$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/5bb8ae99-9972-35bb-a6b2-11a633b775da.roa File: 5bb8ae99-9972-35bb-a6b2-11a633b775da.roa (raw, json) Hash identifier: k8tt7EMz1WsfmJyL1b5cY0yMDJ/tzI1bq7X3vhrjSbw= Subject key identifier: 2F:72:7F:3C:BE:19:06:07:51:A1:83:B2:1F:CE:B9:6B:C3:72:6B:53 Certificate issuer: /CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Certificate serial: 010D0C9F4328584CBC4C6BF720788EBEDF6E48A0 Authority key identifier: 6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/5bb8ae99-9972-35bb-a6b2-11a633b775da.roa Signing time: Tue 03 Feb 2026 02:00:31 +0000 ROA not before: Tue 03 Feb 2026 02:00:31 +0000 ROA not after: Mon 04 May 2026 01:00:31 +0000 asID: 394708 IP address blocks: 199.187.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bc:4c:6b:f7:20:78:8e:be:df:6e:48:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Validity Not Before: Feb 3 02:00:31 2026 GMT Not After : May 4 01:00:31 2026 GMT Subject: CN=ae136503-afb5-480c-be70-611fd8a1a7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:22:98:d0:01:c0:ba:01:53:85:33:e8:b0:1b: d8:c6:b6:08:e8:0e:46:cc:23:d5:66:1e:00:a0:5c: 86:90:15:64:51:40:08:7a:3c:07:38:6f:da:93:ac: d5:d2:64:d7:84:ad:0e:cf:3c:c7:49:9e:d3:7f:25: 6a:4b:70:9d:ed:52:55:a4:b4:a9:e6:6f:b9:da:10: 3c:95:fd:88:84:cb:42:dc:0f:e7:fa:33:f8:89:89: 87:97:8e:47:9d:49:41:b2:17:3d:c1:02:e0:71:0c: 4d:c2:8d:dd:a1:ee:e2:51:b7:ec:4c:43:cf:bc:8b: ca:c4:9a:0f:01:9d:40:97:a3:9b:9a:8b:60:c3:86: 17:a2:61:a4:f7:d8:94:0d:4f:1a:78:8e:fb:54:b9: 2d:0a:d3:ac:76:0d:b6:53:07:b5:a2:80:54:13:f9: 20:8c:36:0c:44:8d:bb:93:76:06:6b:76:e1:94:69: 0b:81:6f:bc:73:58:da:35:9e:dd:31:50:f2:98:0a: 4c:7e:62:2f:52:c3:c3:59:85:6d:8e:2b:90:7e:1a: 20:e6:93:02:85:47:ec:41:fa:5c:3a:1f:c0:3e:d3: 3e:2b:78:c8:5d:9e:f8:68:f3:d1:b6:78:54:9d:1b: 2b:cc:cd:4f:b7:c1:6f:09:46:ce:cc:4e:75:f3:4e: d9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:72:7F:3C:BE:19:06:07:51:A1:83:B2:1F:CE:B9:6B:C3:72:6B:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/5bb8ae99-9972-35bb-a6b2-11a633b775da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl X509v3 Authority Key Identifier: keyid:6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer sbgp-ipAddrBlock: critical IPv4: 199.187.