$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/881df3b0-d59c-3718-811f-893797c3ad58.roa File: 881df3b0-d59c-3718-811f-893797c3ad58.roa (raw, json) Hash identifier: 9Cf765DfxS20D4haahKfyY2lrSWTyBVw4faQTUV19cs= Subject key identifier: 60:A7:ED:B8:4B:C0:55:5C:A8:78:6A:F0:6A:75:BA:7B:3B:3A:49:13 Certificate issuer: /CN=a79b85c1-9b95-4c95-b08d-220eb047aedf Certificate serial: 010D0C9F4328584CF8523F24CF4D211AE9970680 Authority key identifier: 94:D3:05:38:E6:C5:87:B6:04:6B:31:E1:85:08:90:7B:0E:07:4B:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/881df3b0-d59c-3718-811f-893797c3ad58.roa Signing time: Tue 24 Feb 2026 14:00:41 +0000 ROA not before: Tue 24 Feb 2026 14:00:41 +0000 ROA not after: Mon 25 May 2026 13:00:41 +0000 asID: 8075 IP address blocks: 216.220.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a79b85c1-9b95-4c95-b08d-220eb047aedf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a79b85c1-9b95-4c95-b08d-220eb047aedf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:52:3f:24:cf:4d:21:1a:e9:97:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79b85c1-9b95-4c95-b08d-220eb047aedf Validity Not Before: Feb 24 14:00:41 2026 GMT Not After : May 25 13:00:41 2026 GMT Subject: CN=6916bf5b-c8e1-4c18-ba52-5ddee802e126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d2:6d:66:a4:fa:78:b9:f2:e4:e1:0e:f4:0e: 5a:32:e0:c6:53:af:57:cc:13:b0:2f:69:86:1f:fd: 91:37:20:77:14:a7:d9:dc:b4:cd:0f:3c:00:97:00: 7d:cb:a9:29:20:1a:87:fa:18:a6:50:7b:8a:e1:0c: 46:a4:ee:21:24:5d:a8:bf:d0:a5:15:d3:1b:af:a6: 86:11:3c:c5:31:6d:bc:09:8a:e0:b0:d1:73:af:a5: 53:b4:b0:51:e1:30:0d:c2:95:64:a3:0e:0c:c9:0e: e2:b6:de:79:0d:84:6c:8c:54:fa:39:64:04:c4:7a: 02:8a:46:71:76:e5:ad:7e:dd:26:37:6d:21:0d:de: 87:24:b1:86:9c:54:b8:1b:b2:aa:bc:c7:70:85:39: d3:77:f5:fc:9c:bb:23:52:70:a3:de:ae:70:8f:c7: 67:00:10:2b:d9:ed:ef:1f:78:3c:be:86:a0:2e:61: 41:01:43:e8:b8:34:09:3a:07:d8:0f:0d:a1:51:7c: 87:16:b9:c7:6c:3a:d6:be:f5:2b:ec:f4:dc:31:1e: d8:74:a0:c0:70:6e:1e:6c:40:57:90:a0:b7:6b:2b: 3b:1b:38:e3:03:aa:bb:68:ab:72:92:d5:ff:75:41: 73:c6:87:58:18:b3:6e:2f:6d:de:f7:e4:67:90:24: 6b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A7:ED:B8:4B:C0:55:5C:A8:78:6A:F0:6A:75:BA:7B:3B:3A:49:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/881df3b0-d59c-3718-811f-893797c3ad58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a79b85c1-9b95-4c95-b08d-220eb047aedf.crl X509v3 Authority Key Identifier: keyid:94:D3:05:38:E6:C5:87:B6:04:6B:31:E1:85:08:90:7B:0E:07:4B:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf.cer sbgp-ipAddrBlock: critical IPv4: 216.220.