$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22/1452c82d-e941-345d-9f84-660e91555ab0.roa File: 1452c82d-e941-345d-9f84-660e91555ab0.roa (raw, json) Hash identifier: ZTalifl98tG5JQHQ9US7ikk2i6cJGCCKahhzHB82HCI= Subject key identifier: 88:70:7A:63:66:62:3D:AD:EF:3C:27:07:BD:15:FF:59:F7:D0:81:AE Certificate issuer: /CN=f2bc78ac-975c-4022-acd7-bd50268cee22 Certificate serial: 010D0C9F4328584CFB7BE12063BC0BB92B362340 Authority key identifier: 6A:96:A7:6C:28:14:A3:F1:0F:D8:F1:43:C2:1B:40:4C:30:49:70:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22/1452c82d-e941-345d-9f84-660e91555ab0.roa Signing time: Wed 25 Feb 2026 17:12:08 +0000 ROA not before: Wed 25 Feb 2026 17:12:08 +0000 ROA not after: Tue 26 May 2026 16:12:08 +0000 asID: 2914 IP address blocks: 142.249.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22/f2bc78ac-975c-4022-acd7-bd50268cee22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22/f2bc78ac-975c-4022-acd7-bd50268cee22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fb:7b:e1:20:63:bc:0b:b9:2b:36:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2bc78ac-975c-4022-acd7-bd50268cee22 Validity Not Before: Feb 25 17:12:08 2026 GMT Not After : May 26 16:12:08 2026 GMT Subject: CN=2c91afab-93ff-4425-be06-4b14355a9e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:21:c6:eb:d8:1f:6d:c6:c4:53:d3:e5:83:34: 73:5f:b6:2b:6e:6a:09:07:a7:1a:9b:8f:ea:0e:a6: c2:ca:3d:db:d2:a9:f4:1f:df:83:4c:85:a3:e5:72: 6b:cd:96:1f:d3:f1:5d:6a:b7:6b:4b:94:13:17:2c: cb:d5:cf:3f:19:8d:3a:35:af:7d:83:03:00:4e:51: 15:69:e7:eb:b6:4a:73:32:fa:d8:ad:b0:bc:a6:10: 49:e0:41:d5:44:78:2c:69:fa:56:d1:a2:48:bf:10: 22:8a:5e:7b:53:fd:b3:44:b0:9f:33:78:1d:a2:dd: 9a:44:98:66:dd:eb:79:a5:70:25:89:e7:2b:81:df: df:b5:5c:e0:90:f8:87:5b:ae:1d:4b:f3:59:1b:c9: 24:63:15:bd:9d:9c:63:e6:b4:89:de:a2:3f:5e:c3: 47:40:f6:c2:43:a9:2d:ef:1c:44:2b:ab:31:00:ca: e8:b2:eb:20:b3:b6:7a:1a:ca:53:bc:c2:ef:c8:73: 22:4f:c0:32:d3:4a:5a:af:43:2d:34:aa:ad:6b:97: 47:89:00:96:57:8c:b7:ab:c3:a9:c3:01:50:2c:15: 26:46:e8:e8:5e:38:33:a1:6e:c5:61:01:96:b2:00: cb:55:48:f4:79:71:28:f6:7d:dd:0f:6c:5f:5d:d1: e2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:70:7A:63:66:62:3D:AD:EF:3C:27:07:BD:15:FF:59:F7:D0:81:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22/1452c82d-e941-345d-9f84-660e91555ab0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22/f2bc78ac-975c-4022-acd7-bd50268cee22.crl X509v3 Authority Key Identifier: keyid:6A:96:A7:6C:28:14:A3:F1:0F:D8:F1:43:C2:1B:40:4C:30:49:70:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22.cer sbgp-ipAddrBlock: critical IPv4: 142.249.