$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/7f37d838-7ff6-3d1f-ada9-65965fc7a645.roa File: 7f37d838-7ff6-3d1f-ada9-65965fc7a645.roa (raw, json) Hash identifier: HYy+QA5l7+e9PAeCbSANCL1xqsM3T0PvtKt2oRLJxRE= Subject key identifier: 1E:A6:62:E0:1D:A5:9D:0B:28:BE:19:D5:15:9B:B6:85:40:27:FE:BB Certificate issuer: /CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Certificate serial: 010D0C9F4328584CF1576EACC6AB0D63A527D1C0 Authority key identifier: 72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/7f37d838-7ff6-3d1f-ada9-65965fc7a645.roa Signing time: Sun 22 Feb 2026 02:00:32 +0000 ROA not before: Sun 22 Feb 2026 02:00:32 +0000 ROA not after: Sat 23 May 2026 01:00:32 +0000 asID: 13876 IP address blocks: 64.186.128.0/20 maxlen: 24 66.102.224.0/20 maxlen: 24 67.204.0.0/19 maxlen: 24 158.41.16.0/21 maxlen: 24 2607:8300::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f1:57:6e:ac:c6:ab:0d:63:a5:27:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Validity Not Before: Feb 22 02:00:32 2026 GMT Not After : May 23 01:00:32 2026 GMT Subject: CN=2ebf129e-9637-46d7-b891-ecf09e77334a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:a1:39:e1:52:8c:97:d9:4d:76:08:42:83: 88:af:6e:d8:43:5d:30:ac:4d:c0:25:60:e6:8d:b3: 20:29:95:7b:96:f2:02:da:08:09:81:71:25:30:13: b7:94:0e:d2:de:97:d2:bf:d9:01:d8:92:41:48:dd: 52:ac:98:58:df:dd:2b:a3:2d:e9:24:52:12:df:77: 40:96:cd:75:ea:fd:74:66:3a:02:a5:c6:e9:37:75: 05:f5:95:a9:cd:4a:7b:58:77:c4:ea:9e:7b:e8:53: c4:27:0c:06:d3:34:81:a3:cd:1d:5d:68:27:cd:78: e7:a6:e7:16:00:1e:f6:5f:db:0a:89:92:0b:38:8d: 20:60:0d:00:b9:f8:7f:ef:85:e2:e0:fb:2f:dd:21: f5:47:b7:f8:e5:2c:58:94:bb:31:fc:b1:7b:85:13: 1e:8e:b8:d2:f4:7b:77:8d:48:a6:b7:8b:16:79:03: ea:d3:5d:05:51:91:46:c8:56:21:ba:e1:3b:8f:df: b7:bf:a8:a6:59:18:62:e8:be:e1:87:a8:ae:c9:db: ca:3b:b7:4e:f3:1b:de:d2:4f:c7:fd:ec:4d:b1:06: fc:3f:25:55:06:b2:06:4c:62:d8:1a:2c:53:93:a1: ca:86:ed:00:58:07:db:84:05:a1:c1:23:44:44:5b: 5c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A6:62:E0:1D:A5:9D:0B:28:BE:19:D5:15:9B:B6:85:40:27:FE:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/7f37d838-7ff6-3d1f-ada9-65965fc7a645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl X509v3 Authority Key Identifier: keyid:72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer sbgp-ipAddrBlock: critical IPv4: 64.186.128.0/20 66.102.224.0/20 67.204.0.0/19 158.41.16.0/21 IPv6: 2607:8300::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:f3:68:67:ff:bb:a1:57:66:35:e2:61:81:f7:8a:e7:0d:ed: ac:5e:fc:69:7c:bf:d0:2d:9c:6f:14:bb:a6:1b:cd:a2:81:17: 