$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/95d8b86d-f3ee-3aab-9464-cfdc7bf31076.roa File: 95d8b86d-f3ee-3aab-9464-cfdc7bf31076.roa (raw, json) Hash identifier: Ru5u9CIF3JwHAkpfBIVadARPLZt8D0TFCVXDAWY7t9s= Subject key identifier: BE:E7:15:1B:F6:C5:FA:9D:60:83:40:68:AD:A6:B7:83:68:4A:AF:D5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CF2BD0D53B01FE32E97242F80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/95d8b86d-f3ee-3aab-9464-cfdc7bf31076.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 5065 IP address blocks: 64.144.235.0/24 maxlen: 24 64.144.236.0/24 maxlen: 24 64.144.237.0/24 maxlen: 24 64.144.238.0/24 maxlen: 24 64.144.239.0/24 maxlen: 24 209.101.16.0/24 maxlen: 24 209.101.17.0/24 maxlen: 24 209.101.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bd:0d:53:b0:1f:e3:2e:97:24:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=8f968d8d-bf42-4aa7-9347-4b7c4e181317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4b:1f:0e:a3:39:14:24:ca:02:64:7a:dd:2f: d3:c2:78:b0:88:ce:d1:26:c8:c9:be:33:26:00:8b: d0:bb:9e:f5:36:81:08:ce:d1:99:4a:a8:96:c7:fe: a4:34:83:5f:a6:c4:e6:bd:70:05:7e:5c:a9:56:1f: 5c:07:b2:9c:f6:e9:bd:d8:1e:21:53:45:f1:53:88: f1:94:6b:68:09:4b:5b:d9:a3:2d:05:3d:f9:5e:07: 16:d8:ee:77:22:f5:e9:bb:00:6c:d9:66:f7:38:6f: 7b:93:78:95:26:aa:b1:60:ef:82:6f:de:f1:14:b2: 1a:51:4b:c0:b1:6d:cc:56:08:bb:b5:91:b2:44:71: ed:d0:17:45:6a:8f:42:11:d2:1f:97:74:a7:98:90: d6:1f:db:db:95:c7:ba:a6:81:64:ac:c4:e3:5b:44: 61:04:40:57:7f:b8:8c:ef:d4:d0:6d:f3:63:6e:7d: 7d:be:82:b8:ba:f2:e6:08:d1:e4:24:f6:bc:fe:24: f5:3b:33:5a:13:cc:74:65:4b:2e:00:0f:ad:ff:58: 20:01:b0:55:c5:9f:6c:d5:9a:28:7e:6d:98:1c:eb: e2:42:a7:f8:62:75:2e:7a:c3:f0:a7:2e:4d:68:d7: d1:21:c0:ee:9f:07:0b:ad:91:aa:61:d7:97:2a:26: ae:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E7:15:1B:F6:C5:FA:9D:60:83:40:68:AD:A6:B7:83:68:4A:AF:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/95d8b86d-f3ee-3aab-9464-cfdc7bf31076.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.144.235.0-64.144.239.255 209.101.16.0-209.101.18.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:74:26:1a:72:82:4f:a8:ed:08:08:28:d7:f3:e0:59:07:aa: 97:c1:86:a2:4e:46:ec:49:78:ad:b7:e6:dc:31:fe:e1:a3:fc: 71:ff:1d:72:e2:6c:9d:ab:73:79:ce:28:ee:1d:1c:33:7a:fd: 15:40:dd:58:1b:87:3b:a2:cf:68:97:56:86:07:0b:aa:8e:a9: be:e9:82:63:ad:22:f5:5d:15:54:09:b8:8b:ff:79:e0:be:2b: 25:bc:8d:3c:39:3f:8e:09:97:b5:c7:82:7a:d0:af:2d:48:fb: 6a:86:e5:81:f7:83:01:f7:7e:33:f3:46:35:d5:d4:37:04:c9: 12:58:c9:a3:ba:53:df:9d:8e:31:41:3e:04:96:31:00:2b:45: 7b:8c:a6:62:17:5c:41:1b:37:1c:2b:3a:d8:7e:a1:1d:77:f7: 16:dc:74:15:a9:a7:46:cc:78:07:a9:60:1c:6a:66:0d:30:f3: a6:55:30:0f:03:9f:2f:e0:a9:9c:12:ea:db:54:13:e0:1a:aa: 79:92:89:00:f6:7f:d6:2a:66:ce:5e:79:e7:e3:b7:83:37:58: c9:d1:ee:d2:e2:80:f4:4d:23:4c:5a:76:5a:4f:db:ac:dd:43: 89:22:ef:5c:6d:a4:81:e3:8e:b0:56:36:98:21:df:79:8b:d2: 47:3a:02:a8 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEzyvQ1TsB/jLpckL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk OGY5NjhkOGQtYmY0Mi00YWE3LTkzNDctNGI3YzRlMTgxMzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0sfDqM5FCTKAmR63S/TwniwiM7RJsjJvjMm AIvQu571NoEIztGZSqiWx/6kNINfpsTmvXAFflypVh9cB7Kc9um92B4hU0XxU4jx lGtoCUtb2aMtBT35XgcW2O53IvXpuwBs2Wb3OG97k3iVJqqxYO+Cb97xFLIaUUvA sW3MVgi7tZGyRHHt0BdFao9CEdIfl3SnmJDWH9vblce6poFkrMTjW0RhBEBXf7iM 79TQbfNjbn19voK4uvLmCNHkJPa8/iT1OzNaE8x0ZUsuAA+t/1ggAbBVxZ9s1Zoo fm2YHOviQqf4YnUuesPwpy5NaNfRIcDunwcLrZGqYdeXKiautQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFL7nFRv2xfqdYINAaK2mt4NoSq/VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTVkOGI4NmQtZjNlZS0z YWFiLTk0NjQtY2ZkYzdiZjMxMDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBABAkOsD BARAkOAwDAMEBNFlEAMEANFlEjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBDdCYacoJPqO0ICCjX8+BZB6qX wYaiTkbsSXitt+bcMf7ho/xx/x1y4mydq3N5zijuHRwzev0VQN1YG4c7os9ol1aG Bwuqjqm+6YJjrSL1XRVUCbiL/3ngvislvI08OT+OCZe1x4J60K8tSPtqhuWB94MB 934z80Y11dQ3BMkSWMmjulPfnY4xQT4EljEAK0V7jKZiF1xBGzccKzrYfqEdd/cW 3HQVqadGzHgHqWAcamYNMPOmVTAPA58v4KmcEurbVBPgGqp5kokA9n/WKmbOXnnn 47eDN1jJ0e7S4oD0TSNMWnZaT9us3UOJIu9cbaSB446wVjaYId95i9JHOgKo -----END CERTIFICATE-----Generated at Sun Mar 1 21:06:25 2026 by rpki-client