$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/0efae3e3-b805-3b9c-b88f-b01ecc529439.roa File: 0efae3e3-b805-3b9c-b88f-b01ecc529439.roa (raw, json) Hash identifier: 0VdOd8hmKW+QkNIPuNyVl7y7uM5/b1WQxBH749xxYx0= Subject key identifier: 17:C6:55:45:ED:6B:06:0C:F4:3F:9D:B0:F3:99:09:33:9D:7E:62:5F Certificate issuer: /CN=b514c912-bbf6-47b8-8e4e-a80d0cb98a3e Certificate serial: 010D0C9F4328584C8046E65C4B771FF5D165B300 Authority key identifier: 0C:15:04:7B:B1:EF:02:B7:18:43:DD:46:2A:45:A7:DD:A3:0D:8E:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/0efae3e3-b805-3b9c-b88f-b01ecc529439.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 12129 IP address blocks: 141.195.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:e6:5c:4b:77:1f:f5:d1:65:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b514c912-bbf6-47b8-8e4e-a80d0cb98a3e Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=bb1ff408-d912-4df1-8745-c82f8c7d6ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:74:93:36:bf:23:3e:af:af:93:a2:86:8c:af: 4e:b1:b0:99:19:95:3b:57:81:7c:81:3c:ff:68:bb: ed:6c:da:1a:f9:50:3d:fe:cb:24:b2:6a:4c:f1:d9: 58:c1:be:fb:74:63:9d:37:d7:5a:3c:f6:b2:df:07: ff:ed:2e:74:38:17:dd:22:3c:db:0c:66:82:4e:93: 8d:af:6d:10:79:0a:5c:c6:db:df:07:6a:aa:35:0f: 01:7e:a3:21:1d:83:5d:77:83:8e:1b:00:21:e5:3d: 2f:cc:02:9c:f6:c7:1b:5d:3f:80:de:77:f1:f6:86: 3c:49:32:da:dd:9d:fb:de:e8:3f:90:ec:da:36:6e: 35:85:98:06:30:8c:0c:f6:2d:3d:d4:af:f2:73:e0: 36:20:44:55:58:58:26:e9:c8:e2:8d:3a:69:5f:21: 7d:16:0e:66:01:39:2e:d8:b7:c2:c3:c6:50:1c:d5: 67:5d:65:80:9a:5e:34:1e:29:99:69:1d:68:61:40: 18:ba:e9:19:b7:d4:6b:a4:e6:1a:1b:85:45:5b:32: f1:29:c3:b7:69:79:11:54:8f:eb:24:da:2a:9a:53: 7e:05:56:c2:2a:31:fb:67:3a:a5:d7:cd:7e:65:50: 23:07:02:80:07:4d:5e:24:d2:94:bb:09:eb:68:64: 2e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C6:55:45:ED:6B:06:0C:F4:3F:9D:B0:F3:99:09:33:9D:7E:62:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/0efae3e3-b805-3b9c-b88f-b01ecc529439.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.crl X509v3 Authority Key Identifier: keyid:0C:15:04:7B:B1:EF:02:B7:18:43:DD:46:2A:45:A7:DD:A3:0D:8E:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.cer sbgp-ipAddrBlock: critical IPv4: 141.195.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:06:b0:89:de:04:33:10:c4:e1:50:7d:e6:8d:c7:86:8e:1d: 37:73:02:5d:a1:67:91:70:f4:92:57:63:8f:22:a8:c4:54:dd: 87:78:02:63:50:4c:88:2c:c9:7b:57:59:f5:e1:d2:d6:d6:47: 0e:a8:e6:87:1a:e2:c5:51:0c:ce:20:da:e0:4e:e3:52:3b:35: e0:ab:33:10:e2:24:56:e2:09:e4:2f:9b:9a:66:c6:41:b6:8b: 7b:95:ed:98:28:00:31:76:6b:61:6c:20:7e:46:2f:cb:8b:9e: da:25:91:ea:27:d6:ad:e6:73:dc:fb:01:27:cc:36:44:1f:2b: 63:e4:33:c5:03:e8:ef:26:8a:df:24:e8:08:d6:5f:85:34:25: 3c:3e:9a:b5:c3:45:34:5c:bb:c3:6d:a3:df:60:74:5d:3b:2e: 14:91:df:cf:ce:31:d5:91:60:2c:7f:95:3a:28:db:75:6d:5f: 9b:c7:c2:da:4c:cd:99:9b:74:91:ed:16:e8:b4:8d:bc:24:a8: c0:0a:b9:a8:04:26:02:20:d3:86:d0:1c:07:0c:bc:9e:f9:78: 7e:2a:10:63:15:63:e6:08:8f:88:e3:d5:32:f5:5b:50:10:47: 81:41:26:82:f3:fd:09:1a:1a:6e:5e:55:e6:a6:67:f3:ee:de: 14:62:3e:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARuZcS3cf9dFlswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUxNGM5MTItYmJmNi00N2I4LThlNGUtYTgwZDBjYjk4 YTNlMB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk YmIxZmY0MDgtZDkxMi00ZGYxLTg3NDUtYzgyZjhjN2Q2YWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHSTNr8jPq+vk6KGjK9OsbCZGZU7V4F8gTz/ aLvtbNoa+VA9/ssksmpM8dlYwb77dGOdN9daPPay3wf/7S50OBfdIjzbDGaCTpON r20QeQpcxtvfB2qqNQ8BfqMhHYNdd4OOGwAh5T0vzAKc9scbXT+A3nfx9oY8STLa 3Z373ug/kOzaNm41hZgGMIwM9i091K/yc+A2IERVWFgm6cjijTppXyF9Fg5mATku 2LfCw8ZQHNVnXWWAml40HimZaR1oYUAYuukZt9RrpOYaG4VFWzLxKcO3aXkRVI/r JNoqmlN+BVbCKjH7Zzql181+ZVAjBwKAB01eJNKUuwnraGQuZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfGVUXtawYM9D+dsPOZCTOdfmJfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNTE0 YzkxMi1iYmY2LTQ3YjgtOGU0ZS1hODBkMGNiOThhM2UvMGVmYWUzZTMtYjgwNS0z YjljLWI4OGYtYjAxZWNjNTI5NDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjUxNGM5MTItYmJmNi00N2I4LThl NGUtYTgwZDBjYjk4YTNlL2I1MTRjOTEyLWJiZjYtNDdiOC04ZTRlLWE4MGQwY2I5 OGEzZS5jcmwwHwYDVR0jBBgwFoAUDBUEe7HvArcYQ91GKkWn3aMNjgUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNTE0YzkxMi1iYmY2LTQ3YjgtOGU0ZS1hODBk MGNiOThhM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjcNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMUGsIneBDMQxOFQfeaNx4aOHTdzAl2hZ5Fw9JJXY48iqMRU3Yd4AmNQ TIgsyXtXWfXh0tbWRw6o5oca4sVRDM4g2uBO41I7NeCrMxDiJFbiCeQvm5pmxkG2 i3uV7ZgoADF2a2FsIH5GL8uLntolkeon1q3mc9z7ASfMNkQfK2PkM8UD6O8mit8k 6AjWX4U0JTw+mrXDRTRcu8Nto99gdF07LhSR38/OMdWRYCx/lToo23VtX5vHwtpM zZmbdJHtFui0jbwkqMAKuagEJgIg04bQHAcMvJ75eH4qEGMVY+YIj4jj1TL1W1AQ R4FBJoLz/QkaGm5eVeamZ/Pu3hRiPmE= -----END CERTIFICATE-----Generated at Thu Feb 26 18:25:45 2026 by rpki-client