$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad/3aff446c-ca9d-35e7-bff7-d7481de0cc3a.roa File: 3aff446c-ca9d-35e7-bff7-d7481de0cc3a.roa (raw, json) Hash identifier: y7VzeS0mlBH2Q1JO6M7Kk2YZVMGuaWqzDOLNM04Ksa0= Subject key identifier: C6:5D:AC:B1:D0:DE:E8:20:55:B4:56:AF:8C:1B:8D:FC:55:DA:4F:56 Certificate issuer: /CN=2321434f-c7f3-488c-af62-bfe847e2e8ad Certificate serial: 010D0C9F4328584CD9DA32DD584FC1304581BA80 Authority key identifier: D5:67:C5:39:EC:DB:2F:19:90:CB:27:A9:D7:35:5C:34:94:5A:01:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad/3aff446c-ca9d-35e7-bff7-d7481de0cc3a.roa Signing time: Wed 04 Feb 2026 17:58:38 +0000 ROA not before: Wed 04 Feb 2026 17:58:38 +0000 ROA not after: Tue 05 May 2026 16:58:38 +0000 asID: 395855 IP address blocks: 185.169.108.0/24 maxlen: 24 185.169.109.0/24 maxlen: 24 185.169.110.0/24 maxlen: 24 185.169.111.0/24 maxlen: 24 185.171.208.0/22 maxlen: 22 216.230.176.0/23 maxlen: 23 216.230.176.0/24 maxlen: 24 216.230.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad/2321434f-c7f3-488c-af62-bfe847e2e8ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad/2321434f-c7f3-488c-af62-bfe847e2e8ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d9:da:32:dd:58:4f:c1:30:45:81:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2321434f-c7f3-488c-af62-bfe847e2e8ad Validity Not Before: Feb 4 17:58:38 2026 GMT Not After : May 5 16:58:38 2026 GMT Subject: CN=5fd54cd7-7f27-4e43-afe8-cdaff86de2bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:80:aa:9c:5b:16:f2:d3:6d:02:d8:fe:e2:2f: 28:f7:a0:7f:09:78:d7:f6:bd:d7:67:49:07:c3:60: 2e:c0:ce:ea:8b:75:2e:ba:22:44:f1:8a:9a:e5:27: 86:f3:f6:7f:00:f7:ec:00:0c:a7:ea:d0:dc:87:72: 17:ca:b0:a8:b0:f0:2b:0e:6e:96:b3:41:8e:55:c5: 0f:d1:1a:7a:22:32:1a:93:a9:a7:1f:46:9d:46:8a: 89:c5:5b:50:62:1d:e5:e3:81:ec:60:47:15:80:f0: 8e:ba:6b:a1:b6:9d:8e:b6:75:ba:3d:35:17:3f:7a: 9a:36:84:28:2f:4a:00:84:00:a2:c0:08:d7:89:7d: 81:ad:b6:72:67:ff:a0:f1:09:1a:67:49:a3:50:53: 1b:30:e7:df:8e:b1:e4:f6:15:67:b4:d0:66:13:04: 8f:c4:31:0b:e5:6e:1f:b4:b7:c0:e0:97:09:11:29: 39:c4:2f:26:4f:e1:d0:eb:b9:dd:f5:00:36:0b:8a: 45:5b:b4:e9:c6:77:48:85:6e:7c:2a:d4:e7:cf:db: 12:83:c1:d7:c3:0b:3e:9d:8d:e3:b1:6d:3a:36:2e: b7:22:9b:61:12:9b:31:b1:92:a0:f7:d4:a7:d1:7b: 49:d0:f1:27:d2:3d:aa:f9:a6:b7:59:ec:28:3f:75: 97:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5D:AC:B1:D0:DE:E8:20:55:B4:56:AF:8C:1B:8D:FC:55:DA:4F:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad/3aff446c-ca9d-35e7-bff7-d7481de0cc3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad/2321434f-c7f3-488c-af62-bfe847e2e8ad.crl X509v3 Authority Key Identifier: keyid:D5:67:C5:39:EC:DB:2F:19:90:CB:27:A9:D7:35:5C:34:94:5A:01:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad.cer sbgp-ipAddrBlock: critical IPv4: 185.169.108.0/22 185.171.208.0/22 216.230.176.0-216.230.178.