$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/cddcfce5-dc59-36c9-9b2f-1ec929661322.roa File: cddcfce5-dc59-36c9-9b2f-1ec929661322.roa (raw, json) Hash identifier: cVuYw12t5ZuZ/n13v4jy/jEYVS/r7KW3D9ebuDP+JTA= Subject key identifier: 67:3F:F5:8F:19:8A:DB:F7:50:3D:AC:9D:50:92:3A:FA:88:D2:DF:90 Certificate issuer: /CN=ba339105-0dc8-4e13-ab0d-3279a6b58f97 Certificate serial: 010D0C9F4328584CAE5E7F392FB3D31AC124AD00 Authority key identifier: 90:B8:5A:EE:92:C4:9A:6D:E8:77:45:60:0F:2D:77:2A:26:11:83:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/cddcfce5-dc59-36c9-9b2f-1ec929661322.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 139247 IP address blocks: 208.99.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:7f:39:2f:b3:d3:1a:c1:24:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba339105-0dc8-4e13-ab0d-3279a6b58f97 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=87c6088d-8544-4757-9066-3661b353553e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bd:8e:50:ee:0e:18:a4:bd:24:30:6b:58:68: 77:17:8a:e7:7f:25:b0:0f:bf:14:f2:f2:d5:dc:89: 35:b7:49:af:4b:cd:9b:83:58:0f:5f:e7:7f:c3:34: f5:74:d6:f3:b8:97:48:6f:90:82:d0:0c:b1:23:f4: 92:90:00:60:40:89:8f:0a:ae:ca:5e:eb:b6:77:61: 8b:56:76:67:ce:5a:c4:15:86:85:71:c4:f1:01:3a: 71:a8:f9:6a:a4:d1:48:76:d3:ef:8b:4f:19:76:b7: 74:3e:25:8c:0c:6d:d0:17:a2:12:c0:08:c0:0b:f0: 9d:1c:1e:e7:29:d5:2b:2e:04:1a:0c:35:05:07:2a: a6:a5:8b:99:5a:9d:07:7a:8e:89:6a:82:01:42:eb: 87:82:d2:c9:0c:41:ea:43:ef:d2:20:15:a8:72:5e: 4a:ad:ef:4b:7d:d5:0c:38:18:b8:b2:62:b4:a7:d7: 01:d6:eb:67:ea:d9:8d:b7:21:54:49:22:b0:7c:bd: b0:86:b5:44:10:a1:4f:7b:e4:d6:08:62:5c:75:77: 52:f4:fc:2e:0e:5d:04:91:18:a9:1a:f2:34:22:1b: 14:f1:ee:62:4d:82:94:c8:49:61:63:a2:c3:3d:d1: 6f:e9:8f:a0:ce:28:7b:c8:23:89:02:0b:61:5e:3b: d9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3F:F5:8F:19:8A:DB:F7:50:3D:AC:9D:50:92:3A:FA:88:D2:DF:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/cddcfce5-dc59-36c9-9b2f-1ec929661322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.crl X509v3 Authority Key Identifier: keyid:90:B8:5A:EE:92:C4:9A:6D:E8:77:45:60:0F:2D:77:2A:26:11:83:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer sbgp-ipAddrBlock: critical IPv4: 208.99.