$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/a7b07991-276a-397d-8a33-ada4bc735f4f.roa File: a7b07991-276a-397d-8a33-ada4bc735f4f.roa (raw, json) Hash identifier: 4QiB5cmvgGYvoZYH9gSdj+UfpcCMo9P9MjD23s7eh1A= Subject key identifier: D9:1A:8D:04:D9:C1:E1:21:79:5C:EB:B9:8C:F1:7F:5B:AB:09:22:8F Certificate issuer: /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Certificate serial: 010D0C9F4328584CF4222FDC6609D056BF5BA080 Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/a7b07991-276a-397d-8a33-ada4bc735f4f.roa Signing time: Mon 23 Feb 2026 02:00:31 +0000 ROA not before: Mon 23 Feb 2026 02:00:31 +0000 ROA not after: Sun 24 May 2026 01:00:31 +0000 asID: 54613 IP address blocks: 142.202.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:22:2f:dc:66:09:d0:56:bf:5b:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Validity Not Before: Feb 23 02:00:31 2026 GMT Not After : May 24 01:00:31 2026 GMT Subject: CN=15419ce1-3468-4500-ba92-ce40a7f40592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:d8:ff:d6:f3:e0:16:d4:33:eb:6f:24:d3: 35:5e:46:11:06:ad:21:55:00:cb:93:06:e7:cf:2e: 97:56:1b:e5:1b:5d:fa:59:ee:0c:c1:c5:b9:b9:88: a5:b9:30:93:b2:5f:21:bf:84:70:a8:15:16:03:05: 21:24:4b:b8:9e:8e:6e:c1:ea:5a:f7:40:64:b9:2d: 8e:52:82:67:5c:6b:43:81:2d:b6:5c:27:28:6a:ea: 2e:68:07:00:41:88:39:95:01:0f:be:82:af:20:20: db:db:cc:cc:08:48:f0:82:6f:f5:27:4b:78:54:bd: 00:f8:cd:88:63:5e:23:0a:5d:f4:05:3c:86:3f:ab: e6:bf:8a:ae:81:4b:cf:b1:d4:6a:aa:2c:32:58:c1: 7b:65:ae:71:28:b5:34:3d:79:00:be:8e:48:30:70: 51:72:16:67:2b:b1:c4:3a:c4:d6:9f:b3:3e:91:b0: 8d:c7:94:5b:ba:b5:d1:6d:ea:5d:ce:33:2e:d3:fb: 04:2f:18:a4:e5:06:76:3b:d3:cb:05:35:e7:05:ce: 74:f9:b2:e9:71:c7:d6:94:d0:ab:b9:d2:05:22:ab: c2:c9:62:e9:b5:3e:3e:54:36:e3:66:6a:0e:52:02: e1:b8:30:f3:b6:52:cf:1f:d9:77:3b:ac:e0:37:83: c9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1A:8D:04:D9:C1:E1:21:79:5C:EB:B9:8C:F1:7F:5B:AB:09:22:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/a7b07991-276a-397d-8a33-ada4bc735f4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl X509v3 Authority Key Identifier: keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer sbgp-ipAddrBlock: critical IPv4: 142.202.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:79:23:41:ee:f5:64:ef:55:00:44:4f:7d:54:e4:2f:69:e9: 31:8b:86:75:64:f1:51:80:a4:46:96:02:01:fb:17:ec:b9:75: 06:03:3f:ca:e9:8e:bc:5f:40:fc:95:a1:2e:bf:0c:b6:c8:dc: 3a:de:04:e2:88:1f:6b:59:5c:d2:40:ce:13:a0:2c:84:e0:07: 5d:dd:81:27:55:cb:0a:1a:7f:5e:ea:3e:20:ca:23:17:a5:b2: 17:c5:5b:9d:23:21:c2:10:1b:d1:c4:ba:5a:b8:76:c4:6b:2c: dc:7b:ee:51:0c:06:65:c5:8f:80:95:d6:60:05:9e:ae:78:13: 27:f8:b2:67:64:b9:c5:b8:a5:99:e2:1d:4b:52:0c:a1:c8:8e: 9c:4e:5c:7c:1b:4c:b1:5c:63:c0:c3:d1:1a:19:30:85:ae:b2: 64:d2:c7:65:89:f1:83:1d:a4:30:73:33:dc:1d:0e:07:c2:7a: 45:8e:e4:57:0f:57:67:7f:be:0e:ca:68:eb:70:5f:70:ef:13: 96:b5:fa:04:24:9a:ea:fd:d6:2e:38:09:07:a1:9a:99:73:84: 67:1f:0f:b2:e2:ec:21:92:44:19:88:b1:66:c1:b6:de:ea:8b: 21:c4:67:a6:4f:1d:12:76:9a:5b:4b:dc:43:8c:6a:af:f2:94: b7:7b:be:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0Ii/cZgnQVr9boIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IzYWQwMDMtYWE3Yi00NWI0LWIyNzMtZTAxY2E1Njg4 OTc2MB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk MTU0MTljZTEtMzQ2OC00NTAwLWJhOTItY2U0MGE3ZjQwNTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGHY/9bz4BbUM+tvJNM1XkYRBq0hVQDLkwbn zy6XVhvlG136We4MwcW5uYiluTCTsl8hv4RwqBUWAwUhJEu4no5uwepa90BkuS2O UoJnXGtDgS22XCcoauouaAcAQYg5lQEPvoKvICDb28zMCEjwgm/1J0t4VL0A+M2I Y14jCl30BTyGP6vmv4qugUvPsdRqqiwyWMF7Za5xKLU0PXkAvo5IMHBRchZnK7HE OsTWn7M+kbCNx5RburXRbepdzjMu0/sELxik5QZ2O9PLBTXnBc50+bLpccfWlNCr udIFIqvCyWLptT4+VDbjZmoOUgLhuDDztlLPH9l3O6zgN4PJ2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkajQTZweEheVzruYzxf1urCSKPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNh ZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFjYTU2ODg5NzYvYTdiMDc5OTEtMjc2YS0z OTdkLThhMzMtYWRhNGJjNzM1ZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2IzYWQwMDMtYWE3Yi00NWI0LWIy NzMtZTAxY2E1Njg4OTc2L2NiM2FkMDAzLWFhN2ItNDViNC1iMjczLWUwMWNhNTY4 ODk3Ni5jcmwwHwYDVR0jBBgwFoAUpXx2gQzGUdcquGv3mpLFL5ycpIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNhZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFj YTU2ODg5NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjspSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJ5I0Hu9WTvVQBET31U5C9p6TGLhnVk8VGApEaWAgH7F+y5dQYDP8rp jrxfQPyVoS6/DLbI3DreBOKIH2tZXNJAzhOgLITgB13dgSdVywoaf17qPiDKIxel shfFW50jIcIQG9HEulq4dsRrLNx77lEMBmXFj4CV1mAFnq54Eyf4smdkucW4pZni HUtSDKHIjpxOXHwbTLFcY8DD0RoZMIWusmTSx2WJ8YMdpDBzM9wdDgfCekWO5FcP V2d/vg7KaOtwX3DvE5a1+gQkmur91i44CQehmplzhGcfD7Li7CGSRBmIsWbBtt7q iyHEZ6ZPHRJ2mltL3EOMaq/ylLd7vv0= -----END CERTIFICATE-----Generated at Mon Mar 2 07:40:13 2026 by rpki-client