$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/ab1aca2f-be95-345d-be38-61fcf4d36b0a.roa File: ab1aca2f-be95-345d-be38-61fcf4d36b0a.roa (raw, json) Hash identifier: sxlVt+lhpU0Q4QDXhJkVTpYIPlwIdEXqpdCXQcTSHjU= Subject key identifier: 78:34:61:14:8C:D0:25:B2:49:0F:87:CB:B0:5E:97:AD:4E:35:E9:04 Certificate issuer: /CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd Certificate serial: 010D0C9F4328584CFDEAA5520EDFD8E45F2578E0 Authority key identifier: AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/ab1aca2f-be95-345d-be38-61fcf4d36b0a.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 14277 IP address blocks: 65.50.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:ea:a5:52:0e:df:d8:e4:5f:25:78:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=fd61324c-f6d9-417b-8a53-c01487e9dd1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:81:62:19:5e:76:86:1c:b9:7e:2c:d6:0a:a2: 8e:c4:bc:05:3b:14:35:97:af:63:c0:15:92:1e:10: 93:04:9e:79:12:5b:3a:96:a8:ed:9b:f4:c2:6c:c9: ff:31:bd:95:d8:a4:03:ab:38:48:73:c5:bd:67:ab: 04:0b:e7:58:de:78:df:d6:49:db:06:d7:58:f4:3c: 60:54:9e:0e:06:f1:d5:64:44:43:20:40:25:a4:51: 69:13:43:10:73:87:f1:77:e8:bc:63:85:81:e4:09: bb:79:1b:9d:26:00:da:a4:30:ee:42:39:04:82:f7: 8d:e8:19:2d:dc:e8:50:f8:69:0e:65:c0:78:09:1e: dd:e4:88:5b:90:c1:be:d2:b7:ca:2a:54:1e:bc:38: ab:8e:06:05:f2:2a:e1:3b:9d:82:2e:fa:a8:70:59: dd:83:a9:0f:49:93:4c:df:d7:fb:40:2d:47:bf:17: 64:ce:97:98:e5:a7:34:a6:7f:29:7e:81:6a:7c:9a: f7:10:cb:f2:08:ba:fd:95:63:a2:1f:ac:68:49:4d: 6d:19:41:87:2a:20:6b:28:30:f9:68:b1:16:a2:ef: d9:cd:33:2b:f6:58:e2:e1:2a:21:12:1d:fd:b6:6d: c4:bb:79:68:28:b6:ec:8e:5b:4b:f8:a2:48:3b:27: d7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:34:61:14:8C:D0:25:B2:49:0F:87:CB:B0:5E:97:AD:4E:35:E9:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/ab1aca2f-be95-345d-be38-61fcf4d36b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl X509v3 Authority Key Identifier: keyid:AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer sbgp-ipAddrBlock: critical IPv4: 65.50.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:13:02:24:4a:2e:c0:d8:d6:4e:2b:0b:5d:12:27:50:86:90: 22:b2:f6:56:66:77:40:fb:15:e0:22:e9:47:10:c6:e7:5f:01: 1c:de:e9:d0:79:5a:fd:f1:e6:91:39:88:6f:aa:f3:06:8b:2a: bd:a0:a1:6f:0e:58:3b:77:59:ca:6c:23:03:7f:b0:3c:73:02: 6b:d3:8a:70:8a:d3:36:52:0e:08:01:0f:e5:6a:50:54:ba:f4: b7:e5:d9:a4:46:b7:e1:f5:33:06:95:d8:32:4e:56:96:15:a5: 91:8e:3b:c8:cb:a9:82:62:c0:31:5d:2d:5f:e7:fa:4c:20:9a: 19:9b:bd:51:1f:50:63:3d:cc:c9:b5:87:cf:33:ff:e0:9d:fe: 0d:cf:e0:bd:33:f5:85:f0:2f:c2:3e:fc:4f:5e:0c:34:00:50: a0:7d:e7:25:cd:44:25:df:89:38:8e:32:c9:7d:88:ed:cc:d3: 7d:90:9a:fd:cd:f7:e4:63:91:19:df:4f:50:ce:d2:ed:6a:96: 0e:c8:07:58:38:72:c5:b3:52:5c:08:f9:48:f4:4d:60:2b:86: c2:1b:37:23:80:dc:32:6b:19:2b:0e:cb:a5:ab:c0:6e:67:cf: 1a:d2:ea:44:62:49:5a:9b:8e:4b:5e:04:6d:f8:8c:98:aa:c0: 70:49:db:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96qVSDt/Y5F8leOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ5ZTU3ZmItMzk1NC00YzJiLWE1OTYtYTAwMWMzNGQy M2RkMB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk ZmQ2MTMyNGMtZjZkOS00MTdiLThhNTMtYzAxNDg3ZTlkZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoFiGV52hhy5fizWCqKOxLwFOxQ1l69jwBWS HhCTBJ55Els6lqjtm/TCbMn/Mb2V2KQDqzhIc8W9Z6sEC+dY3njf1knbBtdY9Dxg VJ4OBvHVZERDIEAlpFFpE0MQc4fxd+i8Y4WB5Am7eRudJgDapDDuQjkEgveN6Bkt 3OhQ+GkOZcB4CR7d5IhbkMG+0rfKKlQevDirjgYF8irhO52CLvqocFndg6kPSZNM 39f7QC1HvxdkzpeY5ac0pn8pfoFqfJr3EMvyCLr9lWOiH6xoSU1tGUGHKiBrKDD5 aLEWou/ZzTMr9lji4SohEh39tm3Eu3loKLbsjltL+KJIOyfXkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHg0YRSM0CWySQ+Hy7Bel61ONekEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yZDll NTdmYi0zOTU0LTRjMmItYTU5Ni1hMDAxYzM0ZDIzZGQvYWIxYWNhMmYtYmU5NS0z NDVkLWJlMzgtNjFmY2Y0ZDM2YjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmQ5ZTU3ZmItMzk1NC00YzJiLWE1 OTYtYTAwMWMzNGQyM2RkLzJkOWU1N2ZiLTM5NTQtNGMyYi1hNTk2LWEwMDFjMzRk MjNkZC5jcmwwHwYDVR0jBBgwFoAUrG+y7qJbrT9ofrhxYmZ7I7vCGDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yZDllNTdmYi0zOTU0LTRjMmItYTU5Ni1hMDAx YzM0ZDIzZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQTKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8TAiRKLsDY1k4rC10SJ1CGkCKy9lZmd0D7FeAi6UcQxudfARze6dB5 Wv3x5pE5iG+q8waLKr2goW8OWDt3WcpsIwN/sDxzAmvTinCK0zZSDggBD+VqUFS6 9Lfl2aRGt+H1MwaV2DJOVpYVpZGOO8jLqYJiwDFdLV/n+kwgmhmbvVEfUGM9zMm1 h88z/+Cd/g3P4L0z9YXwL8I+/E9eDDQAUKB95yXNRCXfiTiOMsl9iO3M032Qmv3N 9+RjkRnfT1DO0u1qlg7IB1g4csWzUlwI+Uj0TWArhsIbNyOA3DJrGSsOy6WrwG5n zxrS6kRiSVqbjkteBG34jJiqwHBJ2yA= -----END CERTIFICATE-----Generated at Mon Mar 2 12:18:37 2026 by rpki-client