$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/8bd0aa96-9c04-37e8-9a45-7e77d2e6ab78.roa File: 8bd0aa96-9c04-37e8-9a45-7e77d2e6ab78.roa (raw, json) Hash identifier: 388O9XoHspn664b/JttcBx9nuSxH0FbIn4zozZGz6fk= Subject key identifier: 7B:EA:75:B0:3A:31:DD:11:51:55:47:4D:9A:DB:E7:F2:BD:16:6D:C2 Certificate issuer: /CN=b08b04c4-3d5d-41d5-8263-cd575f4bd2da Certificate serial: 010D0C9F4328584D02178186E1D5F558EECEDB80 Authority key identifier: F6:82:89:44:D0:3B:CE:E1:4A:25:94:4D:E9:67:6A:8F:2C:51:21:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/8bd0aa96-9c04-37e8-9a45-7e77d2e6ab78.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 3356 IP address blocks: 142.249.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:81:86:e1:d5:f5:58:ee:ce:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b08b04c4-3d5d-41d5-8263-cd575f4bd2da Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=ae167af4-8ab2-47dc-8360-5783f41ba656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:61:72:0e:7f:c9:03:c3:17:63:90:12:bc:4d: f2:9d:a0:b8:10:61:bc:07:75:0c:41:ef:41:41:e8: 2b:91:d3:fc:f0:cf:3f:49:62:5a:0f:c0:45:91:c8: 4c:45:00:10:73:84:3f:ea:57:38:f0:92:26:e9:8d: 7e:72:69:10:11:3d:d2:cf:e2:15:73:16:a9:50:23: f4:bb:b8:8a:3c:b8:3d:a4:b0:9b:11:a6:11:1d:a2: bd:3b:73:97:38:f3:19:49:df:72:91:e7:b9:c5:7c: a9:d1:2e:41:5b:e8:ba:d8:3d:47:a3:77:d6:f8:86: 32:38:de:dc:f5:ce:94:1d:7e:92:3a:15:b9:30:fa: 3e:96:e2:bf:7f:78:07:42:fb:7a:06:31:f2:cd:49: b2:3c:24:16:07:7d:9c:52:38:b1:8f:d3:7d:90:19: 04:39:71:cd:1a:0a:fd:1e:dc:0b:57:a0:09:68:09: 29:77:30:be:e2:90:ed:6f:cd:28:4d:51:c4:b1:d1: f5:36:5c:df:e5:c8:d2:c1:ce:2d:87:ee:e3:29:74: f8:d8:4a:61:3e:39:c9:30:48:29:b5:18:99:09:06: a9:b1:bb:fa:1e:18:f5:ab:df:1b:62:69:fe:4d:c2: 5a:2c:f3:d5:d3:bb:4f:b2:ce:67:bd:60:3b:65:36: ee:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:EA:75:B0:3A:31:DD:11:51:55:47:4D:9A:DB:E7:F2:BD:16:6D:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/8bd0aa96-9c04-37e8-9a45-7e77d2e6ab78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.crl X509v3 Authority Key Identifier: keyid:F6:82:89:44:D0:3B:CE:E1:4A:25:94:4D:E9:67:6A:8F:2C:51:21:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.cer sbgp-ipAddrBlock: critical IPv4: 142.249.