$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/058ee240-3f5e-3cad-9e8d-83f47bcc997f.roa File: 058ee240-3f5e-3cad-9e8d-83f47bcc997f.roa (raw, json) Hash identifier: BaPUsuuG63eR7Xi2TkcxdgkYiMgbDFWZhZ5rEVaXqsc= Subject key identifier: 06:07:09:84:CD:E3:E4:C2:1E:D0:75:B8:B3:F0:F0:60:E4:BD:39:6B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584C9EFC5E149BCFF07791587180 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/058ee240-3f5e-3cad-9e8d-83f47bcc997f.roa Signing time: Fri 23 Jan 2026 14:00:38 +0000 ROA not before: Fri 23 Jan 2026 14:00:38 +0000 ROA not after: Thu 23 Apr 2026 13:00:38 +0000 asID: 396071 IP address blocks: 204.141.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9e:fc:5e:14:9b:cf:f0:77:91:58:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jan 23 14:00:38 2026 GMT Not After : Apr 23 13:00:38 2026 GMT Subject: CN=0f7b8210-b544-41ba-b8d4-16c6c8ed03b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:73:de:e8:b6:2e:29:84:93:d7:77:19:1f:31: 90:16:69:48:fc:fa:f2:6d:e5:b7:45:2e:42:14:38: 11:a1:be:26:43:7f:d4:85:ae:de:01:2d:79:32:73: 71:5c:51:e9:25:6b:3b:70:be:74:b7:01:e2:12:5d: 14:a6:7d:e7:6f:09:0a:78:31:50:a6:cb:ee:3e:28: f1:f0:3b:0e:ef:8b:50:68:45:34:6f:ba:0c:3d:ec: 7a:8d:40:31:4f:1a:db:ad:1a:89:ae:bb:ac:9e:ad: c2:76:4e:c5:d6:69:bd:5a:48:a1:8a:6c:23:71:7d: 2b:81:b7:8d:4a:12:c6:2c:17:65:6a:a2:e1:bd:dc: 5a:2b:7b:62:15:73:fd:a5:46:53:d9:dc:11:a0:8f: 66:a6:1a:91:39:7a:74:30:c0:bd:fc:17:14:fc:27: d6:1a:79:9a:9e:b6:f0:9b:12:a2:3d:47:79:bf:49: d7:c6:1c:46:ee:db:5d:96:3c:6e:f5:eb:56:22:98: a8:cf:f8:3a:58:81:b9:3a:15:bd:c8:6d:eb:45:c2: a4:05:45:05:5f:d0:29:53:94:fd:26:14:a0:27:de: 29:7a:1f:90:29:ff:7f:64:7c:5f:7b:e4:67:df:a0: 11:1b:2a:85:0c:83:36:2b:72:f3:7b:08:6e:36:49: 51:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:07:09:84:CD:E3:E4:C2:1E:D0:75:B8:B3:F0:F0:60:E4:BD:39:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/058ee240-3f5e-3cad-9e8d-83f47bcc997f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:a1:af:f8:a6:42:44:5e:98:2b:60:5a:74:af:42:b1:8a:1f: 03:f9:18:01:2d:6a:c7:1a:8e:24:4e:05:47:74:1e:ee:dc:b4: 2b:66:82:b7:01:22:34:cb:5a:f3:7a:35:59:53:c7:ee:5c:8a: e9:b0:80:30:e9:59:9d:63:7c:f2:c2:8f:43:f3:ea:05:19:6b: c0:d0:37:a9:68:14:b9:3f:8b:4f:3f:d5:12:12:da:07:6e:6f: b3:22:1e:01:cb:93:45:18:39:57:d0:e6:4c:fe:d3:e7:2f:72: 56:17:0e:be:fd:0e:c7:04:d5:b8:ff:6d:1c:20:94:14:76:6a: 92:d8:8a:b5:a5:dc:3a:d1:55:2b:29:88:d8:93:b7:2a:51:df: ef:be:fa:5c:df:70:e5:1f:f2:38:e6:3e:8f:74:63:e9:53:0a: d7:82:3a:d6:cd:f4:00:3f:ef:29:71:ca:1c:85:02:cd:1b:d1: e9:28:9b:71:48:1f:87:f9:ab:9f:c6:11:b8:5f:e9:9e:d2:fd: bd:6a:f0:6c:a4:f3:47:d0:12:ab:da:a2:04:8c:a2:38:c4:67: 3a:60:c0:51:02:52:0c:cb:25:9d:26:d1:6c:b8:af:74:1e:12: 7b:04:ae:4c:11:b0:a6:b4:05:9e:a8:71:7b:e2:4c:14:3c:0b: 46:5e:f1:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEye/F4Um8/wd5FYcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDEyMzE0MDAzOFoXDTI2MDQyMzEzMDAzOFowLzEtMCsGA1UEAxMk MGY3YjgyMTAtYjU0NC00MWJhLWI4ZDQtMTZjNmM4ZWQwM2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHPe6LYuKYST13cZHzGQFmlI/PrybeW3RS5C FDgRob4mQ3/Uha7eAS15MnNxXFHpJWs7cL50twHiEl0Upn3nbwkKeDFQpsvuPijx 8DsO74tQaEU0b7oMPex6jUAxTxrbrRqJrrusnq3Cdk7F1mm9WkihimwjcX0rgbeN ShLGLBdlaqLhvdxaK3tiFXP9pUZT2dwRoI9mphqROXp0MMC9/BcU/CfWGnmanrbw mxKiPUd5v0nXxhxG7ttdljxu9etWIpioz/g6WIG5OhW9yG3rRcKkBUUFX9ApU5T9 JhSgJ94peh+QKf9/ZHxfe+Rn36ARGyqFDIM2K3LzewhuNklRsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYHCYTN4+TCHtB1uLPw8GDkvTlrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMDU4ZWUyNDAtM2Y1ZS0z Y2FkLTllOGQtODNmNDdiY2M5OTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzI3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWhr/imQkRemCtgWnSvQrGKHwP5GAEtascajiROBUd0Hu7ctCtmgrcB IjTLWvN6NVlTx+5ciumwgDDpWZ1jfPLCj0Pz6gUZa8DQN6loFLk/i08/1RIS2gdu b7MiHgHLk0UYOVfQ5kz+0+cvclYXDr79DscE1bj/bRwglBR2apLYirWl3DrRVSsp iNiTtypR3++++lzfcOUf8jjmPo90Y+lTCteCOtbN9AA/7ylxyhyFAs0b0ekom3FI H4f5q5/GEbhf6Z7S/b1q8Gyk80fQEqvaogSMojjEZzpgwFECUgzLJZ0m0Wy4r3Qe EnsErkwRsKa0BZ6ocXviTBQ8C0Ze8SM= -----END CERTIFICATE-----Generated at Mon Feb 23 11:53:14 2026 by rpki-client