$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/89fc7c78-7fa6-39fb-a22f-7729cba5356c.roa File: 89fc7c78-7fa6-39fb-a22f-7729cba5356c.roa (raw, json) Hash identifier: 65H8k15wfjc3abF9dz+H3xjWo4EEd2PTmysgEMZhrH4= Subject key identifier: A4:65:76:01:E4:B9:CD:D2:40:EF:A8:D0:24:6D:A9:AC:17:75:D3:E3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CF58795BE1931B9C20F88CB00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/89fc7c78-7fa6-39fb-a22f-7729cba5356c.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 401783 IP address blocks: 198.144.125.0/24 maxlen: 24 209.250.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:95:be:19:31:b9:c2:0f:88:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=f93877ad-1352-4a92-b37a-07faa3d9811d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a7:7c:5f:b0:7a:0a:6a:61:f9:1f:38:b9:0e: d4:a7:6e:93:99:50:12:0e:e5:70:8f:b4:e3:60:b3: 97:53:b5:c8:ee:f7:8f:07:5c:a9:fe:2e:dd:3e:a7: d4:56:df:3f:37:c8:7b:c6:0b:92:91:c0:e4:a2:01: 05:ef:42:a7:c8:56:c0:aa:5f:9b:25:f5:64:a4:a4: a7:27:d1:f2:66:c2:35:bd:f7:90:f7:b6:57:b8:72: 9a:66:56:f7:6d:31:fe:d4:d9:66:4a:2e:ac:c0:61: 31:23:e8:80:f8:62:01:59:ee:7d:3f:91:39:76:27: d6:09:f1:f2:91:89:fc:73:24:46:8a:11:7f:91:a5: 3c:43:6e:18:52:bd:2a:a8:24:09:84:85:3e:0f:54: bc:a5:7b:0f:cf:7d:6d:b7:67:05:cb:75:91:7e:c7: 59:1c:d0:5c:1d:22:1b:fc:95:5d:af:e5:16:04:b1: b4:38:c7:aa:ff:bc:0e:6c:7d:f2:65:aa:1d:4b:f0: 3b:14:99:10:69:48:4e:fc:96:1c:9d:2c:9c:7d:4f: 7a:45:0a:eb:03:4c:15:5d:44:41:5f:c5:cd:39:2b: 97:bc:2a:c7:7a:5a:96:b3:04:52:fc:b8:fe:72:24: f3:d1:59:e3:ae:20:26:16:3f:09:af:cc:c3:c9:04: 1c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:65:76:01:E4:B9:CD:D2:40:EF:A8:D0:24:6D:A9:AC:17:75:D3:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/89fc7c78-7fa6-39fb-a22f-7729cba5356c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 198.144.125.0/24 209.250.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:a8:f8:3c:22:03:6b:c1:f0:59:ac:d4:fb:b4:38:98:93:7c: 1f:87:da:13:06:6b:3d:96:b2:9e:24:e4:ee:9b:93:d5:91:05: 8c:53:7e:ca:de:f0:7a:a1:d7:c4:23:2f:44:79:0d:3e:67:97: 19:ca:42:37:d3:eb:e3:f2:38:6d:55:06:cc:48:2c:12:93:1d: bb:f0:3d:41:61:54:40:a0:b3:dd:b6:38:ca:5f:c3:ef:24:f9: a4:9c:c6:9b:e9:62:74:57:1b:f5:48:80:9e:95:28:a1:b8:ad: ed:fc:98:81:9c:0d:68:1f:0a:e6:dd:80:a4:6c:ba:54:f5:22: f4:75:0d:5c:62:e6:6f:05:a9:8b:81:5c:b8:83:b7:10:68:3e: 07:3a:63:00:2e:02:4a:5d:7e:08:3d:f2:07:99:75:a9:e9:e4: 08:29:23:44:ed:c6:f1:da:bc:f0:a1:73:93:1f:bf:69:72:4c: 1b:a5:6d:16:03:fe:cc:83:f3:24:63:26:29:e7:0f:7b:df:16: ff:54:ca:34:7b:1a:64:82:fd:7e:d0:e3:59:fa:92:7f:d4:d8: f6:fb:c3:76:39:da:60:ec:f9:63:fb:f8:31:44:b8:0f:90:e7: c5:95:8a:b7:64:d0:89:0f:6a:ba:16:f9:f5:2f:2a:42:59:6a: 0a:89:d7:31 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEz1h5W+GTG5wg+IywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk ZjkzODc3YWQtMTM1Mi00YTkyLWIzN2EtMDdmYWEzZDk4MTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKd8X7B6Cmph+R84uQ7Up26TmVASDuVwj7Tj YLOXU7XI7vePB1yp/i7dPqfUVt8/N8h7xguSkcDkogEF70KnyFbAql+bJfVkpKSn J9HyZsI1vfeQ97ZXuHKaZlb3bTH+1NlmSi6swGExI+iA+GIBWe59P5E5difWCfHy kYn8cyRGihF/kaU8Q24YUr0qqCQJhIU+D1S8pXsPz31tt2cFy3WRfsdZHNBcHSIb /JVdr+UWBLG0OMeq/7wObH3yZaodS/A7FJkQaUhO/JYcnSycfU96RQrrA0wVXURB X8XNOSuXvCrHelqWswRS/Lj+ciTz0VnjriAmFj8Jr8zDyQQcswIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKRldgHkuc3SQO+o0CRtqawXddPjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODlmYzdjNzgtN2ZhNi0z OWZiLWEyMmYtNzcyOWNiYTUzNTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxpB9AwQA 0fpwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKeo+DwiA2vB8Fms1Pu0OJiTfB+H2hMGaz2Wsp4k5O6bk9WR BYxTfsre8Hqh18QjL0R5DT5nlxnKQjfT6+PyOG1VBsxILBKTHbvwPUFhVECgs922 OMpfw+8k+aScxpvpYnRXG/VIgJ6VKKG4re38mIGcDWgfCubdgKRsulT1IvR1DVxi 5m8FqYuBXLiDtxBoPgc6YwAuAkpdfgg98geZdanp5AgpI0TtxvHavPChc5Mfv2ly TBulbRYD/syD8yRjJinnD3vfFv9UyjR7GmSC/X7Q41n6kn/U2Pb7w3Y52mDs+WP7 +DFEuA+Q58WVirdk0IkParoW+fUvKkJZagqJ1zE= -----END CERTIFICATE-----Generated at Mon Mar 2 16:48:38 2026 by rpki-client