$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/d6b42025-6aac-314d-99d7-3afc6ed6035a.roa File: d6b42025-6aac-314d-99d7-3afc6ed6035a.roa (raw, json) Hash identifier: RV1z8uDkoFQLM/TBKHDaXIKai5WseO6J1PYFF9clCkw= Subject key identifier: CC:71:01:B3:CA:78:7B:A6:5A:73:5E:8F:9A:23:E4:68:F9:30:E7:5B Certificate issuer: /CN=34247a70-c93d-4065-9548-762da5a386ba Certificate serial: 010D0C9F4328584CF61496A9E00D10E0A5087CC0 Authority key identifier: A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/d6b42025-6aac-314d-99d7-3afc6ed6035a.roa Signing time: Mon 23 Feb 2026 18:43:37 +0000 ROA not before: Mon 23 Feb 2026 18:43:37 +0000 ROA not after: Sun 24 May 2026 17:43:37 +0000 asID: 40111 IP address blocks: 72.162.28.0/23 maxlen: 23 72.162.32.0/24 maxlen: 24 72.162.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:14:96:a9:e0:0d:10:e0:a5:08:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34247a70-c93d-4065-9548-762da5a386ba Validity Not Before: Feb 23 18:43:37 2026 GMT Not After : May 24 17:43:37 2026 GMT Subject: CN=8b3f5804-6711-4604-8b9c-ea428070604e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3f:9a:e3:c1:c8:5f:c1:01:f0:5e:8c:ce:55: dd:48:a6:e5:41:23:4a:d4:3b:d6:14:fc:dd:0e:7d: f9:35:4c:eb:c8:97:db:51:04:0c:60:5b:2c:58:31: 0a:dc:8f:55:7e:25:05:3b:a6:ba:f6:7e:26:59:28: d0:be:c8:2d:3b:9e:e9:6c:bb:41:39:a9:1f:49:96: d4:7a:02:83:59:36:57:15:03:32:60:b8:1a:ca:d0: 39:f4:c8:67:82:9f:e8:ff:67:a3:ab:a8:5e:8e:8e: 17:97:5f:54:13:00:1c:36:42:7d:56:fd:c1:2d:0b: db:58:86:22:50:fa:51:75:ed:f0:6a:41:4e:a2:dc: 95:c9:6b:b3:b7:3e:ac:e2:3d:ce:10:d1:44:b4:f6: 8d:f9:80:bf:57:85:71:6c:62:20:84:82:72:b0:d5: 8d:2f:67:cd:ca:5e:a6:ed:e4:95:f3:37:4b:a5:56: 64:00:62:6d:30:01:32:26:25:72:d8:63:3b:8d:de: 13:ee:60:c3:b9:90:72:99:fc:a5:5a:c6:f4:d1:04: 5e:c3:bb:45:64:e1:52:4e:60:ce:70:4d:b4:08:ab: f1:36:d3:0f:ef:65:d8:6c:68:a8:bb:5a:72:40:6e: 4f:db:5c:61:99:58:c4:a6:cf:9a:68:70:a5:75:a1: 6c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:71:01:B3:CA:78:7B:A6:5A:73:5E:8F:9A:23:E4:68:F9:30:E7:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/d6b42025-6aac-314d-99d7-3afc6ed6035a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl X509v3 Authority Key Identifier: keyid:A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer sbgp-ipAddrBlock: critical IPv4: 72.162.28.0/23 72.162.32.0/24 72.162.