$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/2a3dd29d-c7c4-3c26-822a-864742fe7486.roa File: 2a3dd29d-c7c4-3c26-822a-864742fe7486.roa (raw, json) Hash identifier: b+HX9zEBSMxn2gKKn5OPke+o2cK10m+GLeZHqoJ6KRY= Subject key identifier: 05:E6:DE:B2:A0:FC:41:55:C0:84:D0:3D:0C:4B:21:61:B9:68:C9:13 Certificate issuer: /CN=786ab4fb-a46d-40d6-8281-3c79061676da Certificate serial: 010D0C9F4328584CD99CC9C6BC1A5F2116CB3680 Authority key identifier: A7:29:B8:4B:2E:46:D9:2A:BB:04:68:D4:3B:1D:18:A1:F8:B8:EA:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/2a3dd29d-c7c4-3c26-822a-864742fe7486.roa Signing time: Fri 13 Feb 2026 14:00:41 +0000 ROA not before: Fri 13 Feb 2026 14:00:41 +0000 ROA not after: Thu 14 May 2026 13:00:41 +0000 asID: 30263 IP address blocks: 216.7.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/786ab4fb-a46d-40d6-8281-3c79061676da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/786ab4fb-a46d-40d6-8281-3c79061676da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Feb 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d9:9c:c9:c6:bc:1a:5f:21:16:cb:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=786ab4fb-a46d-40d6-8281-3c79061676da Validity Not Before: Feb 13 14:00:41 2026 GMT Not After : May 14 13:00:41 2026 GMT Subject: CN=4b1c9dcf-d48b-4365-9cd1-aa11ed255233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f3:c9:2a:ac:e2:18:ef:c6:37:3a:64:68:21: 9a:96:10:00:4f:1e:db:d6:9b:8c:a1:92:f2:67:a3: 3b:cd:c6:90:4c:cb:f9:af:9a:ca:9b:9d:a5:98:74: cf:81:e4:60:a7:f2:3d:bd:6a:59:2b:1b:d3:ac:d2: 16:96:2c:78:5f:54:07:24:40:2d:7c:81:a7:fa:34: 1b:00:12:a5:5f:89:74:b3:62:c5:69:4f:ae:ee:e5: 1f:e2:18:5e:52:d5:14:24:73:f2:4c:bf:7f:f8:78: 61:a5:30:09:11:56:e6:fd:b4:a2:18:9c:21:53:ba: 2b:b2:6c:f3:49:a1:57:e2:55:df:0c:da:07:c6:47: 28:34:ff:32:f5:8d:ab:0b:70:09:6d:a5:b4:1e:df: 72:bf:eb:a0:0f:cd:bd:bb:90:06:2e:34:94:a0:dd: 2c:79:0c:5a:42:a9:ca:2c:78:1d:45:52:47:7f:04: f0:98:28:f4:6c:b9:6f:d9:0b:ee:b6:99:c6:8b:7d: 8a:e8:e2:cd:4a:ec:b9:5e:fa:e4:93:73:66:c1:32: 4f:67:5f:af:eb:3e:1e:a4:d6:07:51:2a:d8:a6:3e: 71:84:99:6c:76:43:55:99:5f:14:a7:d5:0d:67:17: 52:df:d4:22:a6:75:d4:df:50:02:37:16:95:32:c9: 62:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E6:DE:B2:A0:FC:41:55:C0:84:D0:3D:0C:4B:21:61:B9:68:C9:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/2a3dd29d-c7c4-3c26-822a-864742fe7486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/786ab4fb-a46d-40d6-8281-3c79061676da.crl X509v3 Authority Key Identifier: keyid:A7:29:B8:4B:2E:46:D9:2A:BB:04:68:D4:3B:1D:18:A1:F8:B8:EA:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da.cer sbgp-ipAddrBlock: critical IPv4: 216.7.