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:6a:f4:cb:f5:00:59:92:e4:7e:b5:0e:96:3a:ac:71:16:39: 5a:52:26:71:a3:82:6a:79:f2:3d:43:d6:a7:c6:36:d8:f3:59: 91:31:f9:16:51:92:62:e6:58:b6:63:3f:61:96:ff:dd:35:20: f5:d9:f5:20:93:6b:89:fa:68:83:8c:72:df:1c:3a:bb:b9:eb: 18:b1:58:c3:e6:71:b4:58:f4:70:f5:be:d4:10:ee:bb:80:ce: dc:ea:5d:24:ce:8b:e7:73:67:f8:56:87:c1:a3:09:62:00:40: f1:82:a9:2e:20:84:51:29:4e:05:eb:bb:dd:82:04:fd:98:94: 38:a9:98:e4:2f:8f:09:fc:77:b1:db:62:62:b6:3a:94:7b:86: cf:f8:92:d0:6c:b4:f5:db:e9:b5:d2:00:42:02:bd:a6:bd:cc: 23:3d:bb:a3:d8:9f:c8:9f:5d:9a:db:9b:ef:a3:7e:d1:2c:82: 2d:81:e0:6d:20:50:9b:3a:2f:6a:01:91:00:94:4f:69:73:a3: 10:a1:62:77:e6:5a:b2:1c:08:f0:a3:c8:4e:99:0a:5c:45:80: ad:10:91:1c:d3:62:80:01:a9:40:76:38:52:40:d9:2c:ef:b7: 9d:93:79:df:59:d9:b2:a2:0e:27:dc:c8:c4:af:b7:db:75:a0: 2b:c1:4f:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy8TGv3IHiOvt9uSKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVmMWQ5ZTYtMGJlMi00YmFhLTg0N2MtZDY2NWM4MDdl ZGRkMB4XDTI2MDIwMzAyMDAzMVoXDTI2MDUwNDAxMDAzMVowLzEtMCsGA1UEAxMk YWUxMzY1MDMtYWZiNS00ODBjLWJlNzAtNjExZmQ4YTFhN2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCKY0AHAugFThTPosBvYxrYI6A5GzCPVZh4A oFyGkBVkUUAIejwHOG/ak6zV0mTXhK0OzzzHSZ7TfyVqS3Cd7VJVpLSp5m+52hA8 lf2IhMtC3A/n+jP4iYmHl45HnUlBshc9wQLgcQxNwo3doe7iUbfsTEPPvIvKxJoP AZ1Al6Obmotgw4YXomGk99iUDU8aeI77VLktCtOsdg22Uwe1ooBUE/kgjDYMRI27 k3YGa3bhlGkLgW+8c1jaNZ7dMVDymApMfmIvUsPDWYVtjiuQfhog5pMChUfsQfpc Oh/APtM+K3jIXZ74aPPRtnhUnRsrzM1Pt8FvCUbOzE51807ZUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9yfzy+GQYHUaGDsh/OuWvDcmtTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYx ZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1YzgwN2VkZGQvNWJiOGFlOTktOTk3Mi0z NWJiLWE2YjItMTFhNjMzYjc3NWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDVmMWQ5ZTYtMGJlMi00YmFhLTg0 N2MtZDY2NWM4MDdlZGRkL2Q1ZjFkOWU2LTBiZTItNGJhYS04NDdjLWQ2NjVjODA3 ZWRkZC5jcmwwHwYDVR0jBBgwFoAUazXRCykMp2ljZ+2p9YhDRhWi3twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYxZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1 YzgwN2VkZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7vEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFq9Mv1AFmS5H61DpY6rHEWOVpSJnGjgmp58j1D1qfGNtjzWZEx+RZR kmLmWLZjP2GW/901IPXZ9SCTa4n6aIOMct8cOru56xixWMPmcbRY9HD1vtQQ7ruA ztzqXSTOi+dzZ/hWh8GjCWIAQPGCqS4ghFEpTgXru92CBP2YlDipmOQvjwn8d7Hb YmK2OpR7hs/4ktBstPXb6bXSAEICvaa9zCM9u6PYn8ifXZrbm++jftEsgi2B4G0g UJs6L2oBkQCUT2lzoxChYnfmWrIcCPCjyE6ZClxFgK0QkRzTYoABqUB2OFJA2Szv t52Ted9Z2bKiDifcyMSvt9t1oCvBT3E= -----END CERTIFICATE-----Generated at Thu Feb 26 22:52:31 2026 by rpki-client