$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/571768c7-1a06-3657-84a4-df54cd111858.roa File: 571768c7-1a06-3657-84a4-df54cd111858.roa (raw, json) Hash identifier: 1n3L4kwKk5layLJDxo/oAGMBxHZKM70iqTe+a8rWhjg= Subject key identifier: B7:E1:24:07:63:9A:EB:96:B6:A7:48:19:DD:16:3F:D0:90:D6:F1:AC Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F4328584C9ACC5B6CC4C42E8A81AA4580 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/571768c7-1a06-3657-84a4-df54cd111858.roa Signing time: Thu 22 Jan 2026 02:00:31 +0000 ROA not before: Thu 22 Jan 2026 02:00:31 +0000 ROA not after: Wed 22 Apr 2026 01:00:31 +0000 asID: 54535 IP address blocks: 156.53.198.0/24 maxlen: 24 156.53.199.0/24 maxlen: 24 156.53.224.0/23 maxlen: 23 156.53.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9a:cc:5b:6c:c4:c4:2e:8a:81:aa:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Jan 22 02:00:31 2026 GMT Not After : Apr 22 01:00:31 2026 GMT Subject: CN=9c83e2c9-dcf4-43d9-b071-8ce7e4a3606c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e2:0a:9b:c2:59:df:14:a3:ba:3f:bf:64:d4: 27:de:71:50:26:e7:01:42:1c:88:c4:1e:51:4f:08: b1:f5:e0:42:1c:e6:1b:d5:d2:2b:70:e7:14:13:73: fe:b3:a7:d4:4d:6c:3e:64:5e:30:84:ab:ff:06:85: ec:bf:03:c7:10:f4:d2:d0:e3:ab:31:52:a2:79:bf: cc:cd:38:c7:ed:36:bb:6b:e5:1d:d4:78:e1:80:9e: 3c:a7:68:f4:2c:5c:3c:df:91:ee:78:4d:e2:6c:ee: 6b:0f:72:8e:2e:54:ad:1a:99:e0:4f:6d:20:41:52: 78:ae:6e:de:e1:d5:4a:1a:9b:d5:0b:ea:dd:9d:0f: af:ac:14:94:6c:ad:0e:f9:86:a5:24:11:e5:d0:74: 96:e7:bb:8f:42:78:97:fe:a4:07:68:1e:2b:97:ea: b2:59:86:d4:aa:ab:4c:8a:2c:3b:18:5b:5b:ab:5b: aa:f5:8d:7b:63:7f:e8:81:24:b7:39:53:3e:c7:6b: a5:49:9e:77:be:56:fc:7e:5b:32:47:13:01:e3:fa: 93:f7:d6:c2:9e:8e:b4:94:26:6e:45:a8:1e:9d:f9: 58:83:7d:1e:a6:05:20:94:2b:5e:ff:31:1e:82:8f: 28:db:c3:21:e6:d9:23:03:4e:81:63:e5:18:33:ad: 2a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E1:24:07:63:9A:EB:96:B6:A7:48:19:DD:16:3F:D0:90:D6:F1:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/571768c7-1a06-3657-84a4-df54cd111858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 156.53.198.0/23 156.53.224.0/23 156.53.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:65:f4:24:6a:40:a9:7c:d9:5c:8f:a9:e7:fe:71:fe:be:b6: f9:36:50:e5:3d:a6:21:e4:94:66:ed:dd:c7:31:71:71:44:e8: fd:32:3b:a2:ff:4f:da:94:d7:35:78:89:3b:97:51:f4:3e:69: 86:83:ed:07:d6:e6:98:d2:30:16:67:5a:33:25:7e:ed:2e:09: 48:26:47:d8:b4:8e:c5:02:cc:5e:d6:dc:f5:db:1c:8d:b0:4b: 8e:dd:e3:dd:f6:04:e6:90:bc:c1:a9:3f:b8:f2:78:04:38:f8: 12:13:66:b6:b3:38:ed:7a:f6:c5:5e:94:c3:7b:8d:66:41:e6: 2a:f8:5e:94:d2:44:ee:73:36:9a:36:b3:bc:6b:a4:d7:90:b2: 80:2d:03:86:a3:b7:8c:54:c9:25:17:cd:ef:66:3c:da:ab:8f: 8e:d1:e0:10:b0:cd:07:b4:65:6d:70:7f:6e:11:8f:42:7c:88: c6:e0:ad:e7:67:34:01:34:dd:20:32:f7:48:1e:75:f6:33:09: 4c:ff:b1:6a:17:fb:3f:f7:68:c1:6e:30:d5:d2:58:72:49:4c: 81:fa:90:fa:fe:83:90:59:37:9b:89:5d:ca:81:d7:63:18:5d: 1e:52:78:5f:18:9c:b3:8a:1a:08:3c:ca:6d:04:27:39:1b:25: 73:aa:ea:af -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEyazFtsxMQuioGqRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI2MDEyMjAyMDAzMVoXDTI2MDQyMjAxMDAzMVowLzEtMCsGA1UEAxMk OWM4M2UyYzktZGNmNC00M2Q5LWIwNzEtOGNlN2U0YTM2MDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguIKm8JZ3xSjuj+/ZNQn3nFQJucBQhyIxB5R Twix9eBCHOYb1dIrcOcUE3P+s6fUTWw+ZF4whKv/BoXsvwPHEPTS0OOrMVKieb/M zTjH7Ta7a+Ud1HjhgJ48p2j0LFw835HueE3ibO5rD3KOLlStGpngT20gQVJ4rm7e 4dVKGpvVC+rdnQ+vrBSUbK0O+YalJBHl0HSW57uPQniX/qQHaB4rl+qyWYbUqqtM iiw7GFtbq1uq9Y17Y3/ogSS3OVM+x2ulSZ53vlb8flsyRxMB4/qT99bCno60lCZu RagenflYg30epgUglCte/zEego8o28Mh5tkjA06BY+UYM60qSQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFLfhJAdjmuuWtqdIGd0WP9CQ1vGsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvNTcxNzY4YzctMWEwNi0z NjU3LTg0YTQtZGY1NGNkMTExODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnDXGAwQB nDXgAwQCnDXwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIdl9CRqQKl82VyPqef+cf6+tvk2UOU9piHklGbt 3ccxcXFE6P0yO6L/T9qU1zV4iTuXUfQ+aYaD7QfW5pjSMBZnWjMlfu0uCUgmR9i0 jsUCzF7W3PXbHI2wS47d4932BOaQvMGpP7jyeAQ4+BITZrazOO169sVelMN7jWZB 5ir4XpTSRO5zNpo2s7xrpNeQsoAtA4ajt4xUySUXze9mPNqrj47R4BCwzQe0ZW1w f24Rj0J8iMbgrednNAE03SAy90gedfYzCUz/sWoX+z/3aMFuMNXSWHJJTIH6kPr+ g5BZN5uJXcqB12MYXR5SeF8YnLOKGgg8ym0EJzkbJXOq6q8= -----END CERTIFICATE-----Generated at Mon Mar 2 14:27:14 2026 by rpki-client