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:a2:d8:b5:a0:4d:43:d3:1a:0e:8e:eb:22:e5:84:e8:01:d8: 3c:ec:4c:ad:bf:e1:d6:97:a0:ef:87:98:f7:56:2c:15:42:b6: 47:70:1f:b1:2b:ae:67:8e:e1:eb:17:ab:bd:7f:fd:a9:26:de: d4:b9:5b:70:d2:a0:6f:8b:42:1e:a8:f5:6d:a3:ad:08:ba:f8: 3d:41:c1:77:39:e4:d1:40:4c:96:47:07:1a:cd:e1:7f:f0:a6: 3f:da:f5:11:01:a2:c8:6d:26:a6:96:e6:b0:29:64:47:15:c2: 2c:ff:b7:5a:b1:90:7c:36:3e:43:34:1e:18:23:9a:30:ae:a6: 6f:84:a8:02:88:16:d0:43:68:47:a9:bf:dd:82:c3:0e:65:38: 08:c9:86:a5:61:e2:f4:ae:89:bb:f7:c0:1a:b6:a3:58:2c:09: ac:10:42:ba:4f:7d:e2:ac:d4:4a:a7:26:c0:06:70:1a:0d:29: dd:65:04:2c:47:49:1c:1b:0c:10:a3:eb:74:3d:ff:5c:db:bb: 74:52:d4:07:43:90:28:93:42:c7:90:a9:51:3a:ad:69:ae:b1: db:84:37:96:e6:14:40:16:be:d5:81:c5:95:d9:ee:10:dd:e9: ee:38:31:2b:97:f5:e0:7f:f8:94:80:c4:f0:0a:df:21:9a:28: 8c:b2:32:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF4GG4dX1WO7O24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjA4YjA0YzQtM2Q1ZC00MWQ1LTgyNjMtY2Q1NzVmNGJk MmRhMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk YWUxNjdhZjQtOGFiMi00N2RjLTgzNjAtNTc4M2Y0MWJhNjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WFyDn/JA8MXY5ASvE3ynaC4EGG8B3UMQe9B QegrkdP88M8/SWJaD8BFkchMRQAQc4Q/6lc48JIm6Y1+cmkQET3Sz+IVcxapUCP0 u7iKPLg9pLCbEaYRHaK9O3OXOPMZSd9ykee5xXyp0S5BW+i62D1Ho3fW+IYyON7c 9c6UHX6SOhW5MPo+luK/f3gHQvt6BjHyzUmyPCQWB32cUjixj9N9kBkEOXHNGgr9 HtwLV6AJaAkpdzC+4pDtb80oTVHEsdH1Nlzf5cjSwc4th+7jKXT42EphPjnJMEgp tRiZCQapsbv6Hhj1q98bYmn+TcJaLPPV07tPss5nvWA7ZTbuwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvqdbA6Md0RUVVHTZrb5/K9Fm3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iMDhi MDRjNC0zZDVkLTQxZDUtODI2My1jZDU3NWY0YmQyZGEvOGJkMGFhOTYtOWMwNC0z N2U4LTlhNDUtN2U3N2QyZTZhYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjA4YjA0YzQtM2Q1ZC00MWQ1LTgy NjMtY2Q1NzVmNGJkMmRhL2IwOGIwNGM0LTNkNWQtNDFkNS04MjYzLWNkNTc1ZjRi ZDJkYS5jcmwwHwYDVR0jBBgwFoAU9oKJRNA7zuFKJZRN6WdqjyxRIc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iMDhiMDRjNC0zZDVkLTQxZDUtODI2My1jZDU3 NWY0YmQyZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACi2LWgTUPTGg6O6yLlhOgB2DzsTK2/4daXoO+HmPdWLBVCtkdwH7Er rmeO4esXq71//akm3tS5W3DSoG+LQh6o9W2jrQi6+D1BwXc55NFATJZHBxrN4X/w pj/a9REBoshtJqaW5rApZEcVwiz/t1qxkHw2PkM0HhgjmjCupm+EqAKIFtBDaEep v92Cww5lOAjJhqVh4vSuibv3wBq2o1gsCawQQrpPfeKs1EqnJsAGcBoNKd1lBCxH SRwbDBCj63Q9/1zbu3RS1AdDkCiTQseQqVE6rWmusduEN5bmFEAWvtWBxZXZ7hDd 6e44MSuX9eB/+JSAxPAK3yGaKIyyMoQ= -----END CERTIFICATE-----Generated at Mon Mar 2 00:17:29 2026 by rpki-client