$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/be3a5e47-d281-347d-b95d-87a8fb4d657b.roa File: be3a5e47-d281-347d-b95d-87a8fb4d657b.roa (raw, json) Hash identifier: tM9lWLGiyKoTBeQmdaN1k3UPz4fpUq6lqcSWlZKtu4Q= Subject key identifier: 3D:ED:FD:39:7D:72:E3:F0:42:5D:D8:CC:A4:C7:33:B4:B7:48:25:47 Certificate issuer: /CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Certificate serial: 010D0C9F4328584CD6D2210BE5B62BB43AF94080 Authority key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/be3a5e47-d281-347d-b95d-87a8fb4d657b.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 14315 IP address blocks: 173.0.109.0/24 maxlen: 24 173.0.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:21:0b:e5:b6:2b:b4:3a:f9:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=fdb733bb-717e-4dcf-9ec5-b9a0b4155c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:da:15:10:ce:bb:03:d4:58:49:7e:2a:2a:b7: 10:b6:3f:33:06:02:7c:83:b3:56:d2:c9:ef:89:23: f8:a7:21:ff:76:d5:63:27:df:ab:4a:3a:72:ab:7c: d8:e4:44:ce:88:73:24:69:b1:02:65:ab:26:23:92: d1:51:55:8f:91:0b:c2:cd:5b:6f:47:66:00:44:71: 17:4e:87:67:2c:84:c3:85:09:bd:3f:4b:4e:fd:77: f6:49:62:07:ba:6f:bc:b5:e3:1f:be:b7:6c:be:2f: 6f:0c:53:08:b7:ab:0b:57:d1:d5:9e:af:0d:2f:b3: 28:d2:1a:6e:8c:f5:0c:83:bc:a5:a0:13:ff:76:ce: a4:d5:18:5a:f6:cd:78:12:65:54:03:e8:f1:7b:2d: ce:48:8e:04:66:26:1e:68:5d:28:d9:14:25:61:7b: eb:5a:7a:95:7a:64:73:5c:9a:26:96:bd:f8:49:17: 86:2f:35:d9:42:0f:09:90:8d:cc:61:f0:4e:7a:86: 6e:46:37:cd:23:01:a6:c0:82:aa:e4:06:3f:76:ac: 7b:cf:1b:89:4f:aa:43:64:74:08:f6:15:36:c1:ab: e6:58:85:96:2b:ab:2e:b2:4f:95:07:77:b0:c9:64: 12:80:58:52:e0:50:a7:bd:41:1a:93:14:ff:a4:7c: 18:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:ED:FD:39:7D:72:E3:F0:42:5D:D8:CC:A4:C7:33:B4:B7:48:25:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/be3a5e47-d281-347d-b95d-87a8fb4d657b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl X509v3 Authority Key Identifier: keyid:E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer sbgp-ipAddrBlock: critical IPv4: 173.0.109.0-173.0.110.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:8c:bf:70:af:17:1a:6e:5a:2c:41:b9:e4:5b:c5:56:a8:9b: 42:ea:28:ce:a6:80:62:d0:fd:24:ae:fa:64:e8:1b:1f:9a:7f: 02:c5:de:ef:48:2b:2c:36:6d:7b:d7:6c:11:0a:33:e8:e9:60: e4:f9:1a:8a:35:fe:ad:12:10:f8:90:f3:74:46:3b:11:2e:2b: 6b:c4:3f:21:0a:b9:dc:07:de:5c:10:b9:83:e5:57:53:cf:7d: 77:e9:95:7f:77:e0:5b:a4:fa:15:93:a8:ff:44:93:ad:80:2a: ff:7f:52:4f:2a:30:51:e3:a0:04:85:70:35:b6:90:92:c1:0b: 14:41:3c:19:3a:a7:6d:69:42:37:90:75:d1:2c:56:f6:11:de: 03:cb:3e:40:79:4e:1e:bb:95:e2:d3:3f:b7:21:ec:c5:e3:fa: 9f:a0:5d:59:12:4a:d9:5d:65:84:be:13:1c:e5:30:c2:ab:4a: 07:c7:e4:ff:57:44:dc:9d:69:86:f8:5b:51:c7:27:84:7f:c7: cb:25:39:85:5b:d6:57:ad:97:a7:97:bd:fd:02:d7:54:46:16: c4:9d:7a:e4:40:11:15:b3:79:98:f7:57:fa:bb:24:62:13:b0: c7:09:af:95:4f:17:34:a6:c9:15:2f:12:b4:4c:99:fc:36:7c: 78:51:d9:40 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEzW0iEL5bYrtDr5QIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJkOTdlN2EtYzMxZC00MTdhLWJjMDctMWVjZGI5NmJl MDlmMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk ZmRiNzMzYmItNzE3ZS00ZGNmLTllYzUtYjlhMGI0MTU1Yzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9oVEM67A9RYSX4qKrcQtj8zBgJ8g7NW0snv iSP4pyH/dtVjJ9+rSjpyq3zY5ETOiHMkabECZasmI5LRUVWPkQvCzVtvR2YARHEX TodnLITDhQm9P0tO/Xf2SWIHum+8teMfvrdsvi9vDFMIt6sLV9HVnq8NL7Mo0hpu jPUMg7yloBP/ds6k1Rha9s14EmVUA+jxey3OSI4EZiYeaF0o2RQlYXvrWnqVemRz XJomlr34SReGLzXZQg8JkI3MYfBOeoZuRjfNIwGmwIKq5AY/dqx7zxuJT6pDZHQI 9hU2wavmWIWWK6susk+VB3ewyWQSgFhS4FCnvUEakxT/pHwY/QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFD3t/Tl9cuPwQl3YzKTHM7S3SCVHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5 N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNkYjk2YmUwOWYvYmUzYTVlNDctZDI4MS0z NDdkLWI5NWQtODdhOGZiNGQ2NTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWJkOTdlN2EtYzMxZC00MTdhLWJj MDctMWVjZGI5NmJlMDlmLzFiZDk3ZTdhLWMzMWQtNDE3YS1iYzA3LTFlY2RiOTZi ZTA5Zi5jcmwwHwYDVR0jBBgwFoAU4LxGbY9f3COEYkIcIshswe7ry44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNk Yjk2YmUwOWYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACtAG0D BACtAG4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEALYy/cK8XGm5aLEG55FvFVqibQuoozqaAYtD9JK76ZOgb H5p/AsXe70grLDZte9dsEQoz6Olg5PkaijX+rRIQ+JDzdEY7ES4ra8Q/IQq53Afe XBC5g+VXU899d+mVf3fgW6T6FZOo/0STrYAq/39STyowUeOgBIVwNbaQksELFEE8 GTqnbWlCN5B10SxW9hHeA8s+QHlOHruV4tM/tyHsxeP6n6BdWRJK2V1lhL4THOUw wqtKB8fk/1dE3J1phvhbUccnhH/HyyU5hVvWV62Xp5e9/QLXVEYWxJ165EARFbN5 mPdX+rskYhOwxwmvlU8XNKbJFS8StEyZ/DZ8eFHZQA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:21:05 2026 by rpki-client