$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a218aa9-a69e-3383-b2ce-6b813018e689.roa File: 5a218aa9-a69e-3383-b2ce-6b813018e689.roa (raw, json) Hash identifier: 4lWVhrvzmQKN0qG9jvEutZ6rzpVzLjR1TwMlll2Ze00= Subject key identifier: 82:12:39:98:F2:21:B4:11:96:D1:B0:11:2B:71:57:F1:F3:27:9E:6B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584C6E21518EF6474DA64FF52F80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a218aa9-a69e-3383-b2ce-6b813018e689.roa Signing time: Tue 06 Jan 2026 02:00:31 +0000 ROA not before: Tue 06 Jan 2026 02:00:31 +0000 ROA not after: Mon 06 Apr 2026 01:00:31 +0000 asID: 14618 IP address blocks: 208.214.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Feb 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6e:21:51:8e:f6:47:4d:a6:4f:f5:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 6 02:00:31 2026 GMT Not After : Apr 6 01:00:31 2026 GMT Subject: CN=bcd8cf0c-533c-4ca5-8a8e-8c7e6de5deea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:73:c8:7e:24:b4:74:c1:c9:35:0c:84:fe:16: 92:c0:31:0b:93:7c:3b:87:b2:b8:2b:d5:f0:73:06: 61:53:bb:62:61:71:5b:07:b1:6a:55:1e:d4:3b:71: 79:02:2d:64:d3:9a:8b:21:9d:42:1e:c0:0d:9f:33: 4e:75:57:52:cf:0d:b4:b6:9c:42:9d:4f:75:dc:ff: 12:25:a0:93:3c:1a:8c:99:f0:30:dc:a3:61:75:19: a9:9b:de:96:63:a0:4a:68:c0:c3:9c:e4:28:27:d3: 15:7e:66:88:a4:43:ab:9e:a5:f2:f0:35:75:83:cd: 70:41:06:a9:30:47:6f:8a:eb:8a:c2:ff:3a:fe:14: fd:cc:f4:ac:77:f8:c4:47:28:16:30:fd:ea:87:e5: 8c:8c:4e:90:07:38:96:71:93:4b:56:ec:7e:ae:c0: e9:41:1c:5a:78:d1:5d:06:88:16:dd:61:5d:25:e4: 67:7c:cd:21:c7:a3:48:c4:d6:6a:21:86:37:96:54: c6:2d:ea:5a:71:80:af:ff:aa:a5:c6:ff:73:54:27: 23:a5:f3:a2:27:ed:4b:25:39:de:65:f0:58:a8:43: 48:66:d1:25:1c:49:8e:ee:cd:10:39:99:da:6b:6a: ed:02:ab:50:22:05:bc:4a:78:1b:e3:43:23:c4:0d: b2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:12:39:98:F2:21:B4:11:96:D1:B0:11:2B:71:57:F1:F3:27:9E:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a218aa9-a69e-3383-b2ce-6b813018e689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.214.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:67:e8:15:36:11:d6:db:35:57:10:34:6e:25:e6:e5:9a:6f: 07:f2:dc:32:96:7e:0b:8d:8a:da:3b:cb:0f:5f:fe:ab:da:83: 5e:eb:6a:6e:92:e0:24:d5:27:51:d0:f6:00:80:d1:18:ec:19: 0b:98:42:d0:78:83:66:c6:02:0f:48:60:ee:c7:34:8e:63:68: 31:0c:43:c0:ec:b2:e5:b8:68:2d:b1:85:76:9c:b1:98:9e:58: 11:0e:11:76:2f:d4:9d:77:46:a5:bc:be:26:c0:eb:27:cc:7d: 20:50:9e:ae:41:31:aa:0d:9a:29:93:a3:93:ce:10:98:fe:4e: f5:08:6a:36:8e:eb:f3:9f:3e:b3:b8:ab:f4:bc:8c:39:08:c9: a1:24:08:2e:68:fc:12:e8:d9:ed:b6:13:0d:fc:8a:47:33:a8: 28:da:6e:d2:7e:cc:24:fd:04:99:08:f4:b7:c1:c2:c6:f2:26: 47:ab:45:49:63:5a:32:e1:53:92:22:0b:16:47:c0:e7:7a:b6: ce:13:8f:45:72:78:e2:b9:c4:e9:26:00:ff:5f:3e:49:99:dd: 1c:85:04:48:9f:67:4b:ee:58:27:e3:2a:eb:91:18:37:7a:40: 71:e0:5c:92:57:52:14:8a:5c:96:9b:d0:86:22:85:59:27:bf: 7c:a3:cc:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExuIVGO9kdNpk/1L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk YmNkOGNmMGMtNTMzYy00Y2E1LThhOGUtOGM3ZTZkZTVkZWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnPIfiS0dMHJNQyE/haSwDELk3w7h7K4K9Xw cwZhU7tiYXFbB7FqVR7UO3F5Ai1k05qLIZ1CHsANnzNOdVdSzw20tpxCnU913P8S JaCTPBqMmfAw3KNhdRmpm96WY6BKaMDDnOQoJ9MVfmaIpEOrnqXy8DV1g81wQQap MEdviuuKwv86/hT9zPSsd/jERygWMP3qh+WMjE6QBziWcZNLVux+rsDpQRxaeNFd BogW3WFdJeRnfM0hx6NIxNZqIYY3llTGLepacYCv/6qlxv9zVCcjpfOiJ+1LJTne ZfBYqENIZtElHEmO7s0QOZnaa2rtAqtQIgW8Sngb40MjxA2y+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIISOZjyIbQRltGwEStxV/HzJ55rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWEyMThhYTktYTY5ZS0z MzgzLWIyY2UtNmI4MTMwMThlNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0NbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpn6BU2EdbbNVcQNG4l5uWabwfy3DKWfguNito7yw9f/qvag17ram6S 4CTVJ1HQ9gCA0RjsGQuYQtB4g2bGAg9IYO7HNI5jaDEMQ8DssuW4aC2xhXacsZie WBEOEXYv1J13RqW8vibA6yfMfSBQnq5BMaoNmimTo5POEJj+TvUIajaO6/OfPrO4 q/S8jDkIyaEkCC5o/BLo2e22Ew38ikczqCjabtJ+zCT9BJkI9LfBwsbyJkerRUlj WjLhU5IiCxZHwOd6ts4Tj0VyeOK5xOkmAP9fPkmZ3RyFBEifZ0vuWCfjKuuRGDd6 QHHgXJJXUhSKXJab0IYihVknv3yjzOc= -----END CERTIFICATE-----Generated at Sat Feb 21 04:54:16 2026 by rpki-client