$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/b5552a3b-6cc5-3103-b4e9-9b5a55e5d91d.roa File: b5552a3b-6cc5-3103-b4e9-9b5a55e5d91d.roa (raw, json) Hash identifier: 3HOieha4Bc+SmCf5dr8oiku/JVluKG56x3Ze94GHVE8= Subject key identifier: 21:C4:E2:1E:60:CA:02:2C:DE:42:7A:00:54:8F:6A:ED:9C:C2:0B:12 Certificate issuer: /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6 Certificate serial: 010D0C9F4328584D037D576B8A5BC3E2792F65C0 Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/b5552a3b-6cc5-3103-b4e9-9b5a55e5d91d.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 10794 IP address blocks: 199.43.54.0/23 maxlen: 23 199.43.54.0/24 maxlen: 24 199.43.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:57:6b:8a:5b:c3:e2:79:2f:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=e25f8bba-1ed2-4c90-ba36-988223ccf3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b1:62:3b:37:7d:1e:f0:da:ee:ad:c9:ea:5b: 83:a0:27:8b:31:84:a8:8a:bd:2c:88:97:2d:e5:e0: 82:b2:b5:7f:fe:5d:79:fe:b9:e4:87:82:87:2b:90: 1c:e2:bb:42:10:1d:08:ca:ca:7c:0e:73:67:36:70: ba:2a:99:54:4a:17:16:14:ee:ba:12:c4:78:b1:48: 90:39:2d:83:e8:89:e1:5f:ac:54:dc:cf:d1:9f:e0: b8:4e:02:73:ca:6d:ca:57:44:6d:e6:c9:c1:fe:66: ab:5f:8f:15:e3:6b:9a:1d:c0:6a:1f:85:61:11:35: ce:c2:11:5e:b7:61:88:46:f9:17:58:0a:95:15:9d: 1a:20:54:fd:52:e2:6c:86:39:ef:f8:7b:64:cf:cd: 18:bc:32:45:fc:eb:bd:d3:bb:b6:1f:77:a0:c3:65: 9b:40:15:4e:d9:a8:c5:9f:06:6c:0d:f9:6c:eb:42: 9a:87:d9:6a:24:82:74:45:ec:cf:25:24:12:41:84: d3:24:1d:15:83:3c:1c:d9:be:29:70:9b:6b:1b:8b: c7:18:77:b9:af:ae:10:5e:fa:3e:66:42:5f:b1:20: c3:fb:56:23:85:d0:75:c7:d5:c2:e6:05:b5:ac:0c: 54:1a:56:04:d3:e7:1b:38:b7:36:f9:e4:1b:aa:cb: 4c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C4:E2:1E:60:CA:02:2C:DE:42:7A:00:54:8F:6A:ED:9C:C2:0B:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/b5552a3b-6cc5-3103-b4e9-9b5a55e5d91d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl X509v3 Authority Key Identifier: keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer sbgp-ipAddrBlock: critical IPv4: 199.43.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:0b:e0:50:2f:9f:98:81:e6:30:e1:b0:39:d8:b3:08:fb:06: 02:33:48:7b:1f:d9:ef:69:82:ac:06:e8:dd:69:50:df:99:91: a8:02:19:51:cb:70:8b:d9:bd:62:34:76:2b:03:35:1d:44:5b: b4:2a:ae:51:37:8c:d5:9c:0b:90:10:c1:28:13:f8:0d:0a:70: bd:af:e0:c2:7d:4f:68:70:56:98:20:c6:43:16:a2:ee:fc:f0: cf:bb:15:49:21:0d:74:44:64:99:a7:6b:63:9f:0e:f7:92:a5: 2c:8c:82:6b:4b:60:cf:1f:82:40:35:cc:17:1a:20:89:67:ab: 3b:00:5e:91:1c:8e:e4:73:29:cf:7d:b6:b0:7a:2a:8e:dd:e0: 06:cb:e5:e4:d4:6c:33:8a:4c:0a:71:a6:7b:35:75:f2:d7:6b: 3f:b4:aa:0e:6b:71:72:76:56:c2:36:3c:5f:f7:9c:4a:33:ee: dd:ec:d1:19:a1:fd:86:a5:54:1a:1b:a1:a9:73:f2:e7:36:20: 62:bf:d4:e0:5b:7b:ce:6e:a5:16:4c:8f:fb:c8:b6:1f:10:ec: 9a:f1:20:11:5c:f3:51:06:cc:25:6d:29:d1:d8:17:3a:b6:f2: ca:0b:8c:0c:cf:13:94:14:e2:6b:1d:d5:15:a6:0c:b8:07:6e: a2:6a:7a:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfVdrilvD4nkvZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5YWFiY2ItMjZhOC00YzU3LWFlNTUtNzkzM2JhMmI1 MWI2MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk ZTI1ZjhiYmEtMWVkMi00YzkwLWJhMzYtOTg4MjIzY2NmM2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibFiOzd9HvDa7q3J6luDoCeLMYSoir0siJct 5eCCsrV//l15/rnkh4KHK5Ac4rtCEB0Iysp8DnNnNnC6KplUShcWFO66EsR4sUiQ OS2D6InhX6xU3M/Rn+C4TgJzym3KV0Rt5snB/marX48V42uaHcBqH4VhETXOwhFe t2GIRvkXWAqVFZ0aIFT9UuJshjnv+Htkz80YvDJF/Ou907u2H3egw2WbQBVO2ajF nwZsDfls60Kah9lqJIJ0RezPJSQSQYTTJB0Vgzwc2b4pcJtrG4vHGHe5r64QXvo+ ZkJfsSDD+1YjhdB1x9XC5gW1rAxUGlYE0+cbOLc2+eQbqstMiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHE4h5gygIs3kJ6AFSPau2cwgsSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80Zjlh YWJjYi0yNmE4LTRjNTctYWU1NS03OTMzYmEyYjUxYjYvYjU1NTJhM2ItNmNjNS0z MTAzLWI0ZTktOWI1YTU1ZTVkOTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGY5YWFiY2ItMjZhOC00YzU3LWFl NTUtNzkzM2JhMmI1MWI2LzRmOWFhYmNiLTI2YTgtNGM1Ny1hZTU1LTc5MzNiYTJi NTFiNi5jcmwwHwYDVR0jBBgwFoAUfHDSjDg0KfV6ezvYSBdeA04dwcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80ZjlhYWJjYi0yNmE4LTRjNTctYWU1NS03OTMz YmEyYjUxYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxys2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQL4FAvn5iB5jDhsDnYswj7BgIzSHsf2e9pgqwG6N1pUN+ZkagCGVHL cIvZvWI0disDNR1EW7QqrlE3jNWcC5AQwSgT+A0KcL2v4MJ9T2hwVpggxkMWou78 8M+7FUkhDXREZJmna2OfDveSpSyMgmtLYM8fgkA1zBcaIIlnqzsAXpEcjuRzKc99 trB6Ko7d4AbL5eTUbDOKTApxpns1dfLXaz+0qg5rcXJ2VsI2PF/3nEoz7t3s0Rmh /YalVBoboalz8uc2IGK/1OBbe85upRZMj/vIth8Q7JrxIBFc81EGzCVtKdHYFzq2 8soLjAzPE5QU4msd1RWmDLgHbqJqem8= -----END CERTIFICATE-----Generated at Mon Mar 2 09:09:38 2026 by rpki-client