87:5b:17:50:45:01:5a:bd:73:d0:14:e2:53:f6:71:b0:3f:07: c1:be:02:ff:21:57:72:cd:9e:fd:bc:24:85:52:e5:5f:00:15: 70:8c:27:0d:85:67:53:52:fd:e6:90:e5:65:b4:67:a3:a9:6e: 82:8a:79:fb:7a:23:38:78:5d:3c:4e:de:8e:00:b6:f5:03:3d: 7a:02:33:e6:79:44:62:33:0e:25:2b:dc:89:6c:21:9c:ee:d9: 6a:25:1c:f7:81:ba:b1:33:8f:98:d1:c7:03:4f:aa:39:80:a6: 5a:ce:4a:e7:00:c8:6f:cf:e3:85:8e:23:41:22:70:d2:af:70: a4:d1:2b:30:d3:7c:12:af:da:0f:f4:1d:1c:ac:b0:31:ad:bb: 87:e2:a0:03:12:57:2f:4b:19:04:aa:c3:9a:bb:c0:f7:f4:cd: 59:a2:04:6a:84:13:91:85:76:19:2c:31:8e:3b:12:e9:2d:be: 1f:97:64:01:4f:49:9e:fd:d7:fa:8e:42:c5:27:58:d9:f3:45: 44:ec:37:7a:b6:6e:f9:12:74:5f:37:12:ef:af:e7:26:61:ea: 06:0b:26:5c -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEzxV26sxqsNY6Un0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0YzAxYmEtZDlhZC00NGU4LWI0OGMtMWE0OGYyMGQ4 YjdkMB4XDTI2MDIyMjAyMDAzMloXDTI2MDUyMzAxMDAzMlowLzEtMCsGA1UEAxMk MmViZjEyOWUtOTYzNy00NmQ3LWI4OTEtZWNmMDllNzczMzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD+hOeFSjJfZTXYIQoOIr27YQ10wrE3AJWDm jbMgKZV7lvIC2ggJgXElMBO3lA7S3pfSv9kB2JJBSN1SrJhY390roy3pJFIS33dA ls116v10ZjoCpcbpN3UF9ZWpzUp7WHfE6p576FPEJwwG0zSBo80dXWgnzXjnpucW AB72X9sKiZILOI0gYA0Aufh/74Xi4Psv3SH1R7f45SxYlLsx/LF7hRMejrjS9Ht3 jUimt4sWeQPq010FUZFGyFYhuuE7j9+3v6imWRhi6L7hh6iuydvKO7dO8xve0k/H /exNsQb8PyVVBrIGTGLYGixTk6HKhu0AWAfbhAWhwSNERFtcWQIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFB6mYuAdpZ0LKL4Z1RWbtoVAJ/67MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRj MDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4ZjIwZDhiN2QvN2YzN2Q4MzgtN2ZmNi0z ZDFmLWFkYTktNjU5NjVmYzdhNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTU0YzAxYmEtZDlhZC00NGU4LWI0 OGMtMWE0OGYyMGQ4YjdkLzk1NGMwMWJhLWQ5YWQtNDRlOC1iNDhjLTFhNDhmMjBk OGI3ZC5jcmwwHwYDVR0jBBgwFoAUcqg9V4xmiDSMniuO8EO94nylkNwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRjMDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4 ZjIwZDhiN2QuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEQLqAAwQE QmbgAwQFQ8wAAwQDnikQMA0EAgACMAcDBQAmB4MAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKbzaGf/u6FX ZjXiYYH3iucN7axe/Gl8v9AtnG8Uu6YbzaKBF4dbF1BFAVq9c9AU4lP2cbA/B8G+ Av8hV3LNnv28JIVS5V8AFXCMJw2FZ1NS/eaQ5WW0Z6OpboKKeft6Izh4XTxO3o4A tvUDPXoCM+Z5RGIzDiUr3IlsIZzu2WolHPeBurEzj5jRxwNPqjmAplrOSucAyG/P 44WOI0EicNKvcKTRKzDTfBKv2g/0HRyssDGtu4fioAMSVy9LGQSqw5q7wPf0zVmi BGqEE5GFdhksMY47Euktvh+XZAFPSZ791/qOQsUnWNnzRUTsN3q2bvkSdF83Eu+v 5yZh6gYLJlw= -----END CERTIFICATE-----Generated at Thu Feb 26 22:54:10 2026 by rpki-client