$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/cf4d542a-3d88-3ed6-af7b-20ed9897a0ed.roa File: cf4d542a-3d88-3ed6-af7b-20ed9897a0ed.roa (raw, json) Hash identifier: m8AqKNsXn1EdEsSlVPeQHV836ZJzM29ULzMKn8iIRQY= Subject key identifier: 91:75:CB:BB:42:2D:61:67:FE:03:49:41:85:C1:2D:44:7E:C7:27:52 Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F4328584CAE570C2B40928C08BC10D480 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/cf4d542a-3d88-3ed6-af7b-20ed9897a0ed.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 11260 IP address blocks: 24.222.160.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:0c:2b:40:92:8c:08:bc:10:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=6922b540-01f0-4861-8e27-2984ad956fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f2:45:3d:55:5d:8c:c8:8a:fa:64:75:7a:1d: 9c:e3:e2:0c:ea:47:66:5a:3a:76:69:bd:b7:56:34: 27:1a:4a:8d:06:fa:a3:8b:1b:89:1d:ce:48:0a:ca: 5d:89:5a:66:2d:5e:d5:0d:88:ef:5e:d2:bb:6c:52: e3:65:98:b1:a6:fd:3b:0b:6e:71:51:1c:48:a8:a5: 84:b3:7c:4c:47:23:02:4e:52:ad:0b:93:62:8b:79: ac:eb:2f:5f:0c:26:26:30:03:f1:4d:4a:f7:30:33: c8:ac:4d:41:0f:da:12:dd:32:3e:28:bc:48:f3:c7: 93:4a:25:6b:be:cf:64:f4:3d:c3:5a:af:81:38:71: 30:3e:77:59:41:02:37:69:ab:2f:00:a8:cc:e2:da: d0:37:3d:1c:d2:6b:46:96:15:21:b0:29:c0:70:7e: 8c:2a:57:10:73:7e:63:d9:84:23:35:f4:a3:82:a7: 86:52:ff:71:c8:f7:cd:25:c2:bd:37:ea:c6:1b:4b: f6:9e:f4:ce:02:4a:f6:56:c0:45:9f:71:c9:5b:c4: 62:0d:e9:f1:d2:74:ae:68:18:e9:53:ea:7e:18:d8: b9:f2:00:bb:16:21:fc:ac:e9:49:f1:41:80:d2:fe: 9f:91:7a:4e:fa:7d:61:68:d6:7e:e0:40:72:3c:3c: 60:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:75:CB:BB:42:2D:61:67:FE:03:49:41:85:C1:2D:44:7E:C7:27:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/cf4d542a-3d88-3ed6-af7b-20ed9897a0ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 24.222.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:89:14:a2:19:fa:49:ba:64:cf:f4:31:d1:2e:f5:db:f0:30: 16:16:df:2e:53:c7:45:38:76:5d:8f:a5:0c:32:14:b8:2e:e3: d3:95:a5:c1:34:80:d6:5d:2a:a9:d8:85:b5:9c:d7:63:8c:10: 83:ca:33:d4:43:dc:aa:a8:e2:e8:13:69:2f:79:9e:e8:7c:27: 1f:f9:a9:63:f4:13:1c:cf:ce:93:cf:32:00:8c:50:70:1a:87: 94:8b:69:00:72:40:bb:1b:45:44:e6:05:00:f9:a2:58:fe:a7: f2:9d:f4:92:90:9c:48:68:6f:fe:bf:51:f1:34:b9:bf:21:ac: 9c:3a:9e:63:04:21:27:0f:46:6c:b0:95:bb:e2:16:87:b6:ed: 08:c3:10:e7:87:a4:d6:ef:3f:d6:75:45:b1:a3:07:a5:34:ca: 57:d2:e0:17:43:65:29:5b:82:00:e5:41:e2:35:81:9e:d5:7b: 10:63:82:11:46:73:14:e0:aa:1e:21:83:fd:b1:e2:98:10:80: 88:3d:a5:60:88:43:a7:99:73:36:dc:67:3a:a9:05:d5:27:1e: fd:c0:ce:29:8f:39:a1:ec:51:ef:97:c7:68:71:6c:4b:d5:48: 41:44:c4:27:17:e3:c5:3e:fe:dc:ad:52:98:8a:aa:7c:ea:d6: a9:cc:8e:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVwwrQJKMCLwQ1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NjkyMmI1NDAtMDFmMC00ODYxLThlMjctMjk4NGFkOTU2ZmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvJFPVVdjMiK+mR1eh2c4+IM6kdmWjp2ab23 VjQnGkqNBvqjixuJHc5ICspdiVpmLV7VDYjvXtK7bFLjZZixpv07C25xURxIqKWE s3xMRyMCTlKtC5Nii3ms6y9fDCYmMAPxTUr3MDPIrE1BD9oS3TI+KLxI88eTSiVr vs9k9D3DWq+BOHEwPndZQQI3aasvAKjM4trQNz0c0mtGlhUhsCnAcH6MKlcQc35j 2YQjNfSjgqeGUv9xyPfNJcK9N+rGG0v2nvTOAkr2VsBFn3HJW8RiDenx0nSuaBjp U+p+GNi58gC7FiH8rOlJ8UGA0v6fkXpO+n1haNZ+4EByPDxgDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJF1y7tCLWFn/gNJQYXBLUR+xydSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvY2Y0ZDU0MmEtM2Q4OC0z ZWQ2LWFmN2ItMjBlZDk4OTdhMGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGN6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALqJFKIZ+km6ZM/0MdEu9dvwMBYW3y5Tx0U4dl2PpQwyFLgu49OVpcE0 gNZdKqnYhbWc12OMEIPKM9RD3Kqo4ugTaS95nuh8Jx/5qWP0ExzPzpPPMgCMUHAa h5SLaQByQLsbRUTmBQD5olj+p/Kd9JKQnEhob/6/UfE0ub8hrJw6nmMEIScPRmyw lbviFoe27QjDEOeHpNbvP9Z1RbGjB6U0ylfS4BdDZSlbggDlQeI1gZ7VexBjghFG cxTgqh4hg/2x4pgQgIg9pWCIQ6eZczbcZzqpBdUnHv3AzimPOaHsUe+Xx2hxbEvV SEFExCcX48U+/tytUpiKqnzq1qnMjkE= -----END CERTIFICATE-----Generated at Fri Feb 27 10:04:33 2026 by rpki-client