$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/3d907bac-aa4f-3787-8293-dd1becc955b7.roa File: 3d907bac-aa4f-3787-8293-dd1becc955b7.roa (raw, json) Hash identifier: KsOKMy8icIolAMkHaVSWLDr1ryzu9wDCRz7N4cUL6IE= Subject key identifier: D3:00:59:E5:C0:03:F3:DC:55:D9:69:73:64:A0:C5:F7:F9:24:8F:8E Certificate issuer: /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Certificate serial: 010D0C9F4328584CE4D6DDF1F817D95D1C3ACE80 Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/3d907bac-aa4f-3787-8293-dd1becc955b7.roa Signing time: Tue 17 Feb 2026 14:31:52 +0000 ROA not before: Tue 17 Feb 2026 14:31:52 +0000 ROA not after: Mon 18 May 2026 13:31:52 +0000 asID: 16524 IP address blocks: 72.11.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e4:d6:dd:f1:f8:17:d9:5d:1c:3a:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Validity Not Before: Feb 17 14:31:52 2026 GMT Not After : May 18 13:31:52 2026 GMT Subject: CN=60df48d5-f299-461e-988c-0a1c15bd3530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:59:5d:31:24:d7:4a:cf:02:ee:44:b4:7e:46: 94:9d:39:91:18:02:85:75:38:c8:b1:ad:c6:7a:3c: f4:92:eb:d7:7f:de:f1:f3:d4:44:7a:12:c3:77:bd: f4:4a:5d:db:c0:8c:b9:25:e0:59:5a:2e:d1:fd:fc: 2c:87:31:51:8d:1d:10:af:c0:e5:1c:31:75:c7:7d: a2:14:3a:1f:d2:32:cc:39:82:38:13:0c:5c:27:04: d9:e0:c4:c0:45:3c:37:79:3e:ac:44:2e:53:bc:bb: dd:67:f8:dd:12:64:dc:07:5a:b9:80:4b:0c:51:d8: 2c:8b:9f:a6:5a:bc:2d:9f:b1:6d:43:a9:e8:48:17: 81:8c:f1:92:57:ca:ca:0c:74:c4:01:ed:4d:7a:35: ed:3c:36:8f:29:e6:c8:bf:d5:c2:6b:93:52:e6:32: 85:b4:b5:0c:55:a0:d1:ef:49:27:32:e1:23:43:fb: 02:c6:f9:fa:f7:ad:52:84:d8:56:77:cc:c5:4c:48: 7c:4f:dc:bb:9e:55:d0:28:b5:65:c3:4e:b9:60:2c: b0:ab:9d:19:1f:ac:5d:38:e2:7d:79:79:c7:98:6d: e5:6f:91:0f:ca:a9:4a:fc:0f:4f:07:d6:75:7b:c1: 81:ce:7c:04:8f:5e:32:20:e3:63:c2:29:84:6d:cc: 19:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:00:59:E5:C0:03:F3:DC:55:D9:69:73:64:A0:C5:F7:F9:24:8F:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/3d907bac-aa4f-3787-8293-dd1becc955b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl X509v3 Authority Key Identifier: keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer sbgp-ipAddrBlock: critical IPv4: 72.11.