$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/fa929d22-5b04-3656-bfd5-92174907d027.roa File: fa929d22-5b04-3656-bfd5-92174907d027.roa (raw, json) Hash identifier: dOaReEJUssfj8+0694OJs9+IhBSUrTBLSyh6r6JR1kQ= Subject key identifier: A6:74:38:A8:37:AD:95:EC:DC:47:FB:31:4B:6C:D8:2D:4A:BD:78:F8 Certificate issuer: /CN=249f7a2c-0438-4d20-8f0b-095a38d1046f Certificate serial: 010D0C9F4328584CCD0C7FDE19B534ABD4536A20 Authority key identifier: 35:8D:85:E8:AC:C7:02:3F:C0:22:5A:03:5D:29:2D:9D:8E:7B:4D:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/fa929d22-5b04-3656-bfd5-92174907d027.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 7441 IP address blocks: 207.189.128.0/21 maxlen: 24 207.189.136.0/22 maxlen: 24 207.189.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:7f:de:19:b5:34:ab:d4:53:6a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249f7a2c-0438-4d20-8f0b-095a38d1046f Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=b2457cb9-0a00-41c3-93bc-a7afff08abcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e3:de:3b:aa:74:f4:f5:87:94:c7:9e:c5:d9: be:02:11:e9:d0:ea:89:09:d1:20:6f:23:c8:b6:3e: a2:84:cf:17:13:9c:35:cc:f0:d8:af:22:c3:ef:c7: 79:d2:d9:66:be:d1:1c:15:75:bf:d1:5a:a8:7b:84: e1:0a:17:41:fd:d1:d1:6f:40:7b:cf:e0:32:00:4d: 8e:b4:30:72:56:84:87:38:f4:45:fe:ba:5e:88:f5: 5b:52:81:e2:81:c0:b6:0f:9a:e2:d4:de:90:90:14: 2b:4e:87:fb:3e:bb:76:49:95:49:18:db:f4:b4:02: 6c:9c:09:5d:1a:bc:d1:74:c2:a4:e5:d8:79:a9:5e: 8b:bb:5d:90:bb:43:7c:e8:36:db:24:1e:0e:32:da: 43:d1:76:1b:1c:eb:cf:b2:b2:7e:04:47:a5:45:69: 45:10:f0:b3:e0:a1:7d:48:23:59:33:0e:5f:bb:b6: 87:9d:52:e7:13:7b:72:6c:4a:52:22:00:b3:24:14: 99:b5:55:51:7a:d9:47:ea:8d:e7:02:ef:7f:0e:79: da:d3:04:2f:c2:9f:30:d4:47:fc:8f:2e:4a:49:ba: 3d:43:2d:bd:dc:15:b2:af:b7:38:e6:6e:16:0a:f3: 3a:cb:ee:8b:ef:22:f2:6c:8f:6e:93:25:bc:66:0d: 26:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:74:38:A8:37:AD:95:EC:DC:47:FB:31:4B:6C:D8:2D:4A:BD:78:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/fa929d22-5b04-3656-bfd5-92174907d027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.crl X509v3 Authority Key Identifier: keyid:35:8D:85:E8:AC:C7:02:3F:C0:22:5A:03:5D:29:2D:9D:8E:7B:4D:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f.cer sbgp-ipAddrBlock: critical IPv4: 207.189.128.0-207.189.141.