$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/3468e988-70e4-3dfd-a14d-360d7a837fb0.roa File: 3468e988-70e4-3dfd-a14d-360d7a837fb0.roa (raw, json) Hash identifier: I8ncos3YjxkfdSW6vDHgk+S7hKh9Oqqfo5LK1+NpMEw= Subject key identifier: A7:99:85:FA:5F:D3:50:95:69:02:DB:B6:1E:59:9E:8E:24:40:B9:B8 Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F4328584CF2BCE6DA38D98BCF85AACFA0 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/3468e988-70e4-3dfd-a14d-360d7a837fb0.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 393336 IP address blocks: 104.193.226.0/24 maxlen: 24 162.250.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bc:e6:da:38:d9:8b:cf:85:aa:cf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=f65c6f74-a44b-4ead-bebf-e762696b91a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:64:c3:81:2e:2c:36:c7:1a:84:25:9b:94:8f: 2d:60:c9:70:69:63:81:bb:3c:2c:2e:6b:f0:2f:d7: 88:b5:59:9a:8a:06:9f:6c:f6:01:51:dc:77:85:9b: 07:d4:ad:87:59:d7:5e:b1:23:ef:c9:29:09:6b:12: 6e:11:53:ae:6b:3e:a5:94:0e:ed:88:4e:0b:68:43: 19:1e:94:71:8d:61:77:6c:f8:fc:33:9a:46:20:98: ae:a5:6d:bb:1f:b1:54:0c:2b:25:f4:53:99:1e:68: 22:80:ae:20:f0:92:d4:30:c0:91:5a:8c:5d:6b:33: 11:8e:a9:27:a0:c0:17:3f:e1:67:bd:7d:1b:fd:79: 4f:8a:65:3c:cf:b0:cd:65:bb:2d:6f:09:ca:61:3f: f8:41:a2:ee:f8:26:a5:11:a2:52:12:ec:bc:b8:da: 7d:1e:fe:b0:7e:7a:f5:cf:25:7b:05:ca:f8:fc:8d: bd:40:8f:53:4d:8c:66:09:5a:6e:03:06:34:99:51: 2b:2e:c1:7f:a0:b4:72:98:ca:ce:c2:94:57:f7:97: 96:98:e0:6a:e3:0c:f0:0c:5c:cd:42:fd:82:c8:1d: dc:e7:d5:d2:78:0c:24:72:3a:d4:46:e1:e0:b3:bd: 26:84:75:48:f6:1f:51:7b:d5:1d:50:05:f5:ee:13: c7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:99:85:FA:5F:D3:50:95:69:02:DB:B6:1E:59:9E:8E:24:40:B9:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/3468e988-70e4-3dfd-a14d-360d7a837fb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 104.193.226.0/24 162.250.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:11:b1:b9:fa:fe:87:ac:c5:62:15:7e:f6:d5:08:ed:9d:68: 26:5f:b8:05:b7:88:f5:57:88:ed:1a:76:41:15:5c:b0:f8:93: f4:bf:c6:2f:99:98:0b:68:3a:0f:dd:9a:35:ae:98:85:36:15: e0:9e:62:d6:f4:f0:d6:3d:fe:54:d1:39:d3:e7:37:1c:8a:99: 06:6f:96:6c:5b:ab:c3:c0:6b:6b:eb:0c:60:11:14:fd:5f:79: 65:dd:f3:31:5f:fc:3e:59:4b:1a:6c:aa:1e:5f:8f:ec:e3:15: 44:f6:a5:58:43:4d:23:f6:77:66:f2:38:e9:6c:b5:6b:b7:80: d7:f3:4a:80:43:cb:0f:23:d1:a9:78:78:32:47:37:c9:e3:b6: 8a:b1:7b:5f:f1:47:f0:23:84:9b:76:e3:cc:1c:9f:20:30:a9: df:84:77:6a:13:15:dd:84:97:6c:45:40:b8:90:f4:e5:b0:ce: 8e:46:78:44:1e:27:c5:39:1a:d2:f9:79:6b:e2:d4:1a:94:c0: 44:20:a3:29:3d:32:6a:67:9b:b0:37:ae:d8:d4:5c:85:09:2c: e4:73:85:7a:b9:f8:b9:db:c5:ac:6a:8c:ad:09:29:94:f6:79: 48:5f:c7:ec:19:f8:99:88:2c:62:7a:85:c2:08:ec:6a:19:ba: 02:fd:44:4c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEzyvObaONmLz4Wqz6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk ZjY1YzZmNzQtYTQ0Yi00ZWFkLWJlYmYtZTc2MjY5NmI5MWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2TDgS4sNscahCWblI8tYMlwaWOBuzwsLmvw L9eItVmaigafbPYBUdx3hZsH1K2HWddesSPvySkJaxJuEVOuaz6llA7tiE4LaEMZ HpRxjWF3bPj8M5pGIJiupW27H7FUDCsl9FOZHmgigK4g8JLUMMCRWoxdazMRjqkn oMAXP+FnvX0b/XlPimU8z7DNZbstbwnKYT/4QaLu+CalEaJSEuy8uNp9Hv6wfnr1 zyV7Bcr4/I29QI9TTYxmCVpuAwY0mVErLsF/oLRymMrOwpRX95eWmOBq4wzwDFzN Qv2CyB3c59XSeAwkcjrURuHgs70mhHVI9h9Re9UdUAX17hPHJwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKeZhfpf01CVaQLbth5Zno4kQLm4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvMzQ2OGU5ODgtNzBlNC0z ZGZkLWExNGQtMzYwZDdhODM3ZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaMHiAwQA ovrrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGkRsbn6/oesxWIVfvbVCO2daCZfuAW3iPVXiO0adkEVXLD4 k/S/xi+ZmAtoOg/dmjWumIU2FeCeYtb08NY9/lTROdPnNxyKmQZvlmxbq8PAa2vr DGARFP1feWXd8zFf/D5ZSxpsqh5fj+zjFUT2pVhDTSP2d2byOOlstWu3gNfzSoBD yw8j0al4eDJHN8njtoqxe1/xR/AjhJt248wcnyAwqd+Ed2oTFd2El2xFQLiQ9OWw zo5GeEQeJ8U5GtL5eWvi1BqUwEQgoyk9Mmpnm7A3rtjUXIUJLORzhXq5+Lnbxaxq jK0JKZT2eUhfx+wZ+JmILGJ6hcII7GoZugL9REw= -----END CERTIFICATE-----Generated at Mon Mar 2 04:57:44 2026 by rpki-client