$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f0c31c28-17a3-32cc-8048-4b3bb200b8f0.roa File: f0c31c28-17a3-32cc-8048-4b3bb200b8f0.roa (raw, json) Hash identifier: Gsv0JJpaeP1Hq5IqL0NfanFEYopTDySJfFv3P4xZbrU= Subject key identifier: 74:45:27:CD:05:C1:8A:A0:3D:B5:17:38:1A:0E:D9:2B:75:84:08:85 Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Certificate serial: 010D0C9F4328584D00B277232F0ACBF29631AEC0 Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f0c31c28-17a3-32cc-8048-4b3bb200b8f0.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 21559 IP address blocks: 192.254.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:77:23:2f:0a:cb:f2:96:31:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=9f222d1b-9100-451e-b1a2-ff2d480586fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0c:3a:d2:cc:d0:82:05:be:c1:97:04:96:1d: 79:b4:5b:ea:50:b7:0b:44:c7:39:26:9f:ce:7b:96: 26:df:ac:27:3c:9e:12:14:30:8f:c5:e6:7b:e6:0e: c7:30:9f:35:2c:6e:d6:0e:1f:af:86:fd:40:db:97: ad:03:d7:d8:da:bd:b0:cc:02:18:35:ee:59:0e:04: ba:83:82:59:45:d6:49:38:ea:26:60:0e:17:ee:59: d9:bb:ad:0e:54:78:ca:d4:11:81:e6:65:3c:09:67: a1:76:44:67:86:0e:78:40:34:5d:42:17:6c:96:5b: 7e:eb:3f:33:9a:c9:0c:59:87:d1:2d:3d:7c:68:4b: 19:13:2a:a2:56:88:b8:6d:86:28:2b:3a:b9:fa:1a: d6:57:83:f0:12:d6:06:09:86:81:ab:7c:b0:ef:7b: c9:7d:51:d7:37:02:f3:c3:dc:89:76:08:1c:83:1a: af:57:7c:6d:7f:aa:2c:02:98:b5:e4:df:68:96:7a: 6f:87:90:ff:1b:11:4a:bf:f3:b3:c0:ca:47:30:ff: b7:d1:f5:3a:79:8d:13:4e:0e:6b:d6:54:18:e1:4c: 53:0e:9e:5d:18:73:d6:62:d4:87:80:99:dc:91:1e: ca:ef:bf:b9:83:2b:de:99:b2:23:95:86:19:63:1d: 5c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:45:27:CD:05:C1:8A:A0:3D:B5:17:38:1A:0E:D9:2B:75:84:08:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f0c31c28-17a3-32cc-8048-4b3bb200b8f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl X509v3 Authority Key Identifier: keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer sbgp-ipAddrBlock: critical IPv4: 192.254.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:75:fe:91:10:40:19:60:2f:36:6b:b0:4f:0b:60:05:4a:d7: f1:cd:ef:c2:26:aa:eb:cd:03:28:51:a5:20:23:9d:4b:c3:9c: 65:e6:4e:ff:62:1b:37:fe:a3:8a:14:f0:45:8b:bf:18:a1:3a: f2:88:12:69:bb:28:13:32:37:76:e6:fb:a5:50:9f:15:f8:88: ae:9a:78:80:25:cb:21:2c:b0:6b:0d:cd:f7:c0:bc:ba:01:fb: 8d:8a:21:76:1c:84:a6:9b:65:3a:03:2f:44:a4:cd:47:22:37: 78:e8:b4:f8:9e:a6:b7:bc:54:99:31:c5:52:69:34:45:ed:01: 3f:08:9b:7d:eb:23:22:49:6a:fe:11:6f:9a:60:db:13:19:a5: 74:aa:05:e7:c3:0f:c1:4d:44:39:91:e9:0e:6f:d3:43:65:79: c6:59:a5:65:29:67:a4:2e:8a:f6:c0:e6:8f:3c:1e:32:e3:43: 84:9c:4e:fc:4a:b2:9a:38:e2:83:32:65:00:6c:ff:fb:d2:b8: 79:7d:af:b7:1e:b9:e1:70:21:aa:68:53:1a:14:08:1c:73:57: 8b:ee:27:b7:86:92:b0:19:59:ca:82:e0:fe:94:33:af:ef:e8: f9:ae:1e:d0:b1:13:ea:84:6b:aa:d5:11:90:ee:48:29:e9:9a: c7:8b:a1:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AsncjLwrL8pYxrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5 ZDVhMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk OWYyMjJkMWItOTEwMC00NTFlLWIxYTItZmYyZDQ4MDU4NmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAw60szQggW+wZcElh15tFvqULcLRMc5Jp/O e5Ym36wnPJ4SFDCPxeZ75g7HMJ81LG7WDh+vhv1A25etA9fY2r2wzAIYNe5ZDgS6 g4JZRdZJOOomYA4X7lnZu60OVHjK1BGB5mU8CWehdkRnhg54QDRdQhdsllt+6z8z mskMWYfRLT18aEsZEyqiVoi4bYYoKzq5+hrWV4PwEtYGCYaBq3yw73vJfVHXNwLz w9yJdggcgxqvV3xtf6osApi15N9olnpvh5D/GxFKv/OzwMpHMP+30fU6eY0TTg5r 1lQY4UxTDp5dGHPWYtSHgJnckR7K77+5gyvembIjlYYZYx1cQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRFJ80FwYqgPbUXOBoO2St1hAiFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvZjBjMzFjMjgtMTdhMy0z MmNjLTgwNDgtNGIzYmIyMDBiOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwP5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZ1/pEQQBlgLzZrsE8LYAVK1/HN78ImquvNAyhRpSAjnUvDnGXmTv9i Gzf+o4oU8EWLvxihOvKIEmm7KBMyN3bm+6VQnxX4iK6aeIAlyyEssGsNzffAvLoB +42KIXYchKabZToDL0SkzUciN3jotPiepre8VJkxxVJpNEXtAT8Im33rIyJJav4R b5pg2xMZpXSqBefDD8FNRDmR6Q5v00NlecZZpWUpZ6QuivbA5o88HjLjQ4ScTvxK spo44oMyZQBs//vSuHl9r7ceueFwIapoUxoUCBxzV4vuJ7eGkrAZWcqC4P6UM6/v 6PmuHtCxE+qEa6rVEZDuSCnpmseLod8= -----END CERTIFICATE-----Generated at Mon Mar 2 10:59:33 2026 by rpki-client