$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/953d9051-5a41-3fe2-83a9-aad90a5de4ce.roa File: 953d9051-5a41-3fe2-83a9-aad90a5de4ce.roa (raw, json) Hash identifier: nGfMLONg7o4D2XYDJY/qdDcplXIuEXpHeIc3xy6R+5c= Subject key identifier: 38:9D:A4:A6:88:AF:65:7B:E1:16:87:77:14:DA:FF:4C:4A:FB:E6:7E Certificate issuer: /CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c Certificate serial: 010D0C9F4328584CCA41F4DFF091011283E224B8 Authority key identifier: 68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/953d9051-5a41-3fe2-83a9-aad90a5de4ce.roa Signing time: Sun 08 Feb 2026 02:00:32 +0000 ROA not before: Sun 08 Feb 2026 02:00:32 +0000 ROA not after: Sat 09 May 2026 01:00:32 +0000 asID: 398564 IP address blocks: 204.235.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ca:41:f4:df:f0:91:01:12:83:e2:24:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c Validity Not Before: Feb 8 02:00:32 2026 GMT Not After : May 9 01:00:32 2026 GMT Subject: CN=e55bb7a1-5a79-49f9-9bb4-db4d159c5bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:15:70:5c:af:48:bc:9a:f1:25:96:bd:ed:2b: 9e:8d:74:63:a8:a4:33:a9:af:47:0e:88:2b:5d:80: e7:06:f6:d7:da:7b:bb:5a:4d:80:c5:63:ea:3d:5e: 28:88:07:29:25:d4:ea:fc:9f:be:d5:1c:87:55:b3: 16:72:eb:a3:ae:e0:fe:23:3e:8d:c1:57:48:3e:e9: 49:29:59:9b:3f:ec:9e:9f:ed:71:03:25:89:65:9a: 77:98:9d:7b:9d:90:52:60:c8:d7:b4:be:db:92:f5: 95:5c:ed:09:8a:05:15:bd:99:2c:4f:1e:dc:17:a1: 0a:58:79:5d:91:e9:26:7b:36:d9:67:70:4c:d6:5b: 44:bf:1a:91:e9:b6:2d:74:1e:68:95:ab:ca:5a:bf: f7:96:63:5a:17:78:b6:92:26:bc:ae:16:25:80:ca: 3c:f3:1e:36:d8:3c:52:32:85:dd:d4:a8:c7:c7:8c: 85:55:1d:e5:cd:91:75:72:1d:c6:18:11:a0:36:80: 5b:1b:7f:fa:e6:c6:62:08:dc:06:41:d0:df:51:50: dc:f4:81:72:2a:85:18:f4:32:60:ea:eb:4c:79:27: 52:3a:6d:26:96:72:55:85:32:c6:3e:a7:41:8f:73: 1e:6a:5e:f4:d0:26:8c:77:6e:2b:a3:ff:14:70:5a: 6f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9D:A4:A6:88:AF:65:7B:E1:16:87:77:14:DA:FF:4C:4A:FB:E6:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/953d9051-5a41-3fe2-83a9-aad90a5de4ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl X509v3 Authority Key Identifier: keyid:68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer sbgp-ipAddrBlock: critical IPv4: 204.235.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:81:28:34:f9:b5:72:09:ab:f9:c1:7f:3c:67:c0:a1:f1:9f: a0:42:0a:b8:07:79:f0:01:d1:1a:fc:3d:de:88:b8:43:84:ee: 32:0e:b7:1c:87:fb:1b:85:84:71:63:c5:b8:8d:5c:3f:47:33: 1f:d4:5f:98:1b:00:45:af:16:a1:80:b9:cc:3a:bf:a4:c9:36: 49:ed:c4:05:0e:67:c7:62:07:16:ee:20:5f:76:93:13:72:f5: 77:51:66:b7:ed:7e:76:a6:84:ee:ee:b3:68:8d:39:f8:08:dc: 3a:67:46:9f:12:d9:e4:b0:b7:c0:76:ae:26:77:db:a3:a6:12: e5:c4:92:26:9d:2c:88:db:a5:56:37:85:69:9e:a2:d3:68:61: 94:d7:db:1e:32:8c:bd:f6:0b:ad:fb:60:20:2d:d3:59:10:24: bb:dc:59:99:81:1e:0c:e5:8d:69:0d:eb:b0:5f:d6:74:de:16: 5b:0b:0a:b5:f9:5f:1b:d3:3e:6c:d6:68:47:ab:55:48:73:27: ba:67:07:36:b8:ce:f2:36:f0:db:ba:72:72:a6:55:85:10:ef: 00:f8:27:cf:c5:09:8d:1c:17:60:29:16:18:cf:9b:65:99:b0: 86:c9:1b:d8:eb:b6:94:38:50:28:a8:5d:5c:62:55:c4:91:5d: 04:c7:55:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzKQfTf8JEBEoPiJLgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFmZmMxOTItZDRhOC00MTg5LWJhYjItY2U3YTM3ZWE2 ODNjMB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTU1YmI3YTEtNWE3OS00OWY5LTliYjQtZGI0ZDE1OWM1YmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihVwXK9IvJrxJZa97SuejXRjqKQzqa9HDogr XYDnBvbX2nu7Wk2AxWPqPV4oiAcpJdTq/J++1RyHVbMWcuujruD+Iz6NwVdIPulJ KVmbP+yen+1xAyWJZZp3mJ17nZBSYMjXtL7bkvWVXO0JigUVvZksTx7cF6EKWHld kekmezbZZ3BM1ltEvxqR6bYtdB5olavKWr/3lmNaF3i2kia8rhYlgMo88x422DxS MoXd1KjHx4yFVR3lzZF1ch3GGBGgNoBbG3/65sZiCNwGQdDfUVDc9IFyKoUY9DJg 6utMeSdSOm0mlnJVhTLGPqdBj3Meal700CaMd24ro/8UcFpvbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDidpKaIr2V74RaHdxTa/0xK++Z+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWZm YzE5Mi1kNGE4LTQxODktYmFiMi1jZTdhMzdlYTY4M2MvOTUzZDkwNTEtNWE0MS0z ZmUyLTgzYTktYWFkOTBhNWRlNGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTFmZmMxOTItZDRhOC00MTg5LWJh YjItY2U3YTM3ZWE2ODNjL2ExZmZjMTkyLWQ0YTgtNDE4OS1iYWIyLWNlN2EzN2Vh NjgzYy5jcmwwHwYDVR0jBBgwFoAUaLusZqgHi4Xm7ZwBPcI1vdKnq/MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWZmYzE5Mi1kNGE4LTQxODktYmFiMi1jZTdh MzdlYTY4M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzOusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmBKDT5tXIJq/nBfzxnwKHxn6BCCrgHefAB0Rr8Pd6IuEOE7jIOtxyH +xuFhHFjxbiNXD9HMx/UX5gbAEWvFqGAucw6v6TJNkntxAUOZ8diBxbuIF92kxNy 9XdRZrftfnamhO7us2iNOfgI3DpnRp8S2eSwt8B2riZ326OmEuXEkiadLIjbpVY3 hWmeotNoYZTX2x4yjL32C637YCAt01kQJLvcWZmBHgzljWkN67Bf1nTeFlsLCrX5 XxvTPmzWaEerVUhzJ7pnBza4zvI28Nu6cnKmVYUQ7wD4J8/FCY0cF2ApFhjPm2WZ sIbJG9jrtpQ4UCioXVxiVcSRXQTHVbY= -----END CERTIFICATE-----Generated at Mon Mar 2 10:13:43 2026 by rpki-client