$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ea6129f9-be41-3d95-aa15-e1d3527b97d3.roa File: ea6129f9-be41-3d95-aa15-e1d3527b97d3.roa (raw, json) Hash identifier: hmOR35oXXmk7k4zW9Er5PMxzi8YPHeoobK5/fOB3i1Y= Subject key identifier: F0:0B:A9:3D:8E:97:97:D8:D9:AB:6B:9E:81:D6:A2:56:36:5D:D9:BD Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584D037D5B8CA7060B1023E55980 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ea6129f9-be41-3d95-aa15-e1d3527b97d3.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 10794 IP address blocks: 171.162.102.0/23 maxlen: 23 171.162.102.0/24 maxlen: 24 171.162.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:5b:8c:a7:06:0b:10:23:e5:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=100abc13-1ad0-4d0e-bf80-6513a0f4e02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ee:09:b6:bf:66:04:d2:28:ea:07:4e:41:63: 7b:89:9e:4a:d8:9e:d8:14:14:7b:5e:d8:35:6e:7d: 88:8c:96:3f:5e:5e:61:e4:e0:21:05:d9:14:6d:6e: 24:72:b3:a9:07:6c:53:d6:ac:56:7e:a9:5a:a2:9b: b6:9c:dc:35:ef:d3:a0:4f:33:a1:e2:f9:12:e1:19: a0:e7:1d:3f:2d:67:f5:aa:20:6a:1b:01:fb:a5:f9: 1d:94:1c:de:ab:42:4a:06:14:2a:b2:15:44:ef:4e: d5:9b:8c:bb:10:0e:61:04:7c:d6:ca:4b:08:9d:34: f3:bf:c9:2d:b6:85:d5:53:34:e2:00:42:f9:9d:16: da:8d:66:f8:a1:49:d4:64:28:8d:93:97:18:60:e4: a7:c6:5f:53:a5:94:81:97:3c:77:70:e0:ed:bf:86: 49:d5:0f:e3:ff:19:1f:ac:3e:ac:41:c2:5c:b8:15: ba:9b:20:5b:7d:96:98:c6:dc:3e:3c:8b:dd:1e:b2: 76:dc:ec:69:a1:f5:5c:90:3b:de:30:4e:5e:d3:a2: 1a:fa:3b:a5:db:31:a6:9f:1a:96:4a:d5:2e:74:48: 3e:ce:51:08:98:ea:06:23:a5:21:d6:56:8a:34:90: 98:18:91:87:08:6e:5c:e8:70:40:97:86:ee:b5:53: b2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0B:A9:3D:8E:97:97:D8:D9:AB:6B:9E:81:D6:A2:56:36:5D:D9:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ea6129f9-be41-3d95-aa15-e1d3527b97d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:d0:27:f9:3c:4e:87:01:de:26:49:4f:78:dd:f4:42:ef:15: 20:b1:ef:0a:79:69:a8:94:b9:80:d9:fd:bb:97:b3:b1:07:f3: a8:a5:b8:f0:d2:32:af:fc:e6:e0:5c:09:86:86:7b:ec:ce:b0: 19:c3:0d:da:4f:29:18:77:19:74:9f:6f:60:1b:de:41:98:ef: 93:98:19:90:90:de:d0:f1:a4:5f:83:12:bb:3a:b0:0c:a5:6c: 21:0f:cc:a6:76:78:b7:ee:bc:3c:88:60:cd:98:f2:df:b2:2d: 3c:49:d7:7a:e5:98:52:46:f8:bd:53:03:60:61:f4:40:8a:1c: a4:be:1b:82:b7:56:c6:f7:e1:28:33:1d:12:60:5f:45:64:43: bc:80:2c:42:83:63:e1:fc:8c:1a:4d:23:79:b0:98:b0:8b:f0: 1e:ac:a1:e1:06:3f:67:96:95:89:35:83:78:4b:a3:e5:94:5d: ac:4a:a6:15:64:98:b1:3e:39:7c:13:30:22:d6:0d:5b:7c:d1: 64:d4:69:2b:35:6a:78:85:8f:b1:34:a0:c3:90:c5:81:35:87: 6c:c1:3b:a5:b2:b1:98:84:3a:7a:aa:c5:9c:97:5a:e7:93:b3: 82:2a:02:46:3e:67:df:20:b5:55:0c:8a:83:d3:4e:61:19:9e: 99:e8:bb:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfVuMpwYLECPlWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk MTAwYWJjMTMtMWFkMC00ZDBlLWJmODAtNjUxM2EwZjRlMDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+4Jtr9mBNIo6gdOQWN7iZ5K2J7YFBR7Xtg1 bn2IjJY/Xl5h5OAhBdkUbW4kcrOpB2xT1qxWfqlaopu2nNw179OgTzOh4vkS4Rmg 5x0/LWf1qiBqGwH7pfkdlBzeq0JKBhQqshVE707Vm4y7EA5hBHzWyksInTTzv8kt toXVUzTiAEL5nRbajWb4oUnUZCiNk5cYYOSnxl9TpZSBlzx3cODtv4ZJ1Q/j/xkf rD6sQcJcuBW6myBbfZaYxtw+PIvdHrJ23OxpofVckDveME5e06Ia+jul2zGmnxqW StUudEg+zlEImOoGI6Uh1laKNJCYGJGHCG5c6HBAl4butVOyEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPALqT2Ol5fY2atrnoHWolY2Xdm9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvZWE2MTI5ZjktYmU0MS0z ZDk1LWFhMTUtZTFkMzUyN2I5N2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBq6JmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHQJ/k8TocB3iZJT3jd9ELvFSCx7wp5aaiUuYDZ/buXs7EH86iluPDS Mq/85uBcCYaGe+zOsBnDDdpPKRh3GXSfb2Ab3kGY75OYGZCQ3tDxpF+DErs6sAyl bCEPzKZ2eLfuvDyIYM2Y8t+yLTxJ13rlmFJG+L1TA2Bh9ECKHKS+G4K3Vsb34Sgz HRJgX0VkQ7yALEKDY+H8jBpNI3mwmLCL8B6soeEGP2eWlYk1g3hLo+WUXaxKphVk mLE+OXwTMCLWDVt80WTUaSs1aniFj7E0oMOQxYE1h2zBO6WysZiEOnqqxZyXWueT s4IqAkY+Z98gtVUMioPTTmEZnpnou/A= -----END CERTIFICATE-----Generated at Sun Mar 1 22:26:13 2026 by rpki-client