$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/c3e429d2-6599-32a8-afb5-e850406cce34.roa File: c3e429d2-6599-32a8-afb5-e850406cce34.roa (raw, json) Hash identifier: 4QJDnt8YjsakIWOxe2aL0x52zz7PgmUBmF6mT2rMGkA= Subject key identifier: 71:1A:C3:A8:21:FD:1B:34:12:3F:C0:43:43:D2:90:B5:8F:01:1D:66 Certificate issuer: /CN=3ba39ba7-a768-4a44-aad9-880db8565967 Certificate serial: 010D0C9F4328584CEE8CB8AC0098E26E1D22D90C Authority key identifier: 85:2E:78:51:7B:11:9D:94:14:6E:F3:A1:C4:63:54:E7:99:A8:32:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/c3e429d2-6599-32a8-afb5-e850406cce34.roa Signing time: Sat 21 Feb 2026 02:00:32 +0000 ROA not before: Sat 21 Feb 2026 02:00:32 +0000 ROA not after: Fri 22 May 2026 01:00:32 +0000 asID: 23376 IP address blocks: 198.235.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/3ba39ba7-a768-4a44-aad9-880db8565967.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/3ba39ba7-a768-4a44-aad9-880db8565967.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ee:8c:b8:ac:00:98:e2:6e:1d:22:d9:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ba39ba7-a768-4a44-aad9-880db8565967 Validity Not Before: Feb 21 02:00:32 2026 GMT Not After : May 22 01:00:32 2026 GMT Subject: CN=322e875c-8526-442f-8b87-c5fa07f4c6e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:74:5a:f6:4d:d7:ee:2a:ce:96:18:3f:4b:48: 6a:ab:9e:70:90:7c:ca:8e:ff:25:4f:44:f4:47:10: 95:bf:29:77:d2:f4:56:bb:f9:dc:f3:71:0b:56:f7: 42:4e:b7:ae:ae:b8:da:aa:3a:e9:62:58:20:4f:0f: 0a:06:11:b6:1d:17:66:db:3d:4b:bd:99:83:b1:77: db:a0:00:c0:67:68:44:a9:d1:8f:21:6a:4e:d8:4b: 04:7a:54:31:53:9f:c2:18:7c:6a:f6:dc:61:7d:95: fa:95:b9:35:27:f4:53:0e:91:39:61:b5:ca:69:9f: 69:73:db:b3:3b:7d:30:1a:9d:7c:50:15:05:61:c7: 4a:75:3f:68:69:79:1a:86:e0:06:b6:8e:a4:dc:87: af:f5:e5:2e:63:4c:99:16:b6:4e:4f:b8:7b:02:45: 18:7e:88:bd:ce:19:9a:ec:1a:92:f3:df:e7:7b:a0: 18:34:e4:12:bc:76:4f:e1:86:b7:3c:57:be:5c:f6: a9:f8:a1:18:97:71:34:a8:d1:31:97:54:d0:54:4f: 2f:ab:99:5a:89:87:7e:53:13:9c:84:d5:12:cc:2d: 49:cf:c0:5f:a5:36:c6:5e:d2:4f:12:4e:31:79:80: 46:90:0c:18:58:34:3e:f8:c6:f6:95:5f:44:38:4b: d0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1A:C3:A8:21:FD:1B:34:12:3F:C0:43:43:D2:90:B5:8F:01:1D:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/c3e429d2-6599-32a8-afb5-e850406cce34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/3ba39ba7-a768-4a44-aad9-880db8565967.crl X509v3 Authority Key Identifier: keyid:85:2E:78:51:7B:11:9D:94:14:6E:F3:A1:C4:63:54:E7:99:A8:32:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967.cer sbgp-ipAddrBlock: critical IPv4: 198.235.