$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa File: d859550a-458f-3e37-bf97-e6cd52ef8427.roa (raw, json) Hash identifier: t2g7a4jrQc4RpOiV1mk0saounGZBJo3K2furbKJvVmU= Subject key identifier: 1E:7A:74:FD:32:1D:F0:E4:7C:D9:06:4C:ED:AA:C6:B1:40:7D:27:DB Certificate issuer: /CN=a5e2d89d-6269-4405-9578-836517825b32 Certificate serial: 010D0C9F4328584CD407560EDE94126600995AC0 Authority key identifier: E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 13347 IP address blocks: 67.223.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:56:0e:de:94:12:66:00:99:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5e2d89d-6269-4405-9578-836517825b32 Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=4c5d1eeb-4b76-4b2b-84ed-4d1af12b0223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c0:20:2d:c7:50:21:60:3f:26:e3:5b:48:cc: 7f:3c:bc:94:00:27:53:fd:06:85:79:5e:82:65:fb: b1:09:68:99:6c:63:00:8b:8e:85:33:6d:5d:03:d8: 76:af:13:e5:e8:0e:0d:19:1b:09:2a:c3:9f:98:4d: 76:37:9c:99:55:88:8e:f8:17:ec:ec:20:34:57:a6: cd:fb:47:e3:c8:fc:8c:78:5b:d8:08:9f:c0:4e:ab: d2:3b:3a:90:55:e9:56:8b:68:41:a7:44:90:d7:1d: ac:7f:22:b5:81:01:07:01:09:40:b0:8b:cf:07:76: 6c:a3:d7:49:b3:70:4c:81:7a:47:67:fd:ef:38:31: 79:7f:2d:5c:ed:8c:9d:84:8f:1e:eb:80:ae:6d:28: fe:a4:16:38:84:3a:3d:1c:e6:ae:f7:fc:88:42:28: 10:42:18:42:59:69:3a:5f:c5:f2:04:66:61:88:b2: 03:4f:30:7e:51:87:5b:6e:ae:09:ec:0b:fb:d1:e9: 11:78:02:5a:42:eb:a2:34:76:c6:55:e6:be:21:25: b6:c9:95:13:2f:6e:56:f3:6c:2e:53:b4:28:f2:aa: 32:1a:70:e2:d6:c2:b4:d6:3d:fe:11:6c:1b:a1:12: 74:ff:ca:3c:1d:8e:0d:5a:0d:da:eb:91:d4:eb:17: 78:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7A:74:FD:32:1D:F0:E4:7C:D9:06:4C:ED:AA:C6:B1:40:7D:27:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl X509v3 Authority Key Identifier: keyid:E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer sbgp-ipAddrBlock: critical IPv4: 67.223.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:c4:55:41:b6:80:f6:d5:6e:fa:d3:f1:98:e9:59:3d:75:7c: dc:8f:88:db:3c:53:b2:43:a7:34:ba:a5:8b:e0:c1:96:2c:17: 88:9e:86:f9:0a:08:11:36:64:93:93:e7:63:ec:1d:84:03:75: 2e:e2:35:19:32:64:1d:56:76:c1:6d:c6:75:be:aa:aa:55:f2: 35:d8:45:17:2f:06:b2:89:32:34:85:3c:d1:d9:3b:cc:fd:4a: af:0b:7d:03:96:8d:8d:0a:e4:a0:f8:cd:06:06:a0:ab:bc:fa: 56:11:4f:95:07:98:d8:53:74:ad:a2:e1:9b:3b:60:6c:5e:83: 10:b6:1d:5e:80:f6:73:bb:74:b8:f5:79:fa:de:c9:32:a8:9f: c0:89:a0:e3:b3:6d:08:d7:cb:72:7f:ad:66:ee:dc:3e:28:e9: 23:8e:30:ea:b5:3b:16:23:58:dd:40:50:59:c0:1c:e5:f9:58: 55:fa:a5:09:50:5d:ab:8e:a6:5a:14:4f:09:d2:ec:0b:65:99: 2b:ee:9e:30:24:34:73:a1:90:27:86:13:80:4a:fa:f0:4e:c3: 16:dc:0e:9c:8b:04:5b:3b:3d:48:f4:cd:5d:d3:25:ec:8d:94: 3b:00:99:1d:16:0a:bb:42:52:d3:70:11:bf:91:6c:4a:24:99: b4:05:25:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB1YO3pQSZgCZWsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVlMmQ4OWQtNjI2OS00NDA1LTk1NzgtODM2NTE3ODI1 YjMyMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk NGM1ZDFlZWItNGI3Ni00YjJiLTg0ZWQtNGQxYWYxMmIwMjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8AgLcdQIWA/JuNbSMx/PLyUACdT/QaFeV6C ZfuxCWiZbGMAi46FM21dA9h2rxPl6A4NGRsJKsOfmE12N5yZVYiO+Bfs7CA0V6bN +0fjyPyMeFvYCJ/ATqvSOzqQVelWi2hBp0SQ1x2sfyK1gQEHAQlAsIvPB3Zso9dJ s3BMgXpHZ/3vODF5fy1c7YydhI8e64CubSj+pBY4hDo9HOau9/yIQigQQhhCWWk6 X8XyBGZhiLIDTzB+UYdbbq4J7Av70ekReAJaQuuiNHbGVea+ISW2yZUTL25W82wu U7Qo8qoyGnDi1sK01j3+EWwboRJ0/8o8HY4NWg3a65HU6xd4IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB56dP0yHfDkfNkGTO2qxrFAfSfbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNWUy ZDg5ZC02MjY5LTQ0MDUtOTU3OC04MzY1MTc4MjViMzIvZDg1OTU1MGEtNDU4Zi0z ZTM3LWJmOTctZTZjZDUyZWY4NDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTVlMmQ4OWQtNjI2OS00NDA1LTk1 NzgtODM2NTE3ODI1YjMyL2E1ZTJkODlkLTYyNjktNDQwNS05NTc4LTgzNjUxNzgy NWIzMi5jcmwwHwYDVR0jBBgwFoAU59BBfkHLFeCXHRtb1UGhvOtai84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hNWUyZDg5ZC02MjY5LTQ0MDUtOTU3OC04MzY1 MTc4MjViMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ99wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALbEVUG2gPbVbvrT8ZjpWT11fNyPiNs8U7JDpzS6pYvgwZYsF4iehvkK CBE2ZJOT52PsHYQDdS7iNRkyZB1WdsFtxnW+qqpV8jXYRRcvBrKJMjSFPNHZO8z9 Sq8LfQOWjY0K5KD4zQYGoKu8+lYRT5UHmNhTdK2i4Zs7YGxegxC2HV6A9nO7dLj1 efreyTKon8CJoOOzbQjXy3J/rWbu3D4o6SOOMOq1OxYjWN1AUFnAHOX5WFX6pQlQ XauOploUTwnS7AtlmSvunjAkNHOhkCeGE4BK+vBOwxbcDpyLBFs7PUj0zV3TJeyN lDsAmR0WCrtCUtNwEb+RbEokmbQFJcs= -----END CERTIFICATE-----Generated at Fri Feb 27 11:40:21 2026 by rpki-client