$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/1b514e1b-42b6-30f9-bbaa-1a960a2af6e2.roa File: 1b514e1b-42b6-30f9-bbaa-1a960a2af6e2.roa (raw, json) Hash identifier: kyWbXoVqpVBTp4pwmOvi6p+YM+M4zTdAFyhi37quArc= Subject key identifier: 89:AE:AA:C1:48:54:78:55:CD:6B:28:91:0E:21:A9:D0:96:C6:30:24 Certificate issuer: /CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Certificate serial: 010D0C9F4328584CFB1CDD57D1E5005DEB09AB80 Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/1b514e1b-42b6-30f9-bbaa-1a960a2af6e2.roa Signing time: Wed 25 Feb 2026 14:00:39 +0000 ROA not before: Wed 25 Feb 2026 14:00:39 +0000 ROA not after: Tue 26 May 2026 13:00:39 +0000 asID: 6407 IP address blocks: 108.63.0.0/21 maxlen: 24 108.63.8.0/22 maxlen: 24 108.63.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fb:1c:dd:57:d1:e5:00:5d:eb:09:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Validity Not Before: Feb 25 14:00:39 2026 GMT Not After : May 26 13:00:39 2026 GMT Subject: CN=f5087f02-5c71-4791-85ec-e3d6b7bed40a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:27:6c:33:ae:ee:b9:ab:20:c3:74:9f:e9:d8: 71:6e:61:e4:d4:ca:84:04:2f:67:3d:ba:60:5f:30: bf:82:31:2a:5c:98:34:8e:28:9a:4d:c5:5c:c8:c1: 32:e5:10:5b:50:68:3b:63:0e:6a:e5:db:bb:8c:bd: eb:f8:43:d7:ef:5c:a0:78:79:ca:a2:5f:26:7e:ae: b2:0d:79:a0:51:f1:7d:ff:15:d3:be:23:90:23:15: b4:b6:44:d6:2b:9c:e2:1f:24:31:8d:36:46:21:e7: f6:7a:d5:84:f5:c7:fd:ad:f0:71:e7:d7:dc:0f:f1: 6d:cb:5a:50:11:6a:29:2d:1d:b6:86:7a:81:87:5a: 42:82:97:41:8e:ab:db:a9:77:e0:43:00:bc:1f:07: 6c:fe:8a:14:df:99:2b:7e:3b:81:9e:e8:76:11:36: 46:f0:7d:d2:85:dc:b2:98:84:70:29:53:dc:18:70: f4:78:d2:a9:f7:b1:53:74:17:b4:6c:f7:43:0d:20: 35:fa:7b:66:d8:bd:9d:7d:7f:a3:bb:80:f0:94:55: 5c:8c:c1:e3:0f:ba:50:f4:46:a4:b4:e2:a3:4e:d2: 55:1b:db:38:6b:70:8c:4b:c9:84:6a:c1:42:b3:56: ff:83:22:1d:7e:e0:a5:ee:a8:ba:de:59:1b:f2:5b: fb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AE:AA:C1:48:54:78:55:CD:6B:28:91:0E:21:A9:D0:96:C6:30:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/1b514e1b-42b6-30f9-bbaa-1a960a2af6e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl X509v3 Authority Key Identifier: keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer sbgp-ipAddrBlock: critical IPv4: 108.63.0.0-108.63.13.