$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/e48c52b2-2e37-3655-95b9-536384cb2c6d.roa File: e48c52b2-2e37-3655-95b9-536384cb2c6d.roa (raw, json) Hash identifier: YQvmDHT9F+/dObSW0836bBl5yvkw5xTMjGXK5yQMGCU= Subject key identifier: D9:53:33:58:F0:E0:AF:B4:AB:46:C8:B0:11:82:CB:BD:AD:71:68:56 Certificate issuer: /CN=cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3 Certificate serial: 010D0C9F4328584CB81C7B489DBE9FD867CE7AE0 Authority key identifier: 85:EC:6D:C5:EB:8F:FD:22:C3:A2:35:E4:1A:A6:19:F2:0B:6F:3D:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/e48c52b2-2e37-3655-95b9-536384cb2c6d.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 16509 IP address blocks: 207.241.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:7b:48:9d:be:9f:d8:67:ce:7a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3 Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=99cd6335-3d26-462b-a960-2f3ed3af0c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:95:e9:06:26:bd:fc:3d:2c:dc:d9:c6:d2:a7: 36:b9:19:a0:ac:37:13:8f:5b:ff:a9:11:29:c7:92: 7e:c9:0a:74:45:6a:10:79:d1:3b:a8:cc:4b:41:84: dd:8f:d2:18:ca:52:df:48:7c:da:91:ea:29:6c:55: 04:f3:e5:0e:44:3d:a1:ef:26:6a:26:5a:e6:81:a3: e1:e9:90:77:1b:66:ea:01:16:8c:01:45:79:e8:ac: 25:58:e4:a2:3f:75:2f:f3:6e:09:a9:9b:57:86:42: e8:f6:71:51:fa:7b:5c:d7:a4:53:8f:77:b0:fb:17: 9a:6b:f9:96:8a:b4:8d:77:b4:67:f7:16:a3:02:cb: d2:2d:b2:b3:43:0e:68:bf:14:d1:90:52:8c:26:3c: 1f:12:80:11:38:34:4a:ce:6e:6a:27:b1:50:41:f7: 9d:44:0d:0b:02:c0:e5:6f:c9:91:ee:99:f5:50:fc: 28:d0:7b:f7:3a:e6:30:71:08:3a:5a:f3:0d:2b:89: dc:e2:ad:c7:d2:14:e7:d8:28:85:c1:a0:42:45:80: 83:1f:b5:35:0e:8d:52:cd:4b:cf:d9:10:0c:99:c5: e1:b8:53:ea:ba:5f:53:34:05:f4:7e:8b:a8:c9:9c: 69:10:a7:17:d5:d1:8d:32:5d:c9:a5:bc:7f:09:9a: ab:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:53:33:58:F0:E0:AF:B4:AB:46:C8:B0:11:82:CB:BD:AD:71:68:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/e48c52b2-2e37-3655-95b9-536384cb2c6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.crl X509v3 Authority Key Identifier: keyid:85:EC:6D:C5:EB:8F:FD:22:C3:A2:35:E4:1A:A6:19:F2:0B:6F:3D:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer sbgp-ipAddrBlock: critical IPv4: 207.241.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f0:05:e2:1b:75:aa:1c:d0:3b:e6:a9:0b:04:45:00:6d:09: 87:71:df:f6:29:66:12:3c:98:20:33:db:b9:47:55:49:4b:44: 03:14:4d:cb:cc:03:74:6d:86:c0:77:87:5b:9d:96:05:92:bc: ec:5e:da:1d:61:b4:28:c2:10:a6:f3:64:3f:ef:64:b9:45:94: 8c:fa:1f:b8:c7:48:cb:af:ec:34:15:0d:c7:fa:7d:86:b4:29: a3:4b:d4:39:32:c4:58:a5:a8:5a:eb:73:28:89:3e:af:6c:52: 48:02:3a:88:35:ef:8f:d6:f5:a7:54:f1:66:bb:0d:20:56:87: 52:6d:2f:7d:2f:02:81:05:60:b7:00:ab:d7:49:a9:56:e6:fb: 78:3c:24:5f:69:9f:63:c1:d6:53:ce:33:82:97:72:03:c2:ab: 86:6e:87:6f:c6:a6:c2:13:91:4c:6c:b7:b9:a4:bd:97:e5:d7: ba:cc:07:3b:6c:9e:7b:d0:12:1e:57:cd:f2:60:13:0b:ba:92: 54:91:09:07:b0:64:e9:5a:32:af:c9:e8:bb:d1:05:8f:da:4b: e7:4d:a1:75:54:a6:bb:dc:43:f0:71:95:2f:da:78:72:28:99: bc:fe:5b:fd:d1:4c:84:59:aa:4c:6d:4d:bc:99:0d:82:b2:a7: 64:a4:c7:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HHtInb6f2GfOeuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RkNWM1NzgtMjYxMi00YjFhLThjNGEtYzEyYmM3YzNh MWUzMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk OTljZDYzMzUtM2QyNi00NjJiLWE5NjAtMmYzZWQzYWYwYzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5XpBia9/D0s3NnG0qc2uRmgrDcTj1v/qREp x5J+yQp0RWoQedE7qMxLQYTdj9IYylLfSHzakeopbFUE8+UORD2h7yZqJlrmgaPh 6ZB3G2bqARaMAUV56KwlWOSiP3Uv824JqZtXhkLo9nFR+ntc16RTj3ew+xeaa/mW irSNd7Rn9xajAsvSLbKzQw5ovxTRkFKMJjwfEoARODRKzm5qJ7FQQfedRA0LAsDl b8mR7pn1UPwo0Hv3OuYwcQg6WvMNK4nc4q3H0hTn2CiFwaBCRYCDH7U1Do1SzUvP 2RAMmcXhuFPqul9TNAX0fouoyZxpEKcX1dGNMl3Jpbx/CZqrwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlTM1jw4K+0q0bIsBGCy72tcWhWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jZGQ1 YzU3OC0yNjEyLTRiMWEtOGM0YS1jMTJiYzdjM2ExZTMvZTQ4YzUyYjItMmUzNy0z NjU1LTk1YjktNTM2Mzg0Y2IyYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvY2RkNWM1NzgtMjYxMi00YjFhLThj NGEtYzEyYmM3YzNhMWUzL2NkZDVjNTc4LTI2MTItNGIxYS04YzRhLWMxMmJjN2Mz YTFlMy5jcmwwHwYDVR0jBBgwFoAUhextxeuP/SLDojXkGqYZ8gtvPRUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jZGQ1YzU3OC0yNjEyLTRiMWEtOGM0YS1jMTJi YzdjM2ExZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz/GQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETwBeIbdaoc0DvmqQsERQBtCYdx3/YpZhI8mCAz27lHVUlLRAMUTcvM A3RthsB3h1udlgWSvOxe2h1htCjCEKbzZD/vZLlFlIz6H7jHSMuv7DQVDcf6fYa0 KaNL1DkyxFilqFrrcyiJPq9sUkgCOog174/W9adU8Wa7DSBWh1JtL30vAoEFYLcA q9dJqVbm+3g8JF9pn2PB1lPOM4KXcgPCq4Zuh2/GpsITkUxst7mkvZfl17rMBzts nnvQEh5XzfJgEwu6klSRCQewZOlaMq/J6LvRBY/aS+dNoXVUprvcQ/BxlS/aeHIo mbz+W/3RTIRZqkxtTbyZDYKyp2Skx2I= -----END CERTIFICATE-----Generated at Mon Mar 2 14:38:51 2026 by rpki-client