$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/504baf8d-e241-376c-b484-bd46bef0f789.roa File: 504baf8d-e241-376c-b484-bd46bef0f789.roa (raw, json) Hash identifier: 7L5mTigJsytwQiT1E8quK94lQXdKGf5UwYFEsn/U/Nk= Subject key identifier: 73:58:9E:2D:CA:45:96:3D:0E:E4:86:9F:C2:CF:98:DC:2F:3B:43:D4 Certificate issuer: /CN=529d57aa-cd56-41d8-b3ad-b413b968b610 Certificate serial: 010D0C9F4328584C8A0C2107FF633045781E3BA0 Authority key identifier: 2A:26:48:3C:21:AD:AE:53:6A:32:BC:20:B3:A1:64:46:2C:5C:84:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/504baf8d-e241-376c-b484-bd46bef0f789.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 22878 IP address blocks: 68.171.208.0/20 maxlen: 20 162.247.76.0/22 maxlen: 22 173.230.240.0/20 maxlen: 20 192.64.32.0/22 maxlen: 22 207.45.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/529d57aa-cd56-41d8-b3ad-b413b968b610.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/529d57aa-cd56-41d8-b3ad-b413b968b610.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:21:07:ff:63:30:45:78:1e:3b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529d57aa-cd56-41d8-b3ad-b413b968b610 Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=6204aa4f-3dfa-479a-acb4-491892a84dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:61:b0:f2:17:5a:23:d4:66:bb:75:af:b6:e9: e3:58:93:aa:f9:3b:fc:42:93:7e:9a:b0:08:0b:59: 5d:a3:4b:cd:8a:3f:43:e7:82:86:66:9d:ec:fb:65: 28:28:07:e1:08:e9:29:2f:46:47:c3:e8:0f:12:86: c1:50:e1:cb:1e:18:4b:93:44:42:e0:42:9f:db:e0: c1:95:54:e2:66:32:a9:b2:c3:83:c5:ac:7d:ba:cc: 39:fe:d4:76:59:bd:8a:33:e9:82:62:3d:fc:6e:d4: a1:3c:2c:23:b8:df:ac:8f:9d:bd:c0:c9:82:46:83: 0e:29:e3:3d:9f:f9:3a:4f:47:02:ae:33:8d:65:67: c7:a2:bb:79:f2:c0:53:e4:9d:97:d5:c2:34:3c:d8: 52:ab:7e:12:75:2a:10:94:ba:a9:f6:a9:0e:88:47: be:be:a1:4e:33:9a:d1:d4:5d:81:c0:bd:ba:35:15: 66:81:47:11:76:b8:32:13:33:8d:fe:ee:02:83:30: eb:9d:c4:8a:de:9f:dd:02:c2:e9:7e:33:17:21:96: 9d:75:e2:fa:a1:e0:f6:57:83:a1:3b:75:46:43:b4: ae:32:72:1b:88:fd:2e:7c:bd:6b:df:d1:93:47:74: 8e:d9:60:9f:0a:70:bf:9d:88:49:ad:d8:04:eb:99: 92:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:58:9E:2D:CA:45:96:3D:0E:E4:86:9F:C2:CF:98:DC:2F:3B:43:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/504baf8d-e241-376c-b484-bd46bef0f789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/529d57aa-cd56-41d8-b3ad-b413b968b610.crl X509v3 Authority Key Identifier: keyid:2A:26:48:3C:21:AD:AE:53:6A:32:BC:20:B3:A1:64:46:2C:5C:84:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610.cer sbgp-ipAddrBlock: critical IPv4: 68.171.208.0/20 162.247.76.0/22 173.230.240.0/20 192.64.32.0/22 207.45.