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:d5:d7:59:e2:ab:46:53:d7:c9:ba:db:d7:49:0d:b9:2e:09: 04:8a:a0:11:50:3b:60:63:5f:2b:63:5e:c8:e3:57:6a:41:eb: 52:8c:2d:b2:a2:90:98:a1:7c:d5:6f:1c:67:ce:f5:61:7e:d0: df:64:50:b7:7a:ae:4c:db:32:c6:85:e1:ce:d3:e5:a3:d5:47: 14:e9:65:80:97:3a:b7:5d:63:2b:50:c7:fd:8f:80:ab:df:86: 9d:a9:51:34:54:4f:91:7f:d2:49:5d:d7:ed:6f:58:e5:67:18: 2d:55:79:d7:a8:3d:f1:37:d6:e8:26:61:03:4d:f4:d8:f0:aa: 72:f1:d1:c9:5a:ba:a9:1d:3f:ac:d5:40:6c:68:cd:91:00:ed: ad:9c:4f:07:35:e4:3c:5f:86:eb:74:d7:04:b9:db:b0:ec:71: d8:a2:ad:39:96:d0:a1:58:e8:be:95:75:4f:ef:0a:15:53:d0: de:bd:89:80:9c:62:ff:84:e0:0a:56:27:e5:d6:57:a1:55:1a: 14:9a:c2:05:0f:ee:d2:c9:5f:53:d5:2d:1c:35:38:f9:44:d8: 8d:1a:52:63:c9:5e:a8:a1:d4:ad:b4:a8:89:63:85:b6:0d:52: b7:20:60:78:a3:9d:88:24:24:09:69:06:9a:04:ef:92:cc:2b: e4:de:b7:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzZnMnGvBpfIRbLNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg2YWI0ZmItYTQ2ZC00MGQ2LTgyODEtM2M3OTA2MTY3 NmRhMB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk NGIxYzlkY2YtZDQ4Yi00MzY1LTljZDEtYWExMWVkMjU1MjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/PJKqziGO/GNzpkaCGalhAATx7b1puMoZLy Z6M7zcaQTMv5r5rKm52lmHTPgeRgp/I9vWpZKxvTrNIWlix4X1QHJEAtfIGn+jQb ABKlX4l0s2LFaU+u7uUf4hheUtUUJHPyTL9/+HhhpTAJEVbm/bSiGJwhU7orsmzz SaFX4lXfDNoHxkcoNP8y9Y2rC3AJbaW0Ht9yv+ugD829u5AGLjSUoN0seQxaQqnK LHgdRVJHfwTwmCj0bLlv2QvutpnGi32K6OLNSuy5Xvrkk3NmwTJPZ1+v6z4epNYH USrYpj5xhJlsdkNVmV8Up9UNZxdS39QipnXU31ACNxaVMsliwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXm3rKg/EFVwITQPQxLIWG5aMkTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83ODZh YjRmYi1hNDZkLTQwZDYtODI4MS0zYzc5MDYxNjc2ZGEvMmEzZGQyOWQtYzdjNC0z YzI2LTgyMmEtODY0NzQyZmU3NDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzg2YWI0ZmItYTQ2ZC00MGQ2LTgy ODEtM2M3OTA2MTY3NmRhLzc4NmFiNGZiLWE0NmQtNDBkNi04MjgxLTNjNzkwNjE2 NzZkYS5jcmwwHwYDVR0jBBgwFoAUpym4Sy5G2Sq7BGjUOx0Yofi46tYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83ODZhYjRmYi1hNDZkLTQwZDYtODI4MS0zYzc5 MDYxNjc2ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2AdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrV11niq0ZT18m629dJDbkuCQSKoBFQO2BjXytjXsjjV2pB61KMLbKi kJihfNVvHGfO9WF+0N9kULd6rkzbMsaF4c7T5aPVRxTpZYCXOrddYytQx/2PgKvf hp2pUTRUT5F/0kld1+1vWOVnGC1VedeoPfE31ugmYQNN9NjwqnLx0clauqkdP6zV QGxozZEA7a2cTwc15Dxfhut01wS527DscdiirTmW0KFY6L6VdU/vChVT0N69iYCc Yv+E4ApWJ+XWV6FVGhSawgUP7tLJX1PVLRw1OPlE2I0aUmPJXqih1K20qIljhbYN UrcgYHijnYgkJAlpBpoE75LMK+Tet6o= -----END CERTIFICATE-----Generated at Mon Feb 23 18:43:07 2026 by rpki-client