT5T3CTjrVdcIYKAGeco2m5uJvvTiAlKJa25IuJM7Ua doff9XHqSOVLDSuZemSWNWOe/g82waal4uU5fY60+EKQ1jieqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETsN8rpPzTKZC616mny7I1luU/5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YTA2 ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3MDI2MGUyYzEvYWE1ZGJhZjctOWYzNC0z YTVhLWFiZmItMzQ0NzExYzY2ZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGEwNmQxZjktMGQwNC00ODJmLWE2 NjUtOGMyNzAyNjBlMmMxLzRhMDZkMWY5LTBkMDQtNDgyZi1hNjY1LThjMjcwMjYw ZTJjMS5jcmwwHwYDVR0jBBgwFoAUe0QsNGqg9PARtSeTwzdFa2qmQ+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YTA2ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3 MDI2MGUyYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPAvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3iXwFZKF6d4awdMBtGlM2N45zVX/s4B475NR03s4Mw/olSWWhesuKX /Lt1n62JHZvswRyScSzU2ZUiX+f+wsFP0VHfVsVJZNwWyqRJH84A8rCieGEmXoTT 1nOi+xB2GQYkE6gF9h4Tbg4VjVALQzgZhAYwJljRy5ShryBTAlWDkzTxGCm9nNDh tJEcmx9kVTGmlGeKDNT6erlqnyFr5Dn2l6SuTWjn1UxHOXO40JhF2nHFskuUV1P2 O6xvrlNFinLHlDsU07TUxp+W7AzdiGqDt2sHy9sVBbmdyjBGQE+bmT46VbMdLb4N I/N9G9m9ozTwCqW4tLoH3f1bFnZ+qA4= -----END CERTIFICATE-----Generated at Mon Mar 2 17:26:22 2026 by rpki-client