$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b3798828-71b2-329f-8988-21b3e3f05b65.roa File: b3798828-71b2-329f-8988-21b3e3f05b65.roa (raw, json) Hash identifier: 2JIzmBxvnvHXQ4411Omer0IF2Zf+OEwlZRbNiFG+MEk= Subject key identifier: 94:C6:EB:05:8D:02:6C:C4:63:76:47:42:00:C7:37:A6:E4:EF:61:E5 Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F4328584D00B27B3DC732EE2B000CE000 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b3798828-71b2-329f-8988-21b3e3f05b65.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 25617 IP address blocks: 216.222.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:7b:3d:c7:32:ee:2b:00:0c:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=4c3acaf7-262a-49b8-bb39-394890d8160d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:17:2e:66:a3:ad:05:5b:a4:76:42:8b:2c:00: e0:b9:81:5f:80:b8:4f:36:ad:dd:48:17:e2:26:03: 8a:89:cd:22:08:1d:6e:ce:1c:0b:ed:49:a4:9c:25: ac:d3:22:cc:f0:2d:5e:3c:ce:63:ae:ec:7c:6f:83: ea:99:9d:33:fd:af:49:1e:ac:cf:c3:bf:42:67:1a: a7:3a:da:6f:dc:32:39:2a:10:70:0d:e6:c7:b0:b9: 1b:1e:df:9a:ad:47:f8:a9:ef:5a:f4:8a:42:92:2a: ea:29:3a:6b:72:e5:f9:f4:88:d8:54:40:a9:26:26: 05:fa:00:1f:ed:05:0a:35:9f:e4:c1:ff:2a:82:e2: c3:3c:23:d7:f0:84:18:56:a5:ad:18:f4:f4:ac:d7: 08:06:2f:fa:e9:a7:18:78:ab:2b:1e:88:b6:c5:3d: 82:5f:3e:98:57:93:97:33:1a:c9:9b:ae:76:ed:0a: 39:52:bd:b0:3a:4c:c5:2b:35:ed:d1:eb:89:8e:9e: e4:c4:13:7c:b1:90:22:1c:17:be:c8:bd:ea:2b:98: c4:71:13:70:1e:f2:c8:48:e5:b8:df:89:ce:c3:5e: 61:50:29:02:44:50:42:27:d0:e8:7e:01:34:18:56: 74:47:ee:8b:45:d5:8c:6d:9c:47:21:a6:78:97:68: e1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C6:EB:05:8D:02:6C:C4:63:76:47:42:00:C7:37:A6:E4:EF:61:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b3798828-71b2-329f-8988-21b3e3f05b65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:74:6d:d2:73:2f:9e:3f:c8:0e:6b:b4:0e:b0:0d:44:6b:41: eb:4a:c5:0a:90:7c:e3:fb:dc:8c:93:fa:33:66:86:4e:98:4e: ff:52:3e:0e:01:3b:4e:76:32:b4:4c:dd:6c:e7:6e:b4:ff:f9: 2c:8c:30:d9:94:23:5f:7b:14:45:e2:a7:ab:8b:e0:68:2d:53: 22:5d:48:8a:50:2e:33:59:c3:85:34:5e:2f:4b:79:d4:66:b5: 66:f9:e0:fe:d7:17:25:1e:d4:fa:08:26:16:c9:ba:f9:01:90: 66:26:88:b2:e8:45:51:9b:02:b3:b4:c6:c7:88:19:27:fd:56: e6:fc:d7:9c:bb:15:39:41:f6:4e:4a:e3:8a:7b:fd:c7:b9:c6: d4:22:9a:bc:9c:1a:f5:84:86:21:ec:32:c2:d7:a0:2c:f8:17: 13:86:b4:aa:88:e8:5c:55:89:56:67:36:9b:ae:7a:c8:b7:27: 95:cd:c0:bd:91:66:b9:7e:13:29:2a:05:be:68:41:cd:4e:7f: 1f:6d:ed:53:0f:5d:33:3d:c3:6d:de:c5:bf:76:ca:51:b7:94: 64:d1:e8:06:b8:13:c3:d0:2a:40:d4:86:56:3a:9f:62:f1:44: c6:f3:5b:25:b8:d5:ca:70:9c:d2:c3:2d:01:9d:7a:a3:1a:b4: 87:93:f1:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Asns9xzLuKwAM4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk NGMzYWNhZjctMjYyYS00OWI4LWJiMzktMzk0ODkwZDgxNjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxcuZqOtBVukdkKLLADguYFfgLhPNq3dSBfi JgOKic0iCB1uzhwL7UmknCWs0yLM8C1ePM5jrux8b4PqmZ0z/a9JHqzPw79CZxqn Otpv3DI5KhBwDebHsLkbHt+arUf4qe9a9IpCkirqKTprcuX59IjYVECpJiYF+gAf 7QUKNZ/kwf8qguLDPCPX8IQYVqWtGPT0rNcIBi/66acYeKsrHoi2xT2CXz6YV5OX MxrJm6527Qo5Ur2wOkzFKzXt0euJjp7kxBN8sZAiHBe+yL3qK5jEcRNwHvLISOW4 34nOw15hUCkCRFBCJ9DofgE0GFZ0R+6LRdWMbZxHIaZ4l2jhfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTG6wWNAmzEY3ZHQgDHN6bk72HlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvYjM3OTg4MjgtNzFiMi0z MjlmLTg5ODgtMjFiM2UzZjA1YjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAV0bdJzL54/yA5rtA6wDURrQetKxQqQfOP73IyT+jNmhk6YTv9SPg4B O052MrRM3WznbrT/+SyMMNmUI197FEXip6uL4GgtUyJdSIpQLjNZw4U0Xi9LedRm tWb54P7XFyUe1PoIJhbJuvkBkGYmiLLoRVGbArO0xseIGSf9Vub815y7FTlB9k5K 44p7/ce5xtQimrycGvWEhiHsMsLXoCz4FxOGtKqI6FxViVZnNpuuesi3J5XNwL2R Zrl+EykqBb5oQc1Ofx9t7VMPXTM9w23exb92ylG3lGTR6Aa4E8PQKkDUhlY6n2Lx RMbzWyW41cpwnNLDLQGdeqMatIeT8Y0= -----END CERTIFICATE-----Generated at Mon Mar 2 19:09:49 2026 by rpki-client