$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/bda6574d-81c2-38f7-b624-cdc878c38860.roa File: bda6574d-81c2-38f7-b624-cdc878c38860.roa (raw, json) Hash identifier: 2yccE74TQK4XOi0nvATVTAnB2dHu23ogFBjcBEatTGE= Subject key identifier: 46:12:5E:EC:A5:4F:65:AA:03:20:8C:A5:69:CD:78:DC:B4:2C:39:AA Certificate issuer: /CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Certificate serial: 010D0C9F4328584CA061C7D657A24665CC420220 Authority key identifier: A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/bda6574d-81c2-38f7-b624-cdc878c38860.roa Signing time: Sat 24 Jan 2026 02:00:31 +0000 ROA not before: Sat 24 Jan 2026 02:00:31 +0000 ROA not after: Fri 24 Apr 2026 01:00:31 +0000 asID: 400702 IP address blocks: 192.81.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a0:61:c7:d6:57:a2:46:65:cc:42:02:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Validity Not Before: Jan 24 02:00:31 2026 GMT Not After : Apr 24 01:00:31 2026 GMT Subject: CN=56ab165b-e516-4764-8303-64b64b230e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:de:ca:29:37:4c:7e:8b:f3:b2:bb:e5:3e:fd: c3:06:f6:25:77:6b:59:f1:a1:e9:8a:36:d7:1b:ee: 9d:b0:23:8a:2f:90:66:51:67:b0:77:74:f4:e2:25: fd:9a:42:27:12:35:20:bd:4d:fe:6c:85:d1:7b:18: ec:30:b0:53:85:b5:c5:bf:2f:a2:66:28:7d:44:ec: 8f:b5:e6:20:9b:ce:e5:2c:f8:78:3b:1e:86:44:ab: 31:eb:08:2b:9b:ec:21:f3:25:99:99:6f:54:ec:1d: e3:08:d0:b0:53:7a:60:b2:9e:70:ce:3b:75:b7:da: 3f:d1:66:6f:3f:c0:ed:2d:b8:f8:f9:36:85:78:8f: c2:38:5e:ae:39:8c:84:28:f1:91:df:ed:ea:4c:c1: 86:44:33:9e:4e:50:65:2e:65:7c:4a:a3:27:d3:5e: 03:44:24:77:dd:c6:56:22:74:4e:02:a9:50:fa:dd: c3:1d:30:84:e1:39:71:67:64:c7:7d:b4:a1:bd:a9: 4b:83:da:76:5e:a5:3a:ec:ce:43:74:76:61:9d:03: 22:7c:bf:e8:b9:8f:87:b8:f8:00:5b:7d:f6:28:8f: 99:bb:8c:b7:6c:ba:27:54:8c:e7:1b:ad:38:07:2b: ca:78:d1:d9:12:0c:23:9f:9b:aa:10:9d:26:51:58: 54:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:12:5E:EC:A5:4F:65:AA:03:20:8C:A5:69:CD:78:DC:B4:2C:39:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/bda6574d-81c2-38f7-b624-cdc878c38860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl X509v3 Authority Key Identifier: keyid:A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer sbgp-ipAddrBlock: critical IPv4: 192.81.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f4:1c:a5:73:b2:65:79:66:97:35:d4:25:1c:2c:c0:6b:33: cc:e0:88:e3:eb:1a:ed:d4:34:81:ee:1b:94:fd:fc:e8:38:90: fc:48:25:d8:c6:ae:03:00:a3:25:c3:ed:1e:30:d7:c4:d7:36: 97:64:f8:e3:9c:72:fb:31:22:2d:8b:31:db:61:e3:48:1c:38: c5:40:7c:f0:f5:88:62:77:99:87:9f:a6:15:c6:17:f9:4e:8c: 31:70:bf:72:88:30:9a:ef:2b:1b:75:12:e6:7e:c1:87:b3:ac: a2:06:98:c4:ab:c1:eb:dd:67:f2:a4:4d:38:f2:08:6c:12:f6: 13:be:62:66:c2:4a:46:06:dc:de:df:59:73:b5:17:54:c7:4b: 3e:e1:52:44:22:ef:64:aa:d2:75:45:56:0c:cb:be:1a:d9:55: 2e:d7:69:fa:78:a0:29:ba:08:c7:84:a2:28:c5:a4:1b:a0:0f: 57:cc:da:c2:cf:48:e7:ce:58:20:a0:58:2e:1d:c0:6e:de:7e: dc:31:b9:7a:8f:b9:28:6e:c5:72:59:be:b0:45:e0:75:2e:ab: c7:d4:bd:1f:05:04:ae:ee:5f:7c:26:fb:df:ce:8a:ab:59:14: 99:ec:7c:fa:a5:d9:24:c3:51:d0:ac:83:99:a0:7e:91:5a:1b: ee:95:c2:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEygYcfWV6JGZcxCAiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyZDJhNTItNWNhNy00YTM2LTg0OWYtYTdkNmI4NzZl Njg3MB4XDTI2MDEyNDAyMDAzMVoXDTI2MDQyNDAxMDAzMVowLzEtMCsGA1UEAxMk NTZhYjE2NWItZTUxNi00NzY0LTgzMDMtNjRiNjRiMjMwZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud7KKTdMfovzsrvlPv3DBvYld2tZ8aHpijbX G+6dsCOKL5BmUWewd3T04iX9mkInEjUgvU3+bIXRexjsMLBThbXFvy+iZih9ROyP teYgm87lLPh4Ox6GRKsx6wgrm+wh8yWZmW9U7B3jCNCwU3pgsp5wzjt1t9o/0WZv P8DtLbj4+TaFeI/COF6uOYyEKPGR3+3qTMGGRDOeTlBlLmV8SqMn014DRCR33cZW InROAqlQ+t3DHTCE4TlxZ2THfbShvalLg9p2XqU67M5DdHZhnQMifL/ouY+HuPgA W332KI+Zu4y3bLonVIznG604ByvKeNHZEgwjn5uqEJ0mUVhUWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYSXuylT2WqAyCMpWnNeNy0LDmqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJk MmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2Yjg3NmU2ODcvYmRhNjU3NGQtODFjMi0z OGY3LWI2MjQtY2RjODc4YzM4ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYyZDJhNTItNWNhNy00YTM2LTg0 OWYtYTdkNmI4NzZlNjg3L2RmMmQyYTUyLTVjYTctNGEzNi04NDlmLWE3ZDZiODc2 ZTY4Ny5jcmwwHwYDVR0jBBgwFoAUoN/uDKPKmaIvkq/l9lLB35RGlwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJkMmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2 Yjg3NmU2ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwFGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIH0HKVzsmV5Zpc11CUcLMBrM8zgiOPrGu3UNIHuG5T9/Og4kPxIJdjG rgMAoyXD7R4w18TXNpdk+OOccvsxIi2LMdth40gcOMVAfPD1iGJ3mYefphXGF/lO jDFwv3KIMJrvKxt1EuZ+wYezrKIGmMSrwevdZ/KkTTjyCGwS9hO+YmbCSkYG3N7f WXO1F1THSz7hUkQi72Sq0nVFVgzLvhrZVS7Xafp4oCm6CMeEoijFpBugD1fM2sLP SOfOWCCgWC4dwG7eftwxuXqPuShuxXJZvrBF4HUuq8fUvR8FBK7uX3wm+9/OiqtZ FJnsfPql2STDUdCsg5mgfpFaG+6VwlQ= -----END CERTIFICATE-----Generated at Mon Mar 2 14:29:37 2026 by rpki-client