$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e8948fc6-c8e8-3ebf-b4f3-99bf7e79d5c3.roa File: e8948fc6-c8e8-3ebf-b4f3-99bf7e79d5c3.roa (raw, json) Hash identifier: +qxtPmIAPdUIxrP97x0hcoPBegruHvAkbyYOfyCxE6w= Subject key identifier: C4:AA:AD:BD:92:33:83:D6:33:05:08:4B:FB:52:97:2F:9F:F5:83:A2 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584CD40772F9D1D197CA6805BB80 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e8948fc6-c8e8-3ebf-b4f3-99bf7e79d5c3.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 2152 IP address blocks: 137.164.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:72:f9:d1:d1:97:ca:68:05:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=fb909c8b-8050-4aac-9bf2-cfbd33780ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2d:a8:a9:de:45:79:a6:07:56:ed:92:3b:80: de:f5:99:5e:02:39:09:4a:ac:73:1c:3a:cf:ff:88: 53:8b:2a:68:87:42:8d:2a:d0:06:34:a4:27:07:ac: 29:7f:87:5b:6c:61:61:b2:47:7f:91:ad:36:3c:34: 41:53:57:04:d6:5a:d1:dd:52:8f:4a:4d:6b:7d:8f: 1b:6b:a4:c8:75:61:ed:cb:89:f1:28:ec:9f:70:36: 01:3a:fd:4c:7e:70:1f:6e:9b:73:c3:8b:3d:36:bc: 79:73:02:5b:8a:80:0a:09:62:d3:0e:2b:f9:d7:1e: 67:08:68:dd:a8:75:1a:22:6c:72:5c:cf:92:dc:23: 9e:b1:80:a5:13:79:ac:dd:ec:58:2f:e2:11:2e:a5: 36:9d:42:f2:af:ab:c0:29:d5:86:83:6d:3b:fe:0d: db:e9:46:81:cc:ab:be:24:0e:a0:65:80:d3:b2:e4: ba:6e:1b:d1:4a:61:fa:74:e6:0e:38:e6:09:0e:83: 5f:77:24:19:c7:1c:7a:ad:09:cc:78:a7:1e:01:90: 49:e6:ad:ff:7f:b8:bc:51:0c:a9:2c:b5:23:e6:83: f1:7b:32:78:8f:9a:a1:2d:2c:9f:a1:86:cb:0b:00: 3e:33:28:d6:7b:19:b5:73:01:3d:97:62:a7:ef:1a: 0a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AA:AD:BD:92:33:83:D6:33:05:08:4B:FB:52:97:2F:9F:F5:83:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e8948fc6-c8e8-3ebf-b4f3-99bf7e79d5c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:3a:b8:e1:55:d6:58:60:66:8b:ff:c5:e9:63:09:d6:ee:e7: ee:31:45:56:60:4d:06:83:9b:28:14:46:91:c5:a1:bc:1d:55: 6f:c1:84:78:12:f4:b6:3c:3d:e0:48:dc:70:3c:5f:75:99:93: 6e:7b:8f:b9:81:a0:3d:cf:de:30:25:43:99:1f:3c:ec:52:b6: cd:31:a9:e8:e2:f5:5c:56:b9:8a:f8:bf:2b:8d:75:2d:1f:d5: 00:11:b1:b7:cc:60:13:bc:ea:c0:39:6d:d1:cb:f8:e1:f5:ad: 8f:e0:da:ca:49:b8:a2:5a:61:34:f1:5a:26:19:e6:f8:03:3f: ca:e4:a3:64:b8:e9:0d:79:15:d6:04:03:ba:58:f1:45:6d:bd: 9e:6d:91:6f:16:49:11:36:16:69:60:42:d4:8d:96:a3:a3:c3: a8:40:0c:0d:e5:aa:aa:52:fe:7d:c1:a6:35:fb:21:17:4e:c1: 7f:dc:78:72:39:f3:ba:70:bc:62:b3:0e:76:cd:ac:0a:68:16: 0c:fc:3a:7b:b9:d5:97:cf:95:d7:92:d5:5f:04:4b:5c:c9:db: 65:0b:d0:e1:86:b3:dc:e0:97:f2:7a:27:37:3f:32:ce:74:9c: 34:53:05:35:a2:ba:54:1d:c2:58:f7:60:ee:53:0b:a1:b5:57: 73:77:24:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB3L50dGXymgFu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk ZmI5MDljOGItODA1MC00YWFjLTliZjItY2ZiZDMzNzgwZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi2oqd5FeaYHVu2SO4De9ZleAjkJSqxzHDrP /4hTiypoh0KNKtAGNKQnB6wpf4dbbGFhskd/ka02PDRBU1cE1lrR3VKPSk1rfY8b a6TIdWHty4nxKOyfcDYBOv1MfnAfbptzw4s9Nrx5cwJbioAKCWLTDiv51x5nCGjd qHUaImxyXM+S3COesYClE3ms3exYL+IRLqU2nULyr6vAKdWGg207/g3b6UaBzKu+ JA6gZYDTsuS6bhvRSmH6dOYOOOYJDoNfdyQZxxx6rQnMeKceAZBJ5q3/f7i8UQyp LLUj5oPxezJ4j5qhLSyfoYbLCwA+MyjWexm1cwE9l2Kn7xoK7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSqrb2SM4PWMwUIS/tSly+f9YOiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvZTg5NDhmYzYtYzhlOC0z ZWJmLWI0ZjMtOTliZjdlNzlkNWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaTxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADc6uOFV1lhgZov/xeljCdbu5+4xRVZgTQaDmygURpHFobwdVW/BhHgS 9LY8PeBI3HA8X3WZk257j7mBoD3P3jAlQ5kfPOxSts0xqeji9VxWuYr4vyuNdS0f 1QARsbfMYBO86sA5bdHL+OH1rY/g2spJuKJaYTTxWiYZ5vgDP8rko2S46Q15FdYE A7pY8UVtvZ5tkW8WSRE2FmlgQtSNlqOjw6hADA3lqqpS/n3BpjX7IRdOwX/ceHI5 87pwvGKzDnbNrApoFgz8Onu51ZfPldeS1V8ES1zJ22UL0OGGs9zgl/J6Jzc/Ms50 nDRTBTWiulQdwlj3YO5TC6G1V3N3JK0= -----END CERTIFICATE-----Generated at Mon Mar 2 10:56:41 2026 by rpki-client