$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/e5e6aa31-b14a-31f9-a13b-828a710daada.roa File: e5e6aa31-b14a-31f9-a13b-828a710daada.roa (raw, json) Hash identifier: dI9wC+shU9R9otgPWbGmSGvH7m9qQH2kF4DEctRoEGQ= Subject key identifier: C7:09:56:7E:26:30:F6:BC:6F:FF:33:CD:B4:68:28:10:5F:E9:BA:C8 Certificate issuer: /CN=4bf6b4aa-8fed-421b-bd5c-8385c0504c1d Certificate serial: 010D0C9F4328584CE0974B4EDD87C105ED1FFF80 Authority key identifier: 71:C9:0F:E3:08:1D:55:F8:36:88:E7:2D:B4:90:78:27:C0:F4:66:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/e5e6aa31-b14a-31f9-a13b-828a710daada.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 0 IP address blocks: 192.195.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:4b:4e:dd:87:c1:05:ed:1f:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bf6b4aa-8fed-421b-bd5c-8385c0504c1d Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=3a6e69a9-acb1-40f8-9a62-207ca0d11000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d0:89:72:02:c0:67:fc:2d:af:8c:f6:ea:95: 70:ce:0d:9e:9d:d4:f4:88:5a:24:de:29:8f:b2:47: 09:5f:df:ef:cd:09:a4:f5:9e:32:4c:1d:4b:86:56: 2e:d9:80:93:2a:b1:ea:e3:84:73:af:1a:c9:4d:db: 1c:9b:ad:2f:e4:36:70:4e:2b:f8:88:14:53:90:aa: f9:a0:61:87:3c:ee:8f:c5:0d:14:7d:43:9f:6f:c4: cf:49:07:86:fe:5e:1d:22:00:c7:9e:d6:c3:dd:65: 63:c4:7d:d8:7e:44:a5:e6:99:3d:f7:42:36:30:34: 15:af:a7:79:0d:24:1f:5e:53:42:e1:37:bf:82:66: 6a:5c:26:37:18:81:27:71:45:99:ae:f5:32:22:03: ce:f3:d8:31:e1:55:54:6e:80:79:72:c6:4d:2a:8c: 75:8b:32:7d:50:07:5d:1d:ae:38:dd:2e:54:cc:b8: d4:b5:ca:01:78:a3:79:ec:c8:5e:6d:42:59:04:16: 38:ee:a2:8e:05:3c:5c:70:fb:23:4e:90:38:a4:b4: a3:c5:8b:bf:02:3f:b8:12:2d:0c:93:de:43:e8:f4: 7b:b1:b5:99:de:bc:a6:4c:fc:18:5f:6c:67:5d:f7: 93:7f:a8:6e:43:a4:ad:96:33:f4:fa:e0:5c:d0:05: 56:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:09:56:7E:26:30:F6:BC:6F:FF:33:CD:B4:68:28:10:5F:E9:BA:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/e5e6aa31-b14a-31f9-a13b-828a710daada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.crl X509v3 Authority Key Identifier: keyid:71:C9:0F:E3:08:1D:55:F8:36:88:E7:2D:B4:90:78:27:C0:F4:66:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer sbgp-ipAddrBlock: critical IPv4: 192.195.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:b1:2a:30:cb:54:74:a7:83:e2:bc:d2:45:e4:87:7d:5d:31: 8b:d2:60:74:96:cf:90:cd:b0:e9:60:52:cc:7d:c9:6f:e5:57: 29:71:2d:7d:55:39:61:67:c2:f5:31:cf:4f:19:12:39:ae:49: 3a:4b:59:c6:0c:d7:f9:9b:a0:c0:d4:05:2a:d6:dd:31:2c:b7: 32:ed:d8:51:2e:8c:fa:91:4b:ab:88:f5:90:62:99:8a:c1:79: 5e:08:2e:3c:0c:48:66:79:cc:fe:43:b2:74:d5:86:b2:f2:41: 4f:72:5d:65:65:e5:c2:c6:39:c5:03:55:7b:29:e6:15:90:38: 9c:e4:1d:02:9c:6e:09:ca:74:6b:72:e0:07:f3:b2:57:99:e1: a9:6b:69:4e:f3:e5:37:95:fa:fc:c3:0a:25:89:ff:e6:af:d5: b3:e2:07:c4:3e:67:c3:5a:e8:35:4d:e9:21:a8:0a:03:68:a3: 70:a9:f5:a5:5d:12:db:60:02:8d:7d:eb:e8:4f:b8:39:52:cb: e3:f4:d3:68:6d:7f:6b:0f:04:ad:fd:46:10:9b:3a:56:c2:d3: a7:e0:51:72:d3:20:96:92:8a:42:36:97:b2:c1:5c:a7:12:77: 19:3c:06:85:8d:6c:4c:a2:41:6b:6b:fa:cf:f9:bf:5b:6c:93: 75:0b:c9:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl0tO3YfBBe0f/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJmNmI0YWEtOGZlZC00MjFiLWJkNWMtODM4NWMwNTA0 YzFkMB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk M2E2ZTY5YTktYWNiMS00MGY4LTlhNjItMjA3Y2EwZDExMDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9CJcgLAZ/wtr4z26pVwzg2endT0iFok3imP skcJX9/vzQmk9Z4yTB1LhlYu2YCTKrHq44RzrxrJTdscm60v5DZwTiv4iBRTkKr5 oGGHPO6PxQ0UfUOfb8TPSQeG/l4dIgDHntbD3WVjxH3YfkSl5pk990I2MDQVr6d5 DSQfXlNC4Te/gmZqXCY3GIEncUWZrvUyIgPO89gx4VVUboB5csZNKox1izJ9UAdd Ha443S5UzLjUtcoBeKN57MhebUJZBBY47qKOBTxccPsjTpA4pLSjxYu/Aj+4Ei0M k95D6PR7sbWZ3rymTPwYX2xnXfeTf6huQ6StljP0+uBc0AVWEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcJVn4mMPa8b/8zzbRoKBBf6brIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80YmY2 YjRhYS04ZmVkLTQyMWItYmQ1Yy04Mzg1YzA1MDRjMWQvZTVlNmFhMzEtYjE0YS0z MWY5LWExM2ItODI4YTcxMGRhYWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGJmNmI0YWEtOGZlZC00MjFiLWJk NWMtODM4NWMwNTA0YzFkLzRiZjZiNGFhLThmZWQtNDIxYi1iZDVjLTgzODVjMDUw NGMxZC5jcmwwHwYDVR0jBBgwFoAUcckP4wgdVfg2iOcttJB4J8D0Zh8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80YmY2YjRhYS04ZmVkLTQyMWItYmQ1Yy04Mzg1 YzA1MDRjMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwMOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSxKjDLVHSng+K80kXkh31dMYvSYHSWz5DNsOlgUsx9yW/lVylxLX1V OWFnwvUxz08ZEjmuSTpLWcYM1/mboMDUBSrW3TEstzLt2FEujPqRS6uI9ZBimYrB eV4ILjwMSGZ5zP5DsnTVhrLyQU9yXWVl5cLGOcUDVXsp5hWQOJzkHQKcbgnKdGty 4AfzsleZ4alraU7z5TeV+vzDCiWJ/+av1bPiB8Q+Z8Na6DVN6SGoCgNoo3Cp9aVd EttgAo196+hPuDlSy+P002htf2sPBK39RhCbOlbC06fgUXLTIJaSikI2l7LBXKcS dxk8BoWNbEyiQWtr+s/5v1tsk3ULyX4= -----END CERTIFICATE-----Generated at Thu Feb 26 22:52:31 2026 by rpki-client