$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/5676e9dc-d420-3bf7-ae22-fa6b608a2d67.roa File: 5676e9dc-d420-3bf7-ae22-fa6b608a2d67.roa (raw, json) Hash identifier: FWQtqbnq+iF/X9c+59vcVZDZad3JVNFutZGRjrlwqRw= Subject key identifier: 54:51:9E:33:A2:0B:81:00:9D:1F:0E:22:BC:9D:0B:9D:CA:E5:33:4A Certificate issuer: /CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Certificate serial: 010D0C9F4328584CCF4479570D280021169FD140 Authority key identifier: 59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/5676e9dc-d420-3bf7-ae22-fa6b608a2d67.roa Signing time: Mon 09 Feb 2026 21:04:56 +0000 ROA not before: Mon 09 Feb 2026 21:04:56 +0000 ROA not after: Sun 10 May 2026 20:04:56 +0000 asID: 40264 IP address blocks: 184.94.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cf:44:79:57:0d:28:00:21:16:9f:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Validity Not Before: Feb 9 21:04:56 2026 GMT Not After : May 10 20:04:56 2026 GMT Subject: CN=3ad5d8ee-8138-40e5-baec-3d3080257aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:53:b1:30:c8:b5:08:84:2a:6a:53:c7:e2:42: b2:8f:23:5c:be:08:92:51:d0:17:91:ec:06:40:4c: d9:5c:2b:2f:70:30:8c:d1:0b:83:ed:2e:97:f0:0c: 69:36:70:a2:f7:19:51:3a:6c:b1:eb:08:02:01:b4: 11:e4:71:34:7a:ae:d5:79:04:6b:50:cf:70:5e:6d: a1:c6:18:7c:6a:b5:ac:bb:a2:9d:14:94:36:f4:18: 14:23:16:8f:3f:0b:90:36:76:99:9a:08:c7:c9:5f: 8d:76:81:e0:e0:3d:06:48:5d:35:62:a5:23:85:74: d8:62:63:31:c1:d1:7a:3f:12:b0:7f:10:a7:06:b3: 54:84:b4:0e:11:c5:8d:c2:a0:9f:12:5b:96:0e:06: d3:5b:be:20:67:15:84:af:01:e3:54:c3:20:72:a5: 00:ce:cb:9f:37:90:48:d2:1a:06:63:37:3d:02:97: 84:06:5a:6f:96:49:27:a9:15:40:dc:99:06:f7:77: d1:bb:d5:93:fe:81:6d:5c:67:37:ce:70:51:88:b6: ff:62:9c:24:6c:d6:ce:96:6f:58:49:f7:6d:ec:78: a9:a4:fc:af:89:78:aa:c9:39:fd:a6:c2:ed:f4:1e: 76:d8:2c:c5:57:29:11:99:3b:6c:46:aa:5b:03:93: 87:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:51:9E:33:A2:0B:81:00:9D:1F:0E:22:BC:9D:0B:9D:CA:E5:33:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/5676e9dc-d420-3bf7-ae22-fa6b608a2d67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl X509v3 Authority Key Identifier: keyid:59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer sbgp-ipAddrBlock: critical IPv4: 184.94.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:39:db:2d:61:1b:9a:bd:51:d9:bf:ce:5c:b3:d0:bd:c0:80: d5:14:cd:8d:2f:bb:06:b5:b7:21:d7:62:07:c8:3b:08:49:09: 29:52:6e:c8:35:bd:58:fd:64:d0:5b:33:ad:52:eb:16:e9:cd: 5d:17:de:ee:24:14:76:57:d5:a1:17:82:93:ce:3a:83:14:90: e4:aa:85:39:8f:f5:1b:ac:11:de:1d:6b:5a:65:ab:ff:92:d6: a9:89:0f:08:1b:09:85:72:1e:b7:c4:0e:3c:5d:bd:ca:2d:be: e6:40:ee:bb:a2:d1:c0:40:3f:34:2a:44:e2:56:f2:9b:6f:0d: b7:84:db:f8:8a:d9:d5:ff:c0:37:f5:1b:85:a5:2a:42:ac:af: 4b:40:33:26:e8:7f:e7:46:aa:be:4d:8b:38:6b:6f:1f:8d:88: 35:a0:a7:35:5f:74:21:38:fe:05:b7:ad:52:e8:51:c8:00:68: 21:83:65:ad:1c:4b:9c:72:52:d8:dd:4d:ee:a6:3c:db:bd:fa: fd:bc:e4:47:82:58:09:57:88:65:86:53:56:20:0d:15:13:19: 55:89:f6:1c:f6:9e:4c:9f:50:ef:1c:9e:4f:15:dd:53:7b:3d: 2e:9a:67:7e:63:80:6c:58:a2:31:a8:94:ff:ac:2b:f9:ea:fa: 68:68:39:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzPRHlXDSgAIRaf0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIzYmYxNDktM2U4OS00Y2E0LWI5NmQtOTE4YzJlYWI4 N2Q4MB4XDTI2MDIwOTIxMDQ1NloXDTI2MDUxMDIwMDQ1NlowLzEtMCsGA1UEAxMk M2FkNWQ4ZWUtODEzOC00MGU1LWJhZWMtM2QzMDgwMjU3YWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFOxMMi1CIQqalPH4kKyjyNcvgiSUdAXkewG QEzZXCsvcDCM0QuD7S6X8AxpNnCi9xlROmyx6wgCAbQR5HE0eq7VeQRrUM9wXm2h xhh8arWsu6KdFJQ29BgUIxaPPwuQNnaZmgjHyV+NdoHg4D0GSF01YqUjhXTYYmMx wdF6PxKwfxCnBrNUhLQOEcWNwqCfEluWDgbTW74gZxWErwHjVMMgcqUAzsufN5BI 0hoGYzc9ApeEBlpvlkknqRVA3JkG93fRu9WT/oFtXGc3znBRiLb/YpwkbNbOlm9Y Sfdt7HippPyviXiqyTn9psLt9B522CzFVykRmTtsRqpbA5OHNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRRnjOiC4EAnR8OIrydC53K5TNKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNi ZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThjMmVhYjg3ZDgvNTY3NmU5ZGMtZDQyMC0z YmY3LWFlMjItZmE2YjYwOGEyZDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDIzYmYxNDktM2U4OS00Y2E0LWI5 NmQtOTE4YzJlYWI4N2Q4L2QyM2JmMTQ5LTNlODktNGNhNC1iOTZkLTkxOGMyZWFi ODdkOC5jcmwwHwYDVR0jBBgwFoAUWdolHf/bCSCEwSKLLyC+KA2QoukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNiZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThj MmVhYjg3ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuF6EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEk52y1hG5q9Udm/zlyz0L3AgNUUzY0vuwa1tyHXYgfIOwhJCSlSbsg1 vVj9ZNBbM61S6xbpzV0X3u4kFHZX1aEXgpPOOoMUkOSqhTmP9RusEd4da1plq/+S 1qmJDwgbCYVyHrfEDjxdvcotvuZA7rui0cBAPzQqROJW8ptvDbeE2/iK2dX/wDf1 G4WlKkKsr0tAMybof+dGqr5Nizhrbx+NiDWgpzVfdCE4/gW3rVLoUcgAaCGDZa0c S5xyUtjdTe6mPNu9+v285EeCWAlXiGWGU1YgDRUTGVWJ9hz2nkyfUO8cnk8V3VN7 PS6aZ35jgGxYojGolP+sK/nq+mhoOX4= -----END CERTIFICATE-----Generated at Thu Feb 26 22:25:51 2026 by rpki-client