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:78:4a:8d:72:1d:b8:e1:aa:65:7b:d3:61:01:29:4c:14:60: 24:b4:d9:48:fa:77:12:77:e7:c6:36:b7:b7:db:0d:b2:7b:e0: 99:ae:aa:16:a4:e0:5c:71:db:72:e3:3b:8b:ca:7d:f0:21:8c: 9d:61:b1:75:27:76:74:a4:3e:dd:69:1f:b1:96:7b:c3:9c:b3: f4:28:a2:41:ca:ee:33:ce:d7:e2:db:20:c7:b7:67:a1:2e:aa: 53:46:58:c9:b4:c5:bc:0c:db:1c:77:f0:a5:59:33:9a:a8:5e: 3d:d5:5e:9f:ba:e1:78:b8:67:49:d5:1e:c7:42:56:ba:9a:b0: 7b:6c:af:a5:67:f8:61:05:fc:ba:7b:7d:03:35:84:af:3c:b9: 0e:9c:8d:41:a4:b8:75:35:b7:1f:2c:b8:db:d1:0f:06:71:4d: 00:6e:bd:ec:4c:c5:00:9c:e0:6a:c1:c0:3a:f1:83:e9:cb:73: 3e:56:9d:e5:c6:35:a0:16:d8:32:1b:5f:52:d5:29:3d:eb:9b: 48:7e:41:ec:fb:2e:e1:f5:da:b0:72:f3:ab:8b:d1:a6:4b:68: e8:45:84:7f:71:c2:7e:b7:59:83:b6:d2:aa:6d:ae:90:fd:64: d1:7d:ca:35:f0:d0:06:c8:1a:cb:5a:55:26:b5:40:df:36:7a: a2:e4:fe:ac -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEzNDH/eGbU0q9RTaiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5ZjdhMmMtMDQzOC00ZDIwLThmMGItMDk1YTM4ZDEw NDZmMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk YjI0NTdjYjktMGEwMC00MWMzLTkzYmMtYTdhZmZmMDhhYmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+PeO6p09PWHlMeexdm+AhHp0OqJCdEgbyPI tj6ihM8XE5w1zPDYryLD78d50tlmvtEcFXW/0Vqoe4ThChdB/dHRb0B7z+AyAE2O tDByVoSHOPRF/rpeiPVbUoHigcC2D5ri1N6QkBQrTof7Prt2SZVJGNv0tAJsnAld GrzRdMKk5dh5qV6Lu12Qu0N86DbbJB4OMtpD0XYbHOvPsrJ+BEelRWlFEPCz4KF9 SCNZMw5fu7aHnVLnE3tybEpSIgCzJBSZtVVRetlH6o3nAu9/Dnna0wQvwp8w1Ef8 jy5KSbo9Qy293BWyr7c45m4WCvM6y+6L7yLybI9ukyW8Zg0mAQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFKZ0OKg3rZXs3Ef7MUts2C1KvXj4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNDlm N2EyYy0wNDM4LTRkMjAtOGYwYi0wOTVhMzhkMTA0NmYvZmE5MjlkMjItNWIwNC0z NjU2LWJmZDUtOTIxNzQ5MDdkMDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjQ5ZjdhMmMtMDQzOC00ZDIwLThm MGItMDk1YTM4ZDEwNDZmLzI0OWY3YTJjLTA0MzgtNGQyMC04ZjBiLTA5NWEzOGQx MDQ2Zi5jcmwwHwYDVR0jBBgwFoAUNY2F6KzHAj/AIloDXSktnY57TSkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNDlmN2EyYy0wNDM4LTRkMjAtOGYwYi0wOTVh MzhkMTA0NmYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAfPvYAD BAHPvYwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAMnhKjXIduOGqZXvTYQEpTBRgJLTZSPp3Enfnxja3t9sN snvgma6qFqTgXHHbcuM7i8p98CGMnWGxdSd2dKQ+3WkfsZZ7w5yz9CiiQcruM87X 4tsgx7dnoS6qU0ZYybTFvAzbHHfwpVkzmqhePdVen7rheLhnSdUex0JWupqwe2yv pWf4YQX8unt9AzWErzy5DpyNQaS4dTW3Hyy429EPBnFNAG697EzFAJzgasHAOvGD 6ctzPlad5cY1oBbYMhtfUtUpPeubSH5B7Psu4fXasHLzq4vRpkto6EWEf3HCfrdZ g7bSqm2ukP1k0X3KNfDQBsgay1pVJrVA3zZ6ouT+rA== -----END CERTIFICATE-----Generated at Thu Feb 26 22:55:07 2026 by rpki-client