$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0ca08e19-e6f9-3adf-a8ed-3d06a212ac9c.roa File: 0ca08e19-e6f9-3adf-a8ed-3d06a212ac9c.roa (raw, json) Hash identifier: WiLfFv8p/mqABhnqcqpBqxGSzZNokwnT6mUQSU+rm0A= Subject key identifier: 6D:59:0A:6D:21:64:49:F1:C6:47:85:B7:73:26:51:96:B3:7A:F8:F2 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584C5666B15CE75EC526EB3C76C0 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0ca08e19-e6f9-3adf-a8ed-3d06a212ac9c.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 63062 IP address blocks: 67.44.0.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Feb 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:b1:5c:e7:5e:c5:26:eb:3c:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=ae8d72ab-26f2-4fbc-90bd-61d1fce944ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ea:32:d8:01:22:70:0e:f0:ab:ac:9e:54:59: e0:5d:f6:b5:71:c3:39:15:c3:35:46:3c:ae:94:ae: cb:14:9e:eb:c3:44:ec:7e:7d:a5:e7:47:35:73:8b: 48:65:e5:a6:34:dd:77:c2:cc:04:65:2c:68:49:cd: 9b:fa:29:47:7d:f3:5a:c7:7c:cb:aa:ee:25:9e:14: ac:dc:d4:f5:03:c6:b1:fd:44:ef:78:fd:c0:8e:2f: ba:e4:dd:da:5e:78:5d:28:ff:07:bb:02:04:01:74: 35:1a:02:5b:49:27:f2:9d:fe:b8:67:41:a7:b6:d1: af:ae:bb:f9:08:50:da:37:c8:bb:02:79:f4:47:c5: 03:f1:31:8b:b8:ec:90:4f:6e:94:01:50:79:d4:37: dc:c5:ee:be:33:fa:fb:24:02:5f:7f:6d:bc:5a:f1: 82:be:1a:3c:f5:05:d5:48:3a:59:44:56:dd:37:9b: 60:53:76:54:66:a3:74:c9:fe:48:8f:e6:5c:fa:0d: b2:53:7d:8c:3e:66:24:88:fc:39:92:ac:b2:29:39: c5:28:85:b3:ea:ac:f1:36:78:eb:15:91:3c:2d:b5: ac:c4:69:d3:f1:eb:89:27:26:ee:9a:1c:4d:8d:dd: 20:58:67:c6:85:63:d6:66:7a:0b:ec:0b:9a:d9:0f: 97:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:59:0A:6D:21:64:49:F1:C6:47:85:B7:73:26:51:96:B3:7A:F8:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0ca08e19-e6f9-3adf-a8ed-3d06a212ac9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.44.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:c0:63:14:f4:8f:74:a3:9a:23:53:83:e4:ed:12:9a:b1:59: 76:94:52:09:1b:45:7c:4f:d6:4e:bc:e5:e9:df:e9:95:94:f7: be:40:35:43:f6:b5:71:c1:bd:60:f5:cb:74:2d:e9:47:75:4e: ec:77:2c:cc:c2:f0:21:31:4e:0d:44:35:d1:81:50:ba:a9:7a: 64:af:2e:37:77:bf:c5:eb:bc:6a:1b:52:4e:81:45:a4:8d:3d: c5:66:79:85:d0:da:3c:76:6b:bd:d2:aa:95:bc:d3:75:43:3a: 62:63:f8:6f:7f:b3:f5:e2:87:ee:91:3b:13:b8:c6:dc:06:62: 62:69:46:1d:73:e1:3c:ab:53:5e:53:8a:7a:f4:b0:74:af:b6: ed:80:87:02:d2:cb:86:55:b0:99:07:cb:0b:09:57:3b:46:ed: f3:6b:fd:33:c3:e0:4e:1d:26:d1:18:3f:cf:c3:75:3d:9d:f0: d2:51:e5:46:d4:6c:7f:b4:f3:f2:e5:1d:2a:77:e3:e9:6a:04: 66:10:49:66:75:c6:ae:0c:83:e4:25:ff:f1:74:94:09:6b:dc: 43:56:4b:cd:5c:48:be:0a:45:4d:b8:4c:51:0d:ca:58:5a:df: e0:39:0c:d4:dd:d7:cb:4a:22:91:56:25:ea:ed:f1:9f:c2:61: bb:0c:12:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZrFc517FJus8dsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk YWU4ZDcyYWItMjZmMi00ZmJjLTkwYmQtNjFkMWZjZTk0NGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouoy2AEicA7wq6yeVFngXfa1ccM5FcM1Rjyu lK7LFJ7rw0Tsfn2l50c1c4tIZeWmNN13wswEZSxoSc2b+ilHffNax3zLqu4lnhSs 3NT1A8ax/UTveP3Aji+65N3aXnhdKP8HuwIEAXQ1GgJbSSfynf64Z0GnttGvrrv5 CFDaN8i7Ann0R8UD8TGLuOyQT26UAVB51Dfcxe6+M/r7JAJff228WvGCvho89QXV SDpZRFbdN5tgU3ZUZqN0yf5Ij+Zc+g2yU32MPmYkiPw5kqyyKTnFKIWz6qzxNnjr FZE8LbWsxGnT8euJJybumhxNjd0gWGfGhWPWZnoL7Aua2Q+XdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1ZCm0hZEnxxkeFt3MmUZazevjyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvMGNhMDhlMTktZTZmOS0z YWRmLWE4ZWQtM2QwNmEyMTJhYzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQywAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPAYxT0j3SjmiNTg+TtEpqxWXaUUgkbRXxP1k685enf6ZWU975ANUP2 tXHBvWD1y3Qt6Ud1Tux3LMzC8CExTg1ENdGBULqpemSvLjd3v8XrvGobUk6BRaSN PcVmeYXQ2jx2a73SqpW803VDOmJj+G9/s/Xih+6ROxO4xtwGYmJpRh1z4TyrU15T inr0sHSvtu2AhwLSy4ZVsJkHywsJVztG7fNr/TPD4E4dJtEYP8/DdT2d8NJR5UbU bH+08/LlHSp34+lqBGYQSWZ1xq4Mg+Ql//F0lAlr3ENWS81cSL4KRU24TFENylha 3+A5DNTd18tKIpFWJert8Z/CYbsMEko= -----END CERTIFICATE-----Generated at Mon Feb 23 18:40:57 2026 by rpki-client