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:cc:9e:8d:36:74:ad:6c:a7:cb:09:a8:66:c1:50:14:0a:7c: b9:8e:6f:c2:79:a2:a9:4c:46:ff:50:f0:4a:fe:e8:b9:fa:50: 3e:00:b0:00:7d:c8:ef:bc:58:31:b7:b6:84:db:9c:ff:4d:bd: 4e:24:75:a5:3c:44:ce:aa:ae:a8:27:7c:18:3c:5d:14:40:2d: 94:ac:cb:73:ee:05:be:95:29:8e:0b:b4:39:ba:cf:6e:df:c9: 0c:e7:89:e9:a6:39:c8:ac:91:19:83:9e:86:de:a0:73:ac:4a: fe:c8:ea:a8:2c:62:d2:3e:47:34:6a:02:28:21:1d:f5:c3:b0: c0:95:1b:f3:3c:3f:c6:1d:83:98:9d:75:0d:0b:4c:d8:91:1b: 28:06:b1:04:39:3f:57:1c:5b:b5:51:2f:4e:0c:0b:58:34:47: b6:95:7d:8d:9d:9c:b9:47:52:a0:9f:ac:9f:20:30:26:80:42: 29:58:aa:66:d5:83:d7:f6:4f:07:c9:85:a6:97:bd:d1:1c:dd: 96:af:fa:2a:d4:55:3d:37:d1:bb:d9:97:18:4e:3b:a0:da:cf: e6:1b:07:61:9c:07:31:02:3b:ed:77:36:a0:07:9b:39:09:fc: 4f:9d:ac:c2:8e:7e:1d:0f:82:c8:0a:22:eb:d5:d0:ef:d6:e3: 4e:46:6d:35 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEyKDCEH/2MwRXgeO6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI5ZDU3YWEtY2Q1Ni00MWQ4LWIzYWQtYjQxM2I5Njhi NjEwMB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk NjIwNGFhNGYtM2RmYS00NzlhLWFjYjQtNDkxODkyYTg0ZGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2Gw8hdaI9Rmu3WvtunjWJOq+Tv8QpN+mrAI C1ldo0vNij9D54KGZp3s+2UoKAfhCOkpL0ZHw+gPEobBUOHLHhhLk0RC4EKf2+DB lVTiZjKpssODxax9usw5/tR2Wb2KM+mCYj38btShPCwjuN+sj529wMmCRoMOKeM9 n/k6T0cCrjONZWfHort58sBT5J2X1cI0PNhSq34SdSoQlLqp9qkOiEe+vqFOM5rR 1F2BwL26NRVmgUcRdrgyEzON/u4CgzDrncSK3p/dAsLpfjMXIZaddeL6oeD2V4Oh O3VGQ7SuMnIbiP0ufL1r39GTR3SO2WCfCnC/nYhJrdgE65mSMwIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFHNYni3KRZY9DuSGn8LPmNwvO0PUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81Mjlk NTdhYS1jZDU2LTQxZDgtYjNhZC1iNDEzYjk2OGI2MTAvNTA0YmFmOGQtZTI0MS0z NzZjLWI0ODQtYmQ0NmJlZjBmNzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTI5ZDU3YWEtY2Q1Ni00MWQ4LWIz YWQtYjQxM2I5NjhiNjEwLzUyOWQ1N2FhLWNkNTYtNDFkOC1iM2FkLWI0MTNiOTY4 YjYxMC5jcmwwHwYDVR0jBBgwFoAUKiZIPCGtrlNqMrwgs6FkRixchFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81MjlkNTdhYS1jZDU2LTQxZDgtYjNhZC1iNDEz Yjk2OGI2MTAuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQERKvQAwQC ovdMAwQErebwAwQCwEAgAwQEzy2wMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHHMno02dK1sp8sJqGbBUBQK fLmOb8J5oqlMRv9Q8Er+6Ln6UD4AsAB9yO+8WDG3toTbnP9NvU4kdaU8RM6qrqgn fBg8XRRALZSsy3PuBb6VKY4LtDm6z27fyQzniemmOciskRmDnobeoHOsSv7I6qgs YtI+RzRqAighHfXDsMCVG/M8P8Ydg5iddQ0LTNiRGygGsQQ5P1ccW7VRL04MC1g0 R7aVfY2dnLlHUqCfrJ8gMCaAQilYqmbVg9f2TwfJhaaXvdEc3Zav+irUVT030bvZ lxhOO6Daz+YbB2GcBzECO+13NqAHmzkJ/E+drMKOfh0PgsgKIuvV0O/W405GbTU= -----END CERTIFICATE-----Generated at Mon Mar 2 17:05:57 2026 by rpki-client