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:a9:71:a8:7c:b6:f6:a7:49:0a:6a:b9:9b:35:5c:ca:7f:e4: b7:9f:1d:d9:bc:b5:ea:e9:bb:c6:13:c1:1f:73:1f:45:0c:e4: 98:c0:11:4d:71:5f:0c:7f:38:7a:d9:fb:c9:46:bf:e5:05:fe: 1c:6a:fa:9b:16:06:f3:7f:fc:80:e6:25:e7:28:ab:34:ed:35: 45:91:f4:67:87:c4:f1:fb:15:6d:af:ac:d3:3c:0b:af:42:51: 4e:8b:32:b2:24:ef:04:d5:eb:4c:28:ac:3f:20:72:52:d1:9e: 7c:f8:4e:cd:dc:f5:f8:c9:13:42:a3:90:85:7d:97:25:5a:41: a4:0e:c0:09:ea:e8:cd:b7:52:38:05:fa:4c:c1:31:4b:47:d7: f9:67:9c:3b:9e:d3:03:4d:dc:ab:52:97:d4:9f:6a:c6:89:8c: ab:5f:ee:da:ae:95:91:5f:1a:7d:7e:10:5f:69:1a:e4:8e:02: f7:22:93:2b:b7:06:82:a8:b0:35:aa:3b:a3:c4:ed:93:4e:ec: 59:f9:33:a0:d1:6e:5e:d2:38:19:10:0c:a3:d0:6e:5d:cf:e9: a4:9c:f3:f9:6e:fd:56:df:cc:66:4c:2e:5c:00:e5:35:dd:9c: c1:8b:4f:1f:e2:a7:d9:63:ff:ee:81:99:0a:e2:8f:da:1e:94: b6:6b:5b:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzk1t3x+BfZXRw6zoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZkNWQ5MjMtZmQzNC00MDlkLThmNzctMjJjNjAxNGU2 ZTFiMB4XDTI2MDIxNzE0MzE1MloXDTI2MDUxODEzMzE1MlowLzEtMCsGA1UEAxMk NjBkZjQ4ZDUtZjI5OS00NjFlLTk4OGMtMGExYzE1YmQzNTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVldMSTXSs8C7kS0fkaUnTmRGAKFdTjIsa3G ejz0kuvXf97x89REehLDd730Sl3bwIy5JeBZWi7R/fwshzFRjR0Qr8DlHDF1x32i FDof0jLMOYI4EwxcJwTZ4MTARTw3eT6sRC5TvLvdZ/jdEmTcB1q5gEsMUdgsi5+m Wrwtn7FtQ6noSBeBjPGSV8rKDHTEAe1NejXtPDaPKebIv9XCa5NS5jKFtLUMVaDR 70knMuEjQ/sCxvn6961ShNhWd8zFTEh8T9y7nlXQKLVlw065YCywq50ZH6xdOOJ9 eXnHmG3lb5EPyqlK/A9PB9Z1e8GBznwEj14yIONjwimEbcwZ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMAWeXAA/PcVdlpc2Sgxff5JI+OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1 ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2MDE0ZTZlMWIvM2Q5MDdiYWMtYWE0Zi0z Nzg3LTgyOTMtZGQxYmVjYzk1NWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTZkNWQ5MjMtZmQzNC00MDlkLThm NzctMjJjNjAxNGU2ZTFiLzE2ZDVkOTIzLWZkMzQtNDA5ZC04Zjc3LTIyYzYwMTRl NmUxYi5jcmwwHwYDVR0jBBgwFoAUmCYkELxZPdjIgitGMzb83aTv+10wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2 MDE0ZTZlMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAvDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHapcah8tvanSQpquZs1XMp/5LefHdm8terpu8YTwR9zH0UM5JjAEU1x Xwx/OHrZ+8lGv+UF/hxq+psWBvN//IDmJecoqzTtNUWR9GeHxPH7FW2vrNM8C69C UU6LMrIk7wTV60worD8gclLRnnz4Ts3c9fjJE0KjkIV9lyVaQaQOwAnq6M23UjgF +kzBMUtH1/lnnDue0wNN3KtSl9SfasaJjKtf7tqulZFfGn1+EF9pGuSOAvcikyu3 BoKosDWqO6PE7ZNO7Fn5M6DRbl7SOBkQDKPQbl3P6aSc8/lu/VbfzGZMLlwA5TXd nMGLTx/ip9lj/+6BmQrij9oelLZrW/0= -----END CERTIFICATE-----Generated at Mon Mar 2 11:51:14 2026 by rpki-client