$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f1bb9ef-c69a-43f3-a558-7e7101515a25/628a2640-8a50-3b2f-aae1-1862509d9497.roa File: 628a2640-8a50-3b2f-aae1-1862509d9497.roa (raw, json) Hash identifier: +w5KinZsQ0TSmIyyABBlxkSlgEzc7xeW9eTmCM1I/Gg= Subject key identifier: 6E:AD:8A:FD:36:59:9E:8A:26:7B:AA:21:65:A3:2B:BD:66:05:66:68 Certificate issuer: /CN=5f1bb9ef-c69a-43f3-a558-7e7101515a25 Certificate serial: 010D0C9F4328584CC1E1D225E4C2878DE26D41C0 Authority key identifier: E5:89:C7:87:B0:D5:6A:1D:CA:5B:2F:DB:AF:5B:95:D1:BD:34:AF:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f1bb9ef-c69a-43f3-a558-7e7101515a25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f1bb9ef-c69a-43f3-a558-7e7101515a25/628a2640-8a50-3b2f-aae1-1862509d9497.roa Signing time: Thu 05 Feb 2026 02:00:31 +0000 ROA not before: Thu 05 Feb 2026 02:00:31 +0000 ROA not after: Wed 06 May 2026 01:00:31 +0000 asID: 5009 IP address blocks: 64.251.96.0/20 maxlen: 24 66.97.48.0/20 maxlen: 24 69.31.144.0/20 maxlen: 24 199.192.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f1bb9ef-c69a-43f3-a558-7e7101515a25/5f1bb9ef-c69a-43f3-a558-7e7101515a25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f1bb9ef-c69a-43f3-a558-7e7101515a25/5f1bb9ef-c69a-43f3-a558-7e7101515a25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f1bb9ef-c69a-43f3-a558-7e7101515a25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c1:e1:d2:25:e4:c2:87:8d:e2:6d:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1bb9ef-c69a-43f3-a558-7e7101515a25 Validity Not Before: Feb 5 02:00:31 2026 GMT Not After : May 6 01:00:31 2026 GMT Subject: CN=aa7faab6-a4e5-4f5d-b565-ad7ecf217dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a1:da:8c:3e:c9:6f:b3:9f:d1:4a:ac:8d:81: 52:76:b6:76:a1:67:3e:fa:67:2e:b0:b4:8c:13:48: 51:97:77:81:c9:1d:11:50:b3:d4:bc:4b:27:79:58: 6a:e6:ff:cf:75:12:81:69:d5:8f:91:21:1d:48:85: 91:5f:9d:19:13:70:1b:69:ea:20:8d:71:18:62:e6: b1:51:a2:bc:18:7a:ee:7f:3e:d3:7a:b1:91:34:bb: bc:08:0a:81:dd:51:f4:14:c2:ea:7e:f6:c0:ab:65: 84:00:1c:54:f9:a2:77:54:fa:03:6e:6d:4f:cd:79: 98:20:f2:d7:74:6e:69:71:59:44:0a:12:96:6c:8e: a4:6b:b3:f1:b3:22:a1:40:ca:50:e2:30:b7:20:77: 87:39:43:1d:28:08:b3:06:d0:92:74:49:70:46:dc: c8:9e:99:b7:94:d8:56:88:cd:3a:08:ac:8e:61:7d: f4:c9:19:05:9f:74:11:c2:d2:c4:9b:76:13:0d:b1: 9e:4b:82:d0:6a:87:7a:8b:94:5e:27:c8:6b:64:a2: eb:c7:56:19:9d:1f:bc:c7:17:d3:9c:b7:46:65:40: 18:b5:d0:bf:30:f9:3c:1c:de:6f:b8:1b:db:9b:22: c1:4b:63:73:c1:9b:6a:51:8c:2a:63:e8:b6:cd:a3: 0e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AD:8A:FD:36:59:9E:8A:26:7B:AA:21:65:A3:2B:BD:66:05:66:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f1bb9ef-c69a-43f3-a558-7e7101515a25/628a2640-8a50-3b2f-aae1-1862509d9497.