$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/54a8991f-2df5-35d8-9844-758dac2ecb37.roa File: 54a8991f-2df5-35d8-9844-758dac2ecb37.roa (raw, json) Hash identifier: jj5rqBVNKTcZvcbmIhSfXZk8QS4FXQiU2NMS9K7n/Xs= Subject key identifier: D4:DC:25:04:57:80:DF:30:99:5D:B3:A3:BF:94:04:1B:8F:04:FF:49 Certificate issuer: /CN=5e580e37-3db1-41d1-ae09-7e84348caffd Certificate serial: 010D0C9F4328584C9C31B0AB2DD8C1509623C280 Authority key identifier: FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/54a8991f-2df5-35d8-9844-758dac2ecb37.roa Signing time: Thu 22 Jan 2026 14:00:37 +0000 ROA not before: Thu 22 Jan 2026 14:00:37 +0000 ROA not after: Wed 22 Apr 2026 13:00:37 +0000 asID: 17207 IP address blocks: 204.228.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9c:31:b0:ab:2d:d8:c1:50:96:23:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e580e37-3db1-41d1-ae09-7e84348caffd Validity Not Before: Jan 22 14:00:37 2026 GMT Not After : Apr 22 13:00:37 2026 GMT Subject: CN=0f31e55a-3e06-4a30-bae0-f51348a9e991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:28:bf:47:ad:6c:e2:d3:d6:95:f1:b1:a7:bb: 42:f8:ef:6a:70:78:18:4c:bc:b7:45:55:12:25:e9: 22:4c:d5:bf:4c:b1:f8:a4:5d:7e:ba:93:c4:91:8f: 06:c3:d3:46:be:da:16:59:48:24:22:d8:7c:81:6d: d1:c4:e8:9e:c2:85:ff:d2:ea:99:3e:81:f2:5c:f5: e5:6c:b1:7e:3b:53:99:98:38:bb:a2:c3:ea:a5:3a: f2:5c:3a:25:bb:68:1d:1c:7e:e9:c6:03:c9:77:07: 79:5b:d4:52:86:d7:33:be:95:ac:d5:6b:f7:ac:2b: 9d:71:25:19:14:a1:c8:12:5d:e5:23:3c:17:5d:6b: f3:1b:00:a2:c4:ec:c1:63:a7:fd:62:c5:23:f6:8e: 8b:89:d7:b6:27:a1:fc:fa:39:cc:fb:ad:77:21:16: 78:0a:c0:9f:f1:55:02:58:11:f8:dc:8b:bb:f8:30: f1:b3:f1:25:5e:33:d3:ba:fd:a5:9a:c2:90:6e:54: 02:dd:22:b7:d8:d9:fd:2b:bb:4b:43:ea:1b:3a:36: ec:f4:37:83:44:cf:09:ba:ed:c3:b6:21:6e:ae:81: 5f:6e:cf:21:58:d1:07:7f:3a:0e:6d:b8:cb:46:fa: cc:ed:f0:45:33:58:88:d8:d6:86:e0:8e:a0:39:2d: c6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DC:25:04:57:80:DF:30:99:5D:B3:A3:BF:94:04:1B:8F:04:FF:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/54a8991f-2df5-35d8-9844-758dac2ecb37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.crl X509v3 Authority Key Identifier: keyid:FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer sbgp-ipAddrBlock: critical IPv4: 204.228.