$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/5b0f7ce6-9e65-3027-ace5-5004e591656b.roa File: 5b0f7ce6-9e65-3027-ace5-5004e591656b.roa (raw, json) Hash identifier: 3Lyrke7NxaQrGiZvyin3cL4dxv0NtKsGpT2DW3rVgRk= Subject key identifier: 2D:1F:09:F2:95:D4:28:ED:7A:11:E4:E6:19:2A:5E:BC:82:9A:83:35 Certificate issuer: /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Certificate serial: 010D0C9F4328584CAE5711322B2815A4739198C0 Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/5b0f7ce6-9e65-3027-ace5-5004e591656b.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 141776 IP address blocks: 174.136.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:11:32:2b:28:15:a4:73:91:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=42dbf912-330c-426b-a78a-eee71c6a3472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cd:8d:2d:36:80:17:ad:45:36:fd:7e:44:39: 98:7d:a2:df:8e:6d:e3:13:0a:6c:8f:78:fe:0e:93: dd:23:d5:61:81:d5:e3:78:ca:0b:9c:65:8c:6d:e4: 63:8e:d5:6a:5c:22:67:5d:d8:92:ac:6b:9f:66:65: 19:4a:1a:01:d0:5c:9c:cc:4f:2c:21:cf:ee:a4:16: c8:bb:d6:96:47:86:91:db:05:41:a3:79:f7:e7:8e: 31:66:9b:f2:3f:d8:d1:63:72:82:f1:36:e3:7a:ba: 42:1e:95:c2:e5:5a:1e:9d:85:72:2e:7a:7e:79:92: 8a:15:2a:7d:54:20:68:57:07:66:9e:8c:2e:af:7d: 9e:61:2d:03:0b:3d:99:d6:bc:03:ad:51:05:e7:f0: a5:94:6d:12:75:f1:3c:12:8e:26:6d:67:46:69:74: f0:ea:fc:a3:76:b7:23:a5:fb:2f:6e:6c:34:ea:00: 8e:2b:57:2a:d0:cd:46:32:8c:1a:61:f9:9b:c6:8a: f9:49:a9:6b:ee:de:7a:f3:2b:a7:7a:f6:78:8a:bb: 47:3e:4d:24:15:e5:2b:f7:5c:15:87:8b:b5:7a:73: 51:be:a8:20:59:02:dd:a9:9c:c0:fe:83:8d:75:12: c8:19:94:9e:15:e3:63:60:99:12:e0:af:44:ce:61: f4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1F:09:F2:95:D4:28:ED:7A:11:E4:E6:19:2A:5E:BC:82:9A:83:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/5b0f7ce6-9e65-3027-ace5-5004e591656b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl X509v3 Authority Key Identifier: keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer sbgp-ipAddrBlock: critical IPv4: 174.136.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:dd:3f:aa:d0:db:8e:24:42:e6:89:ec:e6:da:5d:11:90:61: ce:09:57:94:f7:d1:73:1a:d5:b7:2d:fe:93:2f:9f:1e:a9:39: 05:0b:34:7a:f0:4a:48:37:cf:ed:26:d9:e2:18:52:26:31:fa: 77:fd:bb:b9:b1:45:fc:08:1e:05:46:f5:b7:35:74:16:bb:bb: 1e:85:7f:f9:df:d1:75:4e:95:cf:d2:fb:2e:76:eb:d2:3c:a4: d7:ad:b9:27:d5:82:f9:0a:ee:f6:f2:3d:67:35:d2:a0:07:ee: ff:0e:8c:12:f2:b7:49:4e:43:c9:39:bb:d5:8b:2d:13:5a:3a: e1:4f:0c:07:9f:26:9c:eb:12:6c:f0:29:4c:19:de:db:c4:fb: 7c:70:46:f4:4b:5a:72:2f:fe:7d:ed:e2:74:8e:45:74:28:60: 7b:be:b7:a3:16:56:a5:23:db:8e:b6:7f:34:fc:2b:e1:c8:93: 6f:88:83:cc:c3:a7:b7:7f:64:81:b8:2c:83:90:fe:7c:2e:ae: 6b:ae:8c:b6:52:ae:d4:40:2e:ed:14:04:cb:eb:6e:63:0b:42: b4:83:94:e2:f6:bc:b1:d8:3b:57:85:56:ef:6b:3f:05:77:e7: 76:01:09:1c:6f:9b:b9:02:8f:71:1f:61:73:39:56:af:a6:f5: d4:b5:60:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVxEyKygVpHORmMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYxOTM3M2ItMmNjNS00MGY0LWE2ZDAtN2NjYWNjNjM0 ODU3MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NDJkYmY5MTItMzMwYy00MjZiLWE3OGEtZWVlNzFjNmEzNDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt82NLTaAF61FNv1+RDmYfaLfjm3jEwpsj3j+ DpPdI9VhgdXjeMoLnGWMbeRjjtVqXCJnXdiSrGufZmUZShoB0FyczE8sIc/upBbI u9aWR4aR2wVBo3n3544xZpvyP9jRY3KC8TbjerpCHpXC5VoenYVyLnp+eZKKFSp9 VCBoVwdmnowur32eYS0DCz2Z1rwDrVEF5/CllG0SdfE8Eo4mbWdGaXTw6vyjdrcj pfsvbmw06gCOK1cq0M1GMowaYfmbxor5Salr7t568yunevZ4irtHPk0kFeUr91wV h4u1enNRvqggWQLdqZzA/oONdRLIGZSeFeNjYJkS4K9EzmH0MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0fCfKV1CjtehHk5hkqXryCmoM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5 MzczYi0yY2M1LTQwZjQtYTZkMC03Y2NhY2M2MzQ4NTcvNWIwZjdjZTYtOWU2NS0z MDI3LWFjZTUtNTAwNGU1OTE2NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGYxOTM3M2ItMmNjNS00MGY0LWE2 ZDAtN2NjYWNjNjM0ODU3LzBmMTkzNzNiLTJjYzUtNDBmNC1hNmQwLTdjY2FjYzYz NDg1Ny5jcmwwHwYDVR0jBBgwFoAUp46RWPy5WfebiT1L1fsMf5AC/TMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5MzczYi0yY2M1LTQwZjQtYTZkMC03Y2Nh Y2M2MzQ4NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArojvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzdP6rQ244kQuaJ7ObaXRGQYc4JV5T30XMa1bct/pMvnx6pOQULNHrw Skg3z+0m2eIYUiYx+nf9u7mxRfwIHgVG9bc1dBa7ux6Ff/nf0XVOlc/S+y5269I8 pNetuSfVgvkK7vbyPWc10qAH7v8OjBLyt0lOQ8k5u9WLLRNaOuFPDAefJpzrEmzw KUwZ3tvE+3xwRvRLWnIv/n3t4nSORXQoYHu+t6MWVqUj2462fzT8K+HIk2+Ig8zD p7d/ZIG4LIOQ/nwurmuujLZSrtRALu0UBMvrbmMLQrSDlOL2vLHYO1eFVu9rPwV3 53YBCRxvm7kCj3EfYXM5Vq+m9dS1YKY= -----END CERTIFICATE-----Generated at Mon Mar 2 09:48:12 2026 by rpki-client