$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4454d928-1ed2-36f9-80a7-6f71e4bedd26.roa File: 4454d928-1ed2-36f9-80a7-6f71e4bedd26.roa (raw, json) Hash identifier: OoJLWev7MKdOdjG/g+mKNL0zM1l35XZkxcE5NU4Iwew= Subject key identifier: 19:36:F8:5B:2B:4C:80:21:BB:D9:47:0D:D2:43:32:D3:A5:30:3E:21 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584CEFF24D9545C631C9141CA280 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4454d928-1ed2-36f9-80a7-6f71e4bedd26.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 397221 IP address blocks: 199.7.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:4d:95:45:c6:31:c9:14:1c:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=a22ffc3d-476d-4e3d-a96c-b39125d7e5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d4:d1:b5:78:72:a6:b5:a9:3f:32:4d:f6:a2: 6b:e2:49:77:39:4c:98:24:a8:76:a0:34:94:82:8b: 8e:88:3d:22:af:04:4c:f8:8d:5c:1e:23:15:07:e8: 06:24:51:5b:9c:5f:02:ff:f3:31:85:50:2d:08:c8: df:37:86:90:4a:14:18:b8:0d:34:f4:7b:ff:fb:a3: d5:18:47:a0:ef:88:42:ab:23:2c:13:f4:f1:54:89: da:11:22:32:91:b8:aa:8d:21:70:b2:2e:5a:76:59: c1:36:71:92:53:c1:48:a5:a6:ae:08:d2:bb:24:6c: c5:58:20:d1:bd:37:e0:6e:5f:f3:d9:ff:c9:1b:b3: 91:1b:2b:6e:5b:1b:93:50:f9:64:e0:1c:66:eb:74: 45:0a:37:f6:06:86:be:e7:b0:c7:df:82:a7:d3:18: 14:ac:60:33:dd:74:14:51:71:fb:43:fc:4e:b5:e3: da:a5:35:0e:16:be:84:b1:b4:86:b6:4f:1c:b2:02: 6a:c8:ab:5c:f2:c6:1a:90:97:90:8a:79:35:42:0f: 08:9d:37:9a:7c:20:1f:b7:e1:c1:29:27:33:06:96: 2f:7a:58:2a:29:45:37:b9:78:f5:87:c7:6b:9c:e8: d8:8f:31:b2:8e:32:44:2e:85:6e:a9:8d:5d:40:a1: b2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:36:F8:5B:2B:4C:80:21:BB:D9:47:0D:D2:43:32:D3:A5:30:3E:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4454d928-1ed2-36f9-80a7-6f71e4bedd26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:57:a3:7c:1d:b3:57:7b:12:29:46:cf:c5:c3:d4:c3:fa:5c: ec:1b:09:03:9a:37:96:f2:36:91:42:bf:13:5f:2f:11:d7:56: 25:27:30:aa:31:5c:a1:04:de:d4:48:94:3f:d0:53:4c:ce:b7: 03:50:ed:fa:9d:ce:4e:ae:f1:a9:dc:a8:43:fc:ac:7c:a3:9d: ff:f6:89:b4:40:45:50:6f:0b:53:5e:2c:ad:aa:ba:e6:d8:bf: 21:a6:1d:ea:c8:e2:86:10:c3:74:b7:4b:f5:57:23:f5:a6:96: bf:92:ff:8a:d9:f6:5a:ba:44:50:4a:46:f1:b5:26:40:c4:71: de:e3:60:73:88:14:3a:c8:6b:02:ba:53:17:bb:b5:94:c2:ee: 53:1f:9a:65:82:25:0d:2a:6d:a7:4d:f2:75:d6:3e:d7:c9:3f: 0d:42:9f:18:20:7e:d7:15:b3:85:0b:76:45:12:75:a8:34:e7: 4e:2a:fe:78:fe:68:a9:9a:5f:6e:e9:8b:0e:1b:63:a0:e7:49: 07:ce:d6:48:70:fb:b5:13:ba:dc:fa:64:b7:ba:45:78:20:31: 26:e2:64:cd:77:13:e9:14:8f:89:05:c9:78:d5:77:fc:e1:4f: ad:b6:5b:c1:ba:0e:49:10:70:8e:76:67:f4:2d:29:cb:f7:be: 04:5f:71:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8k2VRcYxyRQcooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk YTIyZmZjM2QtNDc2ZC00ZTNkLWE5NmMtYjM5MTI1ZDdlNWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdTRtXhyprWpPzJN9qJr4kl3OUyYJKh2oDSU gouOiD0irwRM+I1cHiMVB+gGJFFbnF8C//MxhVAtCMjfN4aQShQYuA009Hv/+6PV GEeg74hCqyMsE/TxVInaESIykbiqjSFwsi5adlnBNnGSU8FIpaauCNK7JGzFWCDR vTfgbl/z2f/JG7ORGytuWxuTUPlk4Bxm63RFCjf2Boa+57DH34Kn0xgUrGAz3XQU UXH7Q/xOtePapTUOFr6EsbSGtk8csgJqyKtc8sYakJeQink1Qg8InTeafCAft+HB KSczBpYvelgqKUU3uXj1h8drnOjYjzGyjjJELoVuqY1dQKGyFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBk2+FsrTIAhu9lHDdJDMtOlMD4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDQ1NGQ5MjgtMWVkMi0z NmY5LTgwYTctNmY3MWU0YmVkZDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRXo3wds1d7EilGz8XD1MP6XOwbCQOaN5byNpFCvxNfLxHXViUnMKox XKEE3tRIlD/QU0zOtwNQ7fqdzk6u8ancqEP8rHyjnf/2ibRARVBvC1NeLK2quubY vyGmHerI4oYQw3S3S/VXI/Wmlr+S/4rZ9lq6RFBKRvG1JkDEcd7jYHOIFDrIawK6 Uxe7tZTC7lMfmmWCJQ0qbadN8nXWPtfJPw1CnxggftcVs4ULdkUSdag0504q/nj+ aKmaX27piw4bY6DnSQfO1khw+7UTutz6ZLe6RXggMSbiZM13E+kUj4kFyXjVd/zh T622W8G6DkkQcI52Z/QtKcv3vgRfceQ= -----END CERTIFICATE-----Generated at Mon Mar 2 08:16:46 2026 by rpki-client