$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/af455540-fb73-3077-a6c0-7c66dd9ae018.roa File: af455540-fb73-3077-a6c0-7c66dd9ae018.roa (raw, json) Hash identifier: OaF93QrYiwdf2MClPm39x7iDfUshhsaHQFNn/4YFR6s= Subject key identifier: 9C:BB:56:76:3C:41:4D:E1:60:66:4B:C7:18:14:CB:13:5B:3B:CB:88 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584CA491B62E6919842B91DBFB80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/af455540-fb73-3077-a6c0-7c66dd9ae018.roa Signing time: Sun 25 Jan 2026 14:00:40 +0000 ROA not before: Sun 25 Jan 2026 14:00:40 +0000 ROA not after: Sat 25 Apr 2026 13:00:40 +0000 asID: 134578 IP address blocks: 206.54.12.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a4:91:b6:2e:69:19:84:2b:91:db:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jan 25 14:00:40 2026 GMT Not After : Apr 25 13:00:40 2026 GMT Subject: CN=ff0bf251-b3ef-4682-9b5d-44793b0e94a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:6e:5d:b1:78:d9:58:75:66:98:c5:b9:7e: 4d:c5:f6:59:17:3c:45:44:19:a2:f5:58:45:02:61: 29:d2:da:68:17:66:61:be:a5:88:a7:47:a8:ec:5e: b6:bf:3e:49:b5:fd:68:22:0d:7b:af:7e:19:6e:5c: fd:2f:52:24:55:f6:03:18:7e:d2:db:bc:7c:55:7a: 93:48:8f:97:ea:ee:73:af:8b:7d:5b:89:ad:00:5e: 10:98:3e:2b:ca:be:42:9f:41:93:7d:4c:07:9e:98: 1b:64:e4:d1:0d:de:e4:35:f7:fe:4e:9c:4e:c0:34: f9:eb:59:41:22:6f:e3:88:f9:03:6d:04:b2:0b:0e: 44:ad:bb:7f:b7:92:00:88:af:ee:c7:83:50:46:dc: 69:e8:9f:df:cc:f5:f4:b2:fc:8a:83:aa:84:6e:8c: 9f:be:ac:8a:55:a7:fb:44:91:d3:21:bc:ed:7f:48: 16:79:57:95:4b:4f:11:2f:98:8d:22:55:84:44:4b: 45:08:cf:f3:d3:40:22:65:1c:76:c3:b6:49:8f:2c: 55:aa:78:3d:3a:8a:5c:85:0a:2c:1c:b6:2e:50:f2: 5d:9c:4f:c0:ea:da:b0:bf:54:38:76:5d:00:6d:42: 32:ac:45:4d:6d:a7:40:cc:25:4f:14:23:f9:4a:15: f2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BB:56:76:3C:41:4D:E1:60:66:4B:C7:18:14:CB:13:5B:3B:CB:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/af455540-fb73-3077-a6c0-7c66dd9ae018.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 206.54.12.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:64:e6:00:c7:04:7d:65:de:89:48:8a:ca:6b:2c:3c:21:6e: e6:99:51:72:5e:01:93:61:35:46:56:40:ab:19:f0:12:ad:9d: 90:5a:1c:1a:e5:20:aa:48:37:54:0d:4c:97:33:f6:af:3f:c6: 4f:23:11:11:93:5c:29:d7:6c:60:01:f3:3b:09:39:34:19:d9: ae:b1:e3:47:4e:fa:b9:6f:8a:95:cd:02:75:b6:d6:8a:1e:fa: b2:f1:5e:53:4e:e5:36:50:cb:b9:04:4e:27:94:f5:29:23:ce: 9f:31:6f:d7:80:c5:e4:0b:16:14:e3:ce:3d:f9:09:32:59:4a: 29:dd:14:1e:64:53:66:82:71:12:73:4d:67:2f:e6:f5:d1:0d: 51:6f:94:e4:d6:aa:13:d8:fa:23:79:d8:83:ef:7f:6b:91:8e: 37:0d:4e:4e:75:c2:43:35:1b:f2:82:7f:aa:59:51:2c:e8:9b: 57:61:55:9b:e8:0e:e6:62:0c:69:36:d3:59:8a:58:28:b0:08: 7b:56:47:16:45:d5:67:a9:2f:2b:af:1d:a1:1e:5c:9a:0b:44: 8f:80:b9:2c:46:5a:78:33:6e:87:49:e0:ec:bd:f0:28:60:27: c8:0a:a4:c1:cf:8b:06:f4:2a:7c:e6:0d:53:58:ea:2e:2f:5f: 79:94:3a:8e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEykkbYuaRmEK5Hb+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDEyNTE0MDA0MFoXDTI2MDQyNTEzMDA0MFowLzEtMCsGA1UEAxMk ZmYwYmYyNTEtYjNlZi00NjgyLTliNWQtNDQ3OTNiMGU5NGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf9uXbF42Vh1ZpjFuX5NxfZZFzxFRBmi9VhF AmEp0tpoF2ZhvqWIp0eo7F62vz5Jtf1oIg17r34Zblz9L1IkVfYDGH7S27x8VXqT SI+X6u5zr4t9W4mtAF4QmD4ryr5Cn0GTfUwHnpgbZOTRDd7kNff+TpxOwDT561lB Im/jiPkDbQSyCw5Erbt/t5IAiK/ux4NQRtxp6J/fzPX0svyKg6qEboyfvqyKVaf7 RJHTIbztf0gWeVeVS08RL5iNIlWEREtFCM/z00AiZRx2w7ZJjyxVqng9OopchQos HLYuUPJdnE/A6tqwv1Q4dl0AbUIyrEVNbadAzCVPFCP5ShXyUQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJy7VnY8QU3hYGZLxxgUyxNbO8uIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYWY0NTU1NDAtZmI3My0z MDc3LWE2YzAtN2M2NmRkOWFlMDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHzjYMADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCQZOYAxwR9Zd6JSIrKayw8IW7mmVFyXgGTYTVGVkCrGfASrZ2QWhwa 5SCqSDdUDUyXM/avP8ZPIxERk1wp12xgAfM7CTk0GdmuseNHTvq5b4qVzQJ1ttaK Hvqy8V5TTuU2UMu5BE4nlPUpI86fMW/XgMXkCxYU4849+QkyWUop3RQeZFNmgnES c01nL+b10Q1Rb5Tk1qoT2PojediD739rkY43DU5OdcJDNRvygn+qWVEs6JtXYVWb 6A7mYgxpNtNZilgosAh7VkcWRdVnqS8rrx2hHlyaC0SPgLksRlp4M26HSeDsvfAo YCfICqTBz4sG9Cp85g1TWOouL195lDqO -----END CERTIFICATE-----Generated at Mon Feb 23 11:54:37 2026 by rpki-client