$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/8cae9a02-39b3-3c4a-b824-865da368ac0e.roa File: 8cae9a02-39b3-3c4a-b824-865da368ac0e.roa (raw, json) Hash identifier: 57WQnbLkjvgXUDyfmlaRXgSCf0b5u9XxSb3K0+f4l+k= Subject key identifier: B9:51:2E:C7:47:C9:D6:52:14:E5:C9:AC:75:9C:1B:65:52:44:B7:12 Certificate issuer: /CN=0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317 Certificate serial: 010D0C9F4328584CF9B798163FAF5394B5001460 Authority key identifier: 49:E4:5C:27:F5:7A:0A:5F:DC:C8:9A:DF:E7:26:BF:A2:5B:05:0D:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/8cae9a02-39b3-3c4a-b824-865da368ac0e.roa Signing time: Wed 25 Feb 2026 02:00:32 +0000 ROA not before: Wed 25 Feb 2026 02:00:32 +0000 ROA not after: Tue 26 May 2026 01:00:32 +0000 asID: 1226 IP address blocks: 204.235.48.0/21 maxlen: 21 204.235.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:b7:98:16:3f:af:53:94:b5:00:14:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317 Validity Not Before: Feb 25 02:00:32 2026 GMT Not After : May 26 01:00:32 2026 GMT Subject: CN=534bc7b1-0341-4319-9ca3-22a451e7c86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c2:ce:fe:c9:67:8d:63:f6:83:7d:04:3f:d0: d7:0e:57:f6:79:26:51:a4:59:a3:77:51:09:6f:5d: 44:4f:b5:a6:fe:3f:c7:24:00:4d:87:fd:e8:b7:27: 29:76:34:01:40:90:56:6f:13:2f:68:0f:4b:a3:2d: ac:6e:27:f9:29:8b:a0:09:55:68:bb:8f:c1:ce:00: 46:3f:54:70:3e:26:50:5e:93:a9:fb:cb:bb:57:82: c4:86:09:43:82:4e:68:aa:65:c1:1f:09:d2:5d:5b: 99:46:29:bf:84:b9:6b:53:5e:25:ba:95:6e:6f:ad: aa:e7:4e:5d:6a:ba:6e:a2:14:42:38:ad:48:4a:af: 66:04:24:f2:13:86:11:23:f3:23:eb:eb:54:1b:08: 50:5a:83:19:02:3d:49:05:48:27:b8:0b:b8:bb:4e: bb:7e:93:d2:27:ff:86:54:f2:c7:96:08:16:89:b2: a1:6f:fe:30:73:9b:b9:57:9f:60:f2:b8:f2:c3:93: 2a:32:da:21:37:c0:39:e0:1a:dd:d5:af:62:c0:ad: d7:ee:f7:a0:96:ed:d0:95:30:9d:da:dd:1d:f5:02: d1:29:99:3e:2c:82:2f:fc:f0:6d:a7:5d:91:03:ba: 33:68:7c:5a:b1:c0:fa:46:86:2d:a7:16:d3:67:0b: 65:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:51:2E:C7:47:C9:D6:52:14:E5:C9:AC:75:9C:1B:65:52:44:B7:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/8cae9a02-39b3-3c4a-b824-865da368ac0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.crl X509v3 Authority Key Identifier: keyid:49:E4:5C:27:F5:7A:0A:5F:DC:C8:9A:DF:E7:26:BF:A2:5B:05:0D:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer sbgp-ipAddrBlock: critical IPv4: 204.235.48.0-204.235.59.