$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa File: 486b3896-2841-391a-bebe-039803db5d71.roa (raw, json) Hash identifier: CPVR03qEZ+tejmyxN/bN0it7w9QpbwY/BTuS7TYMdJQ= Subject key identifier: CB:28:1A:A8:65:4C:AA:4E:27:0A:4B:CD:90:49:EB:D1:40:68:FF:1C Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584CED277CF6CB84190D1B5FB730 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa Signing time: Fri 20 Feb 2026 14:00:41 +0000 ROA not before: Fri 20 Feb 2026 14:00:41 +0000 ROA not after: Thu 21 May 2026 13:00:41 +0000 asID: 6643 IP address blocks: 199.87.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:27:7c:f6:cb:84:19:0d:1b:5f:b7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Feb 20 14:00:41 2026 GMT Not After : May 21 13:00:41 2026 GMT Subject: CN=021b5a59-a961-42c0-a3de-dbf7b79b1204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8f:4c:29:44:9d:36:eb:38:99:5a:b0:36:a0: ef:87:d3:52:d5:72:91:cf:c2:06:e7:1b:5f:da:03: b7:33:78:72:7b:aa:00:7e:4d:44:26:71:0d:c6:a1: 70:44:27:dd:44:ca:27:b2:79:48:61:eb:b0:6c:0e: 76:6c:ca:c8:ee:74:61:06:a6:82:d2:5f:58:db:cc: 7f:a8:68:11:3e:f6:6a:df:ee:25:bd:28:bf:04:99: f2:cd:e0:8c:a4:68:b1:3b:55:0e:e5:c5:9f:31:52: ce:dc:d0:c5:cd:f1:56:18:9d:41:72:2b:51:de:9e: 3d:20:e2:cb:fa:f7:4e:30:47:5c:85:09:94:1b:4f: 0e:24:8e:42:67:71:0e:a4:c0:e7:79:55:7e:55:21: d2:5e:ca:ba:de:8c:17:7f:c6:bf:e4:5c:ed:3c:3c: 08:42:55:a5:73:ac:ae:a6:ea:e7:4b:99:a5:cc:29: 76:a4:0c:8d:4a:43:66:de:c6:a5:d3:ef:da:44:59: 50:3f:56:8f:36:dd:96:ff:79:62:00:1e:f4:32:4c: b1:95:4e:a7:61:3f:bb:1c:2e:b9:5d:2a:7a:1d:0c: 43:6a:3e:92:93:0f:c2:e7:1f:01:41:b6:bc:57:26: 62:d6:45:53:1b:60:74:b2:46:04:90:69:1a:7a:91: c7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:28:1A:A8:65:4C:AA:4E:27:0A:4B:CD:90:49:EB:D1:40:68:FF:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:4d:76:a6:c6:2b:45:0f:d2:69:b5:5d:02:86:8b:05:3d:27: 77:91:60:90:78:7c:81:7a:50:b9:d9:98:9c:4d:16:e0:58:d0: 97:31:7f:00:14:32:23:14:0c:c2:1b:7c:79:53:17:54:de:3e: 97:2c:2b:53:e5:19:05:69:13:2a:e2:5b:67:60:27:d6:fd:7b: 8b:93:26:64:d9:d4:c9:8a:e1:4d:95:3d:c3:fb:e9:c7:ef:2a: f1:4e:1c:b1:46:3d:8e:5f:12:23:7e:7a:d7:18:e1:53:c7:60: f7:40:57:52:b7:b3:73:4f:d4:93:10:7d:e6:1f:ee:86:c5:ff: a1:17:72:0a:d2:bd:3e:11:63:09:11:3d:1c:97:7b:3c:5c:8f: 5e:7d:97:9b:fc:b1:44:e2:de:20:e5:a9:fe:f6:c5:7c:ab:f1: 5e:9a:18:48:c8:41:07:29:e9:d7:f4:0b:03:2c:d4:54:3d:e1: 51:b7:67:8e:45:91:78:f7:73:69:42:d4:3d:66:f4:7c:3b:59: 34:d3:32:7d:0d:55:8a:0c:10:f5:db:c2:87:9b:b7:a7:4b:47: 7e:d1:3c:54:eb:b2:a5:4b:76:17:c0:61:4e:67:c4:71:96:93: a6:af:13:5d:3c:8b:98:aa:71:90:dd:d0:35:66:9d:b1:ab:24: b7:ff:9e:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztJ3z2y4QZDRtftzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk MDIxYjVhNTktYTk2MS00MmMwLWEzZGUtZGJmN2I3OWIxMjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA349MKUSdNus4mVqwNqDvh9NS1XKRz8IG5xtf 2gO3M3hye6oAfk1EJnENxqFwRCfdRMonsnlIYeuwbA52bMrI7nRhBqaC0l9Y28x/ qGgRPvZq3+4lvSi/BJnyzeCMpGixO1UO5cWfMVLO3NDFzfFWGJ1BcitR3p49IOLL +vdOMEdchQmUG08OJI5CZ3EOpMDneVV+VSHSXsq63owXf8a/5FztPDwIQlWlc6yu purnS5mlzCl2pAyNSkNm3sal0+/aRFlQP1aPNt2W/3liAB70MkyxlU6nYT+7HC65 XSp6HQxDaj6Skw/C5x8BQba8VyZi1kVTG2B0skYEkGkaepHHoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsoGqhlTKpOJwpLzZBJ69FAaP8cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDg2YjM4OTYtMjg0MS0z OTFhLWJlYmUtMDM5ODAzZGI1ZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1d4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZNdqbGK0UP0mm1XQKGiwU9J3eRYJB4fIF6ULnZmJxNFuBY0JcxfwAU MiMUDMIbfHlTF1TePpcsK1PlGQVpEyriW2dgJ9b9e4uTJmTZ1MmK4U2VPcP76cfv KvFOHLFGPY5fEiN+etcY4VPHYPdAV1K3s3NP1JMQfeYf7obF/6EXcgrSvT4RYwkR PRyXezxcj159l5v8sUTi3iDlqf72xXyr8V6aGEjIQQcp6df0CwMs1FQ94VG3Z45F kXj3c2lC1D1m9Hw7WTTTMn0NVYoMEPXbwoebt6dLR37RPFTrsqVLdhfAYU5nxHGW k6avE108i5iqcZDd0DVmnbGrJLf/nng= -----END CERTIFICATE-----Generated at Thu Feb 26 09:22:33 2026 by rpki-client