$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/172bf953-4e6e-36c7-ae51-cf8cea6c3405.roa File: 172bf953-4e6e-36c7-ae51-cf8cea6c3405.roa (raw, json) Hash identifier: 4f+fLUSZqVvMyULQqQU4sAQA1JvW76xQs+LZmAxGFFk= Subject key identifier: C8:0F:3E:B3:64:43:3D:2F:88:E0:7E:E9:57:97:40:90:68:46:39:1D Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584CA32C6ED17A46830737756780 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/172bf953-4e6e-36c7-ae51-cf8cea6c3405.roa Signing time: Sun 25 Jan 2026 02:00:31 +0000 ROA not before: Sun 25 Jan 2026 02:00:31 +0000 ROA not after: Sat 25 Apr 2026 01:00:31 +0000 asID: 26744 IP address blocks: 147.124.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a3:2c:6e:d1:7a:46:83:07:37:75:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Jan 25 02:00:31 2026 GMT Not After : Apr 25 01:00:31 2026 GMT Subject: CN=916f2748-4b62-4045-a2ce-6ef26a0a79b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:77:80:b9:ab:4a:b6:c2:81:d1:de:f7:39:c5: ee:77:6a:ba:df:f7:31:b7:e2:ff:2a:be:4e:e0:79: 9c:b6:88:a8:b3:ea:0e:54:3e:ad:5b:93:90:43:95: a0:bb:32:35:35:b8:0d:eb:b0:7e:48:8e:e3:4b:d5: d6:1f:c6:2e:9b:a2:57:99:58:88:a5:d5:8a:c4:79: b6:c7:16:2a:8e:5e:c1:2c:71:de:f9:90:f7:f8:42: 43:4e:68:32:4c:a0:2e:7e:e6:6c:60:e0:3b:cb:d2: 87:62:a3:11:e0:26:c3:ed:e3:c9:d6:c6:9f:b4:c1: 2c:85:55:15:71:1b:36:ad:85:45:c7:03:47:53:3a: 3f:cf:e2:6c:a3:cf:7a:18:9f:cf:3e:92:db:5e:18: 73:35:d4:0a:4c:ff:05:1f:f6:bb:54:16:7d:01:0f: f5:a0:ad:0f:2b:11:e4:aa:21:9c:85:16:ca:6f:2c: 7b:68:52:21:cd:c3:d9:40:45:32:22:a6:94:29:14: e6:8e:ee:8b:85:6c:c6:a2:db:c5:d2:8d:7a:63:b6: 2a:3b:26:23:34:18:e5:8c:92:87:1c:ed:34:f3:cc: c9:1c:40:b9:ee:d8:4a:da:4c:da:48:02:f0:83:40: 50:71:28:e5:1e:12:36:7c:b4:5a:91:4e:79:77:00: a8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0F:3E:B3:64:43:3D:2F:88:E0:7E:E9:57:97:40:90:68:46:39:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/172bf953-4e6e-36c7-ae51-cf8cea6c3405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:79:49:c4:81:82:55:c5:b8:e8:1d:c4:5d:7c:4d:bc:c4:93: b2:33:57:e5:bf:8b:84:6c:26:1b:a9:e5:a0:b0:3b:6b:e8:a0: bb:1b:d6:c3:c5:75:a1:0b:c7:bf:25:76:09:e4:ad:76:a7:d9: 74:85:67:01:b4:7c:d1:ed:f1:9d:f1:9d:ed:4a:4d:ad:22:de: 2f:15:5e:9b:6b:a0:19:4b:4d:8d:15:36:3e:46:d0:d9:6e:76: 0b:9e:6c:bf:95:4e:16:2d:1d:0a:0e:4d:91:67:80:bb:89:76: a7:be:06:77:62:49:6d:78:8a:93:aa:33:d6:70:a7:37:48:14: c7:96:ed:de:e1:af:b6:84:f3:f4:08:e6:15:c7:b8:72:25:da: 23:9d:0e:0a:0e:ed:42:f1:98:a9:ab:04:8b:b1:4e:30:43:66: de:88:54:87:8d:a3:27:3b:c6:af:17:2b:3f:42:97:21:50:6b: 71:44:42:23:cc:da:ab:eb:8c:55:51:41:ef:b3:b9:31:38:46: 3d:39:54:78:49:32:14:2b:5a:12:8e:76:30:d0:96:7b:80:b0: ba:63:72:56:b3:e2:17:ac:e4:96:78:a3:a7:4e:87:f7:ea:c3: 97:2c:c5:8a:17:61:f7:66:08:90:bd:6c:df:0b:06:c6:82:15: 64:1a:56:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyjLG7RekaDBzd1Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI2MDEyNTAyMDAzMVoXDTI2MDQyNTAxMDAzMVowLzEtMCsGA1UEAxMk OTE2ZjI3NDgtNGI2Mi00MDQ1LWEyY2UtNmVmMjZhMGE3OWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlneAuatKtsKB0d73OcXud2q63/cxt+L/Kr5O 4Hmctoios+oOVD6tW5OQQ5WguzI1NbgN67B+SI7jS9XWH8Yum6JXmViIpdWKxHm2 xxYqjl7BLHHe+ZD3+EJDTmgyTKAufuZsYOA7y9KHYqMR4CbD7ePJ1saftMEshVUV cRs2rYVFxwNHUzo/z+Jso896GJ/PPpLbXhhzNdQKTP8FH/a7VBZ9AQ/1oK0PKxHk qiGchRbKbyx7aFIhzcPZQEUyIqaUKRTmju6LhWzGotvF0o16Y7YqOyYjNBjljJKH HO0088zJHEC57thK2kzaSALwg0BQcSjlHhI2fLRakU55dwCojQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgPPrNkQz0viOB+6VeXQJBoRjkdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvMTcyYmY5NTMtNGU2ZS0z NmM3LWFlNTEtY2Y4Y2VhNmMzNDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk3zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGp5ScSBglXFuOgdxF18TbzEk7IzV+W/i4RsJhup5aCwO2vooLsb1sPF daELx78ldgnkrXan2XSFZwG0fNHt8Z3xne1KTa0i3i8VXptroBlLTY0VNj5G0Nlu dguebL+VThYtHQoOTZFngLuJdqe+BndiSW14ipOqM9ZwpzdIFMeW7d7hr7aE8/QI 5hXHuHIl2iOdDgoO7ULxmKmrBIuxTjBDZt6IVIeNoyc7xq8XKz9ClyFQa3FEQiPM 2qvrjFVRQe+zuTE4Rj05VHhJMhQrWhKOdjDQlnuAsLpjclaz4hes5JZ4o6dOh/fq w5csxYoXYfdmCJC9bN8LBsaCFWQaVho= -----END CERTIFICATE-----Generated at Mon Mar 2 09:40:49 2026 by rpki-client