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:84:45:7c:81:ee:a9:06:1f:54:69:e7:7f:74:cc:a8:b7:11: c2:ba:4d:6d:cd:df:3d:17:d1:bf:eb:98:c1:fa:05:c6:8d:7f: ce:8e:f6:1e:fd:04:47:8a:de:08:96:b6:db:a4:20:bb:c8:b1: 69:52:48:d9:8a:ac:41:ee:86:48:86:42:da:75:e4:e8:4e:88: 6f:1e:8f:7e:22:5b:3e:60:f8:b6:12:fb:65:65:87:82:67:b3: 43:54:e1:90:52:ce:fe:81:2a:38:ad:93:3b:a9:30:a3:13:b6: 91:eb:e4:07:b7:a5:46:ba:13:2d:61:f9:77:af:2b:20:d2:7c: 20:90:f4:9f:85:93:d1:0e:82:d2:8f:8c:96:aa:08:80:f9:a1: 7d:a0:1b:b4:3b:17:1a:4e:76:d8:8d:4b:92:d6:6b:fc:03:44: 63:74:46:a3:39:cc:dd:aa:d8:4b:bd:77:46:d4:93:1b:e0:54: 37:5d:e1:df:a1:a1:e8:15:b5:1f:3f:c6:78:34:74:67:cf:e0: 8f:0a:a5:59:a4:5f:4c:c5:cc:4d:64:a7:d5:f8:5b:e1:df:b5: 5f:96:ba:44:ba:ee:c8:cf:df:8f:6f:0c:86:61:5c:54:4e:c7: d3:17:66:8c:ba:88:df:6c:4d:b8:84:65:59:13:2b:11:2d:2e: 59:9a:23:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXn85L7PTGsEkrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzMzkxMDUtMGRjOC00ZTEzLWFiMGQtMzI3OWE2YjU4 Zjk3MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODdjNjA4OGQtODU0NC00NzU3LTkwNjYtMzY2MWIzNTM1NTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL2OUO4OGKS9JDBrWGh3F4rnfyWwD78U8vLV 3Ik1t0mvS82bg1gPX+d/wzT1dNbzuJdIb5CC0AyxI/SSkABgQImPCq7KXuu2d2GL VnZnzlrEFYaFccTxATpxqPlqpNFIdtPvi08Zdrd0PiWMDG3QF6ISwAjAC/CdHB7n KdUrLgQaDDUFByqmpYuZWp0Heo6JaoIBQuuHgtLJDEHqQ+/SIBWocl5Kre9LfdUM OBi4smK0p9cB1utn6tmNtyFUSSKwfL2whrVEEKFPe+TWCGJcdXdS9PwuDl0EkRip GvI0IhsU8e5iTYKUyElhY6LDPdFv6Y+gzih7yCOJAgthXjvZqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGc/9Y8Zitv3UD2snVCSOvqI0t+QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYTMz OTEwNS0wZGM4LTRlMTMtYWIwZC0zMjc5YTZiNThmOTcvY2RkY2ZjZTUtZGM1OS0z NmM5LTliMmYtMWVjOTI5NjYxMzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmEzMzkxMDUtMGRjOC00ZTEzLWFi MGQtMzI3OWE2YjU4Zjk3L2JhMzM5MTA1LTBkYzgtNGUxMy1hYjBkLTMyNzlhNmI1 OGY5Ny5jcmwwHwYDVR0jBBgwFoAUkLha7pLEmm3od0VgDy13KiYRg8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYTMzOTEwNS0wZGM4LTRlMTMtYWIwZC0zMjc5 YTZiNThmOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqERXyB7qkGH1Rp5390zKi3EcK6TW3N3z0X0b/rmMH6BcaNf86O9h79 BEeK3giWttukILvIsWlSSNmKrEHuhkiGQtp15OhOiG8ej34iWz5g+LYS+2Vlh4Jn s0NU4ZBSzv6BKjitkzupMKMTtpHr5Ae3pUa6Ey1h+XevKyDSfCCQ9J+Fk9EOgtKP jJaqCID5oX2gG7Q7FxpOdtiNS5LWa/wDRGN0RqM5zN2q2Eu9d0bUkxvgVDdd4d+h oegVtR8/xng0dGfP4I8KpVmkX0zFzE1kp9X4W+HftV+WukS67sjP349vDIZhXFRO x9MXZoy6iN9sTbiEZVkTKxEtLlmaI18= -----END CERTIFICATE-----Generated at Thu Feb 26 12:01:11 2026 by rpki-client