$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/98962ffc-7137-39c6-954d-ea2ac9a1f644.roa File: 98962ffc-7137-39c6-954d-ea2ac9a1f644.roa (raw, json) Hash identifier: nfTSYMZEeIJglIXRcSCVzITkOLajObFWxh33kcoejfE= Subject key identifier: 23:F1:60:45:C6:15:0D:4A:3C:78:A8:EC:68:78:CC:60:D3:E9:6A:D4 Certificate issuer: /CN=f9441892-5f50-4eb3-a218-8dada1be8f65 Certificate serial: 010D0C9F4328584CD6D225F6A7C250206A8D3200 Authority key identifier: 5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/98962ffc-7137-39c6-954d-ea2ac9a1f644.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 29900 IP address blocks: 162.218.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:25:f6:a7:c2:50:20:6a:8d:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9441892-5f50-4eb3-a218-8dada1be8f65 Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=3558f7b5-0233-4d1a-8802-de614c315589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f8:c4:29:77:93:98:16:2b:35:ce:47:4c:6e: c0:89:6d:f9:93:8d:43:d5:b0:d4:dd:71:28:28:c7: 83:ec:d9:ab:68:dd:9c:fa:4f:be:73:28:e3:ec:3b: 3f:da:58:07:ee:9c:bd:26:77:c9:26:be:cf:1c:01: c0:fc:95:92:82:2b:e9:ab:60:9d:3e:93:89:56:0a: ad:55:65:f0:8a:28:df:d9:a6:c7:58:73:9a:b0:dd: 45:a4:13:55:9b:79:9d:68:22:f8:12:e1:18:c2:a2: 55:e0:eb:9e:6a:3b:fd:f6:2b:64:67:66:df:34:8c: 5d:16:e6:3a:8a:9e:cb:bc:5a:a7:a4:87:51:05:4f: a2:51:2d:dc:d9:d2:44:71:e7:93:d0:95:d4:01:16: a0:9c:63:b0:94:fe:7a:a8:6d:50:ee:23:80:0c:7c: 8d:ec:52:3d:6a:2b:cd:c5:0c:3d:64:cf:74:bf:bb: 8e:5a:fd:5f:c2:6c:dc:f8:e7:5f:4c:68:ff:50:e0: c1:be:e2:04:b8:30:31:42:c5:92:f3:99:4c:2e:05: 79:f0:2c:12:a8:54:52:01:7e:11:a6:9a:ac:f6:e7: 9d:a7:1f:0c:f7:ef:33:de:46:44:0b:68:05:47:88: e5:bf:e7:ad:eb:5b:d7:d9:cb:8c:30:8d:0a:a1:39: 92:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F1:60:45:C6:15:0D:4A:3C:78:A8:EC:68:78:CC:60:D3:E9:6A:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/98962ffc-7137-39c6-954d-ea2ac9a1f644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl X509v3 Authority Key Identifier: keyid:5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer sbgp-ipAddrBlock: critical IPv4: 162.218.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:c3:81:b3:e6:b9:71:0f:fe:9f:57:9d:07:5f:7f:91:ae:ed: 32:a8:b5:c5:c1:92:8b:9d:a9:eb:c6:d8:8b:61:03:32:26:ce: c1:4b:28:4c:78:c5:99:cc:a5:a3:5d:b8:6e:d2:cd:eb:24:1b: 0d:71:57:7f:e1:5d:42:fb:fa:9e:52:33:71:e2:2d:b7:95:87: 51:11:46:67:7d:59:ab:04:e6:c5:f0:0d:c7:df:30:5e:28:0c: 67:22:79:79:92:e1:f2:2c:a1:71:96:7d:63:74:76:d8:a3:49: 1e:dc:82:7b:c9:25:f1:8c:88:eb:14:72:8f:4b:39:52:11:ad: 69:1c:c0:57:e7:41:ef:32:6b:10:72:1b:78:4b:2f:1a:36:64: 80:82:01:66:ea:42:ec:a5:98:b8:2e:a9:a6:ce:4c:a2:fe:07: 51:7a:17:f3:fe:e8:a1:fd:ff:4a:6b:ce:12:89:88:72:32:fc: bf:9d:99:01:db:83:9c:97:4c:f0:fc:16:86:ca:5f:58:5d:12: 7e:5d:b7:4c:91:38:d3:00:89:9f:36:14:37:b0:54:60:2b:fa: 20:42:b3:ef:ef:70:18:02:89:55:ca:f3:42:bd:b6:b9:43:51: 17:12:1d:29:67:fc:c4:88:84:33:a9:63:28:db:25:3d:d7:36: 41:fa:73:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0iX2p8JQIGqNMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk0NDE4OTItNWY1MC00ZWIzLWEyMTgtOGRhZGExYmU4 ZjY1MB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk MzU1OGY3YjUtMDIzMy00ZDFhLTg4MDItZGU2MTRjMzE1NTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/jEKXeTmBYrNc5HTG7AiW35k41D1bDU3XEo KMeD7NmraN2c+k++cyjj7Ds/2lgH7py9JnfJJr7PHAHA/JWSgivpq2CdPpOJVgqt VWXwiijf2abHWHOasN1FpBNVm3mdaCL4EuEYwqJV4Oueajv99itkZ2bfNIxdFuY6 ip7LvFqnpIdRBU+iUS3c2dJEceeT0JXUARagnGOwlP56qG1Q7iOADHyN7FI9aivN xQw9ZM90v7uOWv1fwmzc+OdfTGj/UODBvuIEuDAxQsWS85lMLgV58CwSqFRSAX4R ppqs9uedpx8M9+8z3kZEC2gFR4jlv+et61vX2cuMMI0KoTmSdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPxYEXGFQ1KPHio7Gh4zGDT6WrUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOTQ0 MTg5Mi01ZjUwLTRlYjMtYTIxOC04ZGFkYTFiZThmNjUvOTg5NjJmZmMtNzEzNy0z OWM2LTk1NGQtZWEyYWM5YTFmNjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjk0NDE4OTItNWY1MC00ZWIzLWEy MTgtOGRhZGExYmU4ZjY1L2Y5NDQxODkyLTVmNTAtNGViMy1hMjE4LThkYWRhMWJl OGY2NS5jcmwwHwYDVR0jBBgwFoAUWhK/TXP9mEBgMFbXtjy8njeqs8kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOTQ0MTg5Mi01ZjUwLTRlYjMtYTIxOC04ZGFk YTFiZThmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotrEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnDgbPmuXEP/p9XnQdff5Gu7TKotcXBkoudqevG2IthAzImzsFLKEx4 xZnMpaNduG7SzeskGw1xV3/hXUL7+p5SM3HiLbeVh1ERRmd9WasE5sXwDcffMF4o DGcieXmS4fIsoXGWfWN0dtijSR7cgnvJJfGMiOsUco9LOVIRrWkcwFfnQe8yaxBy G3hLLxo2ZICCAWbqQuylmLguqabOTKL+B1F6F/P+6KH9/0przhKJiHIy/L+dmQHb g5yXTPD8FobKX1hdEn5dt0yRONMAiZ82FDewVGAr+iBCs+/vcBgCiVXK80K9trlD URcSHSln/MSIhDOpYyjbJT3XNkH6cxM= -----END CERTIFICATE-----Generated at Mon Mar 2 04:03:17 2026 by rpki-client