$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa File: d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa (raw, json) Hash identifier: 9PxqNVHKftK0pQ8WbAwkrcViU3EPQKsV1IEExK5RVYg= Subject key identifier: 44:4C:3D:B9:46:4A:51:51:D3:DB:0A:37:A7:55:E7:F7:40:B9:42:E5 Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F4328584C7D7C1CD5E419F8F9B0D8A680 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 11260 IP address blocks: 149.19.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:1c:d5:e4:19:f8:f9:b0:d8:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=2bf36835-0287-414b-b1f2-791aa6f2d532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4b:2f:79:68:8c:28:cc:3a:d5:40:f8:ed:17: 0a:e9:d3:a6:fe:de:8d:fa:f4:c6:69:91:35:d5:f5: 0f:06:4e:69:f8:d4:3b:db:5d:ca:ae:4d:40:d8:cb: 50:a5:95:70:a8:18:e4:18:e2:30:60:b1:14:78:6b: 0a:96:69:30:81:bf:6f:03:21:f4:14:50:a1:1c:54: 56:33:84:95:2c:d5:51:86:71:99:4d:e7:45:31:0f: 3e:05:11:e0:67:06:0b:2d:e4:8b:65:0a:c6:83:d9: 61:74:e7:c6:21:ac:0e:88:e9:39:09:7b:a5:5e:00: 1c:3b:18:cc:29:ed:57:4f:78:70:5d:b2:8a:fd:28: b5:15:d3:c7:63:b7:6e:6d:37:2f:4c:7e:fc:e3:bf: 91:87:86:4d:78:61:5a:26:3c:10:4e:fe:cd:7e:e7: b5:5a:86:6f:53:27:d9:55:a4:36:ac:0e:ea:46:f0: dd:db:c0:8f:8d:aa:b7:6d:3f:df:43:c7:58:e8:60: 66:13:4a:13:a1:46:5d:1c:79:15:3c:17:af:cf:56: 32:e5:11:b7:0e:1b:ab:ab:6b:4c:58:ad:da:79:96: 9a:88:18:25:9f:db:f2:fc:db:9e:d2:e2:fe:e1:0d: 24:ba:e2:b0:86:de:5e:37:22:17:5f:59:38:cc:07: 3c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4C:3D:B9:46:4A:51:51:D3:DB:0A:37:A7:55:E7:F7:40:B9:42:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 149.19.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:38:49:ea:8a:85:51:43:cb:42:f0:bf:ef:3d:ee:2f:cf:7b: ca:4f:eb:2e:14:26:75:68:db:d0:86:fd:b8:34:81:e3:bc:61: 6b:7b:f5:82:80:ea:9e:8a:e7:c7:35:d7:fd:33:bf:ff:66:e1: d0:a2:f0:4a:b8:67:0d:be:7a:4d:f0:01:70:cd:5e:ac:6f:c2: 61:ba:e5:16:7e:09:5b:83:3d:a0:d3:ad:0a:ef:68:10:0f:07: fc:2b:95:16:4c:51:4e:f9:c1:5b:0d:6b:be:57:09:21:aa:c8: b3:f4:47:fd:b7:b1:35:37:63:3a:07:eb:0f:95:0d:8e:01:37: ee:fc:83:27:bc:18:0e:3c:a2:a5:0e:f1:ca:d1:13:2d:3f:5e: f4:fa:4a:15:15:8a:5f:3c:5f:e4:5a:76:eb:f8:df:3f:14:e7: b3:48:31:be:96:d9:8f:70:5c:a3:27:b1:cd:95:c5:a8:65:fd: 68:d9:d1:db:d3:40:90:82:c0:8b:3e:f3:33:5b:72:39:4c:f7: a1:c6:33:9c:d2:bb:fb:58:91:c6:06:97:fe:af:cc:f3:64:bb: 48:21:79:e6:96:e0:ed:fb:e9:9d:01:de:18:1b:5d:ac:a3:50: bb:9b:9c:f2:26:e5:d8:f8:bb:6f:c0:8c:3d:2b:da:52:07:86: 46:91:6f:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fBzV5Bn4+bDYpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk MmJmMzY4MzUtMDI4Ny00MTRiLWIxZjItNzkxYWE2ZjJkNTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqksveWiMKMw61UD47RcK6dOm/t6N+vTGaZE1 1fUPBk5p+NQ7213Krk1A2MtQpZVwqBjkGOIwYLEUeGsKlmkwgb9vAyH0FFChHFRW M4SVLNVRhnGZTedFMQ8+BRHgZwYLLeSLZQrGg9lhdOfGIawOiOk5CXulXgAcOxjM Ke1XT3hwXbKK/Si1FdPHY7dubTcvTH7847+Rh4ZNeGFaJjwQTv7Nfue1WoZvUyfZ VaQ2rA7qRvDd28CPjaq3bT/fQ8dY6GBmE0oToUZdHHkVPBevz1Yy5RG3Dhurq2tM WK3aeZaaiBgln9vy/Nue0uL+4Q0kuuKwht5eNyIXX1k4zAc8rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERMPblGSlFR09sKN6dV5/dAuULlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvZDhiZjY2OWUtYmM3OS0z YzZmLWE4YzQtZjQxNmYyZDRjNDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlRNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHM4SeqKhVFDy0Lwv+897i/Pe8pP6y4UJnVo29CG/bg0geO8YWt79YKA 6p6K58c11/0zv/9m4dCi8Eq4Zw2+ek3wAXDNXqxvwmG65RZ+CVuDPaDTrQrvaBAP B/wrlRZMUU75wVsNa75XCSGqyLP0R/23sTU3YzoH6w+VDY4BN+78gye8GA48oqUO 8crREy0/XvT6ShUVil88X+Raduv43z8U57NIMb6W2Y9wXKMnsc2Vxahl/WjZ0dvT QJCCwIs+8zNbcjlM96HGM5zSu/tYkcYGl/6vzPNku0gheeaW4O376Z0B3hgbXayj ULubnPIm5dj4u2/AjD0r2lIHhkaRb2o= -----END CERTIFICATE-----Generated at Fri Feb 27 12:41:17 2026 by rpki-client