$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/232bd181-e2ca-3b10-b390-d882a9d6cd18.roa File: 232bd181-e2ca-3b10-b390-d882a9d6cd18.roa (raw, json) Hash identifier: ObsAUmElrsvynmobA/KK+Aqq5ZEgW1Ef84O8cnMNwVQ= Subject key identifier: 5A:29:BB:0C:23:98:DE:40:E5:F4:47:39:D1:4E:41:C5:29:3B:2C:E3 Certificate issuer: /CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Certificate serial: 010D0C9F4328584CFB975FDDD9AB691C9C613B80 Authority key identifier: 3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/232bd181-e2ca-3b10-b390-d882a9d6cd18.roa Signing time: Wed 25 Feb 2026 18:07:32 +0000 ROA not before: Wed 25 Feb 2026 18:07:32 +0000 ROA not after: Tue 26 May 2026 17:07:32 +0000 asID: 30286 IP address blocks: 199.101.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fb:97:5f:dd:d9:ab:69:1c:9c:61:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Validity Not Before: Feb 25 18:07:32 2026 GMT Not After : May 26 17:07:32 2026 GMT Subject: CN=fb2bdefc-9f61-4431-9d14-ac4520da64f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5d:9d:58:6e:19:55:e0:9b:d4:66:23:80:e0: 63:89:37:63:07:72:94:43:62:97:f2:4e:61:bb:85: d2:12:f5:97:3f:72:9d:14:d1:d1:5f:ce:99:26:4c: a6:ae:ab:e0:5f:35:ea:f4:d8:73:77:10:3e:c8:75: bd:d2:36:95:cf:e3:44:8c:06:bc:39:1a:25:13:00: 7c:47:f4:58:30:b4:d0:65:e0:9a:bc:e6:00:1a:7a: db:9c:15:46:09:bb:d7:a7:f6:eb:23:b6:27:86:ab: bb:cd:10:08:5d:bd:eb:02:e3:6d:62:69:bf:1f:21: d5:05:c4:b6:95:37:f3:c5:02:26:84:e6:fa:f2:59: 46:16:e0:6a:ba:9e:76:bd:ef:47:a9:77:3e:9a:3e: ad:1f:b0:f8:6f:a9:ac:36:56:5a:b5:6d:2c:d7:ca: 69:7d:af:68:01:a1:95:cb:50:ed:7d:f6:69:4e:f8: ff:20:b0:72:a4:d7:f4:e1:09:ac:db:29:15:56:d2: 01:11:fe:0f:75:40:a7:e0:61:60:87:25:9b:3c:dc: 54:5e:60:92:12:1f:ac:45:15:a2:eb:f6:78:9c:53: be:bc:5c:10:55:40:5f:0f:d1:c7:c0:bb:4a:80:3b: 6f:3f:d1:1a:bd:a7:b7:c8:8c:89:b0:94:99:1a:0e: fe:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:29:BB:0C:23:98:DE:40:E5:F4:47:39:D1:4E:41:C5:29:3B:2C:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/232bd181-e2ca-3b10-b390-d882a9d6cd18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl X509v3 Authority Key Identifier: keyid:3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer sbgp-ipAddrBlock: critical IPv4: 199.101.