$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa File: a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa (raw, json) Hash identifier: QMPqhXmMG9UzjYMHoz0JQEW0v0bE1dqWOaojstuqUeU= Subject key identifier: 22:74:2F:A4:4D:DE:CE:B1:CE:F0:5D:5B:FB:08:9A:C9:35:4B:09:F5 Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584CAE591E0B09EA6A2BDAD6B600 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 398465 IP address blocks: 208.58.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:1e:0b:09:ea:6a:2b:da:d6:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=000d5059-903d-405b-8b8c-84fb68ee987a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b6:77:3c:41:b2:7f:e1:e5:a9:04:68:75:c0: 9c:7d:ab:d7:d2:7a:76:13:7b:70:16:31:65:0b:a7: 19:c6:92:42:d1:30:ab:03:07:e2:a4:75:1e:32:27: 3f:5b:db:0c:59:8d:8b:a2:ae:db:bb:68:3c:bc:73: 55:2d:bd:b4:68:57:78:e2:9c:d4:47:3e:f9:32:27: 44:68:92:f0:75:dd:9a:60:21:20:6f:c1:f0:e8:09: 46:ff:51:6b:56:4a:8a:39:ca:f5:ab:ab:0a:b4:dd: bd:f7:e2:49:24:d4:f5:f5:e9:83:77:15:3a:25:cb: 27:22:43:b9:97:86:4f:4a:78:a9:35:fa:5c:11:1d: f0:44:e0:8f:b3:ff:70:35:de:f1:77:9b:de:5c:29: bb:9c:09:92:84:e3:32:2c:53:bc:6b:e8:05:5d:38: 37:0b:eb:15:34:0c:f1:d8:b9:96:d4:0f:30:4e:d6: 58:7f:27:c0:a5:83:51:a2:38:b5:d2:5d:66:6f:fa: 3f:13:4d:31:cb:c8:06:99:f6:6b:db:9f:42:be:9f: 30:f1:1b:5c:c6:9f:78:61:d3:c3:30:77:d2:4c:a2: 3d:88:20:6f:51:77:68:f9:e1:3f:7d:ac:71:63:7a: 5f:e0:40:48:70:71:2c:47:ad:6c:0b:3b:f8:7f:48: ae:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:74:2F:A4:4D:DE:CE:B1:CE:F0:5D:5B:FB:08:9A:C9:35:4B:09:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 208.58.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:de:8d:fb:e6:74:a9:4d:81:b4:3e:16:3e:db:ea:65:a1:61: 6a:be:2c:c7:e6:a1:69:f8:69:a3:cc:c1:78:6d:35:e7:13:6f: 76:80:5e:90:61:b7:42:ef:47:5c:b8:d8:30:99:32:e8:f1:b5: be:76:07:84:62:23:46:71:12:9e:56:c5:53:e4:7f:07:36:34: 00:60:39:2b:93:f7:45:4c:ff:0e:b5:f7:05:c1:d6:21:c3:bf: 21:d9:2a:58:66:cb:47:4b:ef:9b:8b:d8:4c:3d:17:e2:00:c8: 2b:18:a7:b1:eb:e9:13:45:91:28:40:e4:db:85:76:4d:c0:9b: 61:ac:a5:f6:a3:29:f3:f0:ae:bf:44:82:31:23:43:d0:d4:5a: 02:83:8d:f7:cc:6f:4b:f2:ae:aa:ac:b8:41:28:26:b4:92:ab: 51:f8:3b:73:8f:1e:16:50:4d:4b:4c:a1:a6:98:c0:51:03:79: 17:b2:91:d6:0a:37:c9:87:f4:89:01:b7:23:8e:c6:b9:6b:ff: 1b:cd:6d:b9:be:db:75:9c:9e:76:8b:96:03:d6:5e:12:b3:c1: 7c:b9:3f:1c:e1:9f:ba:9a:8d:e6:b5:b4:66:46:1d:55:31:64: 2c:32:17:30:7c:45:0d:66:f0:99:81:7e:a1:9f:e3:43:33:9c: b9:23:05:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWR4LCepqK9rWtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MDAwZDUwNTktOTAzZC00MDViLThiOGMtODRmYjY4ZWU5ODdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrZ3PEGyf+HlqQRodcCcfavX0np2E3twFjFl C6cZxpJC0TCrAwfipHUeMic/W9sMWY2Loq7bu2g8vHNVLb20aFd44pzURz75MidE aJLwdd2aYCEgb8Hw6AlG/1FrVkqKOcr1q6sKtN299+JJJNT19emDdxU6JcsnIkO5 l4ZPSnipNfpcER3wROCPs/9wNd7xd5veXCm7nAmShOMyLFO8a+gFXTg3C+sVNAzx 2LmW1A8wTtZYfyfApYNRoji10l1mb/o/E00xy8gGmfZr259Cvp8w8Rtcxp94YdPD MHfSTKI9iCBvUXdo+eE/faxxY3pf4EBIcHEsR61sCzv4f0iunwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJ0L6RN3s6xzvBdW/sImsk1Swn1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvYTdjYjQxNDktZWE4Yi0z ZDBlLTgwNzItMWU1ZmNlMjdjNmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DoCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPejfvmdKlNgbQ+Fj7b6mWhYWq+LMfmoWn4aaPMwXhtNecTb3aAXpBh t0LvR1y42DCZMujxtb52B4RiI0ZxEp5WxVPkfwc2NABgOSuT90VM/w619wXB1iHD vyHZKlhmy0dL75uL2Ew9F+IAyCsYp7Hr6RNFkShA5NuFdk3Am2GspfajKfPwrr9E gjEjQ9DUWgKDjffMb0vyrqqsuEEoJrSSq1H4O3OPHhZQTUtMoaaYwFEDeReykdYK N8mH9IkBtyOOxrlr/xvNbbm+23WcnnaLlgPWXhKzwXy5Pxzhn7qajea1tGZGHVUx ZCwyFzB8RQ1m8JmBfqGf40MznLkjBco= -----END CERTIFICATE-----Generated at Mon Feb 23 14:45:09 2026 by rpki-client