$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9bb28ed-5890-335b-8757-7e97bbaaa30d.roa File: d9bb28ed-5890-335b-8757-7e97bbaaa30d.roa (raw, json) Hash identifier: WQYnSRQxFK6z+MuAz0EPQGC87dQOsZbo5AcrRFcgkao= Subject key identifier: D5:4B:92:8B:3B:E2:F0:A7:50:11:4F:4F:9B:84:F2:52:F2:B6:43:8B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584CB981E3652499FE65497B8930 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9bb28ed-5890-335b-8757-7e97bbaaa30d.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 5650 IP address blocks: 168.93.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:e3:65:24:99:fe:65:49:7b:89:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=1b6f3f54-73c9-4f84-865d-9269c1fdfe65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6f:32:45:0b:2f:e0:ac:fc:78:3e:6f:12:8e: 1b:e2:72:89:8c:1f:ff:0e:ae:62:9c:5b:72:74:7c: 17:d4:99:82:c3:4d:b1:d0:0e:b2:13:2d:ee:0a:24: 1a:53:34:e6:80:8a:5a:0b:68:41:11:69:b1:c2:f2: 20:1f:6c:1d:8c:31:bd:6f:49:e5:34:9c:1e:a7:aa: c4:a7:9f:6b:64:32:33:e4:d3:08:07:7b:71:47:b3: 31:da:55:d0:65:cd:1d:bf:e0:8d:4e:9e:af:3e:47: 45:66:b0:bf:0f:a9:e8:61:d9:9e:6e:55:0e:b0:d9: 72:3d:79:d6:86:ea:6c:c9:92:0e:4a:bf:c5:8e:d3: 89:70:5d:a1:9a:bc:6c:ab:e1:d4:0f:3c:93:69:c3: 4e:c2:42:76:1e:56:2d:8c:c3:fb:a2:59:24:5e:7f: 75:82:76:c0:92:f7:c1:a6:12:47:dc:6c:d6:67:2f: 8a:50:7b:14:2f:bf:58:6a:a6:a9:dd:4c:bb:e7:88: 30:6d:f6:d4:31:c2:33:15:1c:36:18:60:b7:b9:d7: 75:bd:fc:28:1f:5f:e1:86:ac:b6:05:2c:96:6a:d6: fe:d7:aa:6e:d7:26:2d:07:77:04:ee:d2:fc:3b:fd: ac:df:62:eb:c0:84:c9:73:82:e1:7c:da:37:5d:7a: 47:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4B:92:8B:3B:E2:F0:A7:50:11:4F:4F:9B:84:F2:52:F2:B6:43:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9bb28ed-5890-335b-8757-7e97bbaaa30d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 168.93.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:2d:b5:5e:5d:93:e7:63:00:43:c0:d2:9c:22:0b:80:32:45: fa:2c:4f:c9:44:df:00:62:8c:40:89:92:42:b1:a2:4b:98:9e: 41:4c:04:76:c8:77:55:96:af:4d:f5:51:f6:39:07:bc:a5:0d: 3a:c1:f4:76:9e:d1:b2:d2:62:7a:98:e3:8c:57:e7:ee:4b:9f: 79:34:92:8a:82:c0:7a:10:82:7a:fe:12:c6:fb:f7:c3:90:78: cd:3f:71:64:48:c0:e9:33:65:3e:92:d8:90:ee:c7:07:e9:9d: f0:97:8e:68:e0:55:01:ae:e3:f4:90:1c:46:d4:4f:60:f9:43: 0c:47:0b:90:46:8b:1d:d7:4e:32:58:b2:f9:53:ba:26:65:a5: 1b:82:49:69:ac:57:d1:f9:f2:33:15:e2:b2:fa:b8:98:50:e7: 08:f9:20:10:89:95:32:c7:cb:7f:ca:db:fb:36:ab:43:07:9f: 1c:ed:b3:ed:62:3e:48:3b:4a:90:85:13:ac:42:d7:1d:f9:81: 29:b2:42:62:9e:d0:91:2b:5c:3d:ec:2c:d8:f7:98:92:9c:1a: ec:84:92:5a:48:17:52:63:64:a9:a8:dd:2a:08:9c:7a:e9:b4: 4d:c9:d9:4b:3d:56:d3:44:56:db:f9:b7:75:cb:42:69:84:a4: 1b:f6:bb:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5geNlJJn+ZUl7iTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk MWI2ZjNmNTQtNzNjOS00Zjg0LTg2NWQtOTI2OWMxZmRmZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim8yRQsv4Kz8eD5vEo4b4nKJjB//Dq5inFty dHwX1JmCw02x0A6yEy3uCiQaUzTmgIpaC2hBEWmxwvIgH2wdjDG9b0nlNJwep6rE p59rZDIz5NMIB3txR7Mx2lXQZc0dv+CNTp6vPkdFZrC/D6noYdmeblUOsNlyPXnW hupsyZIOSr/FjtOJcF2hmrxsq+HUDzyTacNOwkJ2HlYtjMP7olkkXn91gnbAkvfB phJH3GzWZy+KUHsUL79Yaqap3Uy754gwbfbUMcIzFRw2GGC3udd1vfwoH1/hhqy2 BSyWatb+16pu1yYtB3cE7tL8O/2s32LrwITJc4LhfNo3XXpHJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVLkos74vCnUBFPT5uE8lLytkOLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDliYjI4ZWQtNTg5MC0z MzViLTg3NTctN2U5N2JiYWFhMzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF30MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcttV5dk+djAEPA0pwiC4AyRfosT8lE3wBijECJkkKxokuYnkFMBHbI d1WWr031UfY5B7ylDTrB9Hae0bLSYnqY44xX5+5Ln3k0koqCwHoQgnr+Esb798OQ eM0/cWRIwOkzZT6S2JDuxwfpnfCXjmjgVQGu4/SQHEbUT2D5QwxHC5BGix3XTjJY svlTuiZlpRuCSWmsV9H58jMV4rL6uJhQ5wj5IBCJlTLHy3/K2/s2q0MHnxzts+1i Pkg7SpCFE6xC1x35gSmyQmKe0JErXD3sLNj3mJKcGuyEklpIF1JjZKmo3SoInHrp tE3J2Us9VtNEVtv5t3XLQmmEpBv2u+w= -----END CERTIFICATE-----Generated at Thu Feb 26 09:28:01 2026 by rpki-client