$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4fe80498-75e1-3423-b89f-064a6c24bd66.roa File: 4fe80498-75e1-3423-b89f-064a6c24bd66.roa (raw, json) Hash identifier: h73QGoXEdsTPyYiASY3d5RbNCey+lsFaoO+2M3/TyN4= Subject key identifier: A9:60:63:19:3C:AB:4E:80:E8:66:6C:68:9D:BD:A6:84:3C:61:A4:E3 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584CACF1B2643465E6BE32A67A80 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4fe80498-75e1-3423-b89f-064a6c24bd66.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 209 IP address blocks: 216.19.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:b2:64:34:65:e6:be:32:a6:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=1a170dab-58ee-4cef-b8ff-2bf1a428fe7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7d:61:2e:af:2f:42:7b:ec:64:e1:67:c0:3f: 0c:d2:bf:24:3a:88:6e:4c:97:51:eb:63:0f:04:11: ca:be:75:45:cb:41:ae:df:aa:da:a6:7a:03:a3:ef: d4:43:47:2d:9d:bc:c5:33:26:2d:f7:88:31:51:e2: 70:26:64:38:47:79:4d:82:42:98:8a:65:87:48:b6: e9:79:d9:29:da:7b:10:ff:93:d7:18:d5:87:8c:7b: 0c:0c:35:66:43:dc:6e:cd:42:fd:c1:30:fa:00:6d: 8c:b4:92:31:de:6b:60:ff:94:d4:17:af:95:2a:03: 1f:a2:eb:45:17:7d:3c:ad:78:df:c9:04:33:51:b1: 84:30:b9:ca:65:cc:15:ad:c4:d8:a1:3e:b3:fc:c2: d0:b7:ae:be:3a:ba:26:62:52:08:e2:43:bb:f1:34: 7f:b4:24:a6:a8:4a:ac:f8:cb:3d:ee:f2:18:2c:10: 02:7e:8e:58:29:a1:c2:62:71:eb:a7:ba:8f:99:0e: 5a:bb:99:8e:61:b1:23:4d:1c:15:f0:32:3c:5d:59: 68:f3:3b:12:ef:44:c2:66:fb:db:22:84:67:10:2d: 62:d8:1e:2e:76:be:3e:62:7e:53:aa:2d:64:e1:d6: dd:6c:d1:56:bd:7b:c1:ab:bc:95:78:38:89:4b:7f: ac:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:60:63:19:3C:AB:4E:80:E8:66:6C:68:9D:BD:A6:84:3C:61:A4:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4fe80498-75e1-3423-b89f-064a6c24bd66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 216.19.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:48:b9:91:79:d3:72:bc:f1:a4:22:68:7a:91:cf:7e:3a:b3: 8e:f1:3d:60:4c:fb:c5:d1:dd:8f:a5:24:c6:e5:60:38:20:96: 10:2a:fb:77:40:1c:97:85:c6:34:2b:f5:04:60:d0:4a:e2:12: 49:8f:13:78:20:6e:e2:4f:88:88:ac:58:5c:ec:a0:fb:6f:38: 92:6d:72:3e:51:b4:76:9a:81:4d:b8:17:d1:b2:af:30:7e:ab: 11:eb:b1:0e:b1:ab:eb:df:b8:e1:5e:bf:ad:15:01:5b:0d:ab: a1:cd:89:b4:05:e5:10:8c:d3:c2:55:a0:e3:d4:f6:87:e5:6e: 76:41:27:3c:ae:06:09:21:bb:df:ac:b6:44:ef:b2:93:63:13: 10:8a:0c:26:0d:67:34:09:ca:02:e4:54:fb:8c:59:70:89:25: de:5d:d7:62:83:4a:c9:f7:b4:9b:8b:33:45:cb:a7:97:72:13: b1:db:68:d0:54:18:3c:f8:c7:60:64:aa:d3:72:12:d5:38:05: 98:b6:79:4d:43:e5:64:b6:74:fd:02:ab:6e:31:64:12:cc:73: 7d:9e:b3:ea:b8:59:cd:76:be:7f:f0:90:77:30:48:db:38:3e: 68:e7:8a:1b:ee:73:2a:98:a2:2f:4b:ff:59:32:13:ed:08:38: bf:fc:80:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8bJkNGXmvjKmeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk MWExNzBkYWItNThlZS00Y2VmLWI4ZmYtMmJmMWE0MjhmZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg31hLq8vQnvsZOFnwD8M0r8kOohuTJdR62MP BBHKvnVFy0Gu36rapnoDo+/UQ0ctnbzFMyYt94gxUeJwJmQ4R3lNgkKYimWHSLbp edkp2nsQ/5PXGNWHjHsMDDVmQ9xuzUL9wTD6AG2MtJIx3mtg/5TUF6+VKgMfoutF F308rXjfyQQzUbGEMLnKZcwVrcTYoT6z/MLQt66+OromYlII4kO78TR/tCSmqEqs +Ms97vIYLBACfo5YKaHCYnHrp7qPmQ5au5mOYbEjTRwV8DI8XVlo8zsS70TCZvvb IoRnEC1i2B4udr4+Yn5Tqi1k4dbdbNFWvXvBq7yVeDiJS3+sKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlgYxk8q06A6GZsaJ29poQ8YaTjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvNGZlODA0OTgtNzVlMS0z NDIzLWI4OWYtMDY0YTZjMjRiZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJIuZF503K88aQiaHqRz346s47xPWBM+8XR3Y+lJMblYDgglhAq+3dA HJeFxjQr9QRg0EriEkmPE3ggbuJPiIisWFzsoPtvOJJtcj5RtHaagU24F9GyrzB+ qxHrsQ6xq+vfuOFev60VAVsNq6HNibQF5RCM08JVoOPU9oflbnZBJzyuBgkhu9+s tkTvspNjExCKDCYNZzQJygLkVPuMWXCJJd5d12KDSsn3tJuLM0XLp5dyE7HbaNBU GDz4x2BkqtNyEtU4BZi2eU1D5WS2dP0Cq24xZBLMc32es+q4Wc12vn/wkHcwSNs4 PmjnihvucyqYoi9L/1kyE+0IOL/8gM0= -----END CERTIFICATE-----Generated at Thu Feb 26 18:33:24 2026 by rpki-client