$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/e1bf32f8-fca8-346a-88b5-3a3ef87a163e.roa File: e1bf32f8-fca8-346a-88b5-3a3ef87a163e.roa (raw, json) Hash identifier: yAxkaFHSssHj6KsMfpHxzeeIA6wAkkFfXP3J/AYrGG4= Subject key identifier: 15:5A:86:7A:5E:6A:AE:4F:5C:C6:37:49:18:66:F6:01:59:9B:B4:43 Certificate issuer: /CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Certificate serial: 010D0C9F4328584CCF44EF7B70A9B9F99D239B80 Authority key identifier: 59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/e1bf32f8-fca8-346a-88b5-3a3ef87a163e.roa Signing time: Mon 09 Feb 2026 21:05:52 +0000 ROA not before: Mon 09 Feb 2026 21:05:52 +0000 ROA not after: Sun 10 May 2026 20:05:52 +0000 asID: 40264 IP address blocks: 162.218.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cf:44:ef:7b:70:a9:b9:f9:9d:23:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Validity Not Before: Feb 9 21:05:52 2026 GMT Not After : May 10 20:05:52 2026 GMT Subject: CN=3da5449e-cdd3-4230-95e9-289053edaa29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7a:ea:a9:f5:92:35:a2:cb:7e:ed:fa:be:d1: 04:86:ed:44:e6:bc:91:2e:f3:4d:ad:91:69:3c:d0: 4d:26:b8:9a:38:3b:01:7e:ba:c7:55:45:08:97:de: 76:c3:c0:1d:1d:7e:aa:2f:cf:c2:a6:91:0a:c1:97: 39:d6:5e:b8:72:3a:92:ff:76:36:fb:47:05:64:cb: 45:b3:0e:88:75:e5:e4:cb:45:13:a4:00:6a:4f:b7: 43:46:fe:94:0f:78:fc:d2:ea:43:26:86:7b:0d:98: cb:29:5e:da:a4:0a:3c:ce:72:88:ef:5f:57:92:70: 34:19:17:97:bd:2e:0f:c7:18:ea:64:97:d4:e6:15: 55:37:67:ad:9e:c8:73:d0:b4:c7:31:a7:f0:59:16: 3c:62:15:74:7f:ce:c1:5d:d8:9c:94:8d:10:2d:9a: 28:9c:84:b3:24:7a:59:64:65:e7:65:98:56:e9:73: f2:b0:06:03:9b:06:d5:07:31:b6:bf:75:57:a5:4f: df:55:ab:68:5d:46:45:15:af:94:68:56:1e:a2:6c: f0:35:37:43:0b:72:bf:10:46:5a:94:bb:1f:30:02: 92:32:3b:7f:14:98:e9:8a:a3:f4:77:37:35:83:63: b3:74:bb:7e:d6:e2:a0:02:13:6e:79:6f:9b:38:8e: 7a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5A:86:7A:5E:6A:AE:4F:5C:C6:37:49:18:66:F6:01:59:9B:B4:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/e1bf32f8-fca8-346a-88b5-3a3ef87a163e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl X509v3 Authority Key Identifier: keyid:59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer sbgp-ipAddrBlock: critical IPv4: 162.218.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:38:d7:4d:97:2a:3a:5c:95:83:ac:89:ab:91:db:11:12:5a: 59:21:45:8c:ad:84:3b:88:f8:8d:00:ba:d7:a5:3d:bd:8b:e4: 89:f5:e0:11:fe:77:a9:64:a7:65:aa:6e:e7:6d:cc:43:ac:28: 26:0f:4a:40:71:5e:f2:cd:c3:84:d9:6b:a1:99:c5:3e:01:d4: ff:28:a4:ad:8c:73:72:93:53:97:05:15:8f:30:7c:61:e9:97: ac:75:af:0b:60:53:82:f6:06:1d:bb:2c:58:05:d9:48:9c:bf: 46:a8:32:97:f0:ff:0b:d1:ac:85:28:02:db:cc:06:47:75:31: 1f:81:b1:94:ca:6a:eb:be:94:c7:c0:dc:fa:e6:18:f8:c5:d7: c1:59:20:3f:b3:59:ea:be:29:e5:cb:78:59:4a:3a:42:4c:38: 36:12:ad:e5:3e:25:af:ed:11:29:8c:f0:a4:26:a5:d1:05:d5: 3e:f6:a6:70:f4:c1:68:48:34:e8:a1:b8:03:e0:d5:e0:9a:fd: a0:41:f9:fa:73:ed:be:d3:de:4c:20:0a:35:6f:65:7e:67:76: 3d:da:0b:49:31:16:af:7d:06:5d:28:1a:d0:0a:2d:9f:8a:6e: f6:d3:76:62:97:33:c0:e4:c4:04:7e:8f:b6:03:c2:aa:af:a8: 47:b4:bf:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzPRO97cKm5+Z0jm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIzYmYxNDktM2U4OS00Y2E0LWI5NmQtOTE4YzJlYWI4 N2Q4MB4XDTI2MDIwOTIxMDU1MloXDTI2MDUxMDIwMDU1MlowLzEtMCsGA1UEAxMk M2RhNTQ0OWUtY2RkMy00MjMwLTk1ZTktMjg5MDUzZWRhYTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3rqqfWSNaLLfu36vtEEhu1E5ryRLvNNrZFp PNBNJriaODsBfrrHVUUIl952w8AdHX6qL8/CppEKwZc51l64cjqS/3Y2+0cFZMtF sw6IdeXky0UTpABqT7dDRv6UD3j80upDJoZ7DZjLKV7apAo8znKI719XknA0GReX vS4PxxjqZJfU5hVVN2etnshz0LTHMafwWRY8YhV0f87BXdiclI0QLZoonISzJHpZ ZGXnZZhW6XPysAYDmwbVBzG2v3VXpU/fVatoXUZFFa+UaFYeomzwNTdDC3K/EEZa lLsfMAKSMjt/FJjpiqP0dzc1g2OzdLt+1uKgAhNueW+bOI56XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVahnpeaq5PXMY3SRhm9gFZm7RDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNi ZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThjMmVhYjg3ZDgvZTFiZjMyZjgtZmNhOC0z NDZhLTg4YjUtM2EzZWY4N2ExNjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDIzYmYxNDktM2U4OS00Y2E0LWI5 NmQtOTE4YzJlYWI4N2Q4L2QyM2JmMTQ5LTNlODktNGNhNC1iOTZkLTkxOGMyZWFi ODdkOC5jcmwwHwYDVR0jBBgwFoAUWdolHf/bCSCEwSKLLyC+KA2QoukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNiZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThj MmVhYjg3ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHA4102XKjpclYOsiauR2xESWlkhRYythDuI+I0AutelPb2L5In14BH+ d6lkp2WqbudtzEOsKCYPSkBxXvLNw4TZa6GZxT4B1P8opK2Mc3KTU5cFFY8wfGHp l6x1rwtgU4L2Bh27LFgF2Uicv0aoMpfw/wvRrIUoAtvMBkd1MR+BsZTKauu+lMfA 3PrmGPjF18FZID+zWeq+KeXLeFlKOkJMODYSreU+Ja/tESmM8KQmpdEF1T72pnD0 wWhINOihuAPg1eCa/aBB+fpz7b7T3kwgCjVvZX5ndj3aC0kxFq99Bl0oGtAKLZ+K bvbTdmKXM8DkxAR+j7YDwqqvqEe0v/I= -----END CERTIFICATE-----Generated at Thu Feb 26 22:27:23 2026 by rpki-client