$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa File: a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa (raw, json) Hash identifier: 6IWdLrzsV6Kv/KwcUi3zuTv4UuJ33oPxuqZwGNdhdWw= Subject key identifier: B3:98:5B:CB:2F:33:C1:26:89:3A:F9:12:38:23:2C:2F:6E:06:E5:49 Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F4328584CC07C9C4ED8BE459569179680 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa Signing time: Wed 04 Feb 2026 14:00:39 +0000 ROA not before: Wed 04 Feb 2026 14:00:39 +0000 ROA not after: Tue 05 May 2026 13:00:39 +0000 asID: 134450 IP address blocks: 172.84.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c0:7c:9c:4e:d8:be:45:95:69:17:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Feb 4 14:00:39 2026 GMT Not After : May 5 13:00:39 2026 GMT Subject: CN=4de7a74b-e6d5-4d74-a6be-e59b5ed86bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b6:0d:3c:c3:ab:e7:dd:3b:53:78:97:0d:d4: 3e:30:ca:2c:4f:51:ed:0c:3b:29:ad:aa:8d:e6:f5: ba:b0:d0:be:88:c8:7f:ce:2e:29:42:d9:17:47:56: 0c:e7:5c:ee:fd:82:ba:42:ae:fb:11:62:88:84:14: 3d:58:a7:a7:58:d9:21:14:4a:bc:79:d8:ab:3a:71: fb:a8:44:28:8b:e8:0e:f8:bb:8b:c4:95:25:13:f5: d1:69:1d:8f:cd:2a:83:c5:b1:78:5f:06:aa:3a:ed: de:8c:62:cd:fb:85:fe:79:03:3e:05:79:03:a7:74: a8:ab:ca:d2:c8:9e:93:c7:8f:a2:60:62:c2:2f:46: dc:46:2b:de:1a:64:d9:6d:67:56:a0:16:ca:7f:74: 72:48:0b:ab:82:30:e0:42:a1:cc:36:96:44:83:21: 07:18:62:e1:46:9f:ef:f7:db:84:fc:59:34:15:3c: 0c:ab:ac:67:8c:45:ea:8a:03:5d:80:70:7e:7e:02: c2:3a:6b:3b:e8:82:c5:ef:4d:68:3f:a7:84:c6:6e: 77:87:85:09:5e:be:38:b5:2f:87:49:e4:fd:85:ec: 97:89:4d:fb:68:fa:dc:af:c3:95:64:d5:52:64:5a: 70:ab:60:69:c9:cb:79:24:ec:76:66:c0:9b:c6:a8: eb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:98:5B:CB:2F:33:C1:26:89:3A:F9:12:38:23:2C:2F:6E:06:E5:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 172.84.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:0c:ce:13:dd:63:d1:51:58:19:d0:93:aa:6b:de:02:14:e5: 5a:54:06:11:03:60:71:83:5f:18:64:9a:c9:99:d9:56:71:b5: 19:ff:14:f3:71:b9:6a:c7:9e:7a:19:e6:96:52:f4:f3:91:5a: fe:97:cc:33:f7:d2:f8:74:4f:86:08:59:cb:48:62:f4:fe:dc: 36:8f:b5:c7:de:8a:84:62:ff:5a:a2:a8:15:34:f9:9f:4a:96: 19:d7:a8:9d:d1:d8:67:cf:bd:b0:47:f6:b9:17:ef:1e:d3:cb: 81:54:ea:e3:fc:e8:73:c2:0a:40:8b:2d:dd:c5:db:be:24:59: a9:8d:f2:b3:ce:57:ab:dd:84:c0:06:8a:1a:5c:c7:56:08:fb: 9d:4d:82:b7:85:7b:5b:2d:10:0c:f0:91:3f:77:be:6e:0e:f8: ae:f0:ee:e5:95:b2:ac:6c:e4:89:2e:21:0b:5c:1a:54:19:37: 77:19:21:bc:cf:44:5d:42:46:e9:0b:59:40:6a:72:75:02:9d: de:5b:1c:37:2e:ee:2d:08:b3:be:78:a9:53:2c:eb:30:49:23: 0d:9f:41:a0:d2:41:1b:0c:56:67:4d:2f:ca:fd:e0:0b:86:96: 1d:63:22:a1:47:ec:7e:be:08:58:65:3a:8c:f0:04:a8:c9:3f: e4:1b:3a:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzAfJxO2L5FlWkXloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI2MDIwNDE0MDAzOVoXDTI2MDUwNTEzMDAzOVowLzEtMCsGA1UEAxMk NGRlN2E3NGItZTZkNS00ZDc0LWE2YmUtZTU5YjVlZDg2YmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bYNPMOr5907U3iXDdQ+MMosT1HtDDspraqN 5vW6sNC+iMh/zi4pQtkXR1YM51zu/YK6Qq77EWKIhBQ9WKenWNkhFEq8edirOnH7 qEQoi+gO+LuLxJUlE/XRaR2PzSqDxbF4XwaqOu3ejGLN+4X+eQM+BXkDp3Soq8rS yJ6Tx4+iYGLCL0bcRiveGmTZbWdWoBbKf3RySAurgjDgQqHMNpZEgyEHGGLhRp/v 99uE/Fk0FTwMq6xnjEXqigNdgHB+fgLCOms76ILF701oP6eExm53h4UJXr44tS+H SeT9heyXiU37aPrcr8OVZNVSZFpwq2Bpyct5JOx2ZsCbxqjrLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOYW8svM8EmiTr5EjgjLC9uBuVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvYTBiZWMyYjQtZWM3OC0z ZjZjLWEyNmEtNjJkZmY0YmJjMjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrFSwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQMzhPdY9FRWBnQk6pr3gIU5VpUBhEDYHGDXxhkmsmZ2VZxtRn/FPNx uWrHnnoZ5pZS9PORWv6XzDP30vh0T4YIWctIYvT+3DaPtcfeioRi/1qiqBU0+Z9K lhnXqJ3R2GfPvbBH9rkX7x7Ty4FU6uP86HPCCkCLLd3F274kWamN8rPOV6vdhMAG ihpcx1YI+51NgreFe1stEAzwkT93vm4O+K7w7uWVsqxs5IkuIQtcGlQZN3cZIbzP RF1CRukLWUBqcnUCnd5bHDcu7i0Is754qVMs6zBJIw2fQaDSQRsMVmdNL8r94AuG lh1jIqFH7H6+CFhlOozwBKjJP+QbOuQ= -----END CERTIFICATE-----Generated at Sun Mar 1 21:02:29 2026 by rpki-client