$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/2aa91757-41a3-3878-bde1-4f11a5d770af.roa File: 2aa91757-41a3-3878-bde1-4f11a5d770af.roa (raw, json) Hash identifier: VVGdWyZvPsJMyPYEaRyIk6Aiy8qJzmK7JW94lQDI8rg= Subject key identifier: DD:78:50:EF:5A:23:92:A8:FB:E4:6B:63:BA:A6:87:5E:B2:F8:0C:EC Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584C4E06862F5932974BEACC1400 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/2aa91757-41a3-3878-bde1-4f11a5d770af.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 33442 IP address blocks: 157.235.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:86:2f:59:32:97:4b:ea:cc:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=851ce842-642c-48d5-9b8d-e4b937639f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:86:0a:35:43:94:41:4f:3c:0c:c7:47:14:5a: 97:ef:b2:12:ac:9d:3f:b7:ce:43:28:27:07:a9:91: 8d:15:7a:20:7e:f6:fc:8d:2b:e0:f3:f9:ed:ef:06: db:67:2e:35:d4:77:c9:a3:3c:a9:ba:da:17:0d:a6: 16:64:9a:37:8d:8d:98:6b:92:34:7b:7e:3e:59:30: 07:56:63:eb:0f:59:85:2d:23:5a:44:7c:bd:3a:07: 4b:f1:5d:e4:f2:c8:d0:08:56:2d:00:37:c4:15:3b: 49:c1:aa:73:3c:79:8f:d0:e8:42:12:bb:59:5d:78: df:b0:6e:6f:6f:cc:f0:4d:4e:43:21:7d:a5:cc:6e: 13:d0:57:7a:1c:40:32:64:4b:54:f6:ad:f3:75:be: fc:78:b4:9b:08:92:5a:af:e9:90:ab:83:55:d8:75: 68:17:ac:4b:7f:65:2a:20:a1:1a:3c:41:64:a8:63: 93:73:b2:08:20:e1:3e:51:ca:ec:39:a5:b0:fb:0b: 3c:8e:ed:9e:3d:c8:55:55:db:01:b3:c3:a4:1e:57: 44:d0:19:ff:96:18:d9:3d:81:e4:a2:79:b3:bb:24: 54:2f:57:1b:d1:a6:09:20:a6:53:46:d4:18:3d:c9: c2:b5:69:46:55:23:65:cd:71:23:b1:96:89:3b:19: 73:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:78:50:EF:5A:23:92:A8:FB:E4:6B:63:BA:A6:87:5E:B2:F8:0C:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/2aa91757-41a3-3878-bde1-4f11a5d770af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 157.235.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:04:52:18:a2:20:9e:8c:6a:12:57:68:17:73:4f:c1:0a:27: 0a:e8:50:7a:9e:d8:80:9a:5f:55:fc:4f:dd:37:27:da:e3:0b: b7:83:fa:8c:d6:69:37:da:5e:f9:5d:62:36:5c:c8:e7:35:61: fb:bc:f8:47:99:53:a5:5d:b0:11:e2:d2:f1:01:11:fa:5f:0b: 9b:f1:b1:9a:7d:05:11:05:6c:66:5c:96:e1:3e:fe:14:64:30: ea:74:a2:c9:87:34:d9:de:fc:58:19:fe:9c:93:20:60:a4:e9: 25:e4:7b:ba:44:65:c5:da:e7:a1:dc:4c:05:0a:67:1f:9d:98: 8b:28:00:33:78:be:30:1e:97:e3:ab:cd:04:0d:fe:92:c1:85: e3:9d:d8:51:ec:52:ee:0b:bd:e6:e4:61:70:bd:5e:1b:15:ff: 6b:cf:39:50:d0:c0:8b:fb:44:76:a1:58:05:91:76:ed:26:52: 13:23:9c:7e:a4:99:71:55:4d:e9:c6:b1:22:5c:17:ab:6b:71: 15:0d:f6:d1:82:a4:79:d1:e5:83:94:ac:52:a0:08:f7:89:07: e6:ad:b2:9c:f7:16:e9:ee:6d:12:02:5c:80:47:02:6a:bb:ac: a7:c9:fb:61:74:90:68:5f:52:35:12:9d:77:af:34:19:12:65: d4:ca:ba:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExOBoYvWTKXS+rMFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk ODUxY2U4NDItNjQyYy00OGQ1LTliOGQtZTRiOTM3NjM5ZjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYYKNUOUQU88DMdHFFqX77ISrJ0/t85DKCcH qZGNFXogfvb8jSvg8/nt7wbbZy411HfJozyputoXDaYWZJo3jY2Ya5I0e34+WTAH VmPrD1mFLSNaRHy9OgdL8V3k8sjQCFYtADfEFTtJwapzPHmP0OhCErtZXXjfsG5v b8zwTU5DIX2lzG4T0Fd6HEAyZEtU9q3zdb78eLSbCJJar+mQq4NV2HVoF6xLf2Uq IKEaPEFkqGOTc7IIIOE+UcrsOaWw+ws8ju2ePchVVdsBs8OkHldE0Bn/lhjZPYHk onmzuyRUL1cb0aYJIKZTRtQYPcnCtWlGVSNlzXEjsZaJOxlzSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN14UO9aI5Ko++RrY7qmh16y+AzsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMmFhOTE3NTctNDFhMy0z ODc4LWJkZTEtNGYxMWE1ZDc3MGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnesnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEEUhiiIJ6MahJXaBdzT8EKJwroUHqe2ICaX1X8T903J9rjC7eD+ozW aTfaXvldYjZcyOc1Yfu8+EeZU6VdsBHi0vEBEfpfC5vxsZp9BREFbGZcluE+/hRk MOp0osmHNNne/FgZ/pyTIGCk6SXke7pEZcXa56HcTAUKZx+dmIsoADN4vjAel+Or zQQN/pLBheOd2FHsUu4LvebkYXC9XhsV/2vPOVDQwIv7RHahWAWRdu0mUhMjnH6k mXFVTenGsSJcF6trcRUN9tGCpHnR5YOUrFKgCPeJB+atspz3FunubRICXIBHAmq7 rKfJ+2F0kGhfUjUSnXevNBkSZdTKumQ= -----END CERTIFICATE-----Generated at Sat Feb 21 07:28:34 2026 by rpki-client