$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e66840c2-72e8-367f-bff1-3dc2a9b0557d.roa File: e66840c2-72e8-367f-bff1-3dc2a9b0557d.roa (raw, json) Hash identifier: 49D+j48XUCbIw4B1UigVoETLsQ+MUF0Q7jqSMNgcWjs= Subject key identifier: 86:40:EE:2F:76:06:24:79:E5:A6:8D:83:FC:1D:B4:3E:5F:77:46:EA Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584CE1FCBCBB93041E292E897B80 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e66840c2-72e8-367f-bff1-3dc2a9b0557d.roa Signing time: Mon 16 Feb 2026 14:00:40 +0000 ROA not before: Mon 16 Feb 2026 14:00:40 +0000 ROA not after: Sun 17 May 2026 13:00:40 +0000 asID: 14618 IP address blocks: 199.255.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e1:fc:bc:bb:93:04:1e:29:2e:89:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Feb 16 14:00:40 2026 GMT Not After : May 17 13:00:40 2026 GMT Subject: CN=391f8487-23e5-44ea-902b-a1a364a654d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:68:21:1e:59:f1:77:26:2a:ef:4e:a5:84:1c: e7:76:ec:ec:0f:a4:fb:93:ad:c5:65:73:88:54:a0: 16:b1:51:f2:ab:2c:5e:9c:f7:25:6a:a1:aa:d9:71: a2:41:47:5e:c4:58:70:e2:e1:26:b1:89:6b:42:54: b5:3d:69:fe:ab:1e:d5:5e:06:12:f9:9d:e2:c4:a0: 41:1f:e1:ff:04:b0:14:4c:b0:b7:78:96:b5:f9:a7: d2:86:54:1d:51:32:3c:95:c6:f7:db:b6:7a:07:cc: 11:a6:70:56:7b:47:85:1c:6c:e9:1d:11:4f:c4:82: c1:5e:89:b2:22:d0:06:ff:9f:4f:ad:fb:b0:72:e3: 54:07:4c:60:77:83:e7:a7:29:91:66:ff:52:b9:49: 92:7c:2a:76:40:d1:e1:d1:a4:bd:e2:4a:2f:6b:7f: c7:bd:66:4a:fa:24:1e:44:9e:2e:34:5f:a5:96:a8: 13:c1:a9:6f:e0:d0:1a:73:60:24:6c:23:f9:6a:b7: a3:b0:f7:70:e5:ef:94:14:c5:36:3c:ba:4e:fd:53: 31:07:3e:43:85:77:a7:11:8e:6d:94:b1:94:43:d9: 87:be:bb:cf:38:8f:8b:c9:58:cf:98:48:91:ab:af: 69:d7:71:e8:da:35:15:87:fa:a3:57:8e:37:85:8f: 95:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:40:EE:2F:76:06:24:79:E5:A6:8D:83:FC:1D:B4:3E:5F:77:46:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e66840c2-72e8-367f-bff1-3dc2a9b0557d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:83:ec:cf:c1:76:98:47:d6:a4:d3:d6:b4:af:5b:77:74:61: 24:7c:48:87:d7:e3:cd:74:02:29:c8:76:d1:4a:d5:b5:83:76: 5d:31:35:7d:9a:04:dd:27:ab:90:d1:14:d7:2e:b9:ea:65:ab: f5:be:3f:db:89:ec:47:16:4f:47:93:a6:84:65:cd:11:5e:6c: a8:d5:9b:aa:5c:96:ba:3d:62:7f:85:65:06:32:be:7c:3c:c1: 8e:cc:93:db:41:8b:0f:37:86:d2:49:91:15:fa:3b:8c:ff:28: 52:5d:56:98:8f:68:c7:e8:4e:9e:ed:46:8d:62:74:b8:08:70: b7:ef:94:af:90:cd:b0:81:9e:9d:f1:e0:3d:f6:62:65:4f:52: 87:de:38:77:b5:b8:d9:3f:05:77:74:ea:9a:6d:fd:38:30:94: b5:ce:20:6a:a8:df:8a:69:01:f3:29:a8:7b:db:f4:d0:88:87: 59:95:1e:60:a8:25:0b:ce:33:85:65:9b:27:87:27:91:99:30: f0:2a:c4:c6:20:f5:26:64:3c:53:03:84:97:41:19:3f:38:87: c9:92:18:cc:e4:4b:bc:48:23:86:1d:b8:cd:05:99:b5:db:1e: 87:7a:9c:99:6a:ba:5c:d4:b8:97:ad:94:3b:73:e4:03:58:3f: 98:bf:81:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzh/Ly7kwQeKS6Je4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDIxNjE0MDA0MFoXDTI2MDUxNzEzMDA0MFowLzEtMCsGA1UEAxMk MzkxZjg0ODctMjNlNS00NGVhLTkwMmItYTFhMzY0YTY1NGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mghHlnxdyYq706lhBznduzsD6T7k63FZXOI VKAWsVHyqyxenPclaqGq2XGiQUdexFhw4uEmsYlrQlS1PWn+qx7VXgYS+Z3ixKBB H+H/BLAUTLC3eJa1+afShlQdUTI8lcb327Z6B8wRpnBWe0eFHGzpHRFPxILBXomy ItAG/59PrfuwcuNUB0xgd4PnpymRZv9SuUmSfCp2QNHh0aS94kova3/HvWZK+iQe RJ4uNF+llqgTwalv4NAac2AkbCP5arejsPdw5e+UFMU2PLpO/VMxBz5DhXenEY5t lLGUQ9mHvrvPOI+LyVjPmEiRq69p13Ho2jUVh/qjV443hY+VYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZA7i92BiR55aaNg/wdtD5fd0bqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZTY2ODQwYzItNzJlOC0z NjdmLWJmZjEtM2RjMmE5YjA1NTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCD7M/BdphH1qTT1rSvW3d0YSR8SIfX4810AinIdtFK1bWDdl0xNX2a BN0nq5DRFNcuueplq/W+P9uJ7EcWT0eTpoRlzRFebKjVm6pclro9Yn+FZQYyvnw8 wY7Mk9tBiw83htJJkRX6O4z/KFJdVpiPaMfoTp7tRo1idLgIcLfvlK+QzbCBnp3x 4D32YmVPUofeOHe1uNk/BXd06ppt/TgwlLXOIGqo34ppAfMpqHvb9NCIh1mVHmCo JQvOM4VlmyeHJ5GZMPAqxMYg9SZkPFMDhJdBGT84h8mSGMzkS7xII4YduM0FmbXb Hod6nJlqulzUuJetlDtz5ANYP5i/gSk= -----END CERTIFICATE-----Generated at Sun Mar 1 23:12:22 2026 by rpki-client