$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/28c80f3f-ab82-3f0d-be71-f3a56b40c679.roa File: 28c80f3f-ab82-3f0d-be71-f3a56b40c679.roa (raw, json) Hash identifier: Bx8G4KFiqbawH2oJqDyT/Yo8oOTe2hn8BmzgNKVkqyU= Subject key identifier: C1:D1:2F:AB:2D:32:A3:ED:C5:EC:E6:DC:76:5B:EF:A7:DF:21:FC:B0 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584D037D01EF734FC9A36D442C40 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/28c80f3f-ab82-3f0d-be71-f3a56b40c679.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 10794 IP address blocks: 171.158.24.0/23 maxlen: 23 171.158.24.0/24 maxlen: 24 171.158.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:01:ef:73:4f:c9:a3:6d:44:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=ff6df5d1-3102-4ee5-bab5-11d7e035a8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:31:84:a0:ac:21:1f:52:49:fa:94:d6:e3:11: e4:80:93:ff:e8:1b:fe:10:d3:2f:95:a7:a1:e8:29: fe:64:2b:48:46:07:05:cd:6b:6e:95:82:36:58:22: 26:12:ea:42:ce:f8:4a:81:01:8c:e3:66:e4:62:e8: 47:1b:92:f5:ff:b3:41:5f:b6:f6:46:36:36:49:65: 5d:68:7a:24:45:bf:a2:db:85:a9:7c:59:b7:13:cd: ba:87:c0:35:92:fa:d5:cf:c8:b3:b9:79:92:32:e2: f5:24:b0:97:f5:39:85:39:61:de:c7:5c:17:bf:98: dc:e5:a2:45:90:92:7a:3f:80:27:14:1e:cd:7a:73: a9:83:e1:b3:ab:6d:ec:66:5f:ac:90:f0:d7:6f:51: 4f:8b:cc:e5:10:6c:ca:02:69:68:00:db:8a:70:81: db:ae:ac:a7:b5:6a:1b:68:ce:30:f1:70:44:7c:b9: f2:da:ad:05:55:3e:ea:0d:81:36:2a:fb:2b:7e:98: 70:2a:88:0d:28:84:a6:54:48:99:8c:ac:c8:32:e6: bb:dd:4d:08:d7:09:f9:a3:11:d9:88:18:83:b9:1b: 3d:bd:58:df:a1:aa:bf:a8:88:23:04:73:48:80:7a: 9e:1d:e2:89:9d:0e:70:82:80:e9:61:55:e0:77:60: a5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D1:2F:AB:2D:32:A3:ED:C5:EC:E6:DC:76:5B:EF:A7:DF:21:FC:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/28c80f3f-ab82-3f0d-be71-f3a56b40c679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.158.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:3d:00:15:38:6a:17:48:7a:8d:dc:0a:6a:76:4d:af:6c:91: 1e:02:2e:69:95:d7:5a:2d:a7:aa:7f:dc:5b:e7:de:d5:51:f2: be:c2:a0:77:ad:62:07:64:31:ce:0b:7a:19:dd:ea:86:e9:e7: 10:d7:c5:29:60:d9:52:d4:4b:57:86:1e:1e:a4:48:be:0a:a4: 5e:55:b5:d3:a8:72:bd:f8:5e:b7:97:15:0a:82:7e:6d:fd:94: 74:69:35:44:52:3a:d8:3b:e1:b1:0d:26:fc:c3:e2:c9:8c:4b: 6f:a5:29:1d:21:e6:d3:71:3d:0d:85:00:7c:68:23:4f:99:53: 03:bd:5a:e6:92:41:32:a6:6d:2e:22:b2:13:88:a9:12:ea:7b: 6e:70:90:d5:5c:c8:3f:de:04:f0:81:92:b7:91:1c:77:15:10: be:1d:8b:27:af:19:b4:2d:d0:b1:03:06:3b:ef:6f:ef:53:3d: 6a:38:25:7a:23:bc:d6:78:7a:9b:f1:2a:77:df:bb:47:1a:72: cc:c8:33:34:59:21:3c:01:37:61:74:5f:fd:ec:9a:9f:a9:b5: 7d:d3:91:ba:e4:11:51:16:b9:ed:e3:6b:d6:de:4d:96:1e:3b: 00:25:77:3e:90:ae:f7:07:49:b6:ec:b1:9e:52:53:d5:52:fb: 43:88:57:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfQHvc0/Jo21ELEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk ZmY2ZGY1ZDEtMzEwMi00ZWU1LWJhYjUtMTFkN2UwMzVhOGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDGEoKwhH1JJ+pTW4xHkgJP/6Bv+ENMvlaeh 6Cn+ZCtIRgcFzWtulYI2WCImEupCzvhKgQGM42bkYuhHG5L1/7NBX7b2RjY2SWVd aHokRb+i24WpfFm3E826h8A1kvrVz8izuXmSMuL1JLCX9TmFOWHex1wXv5jc5aJF kJJ6P4AnFB7NenOpg+Gzq23sZl+skPDXb1FPi8zlEGzKAmloANuKcIHbrqyntWob aM4w8XBEfLny2q0FVT7qDYE2KvsrfphwKogNKISmVEiZjKzIMua73U0I1wn5oxHZ iBiDuRs9vVjfoaq/qIgjBHNIgHqeHeKJnQ5wgoDpYVXgd2ClfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHRL6stMqPtxezm3HZb76ffIfywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMjhjODBmM2YtYWI4Mi0z ZjBkLWJlNzEtZjNhNTZiNDBjNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBq54YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJI9ABU4ahdIeo3cCmp2Ta9skR4CLmmV11otp6p/3Fvn3tVR8r7CoHet YgdkMc4Lehnd6obp5xDXxSlg2VLUS1eGHh6kSL4KpF5VtdOocr34XreXFQqCfm39 lHRpNURSOtg74bENJvzD4smMS2+lKR0h5tNxPQ2FAHxoI0+ZUwO9WuaSQTKmbS4i shOIqRLqe25wkNVcyD/eBPCBkreRHHcVEL4diyevGbQt0LEDBjvvb+9TPWo4JXoj vNZ4epvxKnffu0cacszIMzRZITwBN2F0X/3smp+ptX3TkbrkEVEWue3ja9beTZYe OwAldz6QrvcHSbbssZ5SU9VS+0OIVxg= -----END CERTIFICATE-----Generated at Sun Mar 1 22:34:20 2026 by rpki-client