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f1bb9ef-c69a-43f3-a558-7e7101515a25/5f1bb9ef-c69a-43f3-a558-7e7101515a25.crl X509v3 Authority Key Identifier: keyid:E5:89:C7:87:B0:D5:6A:1D:CA:5B:2F:DB:AF:5B:95:D1:BD:34:AF:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f1bb9ef-c69a-43f3-a558-7e7101515a25.cer sbgp-ipAddrBlock: critical IPv4: 64.251.96.0/20 66.97.48.0/20 69.31.144.0/20 199.192.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:1b:fa:2f:70:34:da:b5:95:8e:fe:a2:63:16:9e:84:d2:d8: da:0a:c5:9d:14:05:68:87:cd:a8:62:ea:69:25:f1:8d:6c:d7: 09:a2:a2:69:c3:17:89:57:20:16:bd:89:99:bd:ba:91:6a:cf: 9e:0f:60:37:da:87:24:4d:e9:1f:31:e2:0d:5a:cc:e3:3b:5e: 26:33:36:9f:74:69:e5:67:10:b3:ca:15:07:48:31:c9:40:68: 18:57:ee:f6:14:fe:0d:cd:ea:6e:b5:20:87:dc:45:03:5e:f5: 57:3b:92:e6:af:b6:a4:44:d3:ae:9a:ef:f6:70:da:15:11:19: ca:79:6a:f8:cb:9a:ad:1b:97:ef:6f:da:6e:dc:48:cd:a0:5c: a0:e0:d6:30:5e:c7:eb:c0:64:4e:2a:aa:55:6b:7a:21:36:5c: 99:7c:df:61:40:fe:be:40:80:70:a5:48:3c:09:cc:61:3e:e9: df:4c:48:09:a6:fa:d4:12:6f:4a:9e:25:23:f1:11:ff:96:26: 5c:7b:5f:6b:8a:fa:fa:5b:a7:86:fc:52:11:68:c1:e5:32:06: b4:bb:0d:0d:26:24:8b:9f:cf:77:38:05:8f:fc:0d:9a:bb:10: f2:00:e1:b4:5a:21:b4:42:ef:a7:4b:58:4a:72:24:11:11:63: b1:6b:32:d8 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEzB4dIl5MKHjeJtQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYxYmI5ZWYtYzY5YS00M2YzLWE1NTgtN2U3MTAxNTE1 YTI1MB4XDTI2MDIwNTAyMDAzMVoXDTI2MDUwNjAxMDAzMVowLzEtMCsGA1UEAxMk YWE3ZmFhYjYtYTRlNS00ZjVkLWI1NjUtYWQ3ZWNmMjE3ZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKHajD7Jb7Of0UqsjYFSdrZ2oWc++mcusLSM E0hRl3eByR0RULPUvEsneVhq5v/PdRKBadWPkSEdSIWRX50ZE3AbaeogjXEYYuax UaK8GHrufz7TerGRNLu8CAqB3VH0FMLqfvbAq2WEABxU+aJ3VPoDbm1PzXmYIPLX dG5pcVlEChKWbI6ka7PxsyKhQMpQ4jC3IHeHOUMdKAizBtCSdElwRtzInpm3lNhW iM06CKyOYX30yRkFn3QRwtLEm3YTDbGeS4LQaod6i5ReJ8hrZKLrx1YZnR+8xxfT nLdGZUAYtdC/MPk8HN5vuBvbmyLBS2NzwZtqUYwqY+i2zaMOnwIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFG6tiv02WZ6KJnuqIWWjK71mBWZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZjFi YjllZi1jNjlhLTQzZjMtYTU1OC03ZTcxMDE1MTVhMjUvNjI4YTI2NDAtOGE1MC0z YjJmLWFhZTEtMTg2MjUwOWQ5NDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWYxYmI5ZWYtYzY5YS00M2YzLWE1 NTgtN2U3MTAxNTE1YTI1LzVmMWJiOWVmLWM2OWEtNDNmMy1hNTU4LTdlNzEwMTUx NWEyNS5jcmwwHwYDVR0jBBgwFoAU5YnHh7DVah3KWy/br1uV0b00r58wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZjFiYjllZi1jNjlhLTQzZjMtYTU1OC03ZTcx MDE1MTVhMjUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEQPtgAwQE QmEwAwQERR+QAwQCx8B0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEEb+i9wNNq1lY7+omMWnoTS2NoKxZ0U BWiHzahi6mkl8Y1s1wmiomnDF4lXIBa9iZm9upFqz54PYDfahyRN6R8x4g1azOM7 XiYzNp90aeVnELPKFQdIMclAaBhX7vYU/g3N6m61IIfcRQNe9Vc7kuavtqRE066a 7/Zw2hURGcp5avjLmq0bl+9v2m7cSM2gXKDg1jBex+vAZE4qqlVreiE2XJl832FA /r5AgHClSDwJzGE+6d9MSAmm+tQSb0qeJSPxEf+WJlx7X2uK+vpbp4b8UhFoweUy BrS7DQ0mJIufz3c4BY/8DZq7EPIA4bRaIbRC76dLWEpyJBERY7FrMtg= -----END CERTIFICATE-----Generated at Sun Feb 22 19:21:31 2026 by rpki-client