$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/08faf29f-43ea-3741-adc8-4b04d7d43597.roa File: 08faf29f-43ea-3741-adc8-4b04d7d43597.roa (raw, json) Hash identifier: 4S0V9YQboplnkOQ938XYoGWTsUgIL1YXz0RaOlyH22o= Subject key identifier: BD:86:2B:5B:B6:43:3F:CB:DD:45:56:B2:51:B6:14:E1:58:B0:99:ED Certificate issuer: /CN=bb3e1744-5186-489a-9b86-cb31cef73874 Certificate serial: 010D0C9F4328584CA5F70557E2C378F57DCAD880 Authority key identifier: 6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/08faf29f-43ea-3741-adc8-4b04d7d43597.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 16509 IP address blocks: 204.76.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Feb 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:05:57:e2:c3:78:f5:7d:ca:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb3e1744-5186-489a-9b86-cb31cef73874 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=52498362-3c81-464b-9373-426dee424ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0a:09:b5:21:16:21:5a:10:a4:d0:41:b1:9c: 3a:77:3d:a0:18:6f:86:31:c1:86:ce:2f:45:3c:d2: f3:68:c6:0a:77:72:8e:47:02:9b:0b:db:bd:e6:c3: 8c:3b:4d:f2:83:9f:0a:77:9d:d9:8f:3c:d4:96:90: 83:a7:e3:10:58:8a:6f:56:9a:0b:1a:37:00:94:90: d1:80:79:48:10:25:fc:9d:88:84:4a:99:26:92:5d: 8c:ad:31:59:75:45:51:7c:83:59:2d:d0:2a:e8:69: 05:ad:23:cc:dd:d3:c0:88:60:11:50:f4:b5:df:39: 0b:7e:e0:0c:bf:f0:58:c9:b9:b9:b8:67:07:23:3c: 8c:04:5e:f1:f7:5d:a9:68:2b:fa:ad:77:6b:13:17: 26:15:e8:27:03:35:0c:21:ff:aa:d4:46:1e:70:34: 08:99:fd:6d:67:bb:67:67:35:6f:88:40:b2:4e:3c: 9c:90:35:a4:fc:0c:e0:a9:08:ee:97:e8:df:3c:b8: 1d:c3:42:51:04:58:9f:4f:42:04:15:c2:72:66:6a: aa:4f:24:94:5b:b3:4c:91:2e:e6:eb:e1:5b:12:b1: a4:1e:82:a9:eb:73:6c:d5:b5:0d:e1:70:dc:a1:88: 3f:a6:1e:f1:2b:ae:c5:76:d7:5d:4c:d3:f5:9b:a7: 04:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:86:2B:5B:B6:43:3F:CB:DD:45:56:B2:51:B6:14:E1:58:B0:99:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/08faf29f-43ea-3741-adc8-4b04d7d43597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl X509v3 Authority Key Identifier: keyid:6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer sbgp-ipAddrBlock: critical IPv4: 204.76.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:28:08:70:c8:12:75:dd:ee:78:0a:20:f7:8a:e9:00:17:5d: 27:12:a3:04:93:2f:67:b8:86:36:11:43:b2:98:7c:af:bb:d6: d6:a2:6a:fb:9b:ba:eb:15:da:64:9b:17:61:a9:b6:e1:cd:61: 6c:16:a7:e2:67:3d:08:9e:99:7a:ed:62:c4:af:e3:c6:c3:52: 03:5a:65:05:a7:89:b7:77:88:8d:6e:c3:4e:3d:f5:48:86:cf: df:16:81:63:45:82:1c:7d:68:0e:c1:d6:5a:55:d5:4b:48:4f: 34:86:f6:1b:cd:fe:8b:71:38:17:81:ca:a9:b9:ca:8c:9e:42: 89:7a:8b:b1:f6:c7:16:0a:12:0a:67:a9:26:7a:55:0f:74:74: 3d:b8:a9:ad:e0:44:7b:6b:c0:50:08:e8:75:11:4f:20:3f:89: d6:de:79:73:e1:21:08:e5:2e:6c:64:9e:09:d3:c0:e5:de:40: d9:66:2a:4a:3b:75:97:6b:47:22:b0:1e:a6:49:11:6f:f7:74: 6c:42:e9:fb:f8:70:67:43:ed:f6:a4:df:d1:c8:87:2e:8d:aa: 55:18:bd:ae:3f:0c:46:2c:22:9f:7b:00:44:48:f6:05:32:87: 05:90:3a:2c:08:f2:22:2e:38:99:2a:da:98:83:e0:a6:42:4b: b8:4e:81:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9wVX4sN49X3K2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzZTE3NDQtNTE4Ni00ODlhLTliODYtY2IzMWNlZjcz ODc0MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk NTI0OTgzNjItM2M4MS00NjRiLTkzNzMtNDI2ZGVlNDI0Y2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgoJtSEWIVoQpNBBsZw6dz2gGG+GMcGGzi9F PNLzaMYKd3KORwKbC9u95sOMO03yg58Kd53ZjzzUlpCDp+MQWIpvVpoLGjcAlJDR gHlIECX8nYiESpkmkl2MrTFZdUVRfINZLdAq6GkFrSPM3dPAiGARUPS13zkLfuAM v/BYybm5uGcHIzyMBF7x912paCv6rXdrExcmFegnAzUMIf+q1EYecDQImf1tZ7tn ZzVviECyTjyckDWk/AzgqQjul+jfPLgdw0JRBFifT0IEFcJyZmqqTySUW7NMkS7m 6+FbErGkHoKp63Ns1bUN4XDcoYg/ph7xK67FdtddTNP1m6cENwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2GK1u2Qz/L3UVWslG2FOFYsJntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjNl MTc0NC01MTg2LTQ4OWEtOWI4Ni1jYjMxY2VmNzM4NzQvMDhmYWYyOWYtNDNlYS0z NzQxLWFkYzgtNGIwNGQ3ZDQzNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmIzZTE3NDQtNTE4Ni00ODlhLTli ODYtY2IzMWNlZjczODc0L2JiM2UxNzQ0LTUxODYtNDg5YS05Yjg2LWNiMzFjZWY3 Mzg3NC5jcmwwHwYDVR0jBBgwFoAUbyzGqshcjILtCQXJ5a0Pmc4eB1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjNlMTc0NC01MTg2LTQ4OWEtOWI4Ni1jYjMx Y2VmNzM4NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzEzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIoCHDIEnXd7ngKIPeK6QAXXScSowSTL2e4hjYRQ7KYfK+71taiavub uusV2mSbF2GptuHNYWwWp+JnPQiemXrtYsSv48bDUgNaZQWnibd3iI1uw0499UiG z98WgWNFghx9aA7B1lpV1UtITzSG9hvN/otxOBeByqm5yoyeQol6i7H2xxYKEgpn qSZ6VQ90dD24qa3gRHtrwFAI6HURTyA/idbeeXPhIQjlLmxkngnTwOXeQNlmKko7 dZdrRyKwHqZJEW/3dGxC6fv4cGdD7fak39HIhy6NqlUYva4/DEYsIp97AERI9gUy hwWQOiwI8iIuOJkq2piD4KZCS7hOgdA= -----END CERTIFICATE-----Generated at Sat Feb 21 08:47:10 2026 by rpki-client