$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0def88de-7904-3498-ae64-f09bd667030d.roa File: 0def88de-7904-3498-ae64-f09bd667030d.roa (raw, json) Hash identifier: 4umThdTY3DYlu85RzMnEs8xh81cYSF4EmvvO2bQHM8o= Subject key identifier: F4:76:23:0E:E1:FF:DF:4B:0A:3D:1A:8C:83:05:CB:49:DC:BF:C5:F9 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584CF9B782213DECFB0D62916980 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0def88de-7904-3498-ae64-f09bd667030d.roa Signing time: Wed 25 Feb 2026 02:00:32 +0000 ROA not before: Wed 25 Feb 2026 02:00:32 +0000 ROA not after: Tue 26 May 2026 01:00:32 +0000 asID: 13536 IP address blocks: 209.198.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:b7:82:21:3d:ec:fb:0d:62:91:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Feb 25 02:00:32 2026 GMT Not After : May 26 01:00:32 2026 GMT Subject: CN=3afc575e-11e8-4676-a62f-4a0aada4c290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:be:4f:db:ca:55:a8:5d:4a:f3:2a:f8:cc:c8: 0e:32:f4:ff:17:3f:e6:6e:7c:39:80:5f:ba:fe:8c: 3e:6d:9f:f2:0c:63:cd:18:88:49:74:a0:7b:dd:c3: 82:a3:cd:c3:bf:6f:16:82:7f:8d:6b:d1:fd:6d:6c: 9e:53:79:3d:91:1b:a1:78:38:a2:80:09:86:ce:4b: 81:a7:70:6a:e7:38:8a:0e:85:e0:1a:f7:a8:69:55: 90:0d:32:ed:89:3e:9e:22:c3:c7:4d:0b:bd:1e:be: 9b:cf:02:75:66:f9:96:0d:30:2b:cd:1e:72:32:ec: 03:bb:5f:82:4b:a0:83:67:c6:99:a4:e8:8d:b7:77: 0f:2e:74:e3:0d:32:a2:a8:0d:e1:54:fa:27:7e:78: 52:ec:be:12:64:31:e6:cb:54:a1:42:50:52:b6:04: 23:00:09:a7:08:0d:c2:bb:9b:d2:9a:96:dd:94:6c: 3f:4e:7f:18:01:ef:f5:29:fc:da:c0:a0:be:34:36: 15:96:c7:07:a9:57:17:1a:96:e6:93:4b:f9:48:4e: f6:44:b0:e8:bc:89:44:34:0d:33:12:e2:e3:69:68: f0:80:8b:c8:06:b9:cc:af:9c:ce:66:ef:a3:80:e3: bc:d9:cf:5c:4e:c8:5d:49:3d:e9:49:99:5a:73:b9: 1c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:76:23:0E:E1:FF:DF:4B:0A:3D:1A:8C:83:05:CB:49:DC:BF:C5:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0def88de-7904-3498-ae64-f09bd667030d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 209.198.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:63:23:67:8d:53:ec:c6:26:93:bf:19:9f:cd:c5:90:90:eb: 86:87:c6:4a:af:27:14:45:52:e0:b3:82:c2:09:97:ad:d3:3b: f7:3a:cb:ed:d3:04:54:ec:1a:9e:5a:a9:03:80:98:a6:d6:d4: 2c:7b:05:63:56:1b:0f:de:31:7e:e2:71:ae:75:f8:6b:ee:d4: c0:9e:86:2f:79:ac:02:c4:dc:4f:73:35:8f:c3:47:ca:a2:3c: 48:24:b2:e3:40:31:42:ed:75:36:99:ea:0e:a6:eb:93:30:2e: 20:8d:27:1b:0c:47:82:09:20:d3:7c:0f:36:73:22:0a:8c:19: d9:55:f1:b3:15:d8:a4:db:1c:8a:56:5f:57:71:03:0e:24:ff: 68:77:0b:3d:e4:e6:70:eb:03:ed:d7:11:51:86:8d:48:30:18: 44:25:a4:f2:fa:82:81:7c:13:06:b7:92:9b:8b:e7:94:ba:5d: ab:6f:59:b3:51:d6:31:8f:97:0c:14:17:27:10:9d:9f:09:09: 9a:75:05:1c:d7:13:da:e9:65:ee:fe:b9:fc:23:7f:41:23:79: ae:14:d5:59:60:1d:9f:92:dc:60:c9:9c:1c:56:fa:78:3e:b5: 6a:24:e3:4f:23:f6:b5:b2:15:98:91:61:a7:fc:5a:a3:ab:ea: 1f:b5:15:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz5t4IhPez7DWKRaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI2MDIyNTAyMDAzMloXDTI2MDUyNjAxMDAzMlowLzEtMCsGA1UEAxMk M2FmYzU3NWUtMTFlOC00Njc2LWE2MmYtNGEwYWFkYTRjMjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL5P28pVqF1K8yr4zMgOMvT/Fz/mbnw5gF+6 /ow+bZ/yDGPNGIhJdKB73cOCo83Dv28Wgn+Na9H9bWyeU3k9kRuheDiigAmGzkuB p3Bq5ziKDoXgGveoaVWQDTLtiT6eIsPHTQu9Hr6bzwJ1ZvmWDTArzR5yMuwDu1+C S6CDZ8aZpOiNt3cPLnTjDTKiqA3hVPonfnhS7L4SZDHmy1ShQlBStgQjAAmnCA3C u5vSmpbdlGw/Tn8YAe/1KfzawKC+NDYVlscHqVcXGpbmk0v5SE72RLDovIlENA0z EuLjaWjwgIvIBrnMr5zOZu+jgOO82c9cTshdST3pSZlac7kcwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPR2Iw7h/99LCj0ajIMFy0ncv8X5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMGRlZjg4ZGUtNzkwNC0z NDk4LWFlNjQtZjA5YmQ2NjcwMzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cZCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRjI2eNU+zGJpO/GZ/NxZCQ64aHxkqvJxRFUuCzgsIJl63TO/c6y+3T BFTsGp5aqQOAmKbW1Cx7BWNWGw/eMX7ica51+Gvu1MCehi95rALE3E9zNY/DR8qi PEgksuNAMULtdTaZ6g6m65MwLiCNJxsMR4IJINN8DzZzIgqMGdlV8bMV2KTbHIpW X1dxAw4k/2h3Cz3k5nDrA+3XEVGGjUgwGEQlpPL6goF8Ewa3kpuL55S6XatvWbNR 1jGPlwwUFycQnZ8JCZp1BRzXE9rpZe7+ufwjf0Ejea4U1VlgHZ+S3GDJnBxW+ng+ tWok408j9rWyFZiRYaf8WqOr6h+1FXA= -----END CERTIFICATE-----Generated at Thu Feb 26 12:02:34 2026 by rpki-client