$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/999c4e57-e638-38af-ad8a-fc63840097a2.roa File: 999c4e57-e638-38af-ad8a-fc63840097a2.roa (raw, json) Hash identifier: B39F3lzbzgUHRzqmJdosMQwed2PZa2LqFYvuqlwfE44= Subject key identifier: 03:49:3D:FA:B3:45:76:09:0D:12:28:98:7D:1F:8C:3D:A1:2D:45:1E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D02178B12AF78EEA144112B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/999c4e57-e638-38af-ad8a-fc63840097a2.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 31898 IP address blocks: 192.22.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:8b:12:af:78:ee:a1:44:11:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=16bf5685-d831-44fb-bdbc-82d9e4d49caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:62:76:8b:70:02:fa:13:6d:7d:2d:14:db:fb: 0e:9c:f9:fb:06:fd:82:48:16:4f:51:9d:ba:af:23: 90:b3:f1:88:d7:46:6e:f0:6b:b2:72:d0:9b:fe:00: 8d:aa:36:68:6e:59:8e:57:43:cd:6d:48:06:98:93: 9b:7a:8f:bd:45:ae:2b:d3:f0:68:9e:b0:64:87:72: 5b:dd:df:b3:2d:3f:e7:a5:00:c4:b1:45:09:5f:35: 36:e4:74:5d:dc:38:7a:00:3b:22:51:6f:e8:1e:b6: 95:e8:e1:09:df:82:ea:8b:87:4b:67:7c:39:a8:f1: fb:f8:fb:fa:54:a6:b2:02:ef:a5:ad:ca:ab:b8:f2: 23:c8:2c:fb:48:4e:a2:87:53:3a:bd:d6:7c:a4:58: c0:80:c5:04:9a:bd:91:d0:c6:e9:59:84:e8:89:19: c2:82:b8:10:48:b6:fe:a6:37:56:85:16:bc:78:ea: c8:4d:6e:10:c0:62:73:41:38:3e:bf:de:1b:72:77: ab:c3:9f:a0:10:22:24:e3:03:78:46:9d:7d:b7:87: c6:00:f1:c3:89:af:fc:be:6b:60:da:d9:35:ed:05: 12:81:61:36:aa:03:e9:1a:77:e6:14:bc:82:72:e4: 48:60:65:52:cc:bb:16:cf:d3:5b:ef:ff:57:a5:c9: b7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:49:3D:FA:B3:45:76:09:0D:12:28:98:7D:1F:8C:3D:A1:2D:45:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/999c4e57-e638-38af-ad8a-fc63840097a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.22.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:4f:d3:e8:a3:ae:92:d9:f1:c8:02:6f:9e:67:e6:73:aa:68: a4:39:48:e7:e7:d2:b2:d2:b4:b6:9c:90:12:f8:f1:3b:7e:94: bc:19:d5:c2:eb:eb:38:3e:79:5f:af:7b:4e:21:10:77:31:49: a1:9f:7f:4a:f9:24:6f:84:ae:49:4a:19:0a:7c:ea:a7:5c:7a: 4f:10:87:94:58:cb:5c:f6:ad:21:99:e6:e4:fc:b0:98:08:47: ad:f8:a3:70:c5:48:d5:77:14:84:97:65:7f:df:b2:1e:dd:e8: de:5c:c9:11:5e:48:bf:3d:a0:39:49:70:2e:f2:dd:41:3b:14: ee:d1:d2:62:81:86:82:be:20:73:b1:28:e0:74:e7:04:0d:e0: e7:ad:ed:c0:1e:05:d2:d8:fb:f2:67:78:5e:c0:10:bf:ff:6d: f2:93:a4:5c:1f:31:7b:6d:cd:58:8f:bd:c7:c0:88:f7:45:f3: 34:98:e4:70:61:2b:0d:a3:a1:37:e0:0c:53:2e:0b:24:15:73: 85:97:c2:65:30:4a:3a:4c:f2:19:83:e7:ff:ea:39:36:5e:51: 64:d2:21:7a:e3:f0:5e:88:c4:f5:81:11:5f:bc:84:22:22:54: 97:fd:fa:13:49:7d:18:d7:ed:43:a4:fd:a1:66:7b:c9:6e:5a: da:d3:0f:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF4sSr3juoUQRKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk MTZiZjU2ODUtZDgzMS00NGZiLWJkYmMtODJkOWU0ZDQ5Y2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWJ2i3AC+hNtfS0U2/sOnPn7Bv2CSBZPUZ26 ryOQs/GI10Zu8GuyctCb/gCNqjZoblmOV0PNbUgGmJObeo+9Ra4r0/BonrBkh3Jb 3d+zLT/npQDEsUUJXzU25HRd3Dh6ADsiUW/oHraV6OEJ34Lqi4dLZ3w5qPH7+Pv6 VKayAu+lrcqruPIjyCz7SE6ih1M6vdZ8pFjAgMUEmr2R0MbpWYToiRnCgrgQSLb+ pjdWhRa8eOrITW4QwGJzQTg+v94bcnerw5+gECIk4wN4Rp19t4fGAPHDia/8vmtg 2tk17QUSgWE2qgPpGnfmFLyCcuRIYGVSzLsWz9Nb7/9Xpcm3UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANJPfqzRXYJDRIomH0fjD2hLUUeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTk5YzRlNTctZTYzOC0z OGFmLWFkOGEtZmM2Mzg0MDA5N2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwBbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJP0+ijrpLZ8cgCb55n5nOqaKQ5SOfn0rLStLackBL48Tt+lLwZ1cLr 6zg+eV+ve04hEHcxSaGff0r5JG+ErklKGQp86qdcek8Qh5RYy1z2rSGZ5uT8sJgI R634o3DFSNV3FISXZX/fsh7d6N5cyRFeSL89oDlJcC7y3UE7FO7R0mKBhoK+IHOx KOB05wQN4Oet7cAeBdLY+/JneF7AEL//bfKTpFwfMXttzViPvcfAiPdF8zSY5HBh Kw2joTfgDFMuCyQVc4WXwmUwSjpM8hmD5//qOTZeUWTSIXrj8F6IxPWBEV+8hCIi VJf9+hNJfRjX7UOk/aFme8luWtrTD50= -----END CERTIFICATE-----Generated at Sun Mar 1 23:16:38 2026 by rpki-client