$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/c5aa83e8-493a-39fa-8ecd-9bc15934e3c2.roa File: c5aa83e8-493a-39fa-8ecd-9bc15934e3c2.roa (raw, json) Hash identifier: YNg4j56lVsOrK1Fje/OWMi+rUB+MBxOCbq+5ktvfBpE= Subject key identifier: 64:8C:08:84:12:27:37:50:A1:BF:10:7D:5C:BA:56:56:2B:A2:C4:A0 Certificate issuer: /CN=0f950b17-8345-41e7-bf75-5481729a0012 Certificate serial: 010D0C9F4328584C645BEAE3F6E25C96B1223900 Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/c5aa83e8-493a-39fa-8ecd-9bc15934e3c2.roa Signing time: Fri 02 Jan 2026 14:00:39 +0000 ROA not before: Fri 02 Jan 2026 14:00:39 +0000 ROA not after: Thu 02 Apr 2026 13:00:39 +0000 asID: 32723 IP address blocks: 216.6.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:64:5b:ea:e3:f6:e2:5c:96:b1:22:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012 Validity Not Before: Jan 2 14:00:39 2026 GMT Not After : Apr 2 13:00:39 2026 GMT Subject: CN=26e31f08-3a31-4bd6-a984-d40a86c4a889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:52:10:b0:e5:57:49:ff:86:57:cf:19:85: 3d:92:d3:40:97:62:7a:f8:1b:73:56:57:80:d4:d3: a2:51:79:a0:13:87:d3:73:de:f1:6b:cd:b8:33:dd: 6c:ab:c5:2f:f0:d6:51:38:48:b6:7c:52:b0:76:7b: b2:a8:c0:65:aa:62:d1:93:dc:32:24:91:c7:9b:d9: 96:57:9d:22:16:10:2f:50:d4:8d:b7:00:32:f7:ed: b3:9e:06:7b:de:95:18:d0:e4:79:ad:1f:d9:f7:a7: 94:4a:2f:fa:8d:35:64:10:59:54:d7:cc:ce:3a:38: 12:a6:27:ab:4c:30:6b:bc:44:6a:bf:a3:34:ac:7c: 8f:d3:1f:12:91:e8:75:27:06:2e:1e:d9:d6:c3:dd: 1e:85:8e:44:89:e2:0c:86:c3:e5:de:da:1e:89:e5: 1f:d8:9f:44:7e:0b:35:97:a1:21:96:c4:b6:f6:ac: 4c:dc:98:4a:1b:12:34:13:82:13:1e:ea:e6:61:a7: 4c:b1:ae:59:00:88:75:e3:d0:75:30:3f:af:ee:a5: 1b:4a:d5:63:91:5c:10:aa:a8:61:63:e1:55:b4:eb: 9e:d2:02:e3:22:a8:c6:75:d2:79:45:f8:c8:31:37: 01:cf:2a:a3:ad:ce:77:c2:8c:de:0a:96:32:d6:8e: af:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8C:08:84:12:27:37:50:A1:BF:10:7D:5C:BA:56:56:2B:A2:C4:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/c5aa83e8-493a-39fa-8ecd-9bc15934e3c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl X509v3 Authority Key Identifier: keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer sbgp-ipAddrBlock: critical IPv4: 216.6.