$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/005de955-4c0d-38b7-93cf-e0a50e296e3a.roa File: 005de955-4c0d-38b7-93cf-e0a50e296e3a.roa (raw, json) Hash identifier: o9ETMsElpvq/+tSnBKhcU7RM49P3m+FDFIIpYPPGs64= Subject key identifier: 8B:B8:6D:05:B7:8D:28:51:F4:4C:8C:7C:6C:1F:90:70:3C:16:92:F7 Certificate issuer: /CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Certificate serial: 010D0C9F4328584CC4AC7639C1A73B124DE821D0 Authority key identifier: 6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/005de955-4c0d-38b7-93cf-e0a50e296e3a.roa Signing time: Fri 06 Feb 2026 02:00:30 +0000 ROA not before: Fri 06 Feb 2026 02:00:30 +0000 ROA not after: Thu 07 May 2026 01:00:30 +0000 asID: 4922 IP address blocks: 199.38.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c4:ac:76:39:c1:a7:3b:12:4d:e8:21:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Validity Not Before: Feb 6 02:00:30 2026 GMT Not After : May 7 01:00:30 2026 GMT Subject: CN=d3f50651-62f1-404d-b6fc-2cc06d489f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:87:27:4f:ce:ec:24:5e:be:22:a6:aa:8b:65: 55:69:bc:10:aa:1d:57:d4:e4:2b:d7:43:94:ba:e6: c2:e7:94:89:eb:a8:2d:6a:7a:b9:70:08:18:22:68: b8:6e:c8:e4:4a:af:20:c8:a6:47:29:ab:90:35:f2: bb:6b:47:90:ad:64:af:3a:bd:3a:4c:1a:8f:f8:96: c8:7e:70:6a:86:c3:7f:1f:fc:0d:9c:2e:8e:69:dd: a5:61:07:f2:77:19:29:0f:49:9b:ff:9d:aa:21:91: ab:cf:89:42:01:24:1f:21:00:24:cb:7d:c3:eb:6f: 99:cc:3b:4f:8a:4a:d5:9a:a8:c5:9a:42:45:cd:93: 3e:67:d7:da:ff:ff:be:e6:c6:4a:81:1b:aa:f2:b7: a5:ec:d0:79:c0:f7:16:ec:7f:9f:9e:c1:1c:fe:41: d5:99:6e:2e:0c:b5:9d:8e:f1:5b:4b:09:29:8f:12: 00:57:39:fe:a4:89:4e:78:72:d2:38:22:2d:0d:6b: 9d:56:f8:f5:fd:f2:d6:3b:d4:26:0e:02:1b:07:e9: 29:7f:f8:77:1d:8f:8f:47:24:67:ae:c8:18:61:57: 95:0d:16:dc:24:00:06:9a:55:0d:94:ca:78:0d:0b: 3a:58:46:04:8c:69:ef:71:81:b5:a1:f7:54:d7:1c: de:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B8:6D:05:B7:8D:28:51:F4:4C:8C:7C:6C:1F:90:70:3C:16:92:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/005de955-4c0d-38b7-93cf-e0a50e296e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl X509v3 Authority Key Identifier: keyid:6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer sbgp-ipAddrBlock: critical IPv4: 199.38.