$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/d5ee5953-1179-38f3-9cd8-1324c853f484.roa File: d5ee5953-1179-38f3-9cd8-1324c853f484.roa (raw, json) Hash identifier: hpD2WUWO9wxsce6zGl46eyPx6R+ddkJNzzlqQ2eN6mw= Subject key identifier: B3:6C:F7:78:7A:86:E8:8D:FE:06:9A:AF:2D:EC:26:10:6E:D6:C2:97 Certificate issuer: /CN=b02b2a27-63d2-435f-8114-d98e289edc6c Certificate serial: 010D0C9F4328584CEFF23D997CC2662D79005E80 Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/d5ee5953-1179-38f3-9cd8-1324c853f484.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 14618 IP address blocks: 208.71.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:3d:99:7c:c2:66:2d:79:00:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=a4b948c1-be74-4a5b-8d82-9cf0966f2ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3b:b0:67:f0:4a:f1:d5:d5:24:35:8d:cc:22: 1f:90:91:61:74:97:66:f0:64:e9:2c:53:7e:ed:13: 01:2e:f7:36:2e:68:38:85:73:5f:50:f1:fb:f1:33: 30:6e:fc:3f:9d:a4:3a:69:ac:e1:ac:df:8f:e9:69: 27:44:2c:70:2d:21:4d:f8:58:7d:46:ce:f3:59:61: 68:a8:8a:38:f2:21:fb:89:73:8a:89:fb:30:7a:48: 79:ca:89:2e:ee:92:c8:cc:96:35:04:1a:ad:a2:e1: 89:00:31:b5:c5:3f:57:3a:58:20:ec:8f:10:0b:d4: a4:95:15:27:f0:b9:91:b6:13:f6:44:4d:a7:e4:7a: cf:b7:c4:9f:61:57:1d:4a:1c:4b:24:79:fe:06:2d: 66:eb:76:c5:6d:d8:b2:3b:85:8f:44:85:55:fb:50: 7c:92:e6:71:fd:bf:1f:6b:7c:b0:77:41:22:45:b2: 5b:b0:e1:68:8d:78:fc:08:52:41:9d:d8:b7:bd:a6: a7:77:45:b9:ee:af:b1:bc:ee:72:ad:e4:84:68:59: f3:5f:17:fa:50:03:8a:9c:c0:f3:1c:e4:e4:6d:b4: 6c:64:0b:ab:1b:75:47:cf:a7:24:c9:35:98:22:9c: 3d:c5:30:d9:0a:22:cc:0b:87:32:58:39:7f:ba:e3: bd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6C:F7:78:7A:86:E8:8D:FE:06:9A:AF:2D:EC:26:10:6E:D6:C2:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/d5ee5953-1179-38f3-9cd8-1324c853f484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl X509v3 Authority Key Identifier: keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer sbgp-ipAddrBlock: critical IPv4: 208.71.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:e3:ec:b9:ff:8d:84:10:d8:10:2d:6e:98:8b:6b:0f:db:19: f4:67:b1:fd:34:ee:5a:fd:26:c9:7f:49:ca:46:79:cb:85:46: 19:7d:20:b0:8e:27:57:bd:d5:6b:7b:6f:f3:04:20:b6:a7:de: 4d:b7:36:b6:d7:94:41:66:47:4d:95:3a:6c:82:a5:95:62:6b: ef:39:2b:98:83:17:24:0a:d4:c6:31:cd:b3:20:3d:06:1c:8a: fe:97:af:7b:98:62:98:7d:2f:27:4b:c8:26:b7:f9:ef:fd:cc: 1a:d8:d0:86:88:ce:7a:19:fc:89:c7:1a:56:6f:c6:23:a4:e0: 1a:81:45:81:11:ba:fa:b8:14:ff:69:9f:0a:c4:d9:09:8d:a2: f4:05:ae:f3:d2:da:68:ab:c3:e1:99:c8:dd:c0:fa:45:a6:15: 1f:10:15:d1:99:e2:63:39:ee:39:bc:e9:3c:d7:d1:56:3d:e2: bf:af:e4:9f:28:c5:77:3d:35:aa:a2:27:89:94:ee:33:77:10: 67:3d:37:6c:1f:c8:2f:3c:fc:3c:e0:2c:bf:4c:de:6d:27:ae: d0:ad:28:c2:db:18:9a:70:77:73:0b:30:04:74:c9:33:47:5e: c4:61:f1:1b:f5:0b:3a:a1:41:a3:3d:c3:5c:50:85:b3:8c:ba: e3:03:dd:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8j2ZfMJmLXkAXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyYjJhMjctNjNkMi00MzVmLTgxMTQtZDk4ZTI4OWVk YzZjMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk YTRiOTQ4YzEtYmU3NC00YTViLThkODItOWNmMDk2NmYyYWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTuwZ/BK8dXVJDWNzCIfkJFhdJdm8GTpLFN+ 7RMBLvc2Lmg4hXNfUPH78TMwbvw/naQ6aazhrN+P6WknRCxwLSFN+Fh9Rs7zWWFo qIo48iH7iXOKifswekh5yoku7pLIzJY1BBqtouGJADG1xT9XOlgg7I8QC9SklRUn 8LmRthP2RE2n5HrPt8SfYVcdShxLJHn+Bi1m63bFbdiyO4WPRIVV+1B8kuZx/b8f a3ywd0EiRbJbsOFojXj8CFJBndi3vaand0W57q+xvO5yreSEaFnzXxf6UAOKnMDz HOTkbbRsZAurG3VHz6ckyTWYIpw9xTDZCiLMC4cyWDl/uuO9QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNs93h6huiN/gaary3sJhBu1sKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMDJi MmEyNy02M2QyLTQzNWYtODExNC1kOThlMjg5ZWRjNmMvZDVlZTU5NTMtMTE3OS0z OGYzLTljZDgtMTMyNGM4NTNmNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjAyYjJhMjctNjNkMi00MzVmLTgx MTQtZDk4ZTI4OWVkYzZjL2IwMmIyYTI3LTYzZDItNDM1Zi04MTE0LWQ5OGUyODll ZGM2Yy5jcmwwHwYDVR0jBBgwFoAUaP0QqXb6CaxECs/rlUyyMr81kckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMDJiMmEyNy02M2QyLTQzNWYtODExNC1kOThl Mjg5ZWRjNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EfTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHj7Ln/jYQQ2BAtbpiLaw/bGfRnsf007lr9Jsl/ScpGecuFRhl9ILCO J1e91Wt7b/MEILan3k23NrbXlEFmR02VOmyCpZVia+85K5iDFyQK1MYxzbMgPQYc iv6Xr3uYYph9LydLyCa3+e/9zBrY0IaIznoZ/InHGlZvxiOk4BqBRYERuvq4FP9p nwrE2QmNovQFrvPS2mirw+GZyN3A+kWmFR8QFdGZ4mM57jm86TzX0VY94r+v5J8o xXc9NaqiJ4mU7jN3EGc9N2wfyC88/DzgLL9M3m0nrtCtKMLbGJpwd3MLMAR0yTNH XsRh8Rv1CzqhQaM9w1xQhbOMuuMD3fo= -----END CERTIFICATE-----Generated at Mon Mar 2 15:30:16 2026 by rpki-client