$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/906f0c7e-1aed-3407-9006-6459ec7f1b20.roa File: 906f0c7e-1aed-3407-9006-6459ec7f1b20.roa (raw, json) Hash identifier: hmH3H50DGnb22l5HmYcn24Y+lzsYDPCTl/EKR/9evXM= Subject key identifier: 6C:F0:14:12:DD:6D:42:78:01:96:2B:74:0D:09:5B:64:8E:8A:86:FA Certificate issuer: /CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a Certificate serial: 010D0C9F4328584CB981E5479C797748803E7B20 Authority key identifier: AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/906f0c7e-1aed-3407-9006-6459ec7f1b20.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 394772 IP address blocks: 199.241.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:e5:47:9c:79:77:48:80:3e:7b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=62e23870-a4b9-4532-a180-79982cac9d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ff:94:79:ed:60:a7:59:19:59:6d:a8:e1:d4: 9c:6e:ba:c5:a4:f7:93:f7:76:92:4b:6e:65:0b:c8: 87:41:71:a6:d5:71:11:70:af:31:0c:66:78:b8:8f: 88:fa:f6:78:02:7f:6d:54:2d:78:03:2b:2c:15:69: 68:27:e0:da:e1:35:51:ec:02:83:6a:01:68:51:95: 79:ee:0e:a6:6a:14:78:a0:25:72:29:e7:c3:65:a1: 42:bf:6c:05:30:f9:06:52:bd:ac:8d:16:e9:fb:d7: a0:96:5e:e4:ce:11:fa:75:01:9c:04:b8:25:ff:f6: fb:72:02:24:74:fe:65:03:1d:66:07:44:91:a5:46: c4:f9:e4:68:f0:8b:1f:bf:c2:e8:fa:34:43:90:b6: c7:c5:5c:49:49:d5:36:25:c1:c1:4f:f5:67:ae:e3: 58:ed:d9:40:1e:eb:67:7a:2f:0e:82:b0:5a:d5:59: 74:08:c9:e5:02:9c:85:a4:8f:1c:0e:25:58:8a:86: 88:4f:e6:84:65:49:03:0a:b3:c5:61:c9:23:c0:02: 7d:68:19:e6:51:96:cf:da:51:b2:f4:c5:2f:da:fd: bc:fa:be:2e:94:64:e3:6b:2f:b9:94:98:92:ca:2a: 23:6a:84:ca:19:2e:fb:e5:23:34:87:c3:13:40:68: 8b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F0:14:12:DD:6D:42:78:01:96:2B:74:0D:09:5B:64:8E:8A:86:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/906f0c7e-1aed-3407-9006-6459ec7f1b20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl X509v3 Authority Key Identifier: keyid:AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer sbgp-ipAddrBlock: critical IPv4: 199.241.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:04:d1:c0:d0:fa:37:4f:fc:07:c9:18:2c:c0:a6:4b:7c:df: 2e:83:be:3f:81:0d:86:e4:18:49:95:2e:a6:eb:51:ff:7f:60: b3:14:4c:de:fb:38:5d:ca:5f:ad:bc:b0:eb:f0:3d:42:e1:07: 00:74:64:69:97:08:4f:c4:e6:60:ef:5c:9d:96:cd:1c:61:28: a0:13:3e:53:86:db:ed:5b:66:a6:14:d8:19:df:e2:25:e1:c4: 8b:80:b5:4a:5d:4c:8e:b8:9c:e1:dd:f7:8e:46:8c:16:8d:7c: 5d:55:fb:6d:2d:e2:27:63:3f:8c:28:85:ff:ad:cc:a7:56:d9: 47:ca:09:06:20:99:96:96:46:14:77:96:c1:10:d6:26:ba:d8: 86:27:0f:3f:84:81:0d:0b:74:b1:ef:f5:65:57:f7:a1:54:5c: b4:f0:29:94:65:21:e9:40:2a:27:33:3d:b2:7a:10:da:72:ab: 01:7b:58:c0:8a:36:b7:41:70:8d:2c:3f:1e:82:5f:87:ab:fa: fb:51:83:7a:f7:0a:38:f7:d0:6d:fe:63:6a:38:c0:a9:01:f5: fb:77:ae:59:47:54:7c:53:ff:fd:9d:7b:b0:42:ab:ce:28:ec: f5:a2:1c:25:84:b1:52:92:4a:10:19:0d:23:17:37:06:f5:6e: 47:5f:82:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5geVHnHl3SIA+eyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVhZjAxNGQtMGIzZS00NDk0LWIwN2YtYjMyNTRmZGRl ZjZhMB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk NjJlMjM4NzAtYTRiOS00NTMyLWExODAtNzk5ODJjYWM5ZDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf+Uee1gp1kZWW2o4dScbrrFpPeT93aSS25l C8iHQXGm1XERcK8xDGZ4uI+I+vZ4An9tVC14AyssFWloJ+Da4TVR7AKDagFoUZV5 7g6mahR4oCVyKefDZaFCv2wFMPkGUr2sjRbp+9egll7kzhH6dQGcBLgl//b7cgIk dP5lAx1mB0SRpUbE+eRo8Isfv8Lo+jRDkLbHxVxJSdU2JcHBT/VnruNY7dlAHutn ei8OgrBa1Vl0CMnlApyFpI8cDiVYioaIT+aEZUkDCrPFYckjwAJ9aBnmUZbP2lGy 9MUv2v28+r4ulGTjay+5lJiSyiojaoTKGS775SM0h8MTQGiLBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzwFBLdbUJ4AZYrdA0JW2SOiob6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZWFm MDE0ZC0wYjNlLTQ0OTQtYjA3Zi1iMzI1NGZkZGVmNmEvOTA2ZjBjN2UtMWFlZC0z NDA3LTkwMDYtNjQ1OWVjN2YxYjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGVhZjAxNGQtMGIzZS00NDk0LWIw N2YtYjMyNTRmZGRlZjZhLzhlYWYwMTRkLTBiM2UtNDQ5NC1iMDdmLWIzMjU0ZmRk ZWY2YS5jcmwwHwYDVR0jBBgwFoAUqnfs1+3zzOxxSxl6mIl/fo+QdugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZWFmMDE0ZC0wYjNlLTQ0OTQtYjA3Zi1iMzI1 NGZkZGVmNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/GNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMkE0cDQ+jdP/AfJGCzApkt83y6Dvj+BDYbkGEmVLqbrUf9/YLMUTN77 OF3KX628sOvwPULhBwB0ZGmXCE/E5mDvXJ2WzRxhKKATPlOG2+1bZqYU2Bnf4iXh xIuAtUpdTI64nOHd945GjBaNfF1V+20t4idjP4wohf+tzKdW2UfKCQYgmZaWRhR3 lsEQ1ia62IYnDz+EgQ0LdLHv9WVX96FUXLTwKZRlIelAKiczPbJ6ENpyqwF7WMCK NrdBcI0sPx6CX4er+vtRg3r3Cjj30G3+Y2o4wKkB9ft3rllHVHxT//2de7BCq84o 7PWiHCWEsVKSShAZDSMXNwb1bkdfgso= -----END CERTIFICATE-----Generated at Mon Mar 2 14:22:07 2026 by rpki-client