$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c05da65b-4554-3939-bb5f-c2dd810be310.roa File: c05da65b-4554-3939-bb5f-c2dd810be310.roa (raw, json) Hash identifier: QVAvTq+vkW8fMQs/TKN1MEtCQ3dtng4xOX2T8T6T3WM= Subject key identifier: 49:4E:D6:78:CD:4E:A4:0A:CD:64:62:1F:F2:B1:52:2F:A8:89:5E:18 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584CA491A9DB56ADDDC0E1A01800 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c05da65b-4554-3939-bb5f-c2dd810be310.roa Signing time: Sun 25 Jan 2026 14:00:40 +0000 ROA not before: Sun 25 Jan 2026 14:00:40 +0000 ROA not after: Sat 25 Apr 2026 13:00:40 +0000 asID: 134578 IP address blocks: 206.54.9.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a4:91:a9:db:56:ad:dd:c0:e1:a0:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jan 25 14:00:40 2026 GMT Not After : Apr 25 13:00:40 2026 GMT Subject: CN=f63f3261-f727-4fc8-9983-04483618c013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:66:97:c2:1b:36:80:e1:da:71:23:7d:5e:b5: 3b:ab:cb:0e:3f:c8:4b:ba:0d:1d:26:93:76:89:49: 27:9b:79:e1:92:bd:f6:23:aa:5d:42:3b:01:db:9c: 1a:6e:be:57:00:05:65:1b:f2:2b:37:21:82:4c:e1: 28:c4:e1:03:61:76:3b:c8:c2:4a:b9:3e:61:df:8c: 41:64:92:7d:1c:cb:51:95:c0:41:47:82:8a:46:db: 10:97:ef:89:21:aa:ee:b6:44:ca:9f:23:10:8b:b9: cc:ed:c2:8b:48:92:93:e4:7c:a5:05:19:09:87:08: 5d:0e:9e:f0:33:22:67:0f:04:be:db:26:24:91:42: 95:90:38:25:70:1b:dc:aa:3c:19:a7:42:1f:39:af: c3:f8:ab:72:6d:53:f1:b6:fa:14:b7:75:a9:48:73: ca:b9:a4:e6:9a:6f:ea:71:72:f2:cd:d1:11:48:76: 4c:92:d4:b6:ee:a6:b5:7a:3c:91:1a:b5:fa:48:c3: a1:df:dd:60:e2:0a:94:e7:fc:cc:11:6c:50:f5:fe: a7:ed:cd:f3:2f:dc:e3:73:94:b7:21:fb:66:92:f8: d9:e3:ea:f7:ef:21:b7:ef:bd:bb:96:b7:2f:8b:f2: 31:f2:c2:45:40:31:bd:01:4f:60:81:1a:e4:1d:cc: 13:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4E:D6:78:CD:4E:A4:0A:CD:64:62:1F:F2:B1:52:2F:A8:89:5E:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c05da65b-4554-3939-bb5f-c2dd810be310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 206.54.9.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:d6:8e:cc:91:e1:52:49:54:ea:da:85:8d:07:07:59:1a:8b: 50:23:81:c9:33:c7:e4:a8:96:c7:89:04:73:f8:89:a6:9c:72: ae:8f:39:26:da:f9:d2:47:43:60:29:ac:ef:c9:90:8d:d4:5c: 37:87:68:d4:50:0a:03:26:e2:fa:6e:d7:cc:97:00:34:6b:65: 35:05:f6:58:3d:ff:1a:28:d7:bc:d6:b0:98:e4:0c:9d:3f:af: 1e:14:eb:01:89:1b:87:a4:af:f0:3b:5b:7a:65:5b:38:13:d3: 09:d5:88:22:8a:98:0b:46:12:31:19:0d:0a:84:0b:e4:34:d6: ef:0f:1f:10:fb:27:be:4d:f9:56:74:53:41:6a:fa:a6:20:95: 43:ae:50:db:bd:3b:65:99:22:4e:f3:76:c3:7d:2d:5e:dc:29: 16:c1:63:0f:47:fb:0e:1b:38:f8:a6:19:16:d5:fa:17:e9:5b: 46:91:e4:81:a1:1e:d6:ee:13:aa:6c:e2:34:ad:13:21:7e:50: b9:cc:61:8e:c3:07:f0:96:d5:f6:75:33:37:3d:cd:3c:4f:a5: 95:f6:71:8a:20:36:3d:93:bd:f2:ba:f8:b8:b5:89:0f:bd:43: 76:d0:1d:2f:2b:21:b0:a9:1d:56:20:71:50:1f:fa:b9:7c:23: b7:3e:58:14 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEykkanbVq3dwOGgGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDEyNTE0MDA0MFoXDTI2MDQyNTEzMDA0MFowLzEtMCsGA1UEAxMk ZjYzZjMyNjEtZjcyNy00ZmM4LTk5ODMtMDQ0ODM2MThjMDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGaXwhs2gOHacSN9XrU7q8sOP8hLug0dJpN2 iUknm3nhkr32I6pdQjsB25wabr5XAAVlG/IrNyGCTOEoxOEDYXY7yMJKuT5h34xB ZJJ9HMtRlcBBR4KKRtsQl++JIarutkTKnyMQi7nM7cKLSJKT5HylBRkJhwhdDp7w MyJnDwS+2yYkkUKVkDglcBvcqjwZp0IfOa/D+KtybVPxtvoUt3WpSHPKuaTmmm/q cXLyzdERSHZMktS27qa1ejyRGrX6SMOh391g4gqU5/zMEWxQ9f6n7c3zL9zjc5S3 IftmkvjZ4+r37yG37727lrcvi/Ix8sJFQDG9AU9ggRrkHcwTXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFElO1njNTqQKzWRiH/KxUi+oiV4YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzA1ZGE2NWItNDU1NC0z OTM5LWJiNWYtYzJkZDgxMGJlMzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHzjYJgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCx1o7MkeFSSVTq2oWNBwdZGotQI4HJM8fkqJbHiQRz+ImmnHKujzkm 2vnSR0NgKazvyZCN1Fw3h2jUUAoDJuL6btfMlwA0a2U1BfZYPf8aKNe81rCY5Ayd P68eFOsBiRuHpK/wO1t6ZVs4E9MJ1YgiipgLRhIxGQ0KhAvkNNbvDx8Q+ye+TflW dFNBavqmIJVDrlDbvTtlmSJO83bDfS1e3CkWwWMPR/sOGzj4phkW1foX6VtGkeSB oR7W7hOqbOI0rRMhflC5zGGOwwfwltX2dTM3Pc08T6WV9nGKIDY9k73yuvi4tYkP vUN20B0vKyGwqR1WIHFQH/q5fCO3PlgU -----END CERTIFICATE-----Generated at Mon Feb 23 11:53:28 2026 by rpki-client