$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa File: f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa (raw, json) Hash identifier: XL+jsme58kjxmyHD+4BYEyW0xoQGFqq0EaoG22Y3CxQ= Subject key identifier: 83:49:5F:36:02:E5:D6:C8:34:43:03:68:6A:06:13:74:E4:56:55:FC Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584CCBA74F7133ADA722479213A0 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 22267 IP address blocks: 208.118.228.128/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:4f:71:33:ad:a7:22:47:92:13:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=7f73ea3d-a719-4313-b602-bf506437e118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7c:66:fc:08:45:f7:1c:d1:7b:ed:b5:44:ad: 53:02:16:5e:70:ef:ba:36:82:ee:c4:50:b8:1b:c8: ff:69:21:a0:0f:c2:61:ef:4d:77:dd:45:d6:46:d4: b9:5f:99:f8:9b:94:7e:8d:bf:e3:a1:4f:6d:d2:c9: f1:3b:64:c1:21:f2:f0:5f:75:71:b5:cf:c8:f2:d7: 9f:36:1b:30:42:0a:e5:15:ec:f8:80:b7:9d:2a:ef: 83:49:64:4c:e4:ce:c5:3d:f9:e9:5b:3d:61:87:31: 65:3a:9c:18:fb:29:00:97:10:83:9a:17:d9:8a:28: b8:63:1f:ef:6c:1c:24:9c:c4:e0:24:63:45:26:9a: c3:85:7e:d9:98:55:14:74:db:46:fb:a4:c6:89:92: e5:37:b7:34:b1:a6:04:85:b6:ac:67:66:be:c3:c4: 66:e9:63:6f:6e:61:a5:34:4b:ba:ed:b7:d7:4a:f2: b0:f6:ff:9b:00:ed:52:f5:d8:6d:a4:84:a6:c3:e8: d9:ab:e7:c5:a0:64:b5:7a:7b:a8:9b:6d:07:0c:0e: a4:5a:a7:58:fc:a9:63:1a:0e:74:cf:16:15:d7:ce: 6f:3e:da:00:b7:68:00:e0:a6:52:cd:16:66:8a:7b: 5b:6b:75:57:ca:70:7b:03:96:c0:20:34:f7:0a:bf: 7b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:49:5F:36:02:E5:D6:C8:34:43:03:68:6A:06:13:74:E4:56:55:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv4: 208.118.228.128/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c1:e6:4f:60:d9:3c:cc:8c:1b:7b:eb:b7:84:ba:13:30:92: 73:52:7a:f5:f0:3c:15:7a:92:ff:09:b6:fc:19:3d:30:37:08: dc:f2:5d:68:56:ca:7e:3b:f4:99:31:b4:c8:23:b8:cb:0d:c9: 56:33:66:5e:f7:17:63:23:4f:14:cc:22:16:4e:c4:b2:94:09: 91:13:6f:e4:c0:d1:a6:39:b9:85:dd:32:05:1b:be:44:e4:57: 0e:25:d4:cf:90:56:49:bf:88:c8:2b:d8:25:88:06:bb:01:19: c9:35:e4:49:f4:43:09:52:7b:53:a1:92:77:dc:fb:27:7d:e7: 37:b0:0c:03:c6:bf:14:0e:19:77:9e:b2:92:7e:64:a4:92:3b: 1f:b6:c5:55:aa:a5:8d:43:db:fc:49:9f:e1:fa:07:c5:ae:4b: 8c:34:60:f3:de:c2:ca:c6:df:89:ee:35:50:77:ee:c9:8c:ee: 73:aa:44:2f:eb:05:b3:39:5a:c4:8e:98:2d:8d:16:66:ff:50: 9d:06:c4:d6:57:b5:47:8e:d0:cb:9f:a4:1e:db:04:56:d6:ad: eb:b6:d1:79:f6:62:80:cc:d0:9d:34:94:33:d5:87:da:1b:01: 9e:a7:be:bf:ec:32:3f:19:1f:fa:24:3c:ee:68:eb:53:65:f2: 0b:be:41:24 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzLp09xM62nIkeSE6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk N2Y3M2VhM2QtYTcxOS00MzEzLWI2MDItYmY1MDY0MzdlMTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXxm/AhF9xzRe+21RK1TAhZecO+6NoLuxFC4 G8j/aSGgD8Jh70133UXWRtS5X5n4m5R+jb/joU9t0snxO2TBIfLwX3Vxtc/I8tef NhswQgrlFez4gLedKu+DSWRM5M7FPfnpWz1hhzFlOpwY+ykAlxCDmhfZiii4Yx/v bBwknMTgJGNFJprDhX7ZmFUUdNtG+6TGiZLlN7c0saYEhbasZ2a+w8Rm6WNvbmGl NEu67bfXSvKw9v+bAO1S9dhtpISmw+jZq+fFoGS1enuom20HDA6kWqdY/KljGg50 zxYV185vPtoAt2gA4KZSzRZmintba3VXynB7A5bAIDT3Cr97cwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFINJXzYC5dbINEMDaGoGE3TkVlX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvZjllN2U5MzMtMTI4ZC0z OGEyLWIyNWUtZTBhMTk2ZDU5ZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE0HbkgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJweZPYNk8zIwbe+u3hLoTMJJzUnr18DwVepL/Cbb8GT0wNwjc8l1o Vsp+O/SZMbTII7jLDclWM2Ze9xdjI08UzCIWTsSylAmRE2/kwNGmObmF3TIFG75E 5FcOJdTPkFZJv4jIK9gliAa7ARnJNeRJ9EMJUntToZJ33Psnfec3sAwDxr8UDhl3 nrKSfmSkkjsftsVVqqWNQ9v8SZ/h+gfFrkuMNGDz3sLKxt+J7jVQd+7JjO5zqkQv 6wWzOVrEjpgtjRZm/1CdBsTWV7VHjtDLn6Qe2wRW1q3rttF59mKAzNCdNJQz1Yfa GwGep76/7DI/GR/6JDzuaOtTZfILvkEk -----END CERTIFICATE-----Generated at Mon Mar 2 11:18:06 2026 by rpki-client