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:07:1c:4d:46:3c:b0:f8:66:4d:71:dd:fb:5e:f8:7e:6a:da: 0b:2c:0c:74:20:d1:4b:4d:63:74:46:45:d2:31:c8:3b:82:72: 11:b1:46:bd:d6:73:a1:59:db:b3:44:e4:ed:bb:20:68:17:bb: 72:5f:f5:33:2c:71:ac:7b:a3:33:39:5a:2b:d1:c5:fd:34:34: 76:30:9f:1d:ec:da:c7:3f:fd:fc:20:93:ad:5c:4f:04:ce:a2: 61:30:5e:3a:da:00:2a:9d:27:1c:5b:41:a7:46:d7:c2:cb:d5: d4:73:5a:d9:5a:4d:cd:ad:3a:f6:31:1c:aa:ba:a9:ca:20:2c: 48:e8:de:fe:3b:72:20:23:0c:3d:a8:79:44:bf:99:ff:47:c8: 7d:5d:e7:ef:b7:d2:cb:3f:ea:94:1b:19:42:7f:41:a0:c9:16: ca:a2:0c:49:bd:a7:7e:66:ab:51:45:b7:f8:ac:92:d4:a5:ee: 09:82:c2:60:e2:f0:1e:33:5f:3a:08:7c:ed:9b:af:43:ab:50: 56:34:d9:25:f6:a9:f9:c5:b3:d4:a7:10:99:05:60:a9:e6:7f: 60:9c:e1:7e:fa:83:0d:4e:24:a2:70:08:dc:e1:ef:11:cc:63: 19:38:bb:6e:f3:ab:75:9d:07:83:f1:20:1c:07:23:ef:64:b5: 9e:1a:66:df -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEz7HN1X0eUAXesJq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0OTQwZjQtNjFjMi00MjUxLWFjZGItMzZiZTgzY2Rj NzQ0MB4XDTI2MDIyNTE0MDAzOVoXDTI2MDUyNjEzMDAzOVowLzEtMCsGA1UEAxMk ZjUwODdmMDItNWM3MS00NzkxLTg1ZWMtZTNkNmI3YmVkNDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SdsM67uuasgw3Sf6dhxbmHk1MqEBC9nPbpg XzC/gjEqXJg0jiiaTcVcyMEy5RBbUGg7Yw5q5du7jL3r+EPX71ygeHnKol8mfq6y DXmgUfF9/xXTviOQIxW0tkTWK5ziHyQxjTZGIef2etWE9cf9rfBx59fcD/Fty1pQ EWopLR22hnqBh1pCgpdBjqvbqXfgQwC8Hwds/ooU35krfjuBnuh2ETZG8H3Shdyy mIRwKVPcGHD0eNKp97FTdBe0bPdDDSA1+ntm2L2dfX+ju4DwlFVcjMHjD7pQ9Eak tOKjTtJVG9s4a3CMS8mEasFCs1b/gyIdfuCl7qi63lkb8lv7OwIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFImuqsFIVHhVzWsokQ4hqdCWxjAkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5 NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJlODNjZGM3NDQvMWI1MTRlMWItNDJiNi0z MGY5LWJiYWEtMWE5NjBhMmFmNmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGQ0OTQwZjQtNjFjMi00MjUxLWFj ZGItMzZiZTgzY2RjNzQ0LzRkNDk0MGY0LTYxYzItNDI1MS1hY2RiLTM2YmU4M2Nk Yzc0NC5jcmwwHwYDVR0jBBgwFoAUPdev1k6DmBY4LIH9klbSh2ozmcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJl ODNjZGM3NDQuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwBsPwME AWw/DDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAqBxxNRjyw+GZNcd37Xvh+atoLLAx0INFLTWN0RkXSMcg7 gnIRsUa91nOhWduzROTtuyBoF7tyX/UzLHGse6MzOVor0cX9NDR2MJ8d7NrHP/38 IJOtXE8EzqJhMF462gAqnSccW0GnRtfCy9XUc1rZWk3NrTr2MRyquqnKICxI6N7+ O3IgIww9qHlEv5n/R8h9Xefvt9LLP+qUGxlCf0GgyRbKogxJvad+ZqtRRbf4rJLU pe4JgsJg4vAeM186CHztm69Dq1BWNNkl9qn5xbPUpxCZBWCp5n9gnOF++oMNTiSi cAjc4e8RzGMZOLtu86t1nQeD8SAcByPvZLWeGmbf -----END CERTIFICATE-----Generated at Fri Feb 27 15:36:12 2026 by rpki-client