$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa File: d24e1119-5be2-3190-a36f-e8056d9c96aa.roa (raw, json) Hash identifier: 1cgYyUy8L02di5hvva7VbWYSV8ATiJTDGnqhdUSmH84= Subject key identifier: 29:D0:F3:09:D1:F6:7C:78:72:F0:98:0E:78:7D:EF:B1:29:66:9F:38 Certificate issuer: /CN=e8344a1b-565c-4cdf-b2ee-9556f276e3b6 Certificate serial: 010D0C9F4328584CB981D5348889BC0B66476AC0 Authority key identifier: 26:7C:FE:57:A0:4A:CC:73:CA:2A:1C:0B:3E:7C:C5:1E:7F:AF:95:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 16509 IP address blocks: 192.172.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:d5:34:88:89:bc:0b:66:47:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8344a1b-565c-4cdf-b2ee-9556f276e3b6 Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=f240572d-1562-4ea0-ad16-0505d5116767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:80:91:1b:97:e6:eb:83:7f:98:44:ed:75:b9: 16:6c:3e:a5:02:ac:6c:dc:54:06:f8:1f:6b:e5:46: b5:f2:93:36:fc:a3:e8:43:e9:f3:ed:9d:57:57:2c: 6c:f8:c6:cc:b8:df:ca:d8:b6:df:04:10:f2:6b:c7: e3:e6:03:28:8d:72:0e:06:60:15:d9:b0:73:ef:b4: fd:bd:b3:28:49:82:a9:cc:16:e2:69:b8:46:f0:36: 27:89:6c:ad:4e:de:75:5b:74:41:39:0a:60:f2:dd: d9:ab:8a:ee:bb:94:98:fe:ab:99:7e:8e:c2:cd:30: dd:7d:3c:a5:cc:d7:12:98:fe:3d:b4:2b:cc:e8:7a: a8:94:71:bf:aa:48:1a:3b:00:13:ed:75:ba:f4:de: 19:af:2c:c6:1f:2f:37:95:8c:13:5c:d2:a7:88:a6: 80:b0:d2:c1:69:c9:71:b9:a1:36:af:53:42:17:38: c9:8a:ab:1a:72:9a:11:4a:70:a8:54:5f:3e:2f:f5: fa:9b:76:65:25:a5:b1:b3:8c:77:1b:ed:59:a9:f3: e7:11:28:b3:59:5b:2e:a9:ef:0c:1e:4d:d0:0a:a0: 02:34:2a:e2:bd:e1:cc:e1:61:3d:ad:81:db:72:38: 6f:50:9d:20:ab:2a:8f:1e:e9:7f:2e:04:40:76:ae: 75:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D0:F3:09:D1:F6:7C:78:72:F0:98:0E:78:7D:EF:B1:29:66:9F:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.crl X509v3 Authority Key Identifier: keyid:26:7C:FE:57:A0:4A:CC:73:CA:2A:1C:0B:3E:7C:C5:1E:7F:AF:95:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer sbgp-ipAddrBlock: critical IPv4: 192.172.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:e8:8f:63:41:9e:fa:f7:eb:74:a7:dd:d0:dd:e6:f8:a8:28: 14:f1:17:49:51:23:cb:68:a4:6e:28:59:9d:96:34:d9:62:36: 99:da:92:33:c5:1f:10:c9:3f:2b:ef:74:9c:1c:d0:d4:93:12: 10:ec:e2:43:81:57:19:42:bd:7e:92:01:34:4f:57:f1:2e:0d: 01:d1:45:49:2c:c3:58:5a:4b:49:90:84:1a:aa:2c:80:b0:31: 64:6d:9c:3c:50:14:d8:14:fb:9a:63:ed:ca:c4:21:9f:0d:ee: 37:25:db:11:7c:bb:81:77:70:0d:36:72:92:96:0d:ea:95:5a: ef:ac:e7:eb:22:2a:75:65:ac:77:e8:26:03:21:3a:5e:e6:41: e7:36:20:9c:cb:b0:66:a6:90:bd:b8:63:fa:bb:1f:ea:2e:3d: b3:48:20:30:3d:6e:60:16:1c:df:c6:5f:8c:9a:cc:93:b7:30: e1:93:40:d8:ab:87:a4:18:52:ea:76:ef:3d:f7:34:51:c1:8e: b3:f0:cb:5c:02:d1:62:21:c8:99:6c:ab:1a:87:3a:85:1e:f1: 66:19:3e:9f:a1:00:ed:37:84:32:43:ce:cc:7a:83:e1:dd:f6: 35:cd:e0:79:b8:a7:10:58:bf:d7:d4:0a:94:23:ba:8e:07:3f: 3a:a8:31:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gdU0iIm8C2ZHasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTgzNDRhMWItNTY1Yy00Y2RmLWIyZWUtOTU1NmYyNzZl M2I2MB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk ZjI0MDU3MmQtMTU2Mi00ZWEwLWFkMTYtMDUwNWQ1MTE2NzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmICRG5fm64N/mETtdbkWbD6lAqxs3FQG+B9r 5Ua18pM2/KPoQ+nz7Z1XVyxs+MbMuN/K2LbfBBDya8fj5gMojXIOBmAV2bBz77T9 vbMoSYKpzBbiabhG8DYniWytTt51W3RBOQpg8t3Zq4ruu5SY/quZfo7CzTDdfTyl zNcSmP49tCvM6HqolHG/qkgaOwAT7XW69N4ZryzGHy83lYwTXNKniKaAsNLBaclx uaE2r1NCFzjJiqsacpoRSnCoVF8+L/X6m3ZlJaWxs4x3G+1ZqfPnESizWVsuqe8M Hk3QCqACNCriveHM4WE9rYHbcjhvUJ0gqyqPHul/LgRAdq51qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnQ8wnR9nx4cvCYDnh977EpZp84MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lODM0 NGExYi01NjVjLTRjZGYtYjJlZS05NTU2ZjI3NmUzYjYvZDI0ZTExMTktNWJlMi0z MTkwLWEzNmYtZTgwNTZkOWM5NmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTgzNDRhMWItNTY1Yy00Y2RmLWIy ZWUtOTU1NmYyNzZlM2I2L2U4MzQ0YTFiLTU2NWMtNGNkZi1iMmVlLTk1NTZmMjc2 ZTNiNi5jcmwwHwYDVR0jBBgwFoAUJnz+V6BKzHPKKhwLPnzFHn+vlUEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lODM0NGExYi01NjVjLTRjZGYtYjJlZS05NTU2 ZjI3NmUzYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKzdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7oj2NBnvr363Sn3dDd5vioKBTxF0lRI8topG4oWZ2WNNliNpnakjPF HxDJPyvvdJwc0NSTEhDs4kOBVxlCvX6SATRPV/EuDQHRRUksw1haS0mQhBqqLICw MWRtnDxQFNgU+5pj7crEIZ8N7jcl2xF8u4F3cA02cpKWDeqVWu+s5+siKnVlrHfo JgMhOl7mQec2IJzLsGamkL24Y/q7H+ouPbNIIDA9bmAWHN/GX4yazJO3MOGTQNir h6QYUup27z33NFHBjrPwy1wC0WIhyJlsqxqHOoUe8WYZPp+hAO03hDJDzsx6g+Hd 9jXN4Hm4pxBYv9fUCpQjuo4HPzqoMbM= -----END CERTIFICATE-----Generated at Mon Mar 2 10:54:10 2026 by rpki-client