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:49:e7:c5:27:fe:73:42:d2:24:d2:3e:ae:70:29:53:0a:91: 14:a8:42:42:2d:15:b2:6a:9c:3a:19:12:44:51:cf:d9:fa:94: 50:e4:68:3f:03:e9:9e:80:f2:26:be:e3:76:56:4a:a8:18:fa: 0d:7d:c8:48:fa:c0:f3:ad:11:9c:73:a1:7d:62:28:b2:20:1a: 9c:f5:d0:2b:e5:fb:a4:df:f9:ae:19:9c:7b:14:25:95:94:1a: 1f:4a:63:c1:a9:db:ee:99:af:63:c3:41:6d:ea:b2:ea:74:0a: b1:96:e3:1e:b9:a0:13:8c:38:77:d8:00:2d:57:5d:55:4b:00: 2c:f4:c1:71:d2:69:4c:a8:29:5b:33:3d:20:04:e2:1e:97:e9: 72:66:50:13:5a:ae:2c:10:fb:e9:95:31:5b:72:f1:88:f2:5c: e9:35:ae:5d:8a:71:ba:c9:c0:de:f7:89:9e:5b:1f:c5:e9:6d: de:ae:75:59:e2:e9:af:80:bc:99:d9:b6:14:a4:af:01:5d:6e: 68:cd:a9:17:32:7d:95:0b:12:8c:26:bc:d2:eb:f8:cf:71:43: 18:13:fe:49:7d:81:6c:39:24:80:60:90:c9:89:80:06:6d:57: 3d:7e:26:39:4e:76:1f:20:cb:d6:3f:27:5e:14:f0:83:59:ac: 2e:6b:00:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4Uj8kz00hGumXBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc5Yjg1YzEtOWI5NS00Yzk1LWIwOGQtMjIwZWIwNDdh ZWRmMB4XDTI2MDIyNDE0MDA0MVoXDTI2MDUyNTEzMDA0MVowLzEtMCsGA1UEAxMk NjkxNmJmNWItYzhlMS00YzE4LWJhNTItNWRkZWU4MDJlMTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtJtZqT6eLny5OEO9A5aMuDGU69XzBOwL2mG H/2RNyB3FKfZ3LTNDzwAlwB9y6kpIBqH+himUHuK4QxGpO4hJF2ov9ClFdMbr6aG ETzFMW28CYrgsNFzr6VTtLBR4TANwpVkow4MyQ7itt55DYRsjFT6OWQExHoCikZx duWtft0mN20hDd6HJLGGnFS4G7KqvMdwhTnTd/X8nLsjUnCj3q5wj8dnABAr2e3v H3g8voagLmFBAUPouDQJOgfYDw2hUXyHFrnHbDrWvvUr7PTcMR7YdKDAcG4ebEBX kKC3ays7GzjjA6q7aKtyktX/dUFzxodYGLNuL23e9+RnkCRrwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCn7bhLwFVcqHhq8Gp1uns7OkkTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzli ODVjMS05Yjk1LTRjOTUtYjA4ZC0yMjBlYjA0N2FlZGYvODgxZGYzYjAtZDU5Yy0z NzE4LTgxMWYtODkzNzk3YzNhZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTc5Yjg1YzEtOWI5NS00Yzk1LWIw OGQtMjIwZWIwNDdhZWRmL2E3OWI4NWMxLTliOTUtNGM5NS1iMDhkLTIyMGViMDQ3 YWVkZi5jcmwwHwYDVR0jBBgwFoAUlNMFOObFh7YEazHhhQiQew4HS6MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNzliODVjMS05Yjk1LTRjOTUtYjA4ZC0yMjBl YjA0N2FlZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdJ58Un/nNC0iTSPq5wKVMKkRSoQkItFbJqnDoZEkRRz9n6lFDkaD8D 6Z6A8ia+43ZWSqgY+g19yEj6wPOtEZxzoX1iKLIgGpz10Cvl+6Tf+a4ZnHsUJZWU Gh9KY8Gp2+6Zr2PDQW3qsup0CrGW4x65oBOMOHfYAC1XXVVLACz0wXHSaUyoKVsz PSAE4h6X6XJmUBNariwQ++mVMVty8YjyXOk1rl2KcbrJwN73iZ5bH8Xpbd6udVni 6a+AvJnZthSkrwFdbmjNqRcyfZULEowmvNLr+M9xQxgT/kl9gWw5JIBgkMmJgAZt Vz1+JjlOdh8gy9Y/J14U8INZrC5rAPE= -----END CERTIFICATE-----Generated at Mon Mar 2 15:33:01 2026 by rpki-client