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:7c:a7:a6:19:81:96:57:88:24:14:ce:d1:b4:e2:f9:84:83: c3:1e:c3:20:3f:e0:ff:33:90:b8:db:70:14:c8:7e:64:b8:06: ab:e7:2d:26:dd:27:34:8d:df:c4:52:13:94:b6:0c:43:09:93: 54:74:67:ef:c9:9d:a5:16:fa:eb:9b:ef:6d:b5:f5:c9:d1:b4: 79:b0:22:3f:26:f9:70:94:69:41:3d:9d:03:31:be:af:68:9e: 51:c0:fc:48:e3:91:b1:40:1a:10:2a:2d:92:46:ef:92:01:8e: ec:5c:99:dd:68:eb:cf:f4:48:8c:ab:c3:45:ca:d4:a5:d0:75: 49:c2:16:a3:c1:fc:7b:1e:f1:98:aa:83:70:6c:ea:32:f0:c4: 4f:2e:a2:43:f5:f6:2c:9c:99:13:a2:28:66:18:d4:54:a5:1f: b5:95:ef:44:75:b8:5c:c7:1b:0b:a9:e6:10:15:77:5e:54:a0: b0:ab:06:39:b8:8a:8a:0d:58:5c:c6:c2:3e:02:9b:df:d0:c1: 5b:32:5b:70:fb:c7:41:e5:5a:de:dd:d6:95:b5:59:e9:02:9c: 93:ab:c9:92:c1:33:c2:de:24:8c:43:e2:3d:2a:a2:b6:bd:88: 20:9f:c6:90:e8:e9:28:ab:e3:3a:1c:5d:87:71:2c:a5:77:0f: ab:75:e3:89 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEz5t5gWP69TlLUAFGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGZiNDhjZTUtMjFhMy00YjYwLTliY2YtZjFlMGQ2YTQw MzE3MB4XDTI2MDIyNTAyMDAzMloXDTI2MDUyNjAxMDAzMlowLzEtMCsGA1UEAxMk NTM0YmM3YjEtMDM0MS00MzE5LTljYTMtMjJhNDUxZTdjODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcLO/slnjWP2g30EP9DXDlf2eSZRpFmjd1EJ b11ET7Wm/j/HJABNh/3otycpdjQBQJBWbxMvaA9Loy2sbif5KYugCVVou4/BzgBG P1RwPiZQXpOp+8u7V4LEhglDgk5oqmXBHwnSXVuZRim/hLlrU14lupVub62q505d arpuohRCOK1ISq9mBCTyE4YRI/Mj6+tUGwhQWoMZAj1JBUgnuAu4u067fpPSJ/+G VPLHlggWibKhb/4wc5u5V59g8rjyw5MqMtohN8A54Brd1a9iwK3X7veglu3QlTCd 2t0d9QLRKZk+LIIv/PBtp12RA7ozaHxascD6RoYtpxbTZwtlWQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLlRLsdHydZSFOXJrHWcG2VSRLcSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZmI0 OGNlNS0yMWEzLTRiNjAtOWJjZi1mMWUwZDZhNDAzMTcvOGNhZTlhMDItMzliMy0z YzRhLWI4MjQtODY1ZGEzNjhhYzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGZiNDhjZTUtMjFhMy00YjYwLTli Y2YtZjFlMGQ2YTQwMzE3LzBmYjQ4Y2U1LTIxYTMtNGI2MC05YmNmLWYxZTBkNmE0 MDMxNy5jcmwwHwYDVR0jBBgwFoAUSeRcJ/V6Cl/cyJrf5ya/olsFDeUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZmI0OGNlNS0yMWEzLTRiNjAtOWJjZi1mMWUw ZDZhNDAzMTcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATM6zAD BALM6zgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAInynphmBlleIJBTO0bTi+YSDwx7DID/g/zOQuNtwFMh+ ZLgGq+ctJt0nNI3fxFITlLYMQwmTVHRn78mdpRb665vvbbX1ydG0ebAiPyb5cJRp QT2dAzG+r2ieUcD8SOORsUAaECotkkbvkgGO7FyZ3Wjrz/RIjKvDRcrUpdB1ScIW o8H8ex7xmKqDcGzqMvDETy6iQ/X2LJyZE6IoZhjUVKUftZXvRHW4XMcbC6nmEBV3 XlSgsKsGObiKig1YXMbCPgKb39DBWzJbcPvHQeVa3t3WlbVZ6QKck6vJksEzwt4k jEPiPSqitr2IIJ/GkOjpKKvjOhxdh3EspXcPq3XjiQ== -----END CERTIFICATE-----Generated at Mon Mar 2 19:09:53 2026 by rpki-client