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:56:c4:c7:05:3c:37:4c:09:b0:a5:6f:88:cd:ab:df:41:35: 16:c1:1b:75:3a:5a:d2:16:c8:73:2c:44:e4:17:fa:f8:b7:23: 95:fb:d6:5f:c9:31:12:4f:6b:46:e1:ed:09:58:a0:7c:dd:86: 98:2a:fd:47:7f:03:bc:85:c8:d4:b2:c0:29:11:25:45:e9:44: c7:df:dd:a4:24:e1:51:f9:e7:da:a5:85:1c:aa:70:11:eb:c5: f0:f1:8c:40:68:31:bf:0e:fa:94:b9:09:89:82:2b:78:24:d4: 55:f0:27:66:24:86:3d:58:7e:f4:95:5a:83:f3:f2:d0:bf:54: fc:dd:6e:2b:c8:d6:f7:95:e8:e5:11:fb:53:2e:9b:11:94:87: d8:2d:46:b7:74:e6:f8:be:76:b0:69:6b:c2:40:ad:e2:0d:e8: 7d:00:27:36:e6:5f:27:7f:9f:2e:0e:9e:4a:6f:1e:05:da:eb: 1c:ec:17:b8:eb:6d:64:a8:ad:fe:27:22:f9:29:c2:58:07:66: 2b:79:fb:23:c1:b6:ce:dd:8b:82:b4:35:04:a0:0d:b1:d5:0f: 2f:5a:f6:1e:7c:02:1d:8b:e5:3d:a2:e9:22:6c:e3:9e:bc:6c: e2:f9:a2:50:75:56:c2:f3:93:90:b6:f6:d0:63:7c:e4:e5:1c: 24:e3:e1:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExkW+rj9uJclrEiOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5NTBiMTctODM0NS00MWU3LWJmNzUtNTQ4MTcyOWEw MDEyMB4XDTI2MDEwMjE0MDAzOVoXDTI2MDQwMjEzMDAzOVowLzEtMCsGA1UEAxMk MjZlMzFmMDgtM2EzMS00YmQ2LWE5ODQtZDQwYTg2YzRhODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNdSELDlV0n/hlfPGYU9ktNAl2J6+BtzVleA 1NOiUXmgE4fTc97xa824M91sq8Uv8NZROEi2fFKwdnuyqMBlqmLRk9wyJJHHm9mW V50iFhAvUNSNtwAy9+2zngZ73pUY0OR5rR/Z96eUSi/6jTVkEFlU18zOOjgSpier TDBrvERqv6M0rHyP0x8Skeh1JwYuHtnWw90ehY5EieIMhsPl3toeieUf2J9Efgs1 l6EhlsS29qxM3JhKGxI0E4ITHurmYadMsa5ZAIh149B1MD+v7qUbStVjkVwQqqhh Y+FVtOue0gLjIqjGddJ5RfjIMTcBzyqjrc53wozeCpYy1o6v3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSMCIQSJzdQob8QfVy6VlYrosSgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1 MGIxNy04MzQ1LTQxZTctYmY3NS01NDgxNzI5YTAwMTIvYzVhYTgzZTgtNDkzYS0z OWZhLThlY2QtOWJjMTU5MzRlM2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGY5NTBiMTctODM0NS00MWU3LWJm NzUtNTQ4MTcyOWEwMDEyLzBmOTUwYjE3LTgzNDUtNDFlNy1iZjc1LTU0ODE3Mjlh MDAxMi5jcmwwHwYDVR0jBBgwFoAUVjwr/D78tHnEgtdq3t5zMLCztmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1MGIxNy04MzQ1LTQxZTctYmY3NS01NDgx NzI5YTAwMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2AaqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlWxMcFPDdMCbClb4jNq99BNRbBG3U6WtIWyHMsROQX+vi3I5X71l/J MRJPa0bh7QlYoHzdhpgq/Ud/A7yFyNSywCkRJUXpRMff3aQk4VH559qlhRyqcBHr xfDxjEBoMb8O+pS5CYmCK3gk1FXwJ2Ykhj1YfvSVWoPz8tC/VPzdbivI1veV6OUR +1MumxGUh9gtRrd05vi+drBpa8JAreIN6H0AJzbmXyd/ny4OnkpvHgXa6xzsF7jr bWSorf4nIvkpwlgHZit5+yPBts7di4K0NQSgDbHVDy9a9h58Ah2L5T2i6SJs4568 bOL5olB1VsLzk5C29tBjfOTlHCTj4Ug= -----END CERTIFICATE-----Generated at Mon Mar 2 19:09:53 2026 by rpki-client