$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/16255b9f-a25e-3220-a36b-c0b6c64c9125.roa File: 16255b9f-a25e-3220-a36b-c0b6c64c9125.roa (raw, json) Hash identifier: OyZ3hhDLqnbp9M36eGAHwCSpIuTZWGOPUybk2XKu1DU= Subject key identifier: 28:57:17:76:CA:C0:F1:FE:90:3E:D6:3C:FD:CA:F1:B3:28:42:F0:1D Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584CB981BE2D2E2F792FCEB93FA0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/16255b9f-a25e-3220-a36b-c0b6c64c9125.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 62904 IP address blocks: 173.232.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:be:2d:2e:2f:79:2f:ce:b9:3f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=976b1d6c-faa4-4272-b6f4-27ba1c37e4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:89:0c:4e:f6:29:7e:c5:cb:d5:44:77:f2:f2: cd:60:b1:e6:6f:cd:ba:4e:bc:e8:75:98:5a:fa:dd: f6:44:0a:94:63:a7:0d:ae:60:08:e9:1c:c9:27:42: 4f:aa:d0:8c:19:39:40:26:86:8d:83:be:01:16:db: 0c:89:07:0f:85:dc:39:fe:84:85:ca:e6:27:ce:e4: 6f:31:09:ad:3f:32:07:cf:06:65:60:f5:d6:76:d7: d2:82:6a:d9:28:84:7d:17:3b:a9:fb:8f:5d:28:04: 4b:2b:7d:38:e2:27:a5:cd:f3:a9:e0:0e:23:fc:f6: bc:c7:d2:9e:59:ee:18:17:04:8b:75:fb:67:79:72: c9:ae:3c:c7:16:d4:56:cc:6d:82:ac:b1:5b:65:16: 47:0d:ef:fe:42:1f:b2:1b:2a:a5:2d:47:c4:c3:5d: d2:1a:58:2d:00:bd:a2:f4:a1:9a:09:27:dc:d5:f2: 9e:d6:6f:e0:93:ec:e2:fe:94:1c:76:f6:da:d1:9f: e3:ff:e9:3c:f0:16:31:07:48:07:df:6d:65:65:28: ce:f4:72:2e:6d:8f:03:b7:65:d8:b5:b3:d5:37:ef: 89:40:bb:f8:eb:a4:db:a2:8c:3c:e9:02:ff:a0:56: 0c:6b:1c:d5:3a:21:06:7d:0e:30:a5:f0:ca:93:a5: 4e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:57:17:76:CA:C0:F1:FE:90:3E:D6:3C:FD:CA:F1:B3:28:42:F0:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/16255b9f-a25e-3220-a36b-c0b6c64c9125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:cf:82:42:fb:db:d2:c4:86:b5:5d:6f:d9:4e:38:94:5e:c2: 82:69:b4:90:9a:24:18:a9:6a:29:48:1f:b0:af:70:8e:4d:9e: f0:81:5c:73:d3:c7:d8:33:cf:6a:ac:69:db:b4:2a:02:35:c9: 56:68:de:5b:2d:78:a2:1e:97:85:c9:7e:01:a1:2f:6c:f5:b2: ae:1f:b7:3f:1f:c8:55:1e:f8:97:4d:9d:e3:65:43:d0:85:f7: 65:7f:c9:5e:35:07:3b:79:6a:44:1d:bd:78:14:aa:03:f5:9a: 56:3c:26:d7:b8:b5:6b:c7:b5:64:4f:7a:97:94:14:f5:78:d6: 50:77:6c:a0:18:a3:2d:27:ad:ee:89:62:0d:d0:d1:32:d3:e3: 29:42:9d:a8:9c:4e:4f:56:06:c2:12:ff:84:bd:4a:75:15:3e: 5f:45:33:94:ab:52:bf:98:68:5a:13:7e:2d:03:14:df:db:2b: b8:3e:8b:84:2e:f3:03:31:44:c9:5b:da:55:a5:d7:7c:4d:a5: 74:ab:b4:f7:50:ca:7f:ad:df:37:d0:57:58:a7:94:8a:21:7b: fe:af:2b:e6:51:1c:70:d4:6d:6f:19:ec:13:6f:aa:c6:0a:9f: 67:45:64:a1:d2:04:be:2f:81:f8:db:4c:9c:a5:19:ed:b8:7b: 53:d0:f0:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gb4tLi95L865P6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk OTc2YjFkNmMtZmFhNC00MjcyLWI2ZjQtMjdiYTFjMzdlNGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIkMTvYpfsXL1UR38vLNYLHmb826TrzodZha +t32RAqUY6cNrmAI6RzJJ0JPqtCMGTlAJoaNg74BFtsMiQcPhdw5/oSFyuYnzuRv MQmtPzIHzwZlYPXWdtfSgmrZKIR9Fzup+49dKARLK3044ielzfOp4A4j/Pa8x9Ke We4YFwSLdftneXLJrjzHFtRWzG2CrLFbZRZHDe/+Qh+yGyqlLUfEw13SGlgtAL2i 9KGaCSfc1fKe1m/gk+zi/pQcdvba0Z/j/+k88BYxB0gH321lZSjO9HIubY8Dt2XY tbPVN++JQLv466Tboow86QL/oFYMaxzVOiEGfQ4wpfDKk6VOUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChXF3bKwPH+kD7WPP3K8bMoQvAdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMTYyNTViOWYtYTI1ZS0z MjIwLWEzNmItYzBiNmM2NGM5MTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrejEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvPgkL729LEhrVdb9lOOJRewoJptJCaJBipailIH7CvcI5NnvCBXHPT x9gzz2qsadu0KgI1yVZo3lsteKIel4XJfgGhL2z1sq4ftz8fyFUe+JdNneNlQ9CF 92V/yV41Bzt5akQdvXgUqgP1mlY8Jte4tWvHtWRPepeUFPV41lB3bKAYoy0nre6J Yg3Q0TLT4ylCnaicTk9WBsIS/4S9SnUVPl9FM5SrUr+YaFoTfi0DFN/bK7g+i4Qu 8wMxRMlb2lWl13xNpXSrtPdQyn+t3zfQV1inlIohe/6vK+ZRHHDUbW8Z7BNvqsYK n2dFZKHSBL4vgfjbTJylGe24e1PQ8Fk= -----END CERTIFICATE-----Generated at Mon Mar 2 14:44:09 2026 by rpki-client