$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/599705db-070e-35a5-909f-43eb7ed8c7ae.roa File: 599705db-070e-35a5-909f-43eb7ed8c7ae.roa (raw, json) Hash identifier: WBmRr7klPUq+IPv3RT1ocvNbgV4jhYyCxn6zAu5+3nE= Subject key identifier: 8A:9F:CC:F8:42:B5:F5:5B:6A:62:C0:2C:B4:ED:A8:F9:DE:56:F8:B6 Certificate issuer: /CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Certificate serial: 010D0C9F4328584CCF42BD6F7BCAF179CB8AA500 Authority key identifier: 59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/599705db-070e-35a5-909f-43eb7ed8c7ae.roa Signing time: Mon 09 Feb 2026 21:01:26 +0000 ROA not before: Mon 09 Feb 2026 21:01:26 +0000 ROA not after: Sun 10 May 2026 20:01:26 +0000 asID: 40264 IP address blocks: 162.211.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cf:42:bd:6f:7b:ca:f1:79:cb:8a:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Validity Not Before: Feb 9 21:01:26 2026 GMT Not After : May 10 20:01:26 2026 GMT Subject: CN=3101a338-cd59-48c8-9a8e-03ce6b2c8bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:60:53:6e:22:ad:02:88:0c:0d:27:6f:9d:e0: 2b:41:a9:a7:d9:04:4a:16:17:6f:17:29:fb:be:a0: d4:f6:fe:e9:78:71:10:ac:77:89:6f:75:4e:1a:44: 3e:ae:67:40:02:d1:f8:37:f5:69:df:a3:82:77:b4: 4f:94:09:48:63:6c:a9:0e:37:44:51:b1:d7:6b:2e: f7:6d:80:9a:72:13:ac:b0:b6:14:c1:29:dd:92:db: 4c:40:95:9e:b8:09:83:15:3d:8f:21:54:b2:38:d0: 2a:28:5c:52:d5:14:fb:86:f5:94:9e:b2:19:3c:6d: ce:dc:74:6f:5a:b6:a0:c6:90:52:41:18:45:0c:7e: b1:24:0b:84:45:d3:11:ee:fc:c4:ca:c8:8d:2a:c2: 52:33:e3:3a:41:06:71:71:82:16:b3:ae:7b:41:ec: d2:32:8a:bb:c5:07:d7:6a:4f:85:a1:9f:24:41:30: d6:bb:95:32:d7:92:05:1e:f6:9c:ea:8a:79:ab:10: 4b:8f:42:b8:26:87:c9:50:98:cc:75:8e:2f:2e:f7: 14:92:c5:1e:05:2f:8b:15:00:ff:f6:3d:8b:00:b1: ec:e3:bb:09:f9:f4:b5:ec:01:22:b3:61:02:7a:ee: 5e:31:5d:a3:59:11:5c:7e:e5:ef:e2:e4:67:43:80: 7d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9F:CC:F8:42:B5:F5:5B:6A:62:C0:2C:B4:ED:A8:F9:DE:56:F8:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/599705db-070e-35a5-909f-43eb7ed8c7ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl X509v3 Authority Key Identifier: keyid:59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer sbgp-ipAddrBlock: critical IPv4: 162.211.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:fc:e4:0d:f1:59:b3:cf:3e:6b:3b:bf:8e:1a:29:08:e3:f6: c4:ca:2f:a8:dc:d2:cf:82:f7:bc:01:75:95:94:c8:08:a1:de: 81:bf:8d:5f:e5:ae:3c:1c:06:d8:d5:68:6b:a5:e5:4c:26:81: 96:af:f8:37:d9:15:51:b2:a5:54:ca:ed:bf:3c:9a:53:3c:8f: 8e:1a:95:60:7b:65:19:3d:f1:d2:c5:e2:85:76:5b:c6:71:6d: d2:fb:eb:62:fb:ac:09:af:27:78:64:37:b5:16:7a:69:2f:39: 3f:7c:59:e6:c9:61:7b:c1:ac:c4:2c:df:f0:9e:10:fa:6b:54: f8:92:6c:06:af:1b:60:b8:79:ff:87:e2:f7:ca:37:74:a5:66: 60:41:82:27:22:d3:8b:1b:57:94:08:09:99:de:70:72:b2:15: 7c:26:84:0b:9c:24:da:02:a7:e0:58:41:20:63:aa:5b:3c:eb: b8:28:ce:67:89:80:58:f6:ad:78:ef:2d:3d:55:b2:f2:67:96: 31:a2:92:08:07:5b:7f:5d:e8:40:47:b9:ca:f9:57:83:b0:8a: 11:2f:01:d9:b2:8f:bb:5c:46:89:bf:e2:50:a1:86:2f:7a:77: 00:7f:89:bc:20:9c:a9:ac:32:3b:6a:7f:f8:e8:8e:d6:48:06: 8e:75:1f:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzPQr1ve8rxecuKpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIzYmYxNDktM2U4OS00Y2E0LWI5NmQtOTE4YzJlYWI4 N2Q4MB4XDTI2MDIwOTIxMDEyNloXDTI2MDUxMDIwMDEyNlowLzEtMCsGA1UEAxMk MzEwMWEzMzgtY2Q1OS00OGM4LTlhOGUtMDNjZTZiMmM4YmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWBTbiKtAogMDSdvneArQamn2QRKFhdvFyn7 vqDU9v7peHEQrHeJb3VOGkQ+rmdAAtH4N/Vp36OCd7RPlAlIY2ypDjdEUbHXay73 bYCachOssLYUwSndkttMQJWeuAmDFT2PIVSyONAqKFxS1RT7hvWUnrIZPG3O3HRv WragxpBSQRhFDH6xJAuERdMR7vzEysiNKsJSM+M6QQZxcYIWs657QezSMoq7xQfX ak+FoZ8kQTDWu5Uy15IFHvac6op5qxBLj0K4JofJUJjMdY4vLvcUksUeBS+LFQD/ 9j2LALHs47sJ+fS17AEis2ECeu5eMV2jWRFcfuXv4uRnQ4B9dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqfzPhCtfVbamLALLTtqPneVvi2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNi ZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThjMmVhYjg3ZDgvNTk5NzA1ZGItMDcwZS0z NWE1LTkwOWYtNDNlYjdlZDhjN2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDIzYmYxNDktM2U4OS00Y2E0LWI5 NmQtOTE4YzJlYWI4N2Q4L2QyM2JmMTQ5LTNlODktNGNhNC1iOTZkLTkxOGMyZWFi ODdkOC5jcmwwHwYDVR0jBBgwFoAUWdolHf/bCSCEwSKLLyC+KA2QoukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNiZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThj MmVhYjg3ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotMMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT85A3xWbPPPms7v44aKQjj9sTKL6jc0s+C97wBdZWUyAih3oG/jV/l rjwcBtjVaGul5UwmgZav+DfZFVGypVTK7b88mlM8j44alWB7ZRk98dLF4oV2W8Zx bdL762L7rAmvJ3hkN7UWemkvOT98WebJYXvBrMQs3/CeEPprVPiSbAavG2C4ef+H 4vfKN3SlZmBBgici04sbV5QICZnecHKyFXwmhAucJNoCp+BYQSBjqls867gozmeJ gFj2rXjvLT1VsvJnljGikggHW39d6EBHucr5V4OwihEvAdmyj7tcRom/4lChhi96 dwB/ibwgnKmsMjtqf/jojtZIBo51H/E= -----END CERTIFICATE-----Generated at Thu Feb 26 22:26:53 2026 by rpki-client