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c7:a8:57:7b:90:ee:e4:f3:eb:65:b4:81:27:87:6e:76:d2: e3:05:b2:4e:7a:89:99:b5:e5:04:cc:ad:e2:c7:d4:6f:d1:eb: 27:d9:df:2b:56:98:8b:e6:80:e5:09:1b:f0:f8:02:5f:5d:59: 78:ee:9d:6c:b6:c9:cb:02:f3:16:7a:fb:1a:c7:10:d8:84:2b: a1:9b:78:be:b8:a4:d6:99:88:5b:93:6b:38:f6:3a:f0:eb:1d: c7:7a:31:2d:2a:49:ad:66:96:45:10:85:d3:f1:59:62:e6:59: e0:e5:59:6f:b3:c5:f3:71:12:02:97:27:1d:3e:48:4e:56:5e: 65:f0:3e:cd:a7:0b:d5:4a:c0:b1:39:04:36:bc:94:ab:2d:be: c9:8f:b3:ef:1a:d6:9f:b9:a1:3a:19:41:27:92:2a:6b:80:0d: 64:ca:54:40:41:ea:54:c6:f8:1c:c8:1b:62:8c:f1:93:03:b4: 24:94:4f:91:af:ee:d8:27:4e:1d:63:ca:00:64:82:6d:70:4c: 2c:3b:33:5a:cf:38:9e:ad:b2:0f:f9:1a:b8:00:3d:90:b7:c7: af:f9:ab:80:61:32:78:ad:78:4b:cc:89:6d:36:5a:74:0a:a0: 4d:e4:77:94:12:29:95:30:a5:36:6b:32:b2:3c:8c:d5:c1:6a: 53:b7:56:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzErHY5wac7Ek3oIdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVmMWQ5ZTYtMGJlMi00YmFhLTg0N2MtZDY2NWM4MDdl ZGRkMB4XDTI2MDIwNjAyMDAzMFoXDTI2MDUwNzAxMDAzMFowLzEtMCsGA1UEAxMk ZDNmNTA2NTEtNjJmMS00MDRkLWI2ZmMtMmNjMDZkNDg5ZjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4cnT87sJF6+Iqaqi2VVabwQqh1X1OQr10OU uubC55SJ66gtanq5cAgYImi4bsjkSq8gyKZHKauQNfK7a0eQrWSvOr06TBqP+JbI fnBqhsN/H/wNnC6Oad2lYQfydxkpD0mb/52qIZGrz4lCASQfIQAky33D62+ZzDtP ikrVmqjFmkJFzZM+Z9fa//++5sZKgRuq8rel7NB5wPcW7H+fnsEc/kHVmW4uDLWd jvFbSwkpjxIAVzn+pIlOeHLSOCItDWudVvj1/fLWO9QmDgIbB+kpf/h3HY+PRyRn rsgYYVeVDRbcJAAGmlUNlMp4DQs6WEYEjGnvcYG1ofdU1xzeGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIu4bQW3jShR9EyMfGwfkHA8FpL3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYx ZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1YzgwN2VkZGQvMDA1ZGU5NTUtNGMwZC0z OGI3LTkzY2YtZTBhNTBlMjk2ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDVmMWQ5ZTYtMGJlMi00YmFhLTg0 N2MtZDY2NWM4MDdlZGRkL2Q1ZjFkOWU2LTBiZTItNGJhYS04NDdjLWQ2NjVjODA3 ZWRkZC5jcmwwHwYDVR0jBBgwFoAUazXRCykMp2ljZ+2p9YhDRhWi3twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYxZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1 YzgwN2VkZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxyZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjHqFd7kO7k8+tltIEnh2520uMFsk56iZm15QTMreLH1G/R6yfZ3ytW mIvmgOUJG/D4Al9dWXjunWy2ycsC8xZ6+xrHENiEK6GbeL64pNaZiFuTazj2OvDr Hcd6MS0qSa1mlkUQhdPxWWLmWeDlWW+zxfNxEgKXJx0+SE5WXmXwPs2nC9VKwLE5 BDa8lKstvsmPs+8a1p+5oToZQSeSKmuADWTKVEBB6lTG+BzIG2KM8ZMDtCSUT5Gv 7tgnTh1jygBkgm1wTCw7M1rPOJ6tsg/5GrgAPZC3x6/5q4BhMniteEvMiW02WnQK oE3kd5QSKZUwpTZrMrI8jNXBalO3VgU= -----END CERTIFICATE-----Generated at Thu Feb 26 22:50:58 2026 by rpki-client