$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/d6a53574-302d-3ec3-8e49-4a53e1d1ee4c.roa File: d6a53574-302d-3ec3-8e49-4a53e1d1ee4c.roa (raw, json) Hash identifier: oJgE50r2ntJA7WYulaEhpqV67Fyb7XWT1HQHh7bYpIM= Subject key identifier: A2:08:A8:A3:BA:41:AC:2D:46:6E:72:35:38:48:B4:26:39:C6:24:97 Certificate issuer: /CN=f80f9298-8029-4285-89d7-27308341b2e0 Certificate serial: 010D0C9F4328584CF77C4D6EA529CF0FD7453E20 Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/d6a53574-302d-3ec3-8e49-4a53e1d1ee4c.roa Signing time: Tue 24 Feb 2026 06:49:45 +0000 ROA not before: Tue 24 Feb 2026 06:49:45 +0000 ROA not after: Mon 25 May 2026 05:49:45 +0000 asID: 56201 IP address blocks: 136.143.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f7:7c:4d:6e:a5:29:cf:0f:d7:45:3e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0 Validity Not Before: Feb 24 06:49:45 2026 GMT Not After : May 25 05:49:45 2026 GMT Subject: CN=6bc10c80-956e-4ff5-a034-53254639d6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:20:6a:ca:ef:66:c9:30:11:30:b8:f1:e6:a2: 2e:18:8a:a9:d4:d7:32:aa:18:be:1f:60:56:99:c4: ce:40:d3:e1:eb:54:08:06:2c:12:ba:af:6c:74:92: df:ef:4b:83:c6:f1:b3:e1:8b:7e:52:31:99:ad:92: f9:f4:fb:62:dd:b5:9d:84:ac:65:df:0b:08:e5:59: 03:62:c3:cb:ce:b1:f2:11:af:dd:bf:e7:cc:ec:e3: 4c:1e:4c:29:d8:18:2b:6d:f3:81:eb:b6:3b:26:fa: f2:12:f4:5f:3c:41:de:6a:7b:e1:5a:ae:6c:14:f5: f5:b5:d7:7a:4e:1f:08:0d:2e:8d:f9:ad:81:5d:78: d1:c8:18:b5:e3:2f:b2:c8:24:56:76:ab:16:00:e2: a0:bc:31:3c:5b:ec:86:1f:b9:47:d1:08:86:9e:eb: a9:33:3d:24:bf:c8:fd:9c:8f:84:74:81:e8:5d:be: d7:40:69:bc:c5:1b:e5:2b:96:d6:51:fd:cd:85:98: d5:77:79:07:83:27:53:cf:91:6c:96:e4:c2:78:96: 3d:16:be:65:54:ba:3b:1b:73:e5:62:49:ff:99:6c: 52:f1:44:00:5f:31:f2:d6:04:96:86:ac:bc:d4:b0: 6d:8b:fd:39:9a:d1:30:1c:de:02:10:26:44:95:f7: a3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:08:A8:A3:BA:41:AC:2D:46:6E:72:35:38:48:B4:26:39:C6:24:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/d6a53574-302d-3ec3-8e49-4a53e1d1ee4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl X509v3 Authority Key Identifier: keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer sbgp-ipAddrBlock: critical IPv4: 136.143.