$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa File: 822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa (raw, json) Hash identifier: SOokrVF5/gJWXanq+1QA28W8q7Fn7lm7xfqoPIp2FJI= Subject key identifier: 3B:27:CC:8E:A7:80:44:F2:B2:51:0A:73:A6:9B:F8:31:4E:D0:88:11 Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d Certificate serial: 010D0C9F4328584CAE5719DBE6DE68756AA0B200 Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 611 IP address blocks: 131.202.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:19:db:e6:de:68:75:6a:a0:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e2ecc523-0b3c-4809-a777-ea17e6dc570e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:18:18:c5:ac:0e:c0:40:9e:f0:f8:69:bf:cc: e7:b9:31:92:76:fa:b0:3b:c0:12:25:22:1f:1a:bf: 09:ac:3f:27:c4:dd:18:25:1b:10:21:85:d7:4b:49: 3b:91:66:ef:17:0b:f3:d8:61:a4:0f:56:76:d5:e3: fe:87:9a:8b:b9:f0:be:10:21:4a:f6:7f:19:75:c4: 9f:dc:b0:fd:00:ae:b5:a2:d5:cc:cc:37:82:10:c8: d2:3f:44:de:b9:c2:fd:3c:54:36:03:3b:5d:58:d8: 7e:e2:e4:d4:4d:df:40:25:0d:8e:20:fa:45:2c:0b: 82:fa:0e:b6:94:07:e4:49:37:ba:0c:81:b7:e5:18: e7:7a:be:27:4f:75:4e:d9:f3:9d:74:e8:30:94:e6: 06:07:62:6b:57:45:cc:a3:d7:5d:8c:02:b8:a9:fb: 16:66:02:f8:c9:fd:9a:81:63:05:a7:11:76:66:97: d1:3a:97:f5:e2:49:d0:79:3d:26:1b:0e:95:4b:af: b1:5b:14:85:33:21:0d:61:1f:d2:bb:46:64:d0:2a: a5:5d:3d:2d:59:2f:22:ac:e3:d9:0a:48:2b:58:7f: 7d:30:dc:97:af:8a:b1:5b:df:e9:1a:93:09:c4:90: a8:fb:34:9b:38:e2:c4:4c:5d:3e:7c:a5:86:34:bc: 8f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:27:CC:8E:A7:80:44:F2:B2:51:0A:73:A6:9B:F8:31:4E:D0:88:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl X509v3 Authority Key Identifier: keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer sbgp-ipAddrBlock: critical IPv4: 131.202.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:85:d5:5a:e7:55:02:07:9a:4d:e7:20:84:2f:31:ac:40:c6: cb:ae:95:6e:e0:fd:8f:ca:c8:be:d9:f6:da:e1:1f:2b:69:a1: 8d:68:38:66:6b:0f:ce:80:28:cd:93:a1:b5:0b:d1:92:e7:e0: a0:6c:13:ac:a0:8b:8e:ac:54:4e:4c:62:d2:41:a9:66:2d:72: b8:65:24:dc:2b:fe:21:c4:d9:94:44:5c:ed:1e:71:3c:bf:c8: f3:73:e8:c7:40:e2:66:e1:5b:95:3a:74:76:3a:67:f2:fe:71: 7e:24:4a:2d:45:75:c8:d5:7d:a9:d7:5f:f8:b9:d6:ae:8e:ac: c3:17:ad:06:b0:42:18:4f:bb:7c:ef:a7:e3:4a:fd:2d:d4:0e: 8d:1f:ba:f2:81:ee:ba:08:28:e7:51:96:6a:d6:e0:f6:9b:12: 69:fb:f0:79:5c:11:e6:fa:65:13:fe:55:a9:c2:57:93:6c:5f: b9:65:62:c7:f9:85:1a:61:32:3f:3e:33:7a:fc:3e:60:cf:67: 17:74:81:a0:5f:93:e2:ac:ed:a7:49:1a:ce:a4:9f:b7:8e:47: e0:8d:30:d6:f7:5c:f4:d9:9a:ba:87:40:06:13:97:bd:b5:70: 87:47:79:18:47:c0:5a:90:34:38:d4:e7:f2:f0:a9:88:6d:30: f2:bc:21:ad -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEyuVxnb5t5odWqgsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2 OTBkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTJlY2M1MjMtMGIzYy00ODA5LWE3NzctZWExN2U2ZGM1NzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhgYxawOwECe8Phpv8znuTGSdvqwO8ASJSIf Gr8JrD8nxN0YJRsQIYXXS0k7kWbvFwvz2GGkD1Z21eP+h5qLufC+ECFK9n8ZdcSf 3LD9AK61otXMzDeCEMjSP0TeucL9PFQ2AztdWNh+4uTUTd9AJQ2OIPpFLAuC+g62 lAfkSTe6DIG35Rjner4nT3VO2fOddOgwlOYGB2JrV0XMo9ddjAK4qfsWZgL4yf2a gWMFpxF2ZpfROpf14knQeT0mGw6VS6+xWxSFMyENYR/Su0Zk0CqlXT0tWS8irOPZ CkgrWH99MNyXr4qxW9/pGpMJxJCo+zSbOOLETF0+fKWGNLyPswIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDsnzI6ngETyslEKc6ab+DFO0IgRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2 ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvODIyNzAwZTItMzljNC0z NzBkLWEyZDYtM2U1YjRhYzA2ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm MmZkZTY5MGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg8owVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAqoXVWudVAgeaTecghC8xrEDGy66VbuD9j8rIvtn22uEfK2mhjWg4ZmsP zoAozZOhtQvRkufgoGwTrKCLjqxUTkxi0kGpZi1yuGUk3Cv+IcTZlERc7R5xPL/I 83Pox0DiZuFblTp0djpn8v5xfiRKLUV1yNV9qddf+LnWro6swxetBrBCGE+7fO+n 40r9LdQOjR+68oHuuggo51GWatbg9psSafvweVwR5vplE/5VqcJXk2xfuWVix/mF GmEyPz4zevw+YM9nF3SBoF+T4qztp0kazqSft45H4I0w1vdc9NmauodABhOXvbVw h0d5GEfAWpA0ONTn8vCpiG0w8rwhrQ== -----END CERTIFICATE-----Generated at Fri Feb 27 10:15:37 2026 by rpki-client