$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/af1dd4fa-f37f-376d-8986-0397e48786a0.roa File: af1dd4fa-f37f-376d-8986-0397e48786a0.roa (raw, json) Hash identifier: oBaLEhM1THvWL7Up5KuPVuw1UxC0SfTEmgvEEKfnQuY= Subject key identifier: 3B:C6:0B:51:A1:81:87:45:68:97:DD:40:11:C3:5A:6C:16:EA:60:D1 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584C8A0C384F4CE92BBF4066AC94 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/af1dd4fa-f37f-376d-8986-0397e48786a0.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 7265 IP address blocks: 207.98.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:38:4f:4c:e9:2b:bf:40:66:ac:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=22dcc352-b678-487b-8881-381cf0578ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7c:4d:c9:3f:fa:5f:3b:68:49:df:ee:6b:6c: 12:84:e2:5d:17:61:79:1f:f9:55:a4:dc:a4:b8:c3: 62:df:17:8a:c2:d7:04:c8:97:bd:94:82:50:c5:82: bf:de:24:4c:59:6d:a5:91:cd:2e:0c:c5:b3:51:dd: 0a:68:a1:c6:34:76:a3:14:83:62:4b:3e:69:7c:8f: d6:ee:97:42:49:75:78:c9:12:6b:99:a5:d0:30:d9: 12:b0:ea:a6:b3:4b:64:cc:c0:e0:29:3f:00:05:94: fc:4f:07:20:94:a1:3e:51:b1:f7:ce:66:e9:69:99: 61:7a:db:26:0d:05:98:78:d7:82:3c:56:73:5a:13: 2a:38:37:7d:e5:84:cd:89:37:9e:0d:5d:d2:05:85: a2:f4:cf:8b:1d:fb:ec:dd:38:5f:d2:15:46:bd:56: ba:77:70:a2:ac:0a:3c:59:a6:d9:25:f7:78:34:b4: e9:e0:93:38:3f:98:1f:a8:db:8c:ed:6c:f9:c3:ee: 05:4b:74:71:89:80:27:1c:46:8a:5d:8e:e7:f2:2f: f0:cb:86:c3:d4:48:de:25:6c:b9:29:0a:c6:32:5c: 53:fc:2e:13:22:04:64:d7:da:d0:6b:e0:1f:e3:d5: 74:4a:50:41:15:56:68:f3:23:cf:91:80:75:44:07: 0a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C6:0B:51:A1:81:87:45:68:97:DD:40:11:C3:5A:6C:16:EA:60:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/af1dd4fa-f37f-376d-8986-0397e48786a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 207.98.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c6:bb:af:40:10:a8:1c:83:a2:11:c0:d8:e9:ea:3e:10:1d: 67:44:13:42:f5:4e:07:82:5b:11:67:c6:03:24:84:3b:ef:a4: 26:a5:52:e7:41:a8:b9:79:6f:0f:86:48:4e:b7:f4:d5:7a:03: a4:ea:01:27:bb:ac:97:a7:99:43:7e:3a:41:9c:e1:27:c3:96: 9b:57:68:55:21:64:41:e9:c6:ca:47:e8:41:43:f8:f0:6a:1a: 4d:6c:ab:19:f6:7c:e9:77:1d:77:65:c1:ea:ec:26:f5:d5:27: f3:2a:05:02:02:8b:f9:5b:89:13:66:68:a6:af:a9:2d:b0:42: 4b:47:2c:ba:06:ed:2a:b2:85:42:f3:ed:72:30:41:3f:a1:d4: 39:4d:45:99:b3:c1:20:cc:91:39:c9:ef:17:8d:7e:4e:d0:01: 84:01:95:91:1f:ca:3f:a4:3f:0a:a8:49:35:ea:05:d8:bb:c2: 83:f0:86:e4:8f:8f:c7:bd:f0:31:43:cf:3b:9e:55:08:03:2f: c8:2b:64:2f:6c:6c:c8:ad:37:17:ea:af:94:4b:d1:27:7b:a1: a0:09:c0:e3:67:1b:1b:d9:e8:a3:d3:9f:b3:f2:fc:0c:03:cf: 51:30:eb:79:8d:53:cf:94:3b:57:76:1a:2a:1f:5e:9d:6a:dc: a5:04:12:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyKDDhPTOkrv0BmrJQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk MjJkY2MzNTItYjY3OC00ODdiLTg4ODEtMzgxY2YwNTc4ZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHxNyT/6XztoSd/ua2wShOJdF2F5H/lVpNyk uMNi3xeKwtcEyJe9lIJQxYK/3iRMWW2lkc0uDMWzUd0KaKHGNHajFINiSz5pfI/W 7pdCSXV4yRJrmaXQMNkSsOqms0tkzMDgKT8ABZT8TwcglKE+UbH3zmbpaZlhetsm DQWYeNeCPFZzWhMqODd95YTNiTeeDV3SBYWi9M+LHfvs3Thf0hVGvVa6d3CirAo8 WabZJfd4NLTp4JM4P5gfqNuM7Wz5w+4FS3RxiYAnHEaKXY7n8i/wy4bD1EjeJWy5 KQrGMlxT/C4TIgRk19rQa+Af49V0SlBBFVZo8yPPkYB1RAcKYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvGC1GhgYdFaJfdQBHDWmwW6mDRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvYWYxZGQ0ZmEtZjM3Zi0z NzZkLTg5ODYtMDM5N2U0ODc4NmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2KYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnGu69AEKgcg6IRwNjp6j4QHWdEE0L1TgeCWxFnxgMkhDvvpCalUudB qLl5bw+GSE639NV6A6TqASe7rJenmUN+OkGc4SfDlptXaFUhZEHpxspH6EFD+PBq Gk1sqxn2fOl3HXdlwersJvXVJ/MqBQICi/lbiRNmaKavqS2wQktHLLoG7SqyhULz 7XIwQT+h1DlNRZmzwSDMkTnJ7xeNfk7QAYQBlZEfyj+kPwqoSTXqBdi7woPwhuSP j8e98DFDzzueVQgDL8grZC9sbMitNxfqr5RL0Sd7oaAJwONnGxvZ6KPTn7Py/AwD z1Ew63mNU8+UO1d2GiofXp1q3KUEEio= -----END CERTIFICATE-----Generated at Thu Feb 26 15:19:26 2026 by rpki-client