$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1d1a1ab4-a606-3bc1-b67b-71a77a9052c1.roa File: 1d1a1ab4-a606-3bc1-b67b-71a77a9052c1.roa (raw, json) Hash identifier: dbjD+9BKLUZBwYOySxS+IRWkS1/9yvUWc7yfLBNBros= Subject key identifier: 59:71:80:F7:0F:3D:03:2A:97:9A:A2:1D:43:2C:64:FE:81:16:0D:35 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584C5EC717710E0DB7A6DE977400 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1d1a1ab4-a606-3bc1-b67b-71a77a9052c1.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 64283 IP address blocks: 71.44.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c7:17:71:0e:0d:b7:a6:de:97:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=2b87c73c-ab2c-4578-a017-8f3623d983d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:96:6c:94:c1:5e:65:b7:e4:43:1b:0c:b1:87: c5:cf:3a:48:88:82:c9:02:64:de:e9:93:00:2b:70: 4b:b0:a9:4d:18:2c:2a:08:35:78:e4:a4:86:88:73: 9b:c0:c4:c3:3d:ec:0e:7b:1a:c9:48:b8:a0:d3:0a: ad:96:95:1c:d8:8d:cc:1d:36:2a:b2:f3:04:41:84: f0:15:f7:20:12:a5:32:b0:96:32:fb:85:a9:7f:45: 58:5f:d8:d1:fe:21:9b:35:33:52:06:d4:c9:99:81: 9a:14:29:a3:4f:9d:cb:1f:91:ee:44:76:76:44:5d: bc:3a:d0:68:dc:cd:e9:e2:e8:a2:65:ca:45:8e:93: d5:10:dd:0f:37:a8:5a:b2:f5:52:ad:74:5d:bd:87: 04:ce:18:2f:ca:63:ff:57:b2:8c:41:95:d3:6c:89: 6b:f2:72:9e:83:4e:80:50:ad:9f:0e:35:86:c2:7a: aa:12:ae:ad:f6:c9:d1:fc:c0:1d:0e:ce:6f:81:67: 2d:e2:5a:5a:7e:b1:53:db:02:2c:da:82:bd:2d:9c: 28:5b:17:56:16:58:46:95:13:a1:01:32:b3:69:be: e2:19:87:95:54:15:1c:66:15:d1:cd:0c:29:f1:fc: d3:4a:c3:12:b3:29:31:7e:83:53:3e:6a:a3:90:e1: bc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:71:80:F7:0F:3D:03:2A:97:9A:A2:1D:43:2C:64:FE:81:16:0D:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1d1a1ab4-a606-3bc1-b67b-71a77a9052c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 71.44.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ea:1c:17:f1:43:b8:f6:8d:63:a2:02:56:74:fc:87:12:55: cf:36:ad:54:cd:68:02:a5:52:3d:37:54:c6:4d:0b:d3:0c:97: 55:79:05:40:08:a5:3a:3e:f6:d6:dc:c7:26:16:34:11:c5:a2: 37:23:98:96:ad:f7:2d:fc:d1:ad:e5:cf:3a:c9:64:fc:bd:76: 18:b7:fb:fa:a5:84:6c:72:1b:9f:d6:e5:63:11:96:10:00:88: 20:47:46:0a:08:46:99:e1:87:53:58:31:cf:95:6a:79:99:0e: ef:37:03:3d:55:4f:11:7d:54:3d:64:84:cf:39:f5:88:cd:74: 38:7f:1c:0e:d2:cc:70:e8:84:e9:fc:1a:45:bc:0f:2a:68:0c: 66:4d:1a:33:d8:97:bc:56:02:c9:9f:90:91:1d:3b:f0:43:1c: 4a:5f:f2:62:49:33:0b:d2:3d:e0:48:e4:ab:79:76:70:23:0f: 22:75:06:d3:5b:a9:26:25:5e:aa:5f:6a:b6:4e:94:d1:ff:49: 77:32:c6:f6:c3:ef:f5:bc:b4:f8:52:82:2c:b9:18:f3:ab:f8: 92:18:5c:d4:1f:dd:a9:68:1c:63:8d:e7:31:38:d7:d3:6a:4a: f7:2d:62:a6:a8:a8:87:a9:9b:1f:e3:68:fe:34:7d:7f:a0:35: d4:07:7b:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexxdxDg23pt6XdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk MmI4N2M3M2MtYWIyYy00NTc4LWEwMTctOGYzNjIzZDk4M2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZZslMFeZbfkQxsMsYfFzzpIiILJAmTe6ZMA K3BLsKlNGCwqCDV45KSGiHObwMTDPewOexrJSLig0wqtlpUc2I3MHTYqsvMEQYTw FfcgEqUysJYy+4Wpf0VYX9jR/iGbNTNSBtTJmYGaFCmjT53LH5HuRHZ2RF28OtBo 3M3p4uiiZcpFjpPVEN0PN6hasvVSrXRdvYcEzhgvymP/V7KMQZXTbIlr8nKeg06A UK2fDjWGwnqqEq6t9snR/MAdDs5vgWct4lpafrFT2wIs2oK9LZwoWxdWFlhGlROh ATKzab7iGYeVVBUcZhXRzQwp8fzTSsMSsykxfoNTPmqjkOG8JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlxgPcPPQMql5qiHUMsZP6BFg01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMWQxYTFhYjQtYTYwNi0z YmMxLWI2N2ItNzFhNzdhOTA1MmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARyzUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLqHBfxQ7j2jWOiAlZ0/IcSVc82rVTNaAKlUj03VMZNC9MMl1V5BUAI pTo+9tbcxyYWNBHFojcjmJat9y380a3lzzrJZPy9dhi3+/qlhGxyG5/W5WMRlhAA iCBHRgoIRpnhh1NYMc+VanmZDu83Az1VTxF9VD1khM859YjNdDh/HA7SzHDohOn8 GkW8DypoDGZNGjPYl7xWAsmfkJEdO/BDHEpf8mJJMwvSPeBI5Kt5dnAjDyJ1BtNb qSYlXqpfarZOlNH/SXcyxvbD7/W8tPhSgiy5GPOr+JIYXNQf3aloHGON5zE419Nq SvctYqaoqIepmx/jaP40fX+gNdQHe/A= -----END CERTIFICATE-----Generated at Mon Mar 2 12:42:29 2026 by rpki-client