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:8e:aa:ef:bb:ce:8f:96:95:6a:30:20:0d:a0:b0:8d:44:2c: cf:d4:14:f3:77:1a:a0:eb:e1:94:be:17:25:e5:71:d6:2d:ed: b5:f3:19:cf:d0:ee:43:c2:47:51:bf:55:a2:cf:ac:8d:5e:84: 39:21:47:2c:24:81:6f:f4:84:7e:ae:67:74:cf:94:21:74:c6: 39:58:67:ba:7a:4e:6c:a9:41:62:b7:a6:4e:ff:8c:78:a2:08: 49:21:d9:ad:4c:77:ee:f9:cf:64:9f:52:d6:63:3b:03:26:14: 7d:75:69:15:6a:a4:f5:02:77:75:df:c5:53:9f:c2:e1:62:2c: dc:fc:f6:03:ab:3f:4e:f1:10:06:a0:c2:97:7e:7a:70:a3:2f: 34:54:33:c6:92:02:bf:78:8a:4b:16:0c:21:0d:e3:02:d3:e3: 4a:dd:e3:1a:34:8a:68:f6:3c:e9:6f:30:00:84:eb:3f:be:dd: 44:36:e0:17:4d:c9:46:d2:7e:76:e7:80:53:43:84:f7:18:e9: 86:d8:3d:75:b0:a6:a3:86:cd:f5:03:a5:0e:cd:f2:64:f8:aa: 02:d0:90:56:49:57:1a:6d:b0:f0:a9:6b:e3:58:ca:3d:3a:65: 48:1d:89:58:cc:e6:39:f0:ec:b0:4c:91:13:ca:a1:f7:04:4a: 4f:76:fb:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEycMbCrLdjBUJYjwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU1ODBlMzctM2RiMS00MWQxLWFlMDktN2U4NDM0OGNh ZmZkMB4XDTI2MDEyMjE0MDAzN1oXDTI2MDQyMjEzMDAzN1owLzEtMCsGA1UEAxMk MGYzMWU1NWEtM2UwNi00YTMwLWJhZTAtZjUxMzQ4YTllOTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ii/R61s4tPWlfGxp7tC+O9qcHgYTLy3RVUS JekiTNW/TLH4pF1+upPEkY8Gw9NGvtoWWUgkIth8gW3RxOiewoX/0uqZPoHyXPXl bLF+O1OZmDi7osPqpTryXDolu2gdHH7pxgPJdwd5W9RShtczvpWs1Wv3rCudcSUZ FKHIEl3lIzwXXWvzGwCixOzBY6f9YsUj9o6Lide2J6H8+jnM+613IRZ4CsCf8VUC WBH43Iu7+DDxs/ElXjPTuv2lmsKQblQC3SK32Nn9K7tLQ+obOjbs9DeDRM8Juu3D tiFuroFfbs8hWNEHfzoObbjLRvrM7fBFM1iI2NaG4I6gOS3GswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTcJQRXgN8wmV2zo7+UBBuPBP9JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZTU4 MGUzNy0zZGIxLTQxZDEtYWUwOS03ZTg0MzQ4Y2FmZmQvNTRhODk5MWYtMmRmNS0z NWQ4LTk4NDQtNzU4ZGFjMmVjYjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWU1ODBlMzctM2RiMS00MWQxLWFl MDktN2U4NDM0OGNhZmZkLzVlNTgwZTM3LTNkYjEtNDFkMS1hZTA5LTdlODQzNDhj YWZmZC5jcmwwHwYDVR0jBBgwFoAU/b7HR9PNGy3n92RgnwNBlGpLmE8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZTU4MGUzNy0zZGIxLTQxZDEtYWUwOS03ZTg0 MzQ4Y2FmZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzORUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeOqu+7zo+WlWowIA2gsI1ELM/UFPN3GqDr4ZS+FyXlcdYt7bXzGc/Q 7kPCR1G/VaLPrI1ehDkhRywkgW/0hH6uZ3TPlCF0xjlYZ7p6TmypQWK3pk7/jHii CEkh2a1Md+75z2SfUtZjOwMmFH11aRVqpPUCd3XfxVOfwuFiLNz89gOrP07xEAag wpd+enCjLzRUM8aSAr94iksWDCEN4wLT40rd4xo0imj2POlvMACE6z++3UQ24BdN yUbSfnbngFNDhPcY6YbYPXWwpqOGzfUDpQ7N8mT4qgLQkFZJVxptsPCpa+NYyj06 ZUgdiVjM5jnw7LBMkRPKofcESk92+6k= -----END CERTIFICATE-----Generated at Mon Mar 2 07:50:07 2026 by rpki-client