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:67:5e:14:32:fc:9b:b1:41:df:37:6a:46:c0:df:20:44:e2: 6a:22:e6:31:a5:12:52:30:1e:e6:ba:a6:b7:d0:b4:8e:f2:a0: 59:15:e2:97:6c:23:c9:61:7d:1b:54:78:14:08:b7:b3:25:43: 82:61:94:2f:8e:57:73:f5:e6:a6:a1:96:e4:98:85:58:d1:c3: c6:49:85:1c:15:e7:ff:d9:1b:9d:29:84:0e:42:db:a2:d8:34: 87:40:51:ad:95:5f:7c:af:f1:92:e2:1d:d8:b8:22:96:e0:79: 74:fd:cd:39:0b:98:73:be:f4:9d:3d:e3:9c:6b:03:0a:91:af: fa:81:17:c2:96:42:94:83:92:d9:7d:d4:ff:bf:bc:4e:a2:51: 58:47:b0:19:7f:ac:8c:92:93:1e:bd:52:30:73:22:b8:6e:36: d5:c4:c1:b6:88:f9:28:5a:d1:b7:86:44:97:a8:58:46:06:7d: db:99:5f:46:6e:52:03:0b:c7:b2:61:29:8a:a6:39:36:cd:b2: a4:16:39:57:9c:42:ba:cd:64:e1:1d:ab:cc:a0:23:59:b2:d2: 9a:8d:b7:d3:b6:68:f5:ad:47:b5:6e:4f:d6:bb:fa:1d:2c:da: da:6a:9f:1e:78:9e:43:34:55:ed:27:ae:79:66:00:b2:12:c4: 98:84:d1:52 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEz2FJap4A0Q4KUIfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQyNDdhNzAtYzkzZC00MDY1LTk1NDgtNzYyZGE1YTM4 NmJhMB4XDTI2MDIyMzE4NDMzN1oXDTI2MDUyNDE3NDMzN1owLzEtMCsGA1UEAxMk OGIzZjU4MDQtNjcxMS00NjA0LThiOWMtZWE0MjgwNzA2MDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz+a48HIX8EB8F6MzlXdSKblQSNK1DvWFPzd Dn35NUzryJfbUQQMYFssWDEK3I9VfiUFO6a69n4mWSjQvsgtO57pbLtBOakfSZbU egKDWTZXFQMyYLgaytA59Mhngp/o/2ejq6hejo4Xl19UEwAcNkJ9Vv3BLQvbWIYi UPpRde3wakFOotyVyWuztz6s4j3OENFEtPaN+YC/V4VxbGIghIJysNWNL2fNyl6m 7eSV8zdLpVZkAGJtMAEyJiVy2GM7jd4T7mDDuZBymfylWsb00QRew7tFZOFSTmDO cE20CKvxNtMP72XYbGiou1pyQG5P21xhmVjEps+aaHCldaFs8QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMxxAbPKeHumWnNej5oj5Gj5MOdbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNDI0 N2E3MC1jOTNkLTQwNjUtOTU0OC03NjJkYTVhMzg2YmEvZDZiNDIwMjUtNmFhYy0z MTRkLTk5ZDctM2FmYzZlZDYwMzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzQyNDdhNzAtYzkzZC00MDY1LTk1 NDgtNzYyZGE1YTM4NmJhLzM0MjQ3YTcwLWM5M2QtNDA2NS05NTQ4LTc2MmRhNWEz ODZiYS5jcmwwHwYDVR0jBBgwFoAUpsEb1rclWtCkwZuf94Ui0ZNhSYIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNDI0N2E3MC1jOTNkLTQwNjUtOTU0OC03NjJk YTVhMzg2YmEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBSKIcAwQA SKIgAwQASKIlMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABdnXhQy/JuxQd83akbA3yBE4moi5jGlElIwHua6 prfQtI7yoFkV4pdsI8lhfRtUeBQIt7MlQ4JhlC+OV3P15qahluSYhVjRw8ZJhRwV 5//ZG50phA5C26LYNIdAUa2VX3yv8ZLiHdi4IpbgeXT9zTkLmHO+9J0945xrAwqR r/qBF8KWQpSDktl91P+/vE6iUVhHsBl/rIySkx69UjBzIrhuNtXEwbaI+Sha0beG RJeoWEYGfduZX0ZuUgMLx7JhKYqmOTbNsqQWOVecQrrNZOEdq8ygI1my0pqNt9O2 aPWtR7VuT9a7+h0s2tpqnx54nkM0Ve0nrnlmALISxJiE0VI= -----END CERTIFICATE-----Generated at Mon Mar 2 18:31:49 2026 by rpki-client