$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47/8c45d922-eb95-3eca-b4a4-7580061f982c.roa File: 8c45d922-eb95-3eca-b4a4-7580061f982c.roa (raw, json) Hash identifier: OeUKRTsueXJ+w951N05eK0I5L0b++Uw067yyksh80gw= Subject key identifier: 87:63:3D:B7:4A:26:8D:3A:95:53:70:9F:FF:53:D1:5A:81:44:13:F7 Certificate issuer: /CN=04ec7da7-14e2-4c06-a815-18072c7f0f47 Certificate serial: 010D0C9F4328584CF5AB6E8F162C45AAB4AE3600 Authority key identifier: 3C:2A:84:99:FA:8C:88:ED:48:2B:96:05:8D:BC:85:C1:30:B2:8F:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47/8c45d922-eb95-3eca-b4a4-7580061f982c.roa Signing time: Mon 23 Feb 2026 15:13:06 +0000 ROA not before: Mon 23 Feb 2026 15:13:06 +0000 ROA not after: Sun 24 May 2026 14:13:06 +0000 asID: 16589 IP address blocks: 142.249.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47/04ec7da7-14e2-4c06-a815-18072c7f0f47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47/04ec7da7-14e2-4c06-a815-18072c7f0f47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:ab:6e:8f:16:2c:45:aa:b4:ae:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04ec7da7-14e2-4c06-a815-18072c7f0f47 Validity Not Before: Feb 23 15:13:06 2026 GMT Not After : May 24 14:13:06 2026 GMT Subject: CN=3355d3c4-ff24-4916-adb5-453a137df3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:89:b5:24:91:ff:59:df:2f:11:ed:b5:46:23: 49:63:07:b7:8a:e3:eb:65:94:29:18:ab:88:0a:04: 00:44:72:e5:50:05:4b:4e:6f:e1:12:7c:c1:f3:6a: 30:2d:9c:1a:5a:80:59:0c:22:6b:9f:e0:b5:7b:92: 72:3c:14:55:88:ba:f8:3a:7c:f2:cd:c0:b7:58:1c: 96:6c:6c:2d:33:fe:d4:a2:cd:10:fd:3e:0b:66:5c: 0b:e2:2f:20:e5:59:7c:7e:30:e1:eb:d1:94:ff:ad: 5c:74:50:69:56:97:1b:fd:f8:c8:16:97:00:75:a7: ad:0e:8d:59:30:84:e2:f3:6f:19:ad:96:c1:e5:8d: 70:61:04:99:5c:85:22:79:25:b6:9a:1f:59:35:59: b9:38:f3:e3:a1:ce:9f:22:76:a8:06:0c:54:be:1d: d8:93:e1:e9:7e:6f:27:e9:b3:0b:0d:64:b7:8c:de: f1:72:d7:28:43:d2:2f:cb:fb:fc:ab:85:3c:40:81: e6:6f:0d:29:03:4e:71:7c:7f:df:86:20:c5:2f:ca: 45:f5:4f:96:a1:d9:90:59:d0:83:8c:17:97:cd:d4: 2f:a1:a0:3c:70:bf:37:6f:87:ca:bd:a1:2e:f6:48: 8d:62:4c:d3:bd:0b:cf:33:f2:b4:de:72:eb:74:78: 5c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:63:3D:B7:4A:26:8D:3A:95:53:70:9F:FF:53:D1:5A:81:44:13:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47/8c45d922-eb95-3eca-b4a4-7580061f982c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47/04ec7da7-14e2-4c06-a815-18072c7f0f47.crl X509v3 Authority Key Identifier: keyid:3C:2A:84:99:FA:8C:88:ED:48:2B:96:05:8D:BC:85:C1:30:B2:8F:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47.cer sbgp-ipAddrBlock: critical IPv4: 142.249.