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:17:26:43:09:14:68:b4:4a:c2:dd:51:a3:2a:1f:99:75:d8: 33:bc:ad:6d:a7:53:de:0f:69:4e:bc:56:35:54:d1:f5:af:f8: 29:d9:a0:fa:e9:f2:cf:e1:b8:63:27:8d:40:03:96:56:1c:ae: 47:e0:14:58:d5:49:ea:f3:f8:7e:b3:d8:3a:88:b3:7b:8a:a3: 9f:cf:55:8d:57:2b:ba:b9:41:79:f7:a5:8f:48:97:76:fd:49: bb:e2:06:e8:16:d4:aa:4a:af:e2:f1:ee:ad:14:2c:52:09:5b: 11:10:8d:b8:38:c7:73:4e:7f:46:1f:23:05:6f:e7:a5:ee:f4: d3:ae:d3:a6:64:da:80:30:c2:89:3c:86:c3:3f:a5:f8:b7:3a: 55:19:70:12:9b:b0:6e:e7:d5:b3:b9:32:29:39:81:0c:b5:6a: 2b:02:d6:19:ec:4d:12:05:9c:6f:e6:98:6f:bc:5b:6a:c2:8a: 87:dd:80:4c:c0:fd:64:af:39:36:dc:1d:1a:c4:04:b4:7b:d3: ac:c5:49:7a:54:90:d5:53:fb:fc:bd:9f:c8:24:3c:8a:e2:ed: 53:2a:09:9b:2a:02:eb:93:b5:10:60:b6:12:32:19:a4:31:3c: 4a:8d:72:0a:ba:c8:25:11:47:b9:db:c6:ef:eb:ee:2a:5b:fa: bf:67:d1:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzujLisAJjibh0i2QwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JhMzliYTctYTc2OC00YTQ0LWFhZDktODgwZGI4NTY1 OTY3MB4XDTI2MDIyMTAyMDAzMloXDTI2MDUyMjAxMDAzMlowLzEtMCsGA1UEAxMk MzIyZTg3NWMtODUyNi00NDJmLThiODctYzVmYTA3ZjRjNmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXRa9k3X7irOlhg/S0hqq55wkHzKjv8lT0T0 RxCVvyl30vRWu/nc83ELVvdCTreurrjaqjrpYlggTw8KBhG2HRdm2z1LvZmDsXfb oADAZ2hEqdGPIWpO2EsEelQxU5/CGHxq9txhfZX6lbk1J/RTDpE5YbXKaZ9pc9uz O30wGp18UBUFYcdKdT9oaXkahuAGto6k3Iev9eUuY0yZFrZOT7h7AkUYfoi9zhma 7BqS89/ne6AYNOQSvHZP4Ya3PFe+XPap+KEYl3E0qNExl1TQVE8vq5laiYd+UxOc hNUSzC1Jz8BfpTbGXtJPEk4xeYBGkAwYWDQ++Mb2lV9EOEvQPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEaw6gh/Rs0Ej/AQ0PSkLWPAR1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zYmEz OWJhNy1hNzY4LTRhNDQtYWFkOS04ODBkYjg1NjU5NjcvYzNlNDI5ZDItNjU5OS0z MmE4LWFmYjUtZTg1MDQwNmNjZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvM2JhMzliYTctYTc2OC00YTQ0LWFh ZDktODgwZGI4NTY1OTY3LzNiYTM5YmE3LWE3NjgtNGE0NC1hYWQ5LTg4MGRiODU2 NTk2Ny5jcmwwHwYDVR0jBBgwFoAUhS54UXsRnZQUbvOhxGNU55moMmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zYmEzOWJhNy1hNzY4LTRhNDQtYWFkOS04ODBk Yjg1NjU5NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxuuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMXJkMJFGi0SsLdUaMqH5l12DO8rW2nU94PaU68VjVU0fWv+CnZoPrp 8s/huGMnjUADllYcrkfgFFjVSerz+H6z2DqIs3uKo5/PVY1XK7q5QXn3pY9Il3b9 SbviBugW1KpKr+Lx7q0ULFIJWxEQjbg4x3NOf0YfIwVv56Xu9NOu06Zk2oAwwok8 hsM/pfi3OlUZcBKbsG7n1bO5Mik5gQy1aisC1hnsTRIFnG/mmG+8W2rCiofdgEzA /WSvOTbcHRrEBLR706zFSXpUkNVT+/y9n8gkPIri7VMqCZsqAuuTtRBgthIyGaQx PEqNcgq6yCURR7nbxu/r7ipb+r9n0cY= -----END CERTIFICATE-----Generated at Thu Feb 26 22:54:11 2026 by rpki-client