$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ddf6f3e3-62b5-3748-84ef-5742d62f7ec7.roa File: ddf6f3e3-62b5-3748-84ef-5742d62f7ec7.roa (raw, json) Hash identifier: IzZuhxUJloLgLmL+VvfSgnnhjMd+G0vk/w6vsoSCr0o= Subject key identifier: C0:F6:43:CC:08:39:0F:C7:4E:75:B1:EB:A1:7A:90:AE:14:1A:3F:EC Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584C5EC6FF904A7683D2555D9F10 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ddf6f3e3-62b5-3748-84ef-5742d62f7ec7.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 20115 IP address blocks: 172.222.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:ff:90:4a:76:83:d2:55:5d:9f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=292c789e-a687-4016-b419-4b151ee7be1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:56:c9:cc:87:62:d1:23:17:3d:96:9d:69:f9: 52:0b:56:7a:d1:fb:a6:a1:56:58:7f:55:7e:d9:d8: ae:bf:b5:f9:9f:58:00:be:db:89:28:f3:01:57:5c: 48:e0:80:00:68:d9:63:bb:66:71:db:ae:05:01:b8: d7:3b:f8:74:24:49:13:6d:25:28:87:bc:e1:27:f4: fc:52:3d:db:e3:ec:06:16:bb:d2:9c:92:e8:e6:75: 8c:a1:57:d1:94:02:71:37:84:fb:7b:79:3a:6b:8a: 22:19:37:15:f6:99:2a:e8:ff:83:fd:09:d6:35:1f: 08:3d:5d:14:87:90:be:1d:c9:8e:8e:ea:d5:33:49: 12:b7:bd:43:c9:ad:28:06:4f:e5:75:5f:7e:23:07: 70:3e:79:6a:6b:e7:d3:de:8c:ad:4d:97:3d:ff:b9: fd:14:f5:2e:13:01:8d:21:6e:d8:19:7f:da:c6:4b: 31:2a:a7:2e:86:c1:d7:73:4f:87:84:01:aa:a1:9c: 23:2b:51:90:0e:3d:bb:07:8a:66:40:6e:4f:6c:10: b3:9e:c9:42:2c:a2:a5:1b:31:89:f4:cc:76:31:61: 9e:8f:3a:2f:1d:28:f5:7f:2e:78:af:6b:7c:a7:f7: 2b:41:d2:f3:a8:6b:2e:89:2b:63:7b:76:a2:4f:1e: 9d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F6:43:CC:08:39:0F:C7:4E:75:B1:EB:A1:7A:90:AE:14:1A:3F:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ddf6f3e3-62b5-3748-84ef-5742d62f7ec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.222.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:12:82:38:eb:61:e9:58:8a:07:07:85:89:35:4d:8d:19:46: e4:3b:e6:f8:c4:26:3d:d0:6a:1b:ad:3f:bc:0d:be:84:d8:85: f9:1a:60:6d:cd:ee:76:ad:f7:28:dc:47:8b:15:0c:56:0d:91: ad:6d:5b:6b:da:c1:8b:85:32:6a:c1:5b:a3:cf:b8:87:75:2c: 9d:38:55:02:47:96:f8:b6:c9:89:08:d4:c4:cd:e2:e2:76:c9: 61:a0:4a:22:44:01:f7:d2:2c:86:86:9b:8b:8b:15:36:35:f6: bc:14:d6:cb:f3:b1:ba:ec:59:86:cb:1c:d3:98:8d:97:a3:84: 5b:0b:37:a6:e8:5d:64:bb:35:34:8b:d1:a4:74:cc:77:f4:c6: 67:d7:4e:6b:1e:fb:7a:95:d6:c9:91:31:b6:2b:f9:cd:49:de: dc:6c:a0:b8:47:d8:a6:17:e4:b5:30:e5:b4:5d:99:e6:72:48: 5a:39:c4:91:90:27:10:7a:2d:73:b3:58:2e:cb:76:23:e1:d3: 50:7a:c0:99:91:ef:77:23:a0:7a:d0:4d:c0:17:5f:e1:83:12: 53:b6:ca:a0:53:d0:e8:e3:d3:26:4a:ff:f3:35:d2:3a:41:ee: ef:1d:18:4c:5b:28:66:1f:22:8e:4c:f1:0a:db:44:ba:5a:ed: c0:6b:12:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexv+QSnaD0lVdnxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk MjkyYzc4OWUtYTY4Ny00MDE2LWI0MTktNGIxNTFlZTdiZTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VbJzIdi0SMXPZadaflSC1Z60fumoVZYf1V+ 2diuv7X5n1gAvtuJKPMBV1xI4IAAaNlju2Zx264FAbjXO/h0JEkTbSUoh7zhJ/T8 Uj3b4+wGFrvSnJLo5nWMoVfRlAJxN4T7e3k6a4oiGTcV9pkq6P+D/QnWNR8IPV0U h5C+HcmOjurVM0kSt71Dya0oBk/ldV9+IwdwPnlqa+fT3oytTZc9/7n9FPUuEwGN IW7YGX/axksxKqcuhsHXc0+HhAGqoZwjK1GQDj27B4pmQG5PbBCznslCLKKlGzGJ 9Mx2MWGejzovHSj1fy54r2t8p/crQdLzqGsuiStje3aiTx6dDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMD2Q8wIOQ/HTnWx66F6kK4UGj/sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZGRmNmYzZTMtNjJiNS0z NzQ4LTg0ZWYtNTc0MmQ2MmY3ZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrN4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcSgjjrYelYigcHhYk1TY0ZRuQ75vjEJj3QahutP7wNvoTYhfkaYG3N 7nat9yjcR4sVDFYNka1tW2vawYuFMmrBW6PPuId1LJ04VQJHlvi2yYkI1MTN4uJ2 yWGgSiJEAffSLIaGm4uLFTY19rwU1svzsbrsWYbLHNOYjZejhFsLN6boXWS7NTSL 0aR0zHf0xmfXTmse+3qV1smRMbYr+c1J3txsoLhH2KYX5LUw5bRdmeZySFo5xJGQ JxB6LXOzWC7LdiPh01B6wJmR73cjoHrQTcAXX+GDElO2yqBT0Ojj0yZK//M10jpB 7u8dGExbKGYfIo5M8QrbRLpa7cBrEh0= -----END CERTIFICATE-----Generated at Mon Mar 2 07:51:54 2026 by rpki-client