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:1c:77:9c:af:c3:7e:f5:e5:ad:bc:98:ae:56:70:1d:64:dd: c7:cd:03:71:29:cc:10:1f:b4:7b:ca:28:a0:d5:af:a6:7b:d6: 56:25:af:80:a1:5b:8e:6e:92:26:cd:4a:68:6d:d9:44:3e:45: 14:3c:fb:fb:79:fc:c0:d0:29:97:9a:bf:b0:d0:af:a4:fc:f5: 7a:17:0c:61:bc:36:a4:48:ed:04:23:01:1c:72:50:19:cc:b6: 3e:75:fb:16:8f:4c:a8:09:3f:1c:d6:78:c6:aa:86:9c:95:8e: 2b:8c:35:01:0b:27:9f:ec:21:45:bf:77:54:3a:57:68:d4:0b: 81:a4:4a:75:14:7d:7c:d2:86:3e:fe:d1:7a:08:f5:39:b5:f2: 31:db:2c:91:de:e2:0e:d1:1d:17:8c:25:d7:49:08:14:6b:f1: a6:95:87:8a:4c:cd:12:de:5a:5e:26:a1:19:52:58:07:99:94: 71:ab:15:33:db:1f:11:d8:ea:56:74:b4:29:e9:d2:ba:89:3f: 6c:d1:26:c4:fb:37:f8:08:c2:04:8b:a7:ab:c9:dc:28:ce:a4: 28:39:b4:6f:b2:4f:84:aa:84:32:3e:c2:c7:b7:e7:25:e3:e2: ff:e0:20:38:8f:65:27:ff:c7:36:18:02:cd:fa:57:12:a5:58: dc:aa:33:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz3fE1upSnPD9dFPiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjgwZjkyOTgtODAyOS00Mjg1LTg5ZDctMjczMDgzNDFi MmUwMB4XDTI2MDIyNDA2NDk0NVoXDTI2MDUyNTA1NDk0NVowLzEtMCsGA1UEAxMk NmJjMTBjODAtOTU2ZS00ZmY1LWEwMzQtNTMyNTQ2MzlkNmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCBqyu9myTARMLjx5qIuGIqp1Ncyqhi+H2BW mcTOQNPh61QIBiwSuq9sdJLf70uDxvGz4Yt+UjGZrZL59Pti3bWdhKxl3wsI5VkD YsPLzrHyEa/dv+fM7ONMHkwp2BgrbfOB67Y7JvryEvRfPEHeanvhWq5sFPX1tdd6 Th8IDS6N+a2BXXjRyBi14y+yyCRWdqsWAOKgvDE8W+yGH7lH0QiGnuupMz0kv8j9 nI+EdIHoXb7XQGm8xRvlK5bWUf3NhZjVd3kHgydTz5FsluTCeJY9Fr5lVLo7G3Pl Ykn/mWxS8UQAXzHy1gSWhqy81LBti/05mtEwHN4CECZElfejOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIIqKO6QawtRm5yNThItCY5xiSXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mODBm OTI5OC04MDI5LTQyODUtODlkNy0yNzMwODM0MWIyZTAvZDZhNTM1NzQtMzAyZC0z ZWMzLThlNDktNGE1M2UxZDFlZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjgwZjkyOTgtODAyOS00Mjg1LTg5 ZDctMjczMDgzNDFiMmUwL2Y4MGY5Mjk4LTgwMjktNDI4NS04OWQ3LTI3MzA4MzQx YjJlMC5jcmwwHwYDVR0jBBgwFoAUZ2/fmN3Fstann5/PDklcOGTRROcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mODBmOTI5OC04MDI5LTQyODUtODlkNy0yNzMw ODM0MWIyZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiI+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgcd5yvw3715a28mK5WcB1k3cfNA3EpzBAftHvKKKDVr6Z71lYlr4Ch W45ukibNSmht2UQ+RRQ8+/t5/MDQKZeav7DQr6T89XoXDGG8NqRI7QQjARxyUBnM tj51+xaPTKgJPxzWeMaqhpyVjiuMNQELJ5/sIUW/d1Q6V2jUC4GkSnUUfXzShj7+ 0XoI9Tm18jHbLJHe4g7RHReMJddJCBRr8aaVh4pMzRLeWl4moRlSWAeZlHGrFTPb HxHY6lZ0tCnp0rqJP2zRJsT7N/gIwgSLp6vJ3CjOpCg5tG+yT4SqhDI+wse35yXj 4v/gIDiPZSf/xzYYAs36VxKlWNyqM+E= -----END CERTIFICATE-----Generated at Mon Mar 2 12:20:37 2026 by rpki-client