$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/d90017c3-a77d-3cd2-9c68-3d52f6ed6055.roa File: d90017c3-a77d-3cd2-9c68-3d52f6ed6055.roa (raw, json) Hash identifier: jmgShyvqWYv10y2VgNicbRuoR5l4xh43uHm1i5xPZQA= Subject key identifier: 17:FB:84:57:EE:D8:51:4A:B1:81:0A:9D:35:8C:9A:BD:B5:1D:19:59 Certificate issuer: /CN=8d560541-dfe9-43df-8277-86d83aa610a1 Certificate serial: 010D0C9F4328584CAE5717E21ADABE0BAFE96A34 Authority key identifier: 8B:B2:3D:2F:85:7E:56:48:9E:99:6E:81:CF:A0:4B:69:48:A1:5C:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/d90017c3-a77d-3cd2-9c68-3d52f6ed6055.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 16509 IP address blocks: 204.11.174.0/24 maxlen: 24 204.11.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:17:e2:1a:da:be:0b:af:e9:6a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d560541-dfe9-43df-8277-86d83aa610a1 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=ec250f40-f4cc-491c-89c4-c9f0912e9941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2b:e5:be:dc:a5:71:7f:c8:d0:00:01:87:47: dc:89:32:78:f8:b8:86:e2:fe:40:31:ae:b9:79:5a: 81:4a:ea:10:b4:ca:b2:9f:df:0b:c5:76:1e:1a:50: 8a:9a:26:5f:e8:2f:5e:15:1a:97:15:ad:3d:b4:27: 65:44:7a:1c:62:1d:aa:c5:d9:02:8d:80:d6:8d:7f: b1:00:e0:40:9b:07:02:15:a4:03:c8:e5:1e:8f:f2: 41:7e:3c:e1:6b:5f:44:a1:a3:8b:70:c6:5e:0a:4a: 18:9b:82:67:04:be:c3:66:cb:32:c5:d7:a7:f9:f9: a6:0f:b2:51:f2:05:0f:c2:1d:2c:3e:92:b3:2d:5f: 71:6b:7f:be:de:41:2d:1f:ab:a6:3a:ac:de:9b:40: aa:8b:12:5a:8d:58:3a:cc:66:e4:d0:e6:52:cd:94: e4:8d:54:01:97:44:cd:69:c8:5d:41:05:d5:72:50: 1b:6c:df:6f:6d:ad:6d:5b:8c:0c:27:d3:8f:53:63: f2:5b:dc:bd:52:9a:08:40:a6:c1:de:73:08:12:50: 14:dd:43:08:b5:f0:24:62:26:fa:e8:70:56:0e:90: ac:9b:cd:3c:b8:89:fb:b3:f2:93:31:95:bb:79:5a: b9:c9:3c:3e:bd:39:ff:b2:6f:51:ff:df:2d:1b:30: 0d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FB:84:57:EE:D8:51:4A:B1:81:0A:9D:35:8C:9A:BD:B5:1D:19:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/d90017c3-a77d-3cd2-9c68-3d52f6ed6055.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.crl X509v3 Authority Key Identifier: keyid:8B:B2:3D:2F:85:7E:56:48:9E:99:6E:81:CF:A0:4B:69:48:A1:5C:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer sbgp-ipAddrBlock: critical IPv4: 204.11.