$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cb157db1-a6e4-3149-8906-d8026fa5ef41.roa File: cb157db1-a6e4-3149-8906-d8026fa5ef41.roa (raw, json) Hash identifier: EE6EsYN1OixHLVEsG3+VCyIGgpsxbpN7zZg7Q5RGA+E= Subject key identifier: 98:FE:B7:D5:C2:0F:3D:DD:14:41:C9:D1:4F:48:13:36:FA:3E:8B:42 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584CF6ECDB14C090B5C7ABF41A70 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cb157db1-a6e4-3149-8906-d8026fa5ef41.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 13768 IP address blocks: 64.226.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:db:14:c0:90:b5:c7:ab:f4:1a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=894226e6-b28d-4a69-9806-9bfac2290d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:a3:86:1a:72:c4:33:a4:6c:a2:b2:ba:48: 38:42:9c:50:7b:a6:40:be:e9:68:cb:c6:e7:5c:1d: da:6c:6c:b6:1a:e1:b3:d0:6d:59:c8:ba:27:3c:d1: 28:9b:b0:43:97:dc:65:1b:3b:ad:bc:55:17:79:ad: 6a:e9:8e:54:c7:5e:b8:42:9b:12:95:10:90:e8:9f: 1a:c2:cc:7a:14:c9:c5:7a:19:2f:90:59:cb:d9:23: 5b:30:5f:b3:20:2d:a5:1f:e7:ad:ca:cb:7b:c2:c0: 0e:77:54:a3:2d:03:b1:ff:b9:fb:e8:f3:9e:81:7c: a9:68:33:07:a0:ca:10:21:02:9a:ec:7f:6d:72:a8: 55:23:9f:73:0a:90:4f:b1:c0:ee:cb:dd:8a:75:5e: 5c:23:bb:32:1a:ef:1b:22:71:6f:e5:77:08:7c:e4: c8:dd:68:85:ab:af:0e:c6:6d:60:da:6f:e8:8a:42: b0:66:89:ad:c3:b9:d4:da:d8:54:81:bb:47:37:6e: f5:fd:97:4e:14:29:f1:a6:ba:92:b2:ac:7c:02:db: 67:05:d9:c5:0f:b8:2f:45:91:ae:40:c7:ec:bf:3b: 5f:fa:30:78:b2:34:95:c5:f5:35:86:8d:fb:bf:18: fe:40:d6:00:4d:15:ff:0c:9e:49:26:98:3c:82:cf: 4a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:FE:B7:D5:C2:0F:3D:DD:14:41:C9:D1:4F:48:13:36:FA:3E:8B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cb157db1-a6e4-3149-8906-d8026fa5ef41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.226.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:94:de:ac:69:b5:07:f4:2d:fc:92:ca:c5:bb:70:c2:bf:58: 6e:e3:2a:8d:66:0b:b0:21:c8:e0:7a:b7:38:66:e2:9e:2b:5e: af:76:14:45:c2:80:dd:50:91:ad:09:11:70:de:51:e5:32:c5: b0:4d:48:a2:65:d4:3b:25:28:27:1d:97:1c:c8:fe:bf:28:9f: 30:cc:36:a5:73:26:ed:b8:9e:bb:9a:b4:f9:08:a9:07:5e:c4: a7:8d:54:33:9c:68:9a:30:44:7d:b4:fc:bb:87:c8:ec:d3:b2: 24:82:b8:df:45:81:8a:56:95:2b:23:6c:52:c2:cf:63:25:a9: cc:3e:84:9e:11:ef:a2:66:8b:4b:c6:77:b3:3c:a0:e4:02:78: f0:67:80:3c:e8:23:02:d8:02:89:f6:40:ed:e9:92:e3:4f:02: 65:20:46:04:c7:1a:f1:ab:6f:fb:eb:28:9f:e6:3d:fa:9f:2e: 99:60:da:98:9f:b6:2a:4c:cd:35:39:55:ee:42:c0:93:f5:6a: 1a:3d:90:de:30:65:99:40:ab:b0:18:70:c9:ca:cc:d2:dc:f7: c7:c0:ab:08:81:c1:e7:25:1f:ba:ab:7c:28:03:56:e8:cf:27: b9:0f:05:20:17:55:5f:ba:5a:38:95:91:86:4b:cf:ac:f0:dc: 19:02:ea:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27NsUwJC1x6v0GnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk ODk0MjI2ZTYtYjI4ZC00YTY5LTk4MDYtOWJmYWMyMjkwZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuESjhhpyxDOkbKKyukg4QpxQe6ZAvuloy8bn XB3abGy2GuGz0G1ZyLonPNEom7BDl9xlGzutvFUXea1q6Y5Ux164QpsSlRCQ6J8a wsx6FMnFehkvkFnL2SNbMF+zIC2lH+etyst7wsAOd1SjLQOx/7n76POegXypaDMH oMoQIQKa7H9tcqhVI59zCpBPscDuy92KdV5cI7syGu8bInFv5XcIfOTI3WiFq68O xm1g2m/oikKwZomtw7nU2thUgbtHN271/ZdOFCnxprqSsqx8AttnBdnFD7gvRZGu QMfsvztf+jB4sjSVxfU1ho37vxj+QNYATRX/DJ5JJpg8gs9K4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJj+t9XCDz3dFEHJ0U9IEzb6PotCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvY2IxNTdkYjEtYTZlNC0z MTQ5LTg5MDYtZDgwMjZmYTVlZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQOKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISU3qxptQf0LfySysW7cMK/WG7jKo1mC7AhyOB6tzhm4p4rXq92FEXC gN1Qka0JEXDeUeUyxbBNSKJl1DslKCcdlxzI/r8onzDMNqVzJu24nruatPkIqQde xKeNVDOcaJowRH20/LuHyOzTsiSCuN9FgYpWlSsjbFLCz2Mlqcw+hJ4R76Jmi0vG d7M8oOQCePBngDzoIwLYAon2QO3pkuNPAmUgRgTHGvGrb/vrKJ/mPfqfLplg2pif tipMzTU5Ve5CwJP1aho9kN4wZZlAq7AYcMnKzNLc98fAqwiBweclH7qrfCgDVujP J7kPBSAXVV+6WjiVkYZLz6zw3BkC6i8= -----END CERTIFICATE-----Generated at Fri Feb 27 15:55:51 2026 by rpki-client