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:84:17:d5:0e:1e:c2:ba:37:e7:d9:4b:b7:af:9c:9c:80:f0: af:ed:a2:9c:eb:4f:7d:b1:15:86:bc:4b:9f:fd:a9:d9:a6:09: 77:0f:62:8c:15:71:c5:be:5d:1f:b5:af:54:6c:1e:2e:bd:85: f0:90:ef:5b:28:6a:68:04:96:ba:ca:b8:ee:06:90:32:1d:0c: 3c:ea:5c:d0:fe:39:3d:d1:17:b3:9a:bf:af:63:03:34:94:de: 49:00:af:c1:e6:96:21:13:85:48:e8:fd:54:fb:dd:9c:5f:d9: 9c:ba:8a:0a:e4:7f:40:5a:f6:05:c3:77:9e:f6:6a:2d:bd:8f: 13:7d:35:5d:9d:a4:fd:ef:fd:2e:c7:d6:87:da:12:8e:a3:9d: 90:bb:7c:d5:99:bb:85:30:44:b8:6d:30:e2:a1:36:04:1b:ee: 82:13:5b:f2:1d:3c:ab:d3:0e:c8:f1:8c:9a:b0:b1:ca:5d:13: de:e7:8a:43:89:32:dd:ab:cb:a5:76:10:63:bb:d3:cd:54:2e: 48:2d:d4:3b:cc:4a:a4:02:02:f6:b6:fe:7b:e8:00:e0:7d:82: 24:10:eb:5f:63:bc:c8:f8:2c:36:e2:68:11:8b:f5:66:af:70: 14:3a:75:21:7c:aa:07:42:29:3e:c3:d2:4a:0a:83:70:d1:0e: 26:65:99:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz7l1/d2atpHJxhO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFlMjItMzQ5Yzc1MTk1 ZjY1MB4XDTI2MDIyNTE4MDczMloXDTI2MDUyNjE3MDczMlowLzEtMCsGA1UEAxMk ZmIyYmRlZmMtOWY2MS00NDMxLTlkMTQtYWM0NTIwZGE2NGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml2dWG4ZVeCb1GYjgOBjiTdjB3KUQ2KX8k5h u4XSEvWXP3KdFNHRX86ZJkymrqvgXzXq9NhzdxA+yHW90jaVz+NEjAa8ORolEwB8 R/RYMLTQZeCavOYAGnrbnBVGCbvXp/brI7Ynhqu7zRAIXb3rAuNtYmm/HyHVBcS2 lTfzxQImhOb68llGFuBqup52ve9HqXc+mj6tH7D4b6msNlZatW0s18ppfa9oAaGV y1DtffZpTvj/ILBypNf04Qms2ykVVtIBEf4PdUCn4GFghyWbPNxUXmCSEh+sRRWi 6/Z4nFO+vFwQVUBfD9HHwLtKgDtvP9Eavae3yIyJsJSZGg7+tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFopuwwjmN5A5fRHOdFOQcUpOyzjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYjlm M2RjNS00ZDgyLTRkODItYWUyMi0zNDljNzUxOTVmNjUvMjMyYmQxODEtZTJjYS0z YjEwLWIzOTAtZDg4MmE5ZDZjZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFl MjItMzQ5Yzc1MTk1ZjY1L2NiOWYzZGM1LTRkODItNGQ4Mi1hZTIyLTM0OWM3NTE5 NWY2NS5jcmwwHwYDVR0jBBgwFoAUO5u6/Gw878L1iqiluojFFhAupTAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYjlmM2RjNS00ZDgyLTRkODItYWUyMi0zNDlj NzUxOTVmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2WcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqEF9UOHsK6N+fZS7evnJyA8K/topzrT32xFYa8S5/9qdmmCXcPYowV ccW+XR+1r1RsHi69hfCQ71soamgElrrKuO4GkDIdDDzqXND+OT3RF7Oav69jAzSU 3kkAr8HmliEThUjo/VT73Zxf2Zy6igrkf0Ba9gXDd572ai29jxN9NV2dpP3v/S7H 1ofaEo6jnZC7fNWZu4UwRLhtMOKhNgQb7oITW/IdPKvTDsjxjJqwscpdE97nikOJ Mt2ry6V2EGO7081ULkgt1DvMSqQCAva2/nvoAOB9giQQ619jvMj4LDbiaBGL9Wav cBQ6dSF8qgdCKT7D0koKg3DRDiZlmXQ= -----END CERTIFICATE-----Generated at Mon Mar 2 01:28:57 2026 by rpki-client