$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/d54235af-aa37-3c21-bbb6-6ba016f827d4.roa File: d54235af-aa37-3c21-bbb6-6ba016f827d4.roa (raw, json) Hash identifier: reWo6SgvhLjeq2maXbRaeVNDd4xm/YwI5lchrl2/954= Subject key identifier: 64:7B:96:0B:14:78:01:84:12:A7:1B:35:14:1D:F5:9E:30:CC:63:83 Certificate issuer: /CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Certificate serial: 010D0C9F4328584CFB9787E86BF343DA0DBA5940 Authority key identifier: 3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/d54235af-aa37-3c21-bbb6-6ba016f827d4.roa Signing time: Wed 25 Feb 2026 18:07:51 +0000 ROA not before: Wed 25 Feb 2026 18:07:51 +0000 ROA not after: Tue 26 May 2026 17:07:51 +0000 asID: 1299 IP address blocks: 199.101.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fb:97:87:e8:6b:f3:43:da:0d:ba:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Validity Not Before: Feb 25 18:07:51 2026 GMT Not After : May 26 17:07:51 2026 GMT Subject: CN=8d70bc68-d792-47df-860d-1f9b1b8eff23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f0:e4:ae:e7:19:f4:20:ed:ed:a9:56:78:e2: 45:f4:2a:a7:6f:e8:bf:b3:cb:d8:c9:30:79:b9:e9: 76:5b:45:bb:bf:f2:b2:53:47:64:37:a0:57:3a:c7: 93:87:a4:2a:c7:a0:7d:21:13:72:d9:ff:7b:e2:66: 2e:b0:69:db:96:25:fe:68:f4:01:6f:1b:f3:1d:78: a7:8f:ad:78:87:e2:d1:e9:f8:cf:11:65:0f:cc:1e: c8:4a:17:72:76:b8:93:d0:f0:ae:31:ff:79:6c:a7: 83:f4:2f:72:d5:3f:e4:ca:33:98:29:b1:53:e6:1a: 25:f8:59:8c:40:52:11:e9:a7:e2:c4:76:f4:4e:5e: a8:84:30:de:fa:d8:b4:0a:31:04:c3:3a:59:50:d4: 0b:c0:76:0c:73:bf:84:fd:37:f9:2d:9f:4d:61:31: ed:0f:c5:95:f6:27:2e:e8:d5:46:42:30:a8:2b:67: 8a:61:2d:65:91:32:dc:c8:28:9e:f2:4f:f6:19:80: a7:6a:48:78:08:fa:dc:dc:bb:5e:a5:11:f2:fd:eb: 95:f9:0e:1c:22:95:c3:b4:eb:f3:2a:5d:ee:15:ba: 4e:93:e6:ed:ea:7c:1f:a2:fe:56:6f:6e:6f:15:9e: 54:3f:9e:96:07:17:eb:d6:46:76:63:db:cc:a5:67: 7c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7B:96:0B:14:78:01:84:12:A7:1B:35:14:1D:F5:9E:30:CC:63:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/d54235af-aa37-3c21-bbb6-6ba016f827d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl X509v3 Authority Key Identifier: keyid:3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer sbgp-ipAddrBlock: critical IPv4: 199.101.