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:3e:6b:46:f1:c6:8f:0e:a1:30:a7:bb:b9:63:ae:9b:67:2c: 67:92:7b:1e:6f:1a:47:e9:1e:75:54:a9:71:f3:82:01:cc:b2: 34:82:68:a3:d1:ea:75:8c:a9:3b:ac:f6:27:fd:a8:0f:9c:28: 08:81:fe:ff:23:a4:c1:6e:7a:19:d4:8d:c5:e7:dc:e7:80:39: 0d:80:34:32:7b:18:05:0b:ab:66:07:bb:78:1d:65:d4:f4:e7: 39:9d:e5:93:29:48:e1:3c:3e:b3:4d:7e:94:60:16:e7:5d:34: e0:72:90:be:3e:05:46:6c:d5:7f:e2:9c:0f:68:bb:c9:e2:8f: 75:c8:b9:e5:fc:fb:a9:b5:48:a9:42:a7:69:32:a5:e0:b2:53: b1:0b:17:5c:af:e6:ae:55:62:60:37:f2:7b:8a:1e:97:da:eb: 8c:bf:cd:54:c2:76:bb:5c:b6:f4:c9:85:cc:3b:ee:8c:07:11: 53:58:8a:8d:36:69:e1:16:0b:5d:67:dc:3f:7c:7c:69:3f:d3: 00:10:ed:43:7c:ba:b8:2c:af:d7:4a:4a:08:f8:db:03:07:20: a4:eb:92:51:09:73:b6:19:cb:7e:4b:09:fd:d5:aa:03:b0:08: 54:97:63:f4:61:bd:d2:9b:79:33:29:e8:c8:6e:37:44:75:6a: 93:46:0a:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1q26PFixFqrSuNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRlYzdkYTctMTRlMi00YzA2LWE4MTUtMTgwNzJjN2Yw ZjQ3MB4XDTI2MDIyMzE1MTMwNloXDTI2MDUyNDE0MTMwNlowLzEtMCsGA1UEAxMk MzM1NWQzYzQtZmYyNC00OTE2LWFkYjUtNDUzYTEzN2RmM2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhom1JJH/Wd8vEe21RiNJYwe3iuPrZZQpGKuI CgQARHLlUAVLTm/hEnzB82owLZwaWoBZDCJrn+C1e5JyPBRViLr4OnzyzcC3WByW bGwtM/7Uos0Q/T4LZlwL4i8g5Vl8fjDh69GU/61cdFBpVpcb/fjIFpcAdaetDo1Z MITi828ZrZbB5Y1wYQSZXIUieSW2mh9ZNVm5OPPjoc6fInaoBgxUvh3Yk+Hpfm8n 6bMLDWS3jN7xctcoQ9Ivy/v8q4U8QIHmbw0pA05xfH/fhiDFL8pF9U+WodmQWdCD jBeXzdQvoaA8cL83b4fKvaEu9kiNYkzTvQvPM/K03nLrdHhckwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdjPbdKJo06lVNwn/9T0VqBRBP3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wNGVj N2RhNy0xNGUyLTRjMDYtYTgxNS0xODA3MmM3ZjBmNDcvOGM0NWQ5MjItZWI5NS0z ZWNhLWI0YTQtNzU4MDA2MWY5ODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDRlYzdkYTctMTRlMi00YzA2LWE4 MTUtMTgwNzJjN2YwZjQ3LzA0ZWM3ZGE3LTE0ZTItNGMwNi1hODE1LTE4MDcyYzdm MGY0Ny5jcmwwHwYDVR0jBBgwFoAUPCqEmfqMiO1IK5YFjbyFwTCyjywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wNGVjN2RhNy0xNGUyLTRjMDYtYTgxNS0xODA3 MmM3ZjBmNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw+a0bxxo8OoTCnu7ljrptnLGeSex5vGkfpHnVUqXHzggHMsjSCaKPR 6nWMqTus9if9qA+cKAiB/v8jpMFuehnUjcXn3OeAOQ2ANDJ7GAULq2YHu3gdZdT0 5zmd5ZMpSOE8PrNNfpRgFuddNOBykL4+BUZs1X/inA9ou8nij3XIueX8+6m1SKlC p2kypeCyU7ELF1yv5q5VYmA38nuKHpfa64y/zVTCdrtctvTJhcw77owHEVNYio02 aeEWC11n3D98fGk/0wAQ7UN8urgsr9dKSgj42wMHIKTrklEJc7YZy35LCf3VqgOw CFSXY/RhvdKbeTMp6MhuN0R1apNGCjg= -----END CERTIFICATE-----Generated at Thu Feb 26 23:08:40 2026 by rpki-client