$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/2d0193d3-f77e-31d9-a549-a3f230e8d931.roa File: 2d0193d3-f77e-31d9-a549-a3f230e8d931.roa (raw, json) Hash identifier: E2kUQlzck8d/TRUkX2q/xtqyR/1HlBjR5PrdfrAiCs4= Subject key identifier: A5:C9:E1:AB:AE:66:A9:4D:B6:D5:D1:1A:A6:53:0E:5D:A7:CC:94:DE Certificate issuer: /CN=dc598c19-9d8e-4650-abce-c34c5146591f Certificate serial: 010D0C9F4328584D5243C6073905999A5CBAED00 Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/2d0193d3-f77e-31d9-a549-a3f230e8d931.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 9009 IP address blocks: 172.85.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:c6:07:39:05:99:9a:5c:ba:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=4a89b1cc-b5ac-49ae-ad3f-a68eac03c873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:92:a2:77:c3:95:9a:80:b8:46:67:5b:54:1c: 2b:f5:51:bb:8d:b6:1f:72:75:e8:1b:7a:7f:65:2f: 5e:d8:21:e0:6b:1c:9b:93:6d:16:31:0c:9d:c4:4e: f4:0c:48:fa:ba:89:36:8b:91:44:a2:a2:6d:f2:67: 2e:3c:ee:22:83:3f:8b:ac:ac:c5:7f:08:82:05:09: 35:ab:5d:be:c5:8f:ab:b5:8f:e1:4c:9d:0e:3f:79: 11:7f:1c:79:4d:ab:94:cf:ac:e2:52:c4:73:5f:ec: 1a:c2:d6:86:ab:3a:bb:1c:6c:ef:74:71:34:bf:74: c5:a2:72:09:a5:99:3e:04:cf:1b:f3:d8:af:c1:42: 83:9e:2d:5e:29:d0:3e:2d:7b:a4:98:8f:bd:e2:9f: 21:fe:1c:2c:a6:0a:42:47:18:ff:5a:00:c6:09:92: 2b:07:06:cf:6f:f3:51:99:3d:9d:03:8f:36:45:16: eb:d7:12:39:59:b3:2d:ee:62:37:2e:01:1c:bb:6c: 1d:c1:7b:a1:1b:f4:21:f2:2b:db:37:86:82:a1:b4: a0:87:f9:0a:4e:f5:c8:46:23:b7:f7:0d:a8:8e:e2: e9:f7:c5:cb:1e:01:22:5b:c8:a1:aa:0a:d6:30:b6: 7e:c6:f7:b2:5c:0e:90:11:f2:53:23:b8:c0:01:44: 0f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C9:E1:AB:AE:66:A9:4D:B6:D5:D1:1A:A6:53:0E:5D:A7:CC:94:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/2d0193d3-f77e-31d9-a549-a3f230e8d931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl X509v3 Authority Key Identifier: keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer sbgp-ipAddrBlock: critical IPv4: 172.85.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:54:34:d6:c4:f8:87:4d:47:c9:11:3f:18:ee:e0:b8:0e:a7: e0:4e:80:e1:0b:d1:7d:c0:2c:5f:13:3c:18:29:1c:e8:73:e1: 10:27:c2:b9:ff:e6:34:6f:79:06:a5:c9:d2:ce:70:ef:88:2c: 29:4b:62:94:b9:26:2c:57:46:91:6b:a8:ae:e7:bd:a6:e2:d9: 9a:73:30:b8:95:cf:04:ea:94:c8:0c:e1:05:b7:24:43:7c:f3: 90:a1:83:c9:8f:6f:5b:e3:fa:0b:e2:e4:7d:f1:c4:68:1a:c9: 6d:83:ea:14:04:72:bb:6d:19:26:ec:18:dd:93:9d:40:58:20: 63:cf:57:9c:18:47:d5:bd:5d:e3:0b:d4:e2:72:a7:c9:7c:43: f9:92:12:b8:13:68:3f:40:d5:c4:7c:78:1d:78:70:b8:bb:56: 05:3c:f4:8e:3c:aa:78:a8:4a:8a:3f:56:f9:bd:ff:49:cc:54: 32:98:d4:d5:f0:0e:41:66:00:e1:98:2c:11:e3:ef:77:e0:09: 75:25:40:50:3a:a0:cc:e0:58:6c:38:ed:c4:f7:4f:3b:42:47: 8a:d2:d6:eb:d3:25:cc:91:84:da:3a:f7:68:39:2a:70:77:cc: 77:83:de:e3:5d:e1:7f:1e:f5:3d:33:a7:8f:01:39:c1:31:57: 9a:49:34:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ8YHOQWZmly67QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM1OThjMTktOWQ4ZS00NjUwLWFiY2UtYzM0YzUxNDY1 OTFmMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NGE4OWIxY2MtYjVhYy00OWFlLWFkM2YtYTY4ZWFjMDNjODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZKid8OVmoC4RmdbVBwr9VG7jbYfcnXoG3p/ ZS9e2CHgaxybk20WMQydxE70DEj6uok2i5FEoqJt8mcuPO4igz+LrKzFfwiCBQk1 q12+xY+rtY/hTJ0OP3kRfxx5TauUz6ziUsRzX+wawtaGqzq7HGzvdHE0v3TFonIJ pZk+BM8b89ivwUKDni1eKdA+LXukmI+94p8h/hwspgpCRxj/WgDGCZIrBwbPb/NR mT2dA482RRbr1xI5WbMt7mI3LgEcu2wdwXuhG/Qh8ivbN4aCobSgh/kKTvXIRiO3 9w2ojuLp98XLHgEiW8ihqgrWMLZ+xveyXA6QEfJTI7jAAUQPXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXJ4auuZqlNttXRGqZTDl2nzJTeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5 OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRjNTE0NjU5MWYvMmQwMTkzZDMtZjc3ZS0z MWQ5LWE1NDktYTNmMjMwZThkOTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGM1OThjMTktOWQ4ZS00NjUwLWFi Y2UtYzM0YzUxNDY1OTFmL2RjNTk4YzE5LTlkOGUtNDY1MC1hYmNlLWMzNGM1MTQ2 NTkxZi5jcmwwHwYDVR0jBBgwFoAUZJxII/ggNcM5/fDGWr3QRs2B+owwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRj NTE0NjU5MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1UNNbE+IdNR8kRPxju4LgOp+BOgOEL0X3ALF8TPBgpHOhz4RAnwrn/ 5jRveQalydLOcO+ILClLYpS5JixXRpFrqK7nvabi2ZpzMLiVzwTqlMgM4QW3JEN8 85Chg8mPb1vj+gvi5H3xxGgayW2D6hQEcrttGSbsGN2TnUBYIGPPV5wYR9W9XeML 1OJyp8l8Q/mSErgTaD9A1cR8eB14cLi7VgU89I48qnioSoo/Vvm9/0nMVDKY1NXw DkFmAOGYLBHj73fgCXUlQFA6oMzgWGw47cT3TztCR4rS1uvTJcyRhNo692g5KnB3 zHeD3uNd4X8e9T0zp48BOcExV5pJNK0= -----END CERTIFICATE-----Generated at Fri Apr 17 03:42:37 2026 by rpki-client