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:5a:89:37:b7:31:9e:c2:73:a2:63:7d:85:94:c4:34:00:bf: 83:ac:39:31:58:71:a9:e1:7c:98:47:21:d9:06:ab:43:09:e6: 96:4c:a9:2c:b3:fb:0d:cc:a6:c2:e5:42:68:ea:25:c2:0b:e2: a4:ab:4e:ec:2b:8c:f0:5e:b7:26:3c:ee:79:b0:10:02:e1:07: b6:c0:7c:e4:f3:9c:21:31:83:23:f0:3e:42:3e:e2:2e:4b:93: f5:b6:b4:30:64:53:a3:78:28:62:1e:61:aa:af:10:d4:56:dc: 0b:aa:ea:50:95:b6:af:f1:49:e2:62:6f:07:46:8b:b4:fe:14: 9d:f4:6a:d0:58:02:d1:eb:69:3c:8e:dd:49:b6:89:78:c2:91: 66:bb:32:fb:c6:fd:56:ea:65:cf:24:32:b7:b6:34:78:9d:de: 05:9a:a2:c0:70:da:b1:fc:69:bf:98:df:48:8e:46:0c:77:3d: 3f:09:78:ee:00:5c:2e:a0:54:23:2b:ad:22:35:29:fb:f4:c2: 01:c3:d8:b3:f6:a9:76:70:ed:90:9a:95:d3:83:40:2b:19:63: 91:f9:d0:67:fb:72:3b:87:d8:27:db:b0:fc:18:30:bc:ea:51: a1:dc:d5:cb:b1:39:df:47:34:28:8c:76:c5:ce:24:9f:f8:5f: 96:e0:2a:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz7l4foa/ND2g26WUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFlMjItMzQ5Yzc1MTk1 ZjY1MB4XDTI2MDIyNTE4MDc1MVoXDTI2MDUyNjE3MDc1MVowLzEtMCsGA1UEAxMk OGQ3MGJjNjgtZDc5Mi00N2RmLTg2MGQtMWY5YjFiOGVmZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fDkrucZ9CDt7alWeOJF9Cqnb+i/s8vYyTB5 uel2W0W7v/KyU0dkN6BXOseTh6Qqx6B9IRNy2f974mYusGnbliX+aPQBbxvzHXin j614h+LR6fjPEWUPzB7IShdydriT0PCuMf95bKeD9C9y1T/kyjOYKbFT5hol+FmM QFIR6afixHb0Tl6ohDDe+ti0CjEEwzpZUNQLwHYMc7+E/Tf5LZ9NYTHtD8WV9icu 6NVGQjCoK2eKYS1lkTLcyCie8k/2GYCnakh4CPrc3LtepRHy/euV+Q4cIpXDtOvz Kl3uFbpOk+bt6nwfov5Wb25vFZ5UP56WBxfr1kZ2Y9vMpWd8qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGR7lgsUeAGEEqcbNRQd9Z4wzGODMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYjlm M2RjNS00ZDgyLTRkODItYWUyMi0zNDljNzUxOTVmNjUvZDU0MjM1YWYtYWEzNy0z YzIxLWJiYjYtNmJhMDE2ZjgyN2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFl MjItMzQ5Yzc1MTk1ZjY1L2NiOWYzZGM1LTRkODItNGQ4Mi1hZTIyLTM0OWM3NTE5 NWY2NS5jcmwwHwYDVR0jBBgwFoAUO5u6/Gw878L1iqiluojFFhAupTAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYjlmM2RjNS00ZDgyLTRkODItYWUyMi0zNDlj NzUxOTVmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2WcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExaiTe3MZ7Cc6JjfYWUxDQAv4OsOTFYcanhfJhHIdkGq0MJ5pZMqSyz +w3MpsLlQmjqJcIL4qSrTuwrjPBetyY87nmwEALhB7bAfOTznCExgyPwPkI+4i5L k/W2tDBkU6N4KGIeYaqvENRW3Auq6lCVtq/xSeJibwdGi7T+FJ30atBYAtHraTyO 3Um2iXjCkWa7MvvG/VbqZc8kMre2NHid3gWaosBw2rH8ab+Y30iORgx3PT8JeO4A XC6gVCMrrSI1Kfv0wgHD2LP2qXZw7ZCaldODQCsZY5H50Gf7cjuH2CfbsPwYMLzq UaHc1cuxOd9HNCiMdsXOJJ/4X5bgKsE= -----END CERTIFICATE-----Generated at Sun Mar 1 16:23:39 2026 by rpki-client