$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/d7dbe350-33a5-3258-aa70-7a64de946ef8.roa File: d7dbe350-33a5-3258-aa70-7a64de946ef8.roa (raw, json) Hash identifier: qZVKgcHtNoJ5nSmgIkIhwScZyQ5sOcvJP8B+2NsJFfU= Subject key identifier: 24:81:8C:FE:41:88:EE:4C:46:0B:FE:3D:4D:9A:27:C7:21:5E:79:E3 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584CFDE79627F43D74C10280B380 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/d7dbe350-33a5-3258-aa70-7a64de946ef8.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 40509 IP address blocks: 168.220.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e7:96:27:f4:3d:74:c1:02:80:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=ab3e4c9a-ae2b-424e-8347-017c0e08f8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8f:4d:4d:8f:67:30:d2:48:f4:09:9f:b2:32: a6:dc:b5:55:dd:9d:e2:09:e0:8c:b0:ce:33:43:4d: 7b:c7:65:9a:65:04:9f:f9:2e:5f:bd:47:d8:f7:02: 67:0c:ba:35:2b:98:c8:a9:58:41:60:63:1f:44:1f: 18:a6:e4:14:70:ee:60:e8:1b:5b:0d:8c:26:71:42: 84:b9:3a:95:2f:a0:71:ca:2e:fe:ea:83:74:82:49: 52:e4:5a:6e:92:92:9a:40:fa:b6:d9:fe:f1:51:fe: 8f:74:1a:a0:44:eb:65:f4:f1:86:90:bc:53:b4:ae: 05:1d:2d:8e:32:f9:96:86:7e:90:2d:00:57:3d:ee: 5a:b6:ee:d2:33:6c:a0:4f:73:ba:c5:42:4f:b2:78: 0a:a2:64:49:ce:59:d2:8d:4b:b6:bb:ab:b7:49:d2: a4:d5:c6:16:4a:14:88:fd:df:44:8a:6e:03:72:20: cb:72:ab:a2:68:c0:2d:cb:c2:a5:26:57:a8:a2:ba: 37:c1:a3:42:e4:59:a5:39:56:01:89:33:82:7c:50: 77:3a:a6:bf:ca:78:08:a4:6f:17:4a:e7:5e:6a:0d: 6e:8c:6e:08:e4:fd:67:a7:cc:99:bc:84:a6:c7:8d: 6a:a8:f2:94:81:d2:d2:a4:40:6f:eb:52:02:c5:4a: 5b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:81:8C:FE:41:88:EE:4C:46:0B:FE:3D:4D:9A:27:C7:21:5E:79:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/d7dbe350-33a5-3258-aa70-7a64de946ef8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 168.220.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1e:0b:60:cc:db:41:2c:75:cc:a7:46:2d:29:49:fa:50:aa: 7b:f2:df:99:e2:3e:8e:1e:be:5c:5f:dc:9b:90:d5:84:2b:65: 23:d1:c4:2d:95:c0:5c:58:06:21:2b:99:b9:03:ca:71:39:b8: 6d:e6:83:30:42:88:cd:ae:4a:99:7a:74:1c:95:b3:f8:77:1f: ed:74:5d:6b:5b:8a:d8:40:72:ae:a6:13:e7:22:3f:ca:ec:c5: 4d:1d:0f:97:65:a0:5e:5a:fa:47:4e:66:6d:4a:ba:1c:e1:10: 60:26:43:b3:28:ba:c5:99:56:06:27:24:51:66:ff:7f:f0:40: 35:10:0e:d4:29:37:53:ba:9a:01:46:7b:eb:85:06:df:a6:96: 73:04:7c:2f:c7:e2:3f:bb:d3:d4:ed:80:03:06:34:af:f4:2d: 97:07:8a:77:4d:2f:9f:02:e9:a8:0d:ed:b1:3f:de:4c:e8:51: e4:aa:23:18:2c:37:44:48:fe:e0:e4:8a:4e:17:ec:88:39:5c: 6d:d3:0c:70:2b:3a:2d:f1:a4:89:82:4f:9f:cd:66:20:fc:23: cb:c6:1f:7a:f9:6b:b2:6d:dd:7a:c1:d9:f8:c4:c2:e4:9f:ab: 73:52:8a:10:35:1f:1d:f2:4f:8d:bf:2c:52:27:8f:11:ad:f4: 4e:42:9d:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz955Yn9D10wQKAs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk YWIzZTRjOWEtYWUyYi00MjRlLTgzNDctMDE3YzBlMDhmOGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI9NTY9nMNJI9AmfsjKm3LVV3Z3iCeCMsM4z Q017x2WaZQSf+S5fvUfY9wJnDLo1K5jIqVhBYGMfRB8YpuQUcO5g6BtbDYwmcUKE uTqVL6Bxyi7+6oN0gklS5FpukpKaQPq22f7xUf6PdBqgROtl9PGGkLxTtK4FHS2O MvmWhn6QLQBXPe5atu7SM2ygT3O6xUJPsngKomRJzlnSjUu2u6u3SdKk1cYWShSI /d9Eim4DciDLcquiaMAty8KlJleooro3waNC5FmlOVYBiTOCfFB3Oqa/yngIpG8X Sudeag1ujG4I5P1np8yZvISmx41qqPKUgdLSpEBv61ICxUpbQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSBjP5BiO5MRgv+PU2aJ8chXnnjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvZDdkYmUzNTAtMzNhNS0z MjU4LWFhNzAtN2E2NGRlOTQ2ZWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqNxQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkeC2DM20EsdcynRi0pSfpQqnvy35niPo4evlxf3JuQ1YQrZSPRxC2V wFxYBiErmbkDynE5uG3mgzBCiM2uSpl6dByVs/h3H+10XWtbithAcq6mE+ciP8rs xU0dD5dloF5a+kdOZm1KuhzhEGAmQ7MousWZVgYnJFFm/3/wQDUQDtQpN1O6mgFG e+uFBt+mlnMEfC/H4j+709TtgAMGNK/0LZcHindNL58C6agN7bE/3kzoUeSqIxgs N0RI/uDkik4X7Ig5XG3TDHArOi3xpImCT5/NZiD8I8vGH3r5a7Jt3XrB2fjEwuSf q3NSihA1Hx3yT42/LFInjxGt9E5CnQI= -----END CERTIFICATE-----Generated at Mon Mar 2 23:23:48 2026 by rpki-client