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:d8:90:16:34:d6:9c:c2:2b:f1:73:5c:d1:c2:cb:ba:b7:4b: e3:7f:b6:3e:6f:55:43:41:26:bb:da:9b:16:fb:fb:1b:e0:ca: 64:8e:00:1a:01:1a:24:e3:00:08:36:de:bd:69:bb:eb:f9:90: c3:5e:2b:b3:79:fe:43:e1:5e:b0:c3:b0:dd:90:92:c5:35:bd: 54:09:49:09:fc:38:03:23:a4:18:5a:83:55:d2:bd:0d:75:38: b3:b1:d1:9d:76:c3:5b:3a:64:53:4e:2d:a1:94:3a:ea:e2:1f: 3b:07:cd:46:8b:8c:d3:a5:10:77:4b:45:34:21:92:49:f4:aa: 9b:73:23:1b:90:f8:d2:81:2d:af:80:e0:8b:ef:f0:0f:ea:5d: 07:5a:6e:82:84:6a:00:40:85:bc:01:25:48:c3:02:26:7a:a4: 9b:9e:a2:80:90:1d:a7:69:a4:d5:ce:2f:77:8f:e7:8f:7a:8e: a1:cc:e6:86:02:03:56:67:96:e0:44:89:72:bb:e9:c7:95:83: a9:3e:af:76:96:50:c5:77:2b:9e:85:d2:81:4b:71:49:5c:74: 68:d2:76:e9:06:b9:df:44:ed:8d:e0:83:d5:52:41:10:d3:fa: f3:a4:f3:93:ad:57:a4:52:53:13:35:96:44:b4:15:a7:c0:5c: ac:74:46:ae -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEzZ2jLdWE/BMEWBuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjMyMTQzNGYtYzdmMy00ODhjLWFmNjItYmZlODQ3ZTJl OGFkMB4XDTI2MDIwNDE3NTgzOFoXDTI2MDUwNTE2NTgzOFowLzEtMCsGA1UEAxMk NWZkNTRjZDctN2YyNy00ZTQzLWFmZTgtY2RhZmY4NmRlMmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiICqnFsW8tNtAtj+4i8o96B/CXjX9r3XZ0kH w2AuwM7qi3UuuiJE8Yqa5SeG8/Z/APfsAAyn6tDch3IXyrCosPArDm6Ws0GOVcUP 0Rp6IjIak6mnH0adRoqJxVtQYh3l44HsYEcVgPCOumuhtp2OtnW6PTUXP3qaNoQo L0oAhACiwAjXiX2BrbZyZ/+g8QkaZ0mjUFMbMOffjrHk9hVntNBmEwSPxDEL5W4f tLfA4JcJESk5xC8mT+HQ67nd9QA2C4pFW7TpxndIhW58KtTnz9sSg8HXwws+nY3j sW06Ni63IpthEpsxsZKg99Sn0XtJ0PEn0j2q+aa3WewoP3WXHQIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFMZdrLHQ3uggVbRWr4wbjfxV2k9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yMzIx NDM0Zi1jN2YzLTQ4OGMtYWY2Mi1iZmU4NDdlMmU4YWQvM2FmZjQ0NmMtY2E5ZC0z NWU3LWJmZjctZDc0ODFkZTBjYzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMjMyMTQzNGYtYzdmMy00ODhjLWFm NjItYmZlODQ3ZTJlOGFkLzIzMjE0MzRmLWM3ZjMtNDg4Yy1hZjYyLWJmZTg0N2Uy ZThhZC5jcmwwHwYDVR0jBBgwFoAU1WfFOezbLxmQyyep1zVcNJRaAQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yMzIxNDM0Zi1jN2YzLTQ4OGMtYWY2Mi1iZmU4 NDdlMmU4YWQuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCualsAwQC uavQMAwDBATY5rADBADY5rIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAItiQFjTWnMIr8XNc0cLLurdL43+2 Pm9VQ0Emu9qbFvv7G+DKZI4AGgEaJOMACDbevWm76/mQw14rs3n+Q+FesMOw3ZCS xTW9VAlJCfw4AyOkGFqDVdK9DXU4s7HRnXbDWzpkU04toZQ66uIfOwfNRouM06UQ d0tFNCGSSfSqm3MjG5D40oEtr4Dgi+/wD+pdB1pugoRqAECFvAElSMMCJnqkm56i gJAdp2mk1c4vd4/nj3qOoczmhgIDVmeW4ESJcrvpx5WDqT6vdpZQxXcrnoXSgUtx SVx0aNJ26Qa530TtjeCD1VJBENP686Tzk61XpFJTEzWWRLQVp8BcrHRGrg== -----END CERTIFICATE-----Generated at Mon Mar 2 07:37:10 2026 by rpki-client