$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/49e5f290-618f-3550-b059-0c6232263b33.roa File: 49e5f290-618f-3550-b059-0c6232263b33.roa (raw, json) Hash identifier: zOBGjlb7kOUEeKn7eoP5ziwc+EPl4hNO0AS7UEHD2XU= Subject key identifier: 2C:2D:CE:69:D8:A7:D9:90:F4:BA:34:F3:82:DB:FB:27:3A:46:73:F0 Certificate issuer: /CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Certificate serial: 010D0C9F4328584CE8F76CF8CA8A0292EFF6B4C0 Authority key identifier: CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/49e5f290-618f-3550-b059-0c6232263b33.roa Signing time: Thu 19 Feb 2026 02:00:32 +0000 ROA not before: Thu 19 Feb 2026 02:00:32 +0000 ROA not after: Wed 20 May 2026 01:00:32 +0000 asID: 11739 IP address blocks: 209.20.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e8:f7:6c:f8:ca:8a:02:92:ef:f6:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Validity Not Before: Feb 19 02:00:32 2026 GMT Not After : May 20 01:00:32 2026 GMT Subject: CN=ed241d4c-bb7b-4a15-9d07-cf11166a4b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3c:12:92:57:28:7b:51:36:4d:d4:48:cd:71: d1:30:8e:e0:5b:f3:70:26:97:ad:e9:ea:b9:0a:8b: 30:2c:c2:6f:84:03:0b:ca:b5:14:fe:60:74:6a:25: e0:ef:65:09:09:04:f9:d9:7d:29:33:62:d3:dc:af: 75:35:45:5e:9f:fd:20:58:af:80:84:f8:f6:57:c9: 8f:3a:98:dc:2e:54:d1:cd:05:c7:fc:a8:07:fd:29: 32:84:9a:00:76:04:2b:0e:ce:28:3b:19:c2:92:aa: a6:08:06:ae:11:7d:1c:53:15:6a:8f:cb:90:95:5a: 50:0e:e4:a8:2b:99:47:e6:62:0c:b4:a1:27:5c:1a: c7:32:6b:85:b4:01:49:56:6f:e9:f2:a2:e8:f3:53: 88:34:49:ad:4c:90:28:ac:11:0b:a1:40:3f:18:ac: 0d:e0:41:68:a7:5f:e2:38:75:1f:13:94:d2:6d:69: 4a:5c:de:08:79:55:1d:98:b1:b0:86:2a:fb:a7:97: 45:26:4b:83:4e:62:33:76:37:49:c0:42:0c:03:5a: 93:45:8b:e9:c9:56:7d:ca:51:1a:2c:e8:6f:ff:da: 10:5e:aa:ef:45:47:20:8c:45:a9:b8:6b:cb:a3:17: f9:86:b4:88:a9:85:f4:f6:83:8e:b0:3d:8f:aa:98: f7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2D:CE:69:D8:A7:D9:90:F4:BA:34:F3:82:DB:FB:27:3A:46:73:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/49e5f290-618f-3550-b059-0c6232263b33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl X509v3 Authority Key Identifier: keyid:CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer sbgp-ipAddrBlock: critical IPv4: 209.20.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:09:5b:33:d3:dc:ba:91:9c:73:de:9b:10:e6:c6:82:79:22: ae:f2:dd:03:0f:40:73:49:3e:b6:1b:b2:4f:d2:2b:74:55:f6: c4:a8:dd:fa:d9:6b:16:ba:b0:f4:45:ad:85:6a:a3:24:90:d7: 78:06:e4:23:90:a4:6a:5a:18:46:9d:84:ce:c5:45:93:72:6e: c8:c2:30:94:d8:5a:9e:55:fc:ba:19:78:d7:d9:06:7a:5b:63: c2:cb:92:37:91:54:f7:3a:52:0e:da:81:77:b0:a9:54:b3:4d: a0:51:e4:22:64:d5:0a:9c:fc:c4:69:60:31:e6:22:a3:51:24: 7e:6d:73:de:60:43:27:9c:da:86:a8:d5:15:a4:a7:8c:40:e1: 97:df:0c:4a:ac:9e:19:b0:1a:c9:ae:0a:84:f1:15:be:24:79: 1a:a7:9f:f2:4c:e5:02:06:40:1b:a8:ed:ab:00:61:77:4c:bc: 2c:d7:fe:09:ff:a4:4c:98:74:0c:6b:05:fc:5d:3c:da:f9:5b: d0:f0:16:61:ef:63:13:45:94:ff:ad:af:17:02:db:33:5f:ec: 32:30:dc:3b:a6:a6:96:0e:b0:6c:84:97:38:b4:88:86:ed:02: 24:25:06:aa:86:df:5e:66:a6:bb:92:95:f1:2b:3e:90:c9:03: 31:2c:c7:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzo92z4yooCku/2tMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM5YTdkYTAtMzk3NC00OGMyLWEyYzUtZmNhMWVjMzI4 NDhhMB4XDTI2MDIxOTAyMDAzMloXDTI2MDUyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZWQyNDFkNGMtYmI3Yi00YTE1LTlkMDctY2YxMTE2NmE0YjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDwSklcoe1E2TdRIzXHRMI7gW/NwJpet6eq5 CoswLMJvhAMLyrUU/mB0aiXg72UJCQT52X0pM2LT3K91NUVen/0gWK+AhPj2V8mP OpjcLlTRzQXH/KgH/SkyhJoAdgQrDs4oOxnCkqqmCAauEX0cUxVqj8uQlVpQDuSo K5lH5mIMtKEnXBrHMmuFtAFJVm/p8qLo81OINEmtTJAorBELoUA/GKwN4EFop1/i OHUfE5TSbWlKXN4IeVUdmLGwhir7p5dFJkuDTmIzdjdJwEIMA1qTRYvpyVZ9ylEa LOhv/9oQXqrvRUcgjEWpuGvLoxf5hrSIqYX09oOOsD2Pqpj3fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwtzmnYp9mQ9Lo084Lb+yc6RnPwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Yzlh N2RhMC0zOTc0LTQ4YzItYTJjNS1mY2ExZWMzMjg0OGEvNDllNWYyOTAtNjE4Zi0z NTUwLWIwNTktMGM2MjMyMjYzYjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWM5YTdkYTAtMzk3NC00OGMyLWEy YzUtZmNhMWVjMzI4NDhhLzVjOWE3ZGEwLTM5NzQtNDhjMi1hMmM1LWZjYTFlYzMy ODQ4YS5jcmwwHwYDVR0jBBgwFoAUy3jo0M7GwrVepCPnCc4BiznyXx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81YzlhN2RhMC0zOTc0LTQ4YzItYTJjNS1mY2Ex ZWMzMjg0OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgJWzPT3LqRnHPemxDmxoJ5Iq7y3QMPQHNJPrYbsk/SK3RV9sSo3frZ axa6sPRFrYVqoySQ13gG5COQpGpaGEadhM7FRZNybsjCMJTYWp5V/LoZeNfZBnpb Y8LLkjeRVPc6Ug7agXewqVSzTaBR5CJk1Qqc/MRpYDHmIqNRJH5tc95gQyec2oao 1RWkp4xA4ZffDEqsnhmwGsmuCoTxFb4keRqnn/JM5QIGQBuo7asAYXdMvCzX/gn/ pEyYdAxrBfxdPNr5W9DwFmHvYxNFlP+trxcC2zNf7DIw3DumppYOsGyElzi0iIbt AiQlBqqG315mpruSlfErPpDJAzEsx7E= -----END CERTIFICATE-----Generated at Sun Feb 22 19:24:04 2026 by rpki-client