$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a24a5b45-65e4-3787-acd8-b655e54a2021.roa File: a24a5b45-65e4-3787-acd8-b655e54a2021.roa (raw, json) Hash identifier: eOzuVrgmOndru1HW5+3hVuJ1E3/aqUiDO0PEyXpvi0Y= Subject key identifier: 03:0A:7E:32:CA:04:DE:E0:2E:39:1B:BF:B7:A3:93:30:A2:8E:50:38 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584C5EC6D4F4216A19431B8052B0 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a24a5b45-65e4-3787-acd8-b655e54a2021.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 20115 IP address blocks: 172.223.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:d4:f4:21:6a:19:43:1b:80:52:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=221f435d-a914-4d3c-aebe-2c6dff5f279f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:6d:0e:94:b8:23:c7:bf:95:d8:ed:9f:a9: 43:83:fb:ce:d1:1e:ea:1f:ef:e6:cd:f3:50:c6:6c: 54:3c:1f:9b:5a:01:ea:dd:6c:c5:5b:d7:04:83:44: 41:f0:22:91:82:ac:0a:f6:ff:d7:82:32:f7:60:a3: be:10:93:a7:b0:3f:2b:cf:1d:33:63:48:4b:ab:e7: fb:09:99:93:c7:eb:0c:e9:58:34:68:27:5c:1d:b6: 11:24:45:80:08:ca:09:f9:94:fc:1b:4d:af:44:0c: fd:d2:92:da:36:54:90:b0:9c:80:a6:06:4a:6e:ba: 80:3f:db:36:e2:e7:53:ef:82:d8:8d:ff:42:c2:35: 43:b7:40:22:f7:75:5c:d5:d0:fd:48:fd:7e:10:19: ff:3e:50:ae:99:29:47:54:c8:d5:73:52:f1:04:97: 9a:07:bc:c7:6c:d2:7c:b4:47:96:60:38:6b:a3:38: 54:61:9b:9c:3d:75:be:cf:b9:67:b0:ed:3b:cd:1b: 2d:69:19:f0:4a:25:1d:5e:e9:97:60:49:a5:ed:04: 87:38:17:80:37:74:20:47:83:80:06:dc:61:3e:f0: 82:64:96:a3:1a:ad:de:6e:58:b4:8d:7a:8c:35:d7: 73:e3:38:83:43:32:a7:94:c8:a8:41:9b:cb:53:50: 5e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0A:7E:32:CA:04:DE:E0:2E:39:1B:BF:B7:A3:93:30:A2:8E:50:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a24a5b45-65e4-3787-acd8-b655e54a2021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.223.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:3f:20:3e:18:6d:25:57:c0:7d:9b:bf:e9:d3:5a:82:dc:b2: 35:d1:0a:96:ee:6d:a4:c1:50:42:3b:20:f4:ed:c0:7c:0f:fd: f4:cb:9b:39:f1:32:6c:0d:52:ab:09:a4:af:dc:fc:24:ff:55: 9e:97:27:b5:69:cc:c1:59:cd:dc:1c:cc:f2:9d:3d:01:05:35: 4d:d5:f2:8d:3b:fe:5b:f8:3f:b0:82:e3:f9:68:6b:44:c2:be: 34:e7:60:cc:a4:59:f1:37:eb:a2:e1:31:24:25:03:06:92:8e: 09:15:f2:36:e8:0a:0e:e8:9a:f2:96:53:3d:29:44:39:26:9d: 03:a0:fd:e2:79:40:0c:f0:3a:8b:89:d1:6d:db:55:ba:1a:68: 20:83:f5:78:2d:c7:22:8f:67:5c:9c:8b:88:46:5d:b8:8e:f0: 81:6e:c0:0e:a5:59:04:84:a5:c8:be:da:7b:bb:2f:bf:0a:a9: f2:f6:c6:bb:8c:7e:90:ca:b4:3f:e3:9c:97:b1:46:d2:20:a5: 6f:fd:7f:b3:42:09:26:cc:25:4e:07:94:58:2d:2e:cf:6e:89: d2:f4:b4:0c:b8:3b:80:02:41:8e:44:a7:66:ee:d7:ae:85:df: e9:6f:54:9d:c2:07:02:b9:54:3d:cc:15:a9:99:f8:f4:2d:22: b7:c0:fe:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExextT0IWoZQxuAUrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk MjIxZjQzNWQtYTkxNC00ZDNjLWFlYmUtMmM2ZGZmNWYyNzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9BtDpS4I8e/ldjtn6lDg/vO0R7qH+/mzfNQ xmxUPB+bWgHq3WzFW9cEg0RB8CKRgqwK9v/XgjL3YKO+EJOnsD8rzx0zY0hLq+f7 CZmTx+sM6Vg0aCdcHbYRJEWACMoJ+ZT8G02vRAz90pLaNlSQsJyApgZKbrqAP9s2 4udT74LYjf9CwjVDt0Ai93Vc1dD9SP1+EBn/PlCumSlHVMjVc1LxBJeaB7zHbNJ8 tEeWYDhrozhUYZucPXW+z7lnsO07zRstaRnwSiUdXumXYEml7QSHOBeAN3QgR4OA BtxhPvCCZJajGq3ebli0jXqMNddz4ziDQzKnlMioQZvLU1BekwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMKfjLKBN7gLjkbv7ejkzCijlA4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTI0YTViNDUtNjVlNC0z Nzg3LWFjZDgtYjY1NWU1NGEyMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrN+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4/ID4YbSVXwH2bv+nTWoLcsjXRCpbubaTBUEI7IPTtwHwP/fTLmznx MmwNUqsJpK/c/CT/VZ6XJ7VpzMFZzdwczPKdPQEFNU3V8o07/lv4P7CC4/loa0TC vjTnYMykWfE366LhMSQlAwaSjgkV8jboCg7omvKWUz0pRDkmnQOg/eJ5QAzwOouJ 0W3bVboaaCCD9XgtxyKPZ1yci4hGXbiO8IFuwA6lWQSEpci+2nu7L78KqfL2xruM fpDKtD/jnJexRtIgpW/9f7NCCSbMJU4HlFgtLs9uidL0tAy4O4ACQY5Ep2bu166F 3+lvVJ3CBwK5VD3MFamZ+PQtIrfA/sc= -----END CERTIFICATE-----Generated at Mon Mar 2 07:51:50 2026 by rpki-client