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:3f:43:08:9b:b4:d3:38:4b:5f:a8:f5:b0:ec:99:59:b1:9f: 99:57:f0:bd:a0:b9:81:13:f6:2f:d2:7a:33:2f:c7:73:6b:3b: 2e:d6:cc:6e:75:4b:6e:4f:29:c8:8c:39:4d:3c:0f:f7:16:a5: 1a:f1:af:6a:e5:a0:fc:43:9a:a3:83:51:53:9a:19:aa:62:7a: 8d:98:9a:f9:1c:47:7d:f3:be:8e:68:6b:bd:1c:11:6e:8b:f0: 2d:da:16:eb:a3:1e:d4:63:03:79:c9:2f:50:fb:b4:4c:05:b4: a9:57:bc:54:57:82:84:08:cf:30:fd:c1:cd:67:c0:e0:f4:c6: e2:d8:bd:f2:63:64:96:80:a8:ef:71:d2:39:7b:8f:da:99:fc: c6:94:d2:a8:ce:62:80:7c:a7:d4:7f:01:8f:97:0d:68:43:fa: dc:2c:ec:1c:8d:9c:e0:5a:62:ee:90:bc:f9:c3:18:65:51:b0: 82:86:2d:21:83:77:02:e4:3d:fe:4c:ea:5c:15:70:6e:91:3f: a0:97:01:07:47:ec:5b:a9:87:85:13:c0:43:d7:17:7b:1a:10: 7b:44:c3:fe:99:73:f3:28:71:28:de:71:0b:dd:f8:6b:aa:b1: 50:91:b9:38:ed:49:19:3a:af:9e:4c:7c:06:02:ac:40:26:84: ed:e7:45:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVxfiGtq+C6/pajQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ1NjA1NDEtZGZlOS00M2RmLTgyNzctODZkODNhYTYx MGExMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZWMyNTBmNDAtZjRjYy00OTFjLTg5YzQtYzlmMDkxMmU5OTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSvlvtylcX/I0AABh0fciTJ4+LiG4v5AMa65 eVqBSuoQtMqyn98LxXYeGlCKmiZf6C9eFRqXFa09tCdlRHocYh2qxdkCjYDWjX+x AOBAmwcCFaQDyOUej/JBfjzha19EoaOLcMZeCkoYm4JnBL7DZssyxden+fmmD7JR 8gUPwh0sPpKzLV9xa3++3kEtH6umOqzem0CqixJajVg6zGbk0OZSzZTkjVQBl0TN achdQQXVclAbbN9vba1tW4wMJ9OPU2PyW9y9UpoIQKbB3nMIElAU3UMItfAkYib6 6HBWDpCsm808uIn7s/KTMZW7eVq5yTw+vTn/sm9R/98tGzANVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBf7hFfu2FFKsYEKnTWMmr21HRlZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZDU2 MDU0MS1kZmU5LTQzZGYtODI3Ny04NmQ4M2FhNjEwYTEvZDkwMDE3YzMtYTc3ZC0z Y2QyLTljNjgtM2Q1MmY2ZWQ2MDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGQ1NjA1NDEtZGZlOS00M2RmLTgy NzctODZkODNhYTYxMGExLzhkNTYwNTQxLWRmZTktNDNkZi04Mjc3LTg2ZDgzYWE2 MTBhMS5jcmwwHwYDVR0jBBgwFoAUi7I9L4V+VkiemW6Bz6BLaUihXO0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZDU2MDU0MS1kZmU5LTQzZGYtODI3Ny04NmQ4 M2FhNjEwYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzAuuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY/QwibtNM4S1+o9bDsmVmxn5lX8L2guYET9i/SejMvx3NrOy7WzG51 S25PKciMOU08D/cWpRrxr2rloPxDmqODUVOaGapieo2YmvkcR33zvo5oa70cEW6L 8C3aFuujHtRjA3nJL1D7tEwFtKlXvFRXgoQIzzD9wc1nwOD0xuLYvfJjZJaAqO9x 0jl7j9qZ/MaU0qjOYoB8p9R/AY+XDWhD+tws7ByNnOBaYu6QvPnDGGVRsIKGLSGD dwLkPf5M6lwVcG6RP6CXAQdH7Fuph4UTwEPXF3saEHtEw/6Zc/MocSjecQvd+Guq sVCRuTjtSRk6r55MfAYCrEAmhO3nRQQ= -----END CERTIFICATE-----Generated at Mon Mar 2 02:53:13 2026 by rpki-client