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:5b:38:46:2e:b2:9b:11:75:ad:db:65:91:52:a7:dc:bb:8f: 1d:54:a0:95:d1:1c:fe:4c:d1:94:dc:13:4e:23:27:01:04:52: 87:60:33:c2:45:58:3d:12:6b:d8:b2:98:ba:ce:ee:31:c3:04: 60:c0:46:07:25:29:0a:da:91:5c:66:02:bd:86:e1:14:14:bc: 52:94:70:41:fb:b2:c7:6a:3d:f6:f3:10:61:6b:ef:a5:61:45: aa:aa:40:03:8d:c8:97:97:d0:07:37:21:7c:b9:d6:91:fd:18: aa:30:99:d4:00:73:d0:e4:39:c7:8f:06:2f:09:5b:39:f3:49: 1f:d6:d1:c9:5f:d6:3b:61:9c:78:37:b5:c7:79:62:03:09:f4: 57:a9:62:35:30:7e:b6:ea:a6:41:c3:51:60:8b:7a:ca:62:88: 63:20:0c:07:9c:77:f2:f8:a0:79:73:a0:47:87:53:69:f3:a3: 20:57:63:77:74:66:a0:23:57:93:52:3c:16:9e:2a:16:ac:77: 87:fd:a5:d0:09:da:47:78:57:c9:f1:33:ff:7e:79:70:76:5f: 74:9c:cb:7b:34:b3:d5:d0:f7:2a:a4:0a:e5:7c:4e:6b:02:31: b1:0e:e8:ec:9e:d7:e1:b6:9d:c0:16:74:f6:6b:bd:8f:ce:00: 43:14:0d:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz7e+EgY7wLuSs2I0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJiYzc4YWMtOTc1Yy00MDIyLWFjZDctYmQ1MDI2OGNl ZTIyMB4XDTI2MDIyNTE3MTIwOFoXDTI2MDUyNjE2MTIwOFowLzEtMCsGA1UEAxMk MmM5MWFmYWItOTNmZi00NDI1LWJlMDYtNGIxNDM1NWE5ZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCHG69gfbcbEU9PlgzRzX7YrbmoJB6cam4/q DqbCyj3b0qn0H9+DTIWj5XJrzZYf0/FdardrS5QTFyzL1c8/GY06Na99gwMATlEV aefrtkpzMvrYrbC8phBJ4EHVRHgsafpW0aJIvxAiil57U/2zRLCfM3gdot2aRJhm 3et5pXAliecrgd/ftVzgkPiHW64dS/NZG8kkYxW9nZxj5rSJ3qI/XsNHQPbCQ6kt 7xxEK6sxAMrosusgs7Z6GspTvMLvyHMiT8Ay00par0MtNKqta5dHiQCWV4y3q8Op wwFQLBUmRujoXjgzoW7FYQGWsgDLVUj0eXEo9n3dD2xfXdHiWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhwemNmYj2t7zwnB70V/1n30IGuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mMmJj NzhhYy05NzVjLTQwMjItYWNkNy1iZDUwMjY4Y2VlMjIvMTQ1MmM4MmQtZTk0MS0z NDVkLTlmODQtNjYwZTkxNTU1YWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjJiYzc4YWMtOTc1Yy00MDIyLWFj ZDctYmQ1MDI2OGNlZTIyL2YyYmM3OGFjLTk3NWMtNDAyMi1hY2Q3LWJkNTAyNjhj ZWUyMi5jcmwwHwYDVR0jBBgwFoAUapanbCgUo/EP2PFDwhtATDBJcNowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mMmJjNzhhYy05NzVjLTQwMjItYWNkNy1iZDUw MjY4Y2VlMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtbOEYuspsRda3bZZFSp9y7jx1UoJXRHP5M0ZTcE04jJwEEUodgM8JF WD0Sa9iymLrO7jHDBGDARgclKQrakVxmAr2G4RQUvFKUcEH7ssdqPfbzEGFr76Vh RaqqQAONyJeX0Ac3IXy51pH9GKowmdQAc9DkOcePBi8JWznzSR/W0clf1jthnHg3 tcd5YgMJ9FepYjUwfrbqpkHDUWCLespiiGMgDAecd/L4oHlzoEeHU2nzoyBXY3d0 ZqAjV5NSPBaeKhasd4f9pdAJ2kd4V8nxM/9+eXB2X3Scy3s0s9XQ9yqkCuV8TmsC MbEO6Oye1+G2ncAWdPZrvY/OAEMUDZU= -----END CERTIFICATE-----Generated at Thu Feb 26 22:49:07 2026 by rpki-client