$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/5584634c-07a6-3f85-9f96-cebd2ae0742b.roa File: 5584634c-07a6-3f85-9f96-cebd2ae0742b.roa (raw, json) Hash identifier: 37n5svBU2oL+m/BXSmlFQskj4LLnP6XpYj7rWJKwXVQ= Subject key identifier: 4E:10:62:3E:FD:BB:F1:55:D3:BF:BC:1F:3C:DE:B4:C6:86:CA:BF:24 Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F4328584C6E217398B0FFC3D1D405F880 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/5584634c-07a6-3f85-9f96-cebd2ae0742b.roa Signing time: Tue 06 Jan 2026 02:00:31 +0000 ROA not before: Tue 06 Jan 2026 02:00:31 +0000 ROA not after: Mon 06 Apr 2026 01:00:31 +0000 asID: 397865 IP address blocks: 216.168.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6e:21:73:98:b0:ff:c3:d1:d4:05:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Jan 6 02:00:31 2026 GMT Not After : Apr 6 01:00:31 2026 GMT Subject: CN=9ef2513c-c913-49c6-bf53-730144e5d167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ef:7d:b7:9a:47:37:73:08:fd:b4:57:a7:db: 26:70:a9:66:75:ce:bd:b7:4a:b0:e8:b8:d2:b0:fd: 93:7c:a7:a7:f6:db:87:6b:62:a7:e9:c5:a3:77:39: 88:b3:7e:31:85:31:e3:9d:81:29:d8:e4:6a:bd:09: 19:e8:a4:0e:72:a3:9e:28:7a:bd:99:32:97:2d:95: e4:e5:43:ee:fd:ee:fe:0d:17:d7:03:b3:c5:1e:5d: 5b:12:7f:51:66:09:8e:03:dd:14:35:a0:d5:7c:c3: dc:dc:e0:32:05:53:7c:9c:00:b8:70:44:98:cd:81: 9c:03:63:e4:15:f1:c8:b4:ca:ab:a2:62:9c:5d:af: f2:d6:37:6d:eb:fa:2a:4d:e9:d1:70:10:83:19:ee: d6:c2:bf:6b:41:ee:53:ea:45:c4:a7:5e:54:8a:1d: 78:9d:7d:ca:7d:b2:32:7a:d1:b3:db:a0:dd:28:4b: 79:da:06:79:7a:ad:51:90:c0:39:fd:1f:f4:e1:da: 10:cc:18:1a:d7:b1:8f:ec:1e:f0:f2:75:ad:4f:a5: 42:a5:7f:74:18:b6:4c:41:f2:bf:02:d3:b5:73:95: 31:9f:dc:60:7f:0b:81:57:c9:cc:6d:10:0b:d2:03: 69:b0:3d:75:b3:1a:97:80:72:0d:44:40:e1:17:78: 37:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:10:62:3E:FD:BB:F1:55:D3:BF:BC:1F:3C:DE:B4:C6:86:CA:BF:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/5584634c-07a6-3f85-9f96-cebd2ae0742b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 216.168.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:c2:49:84:b2:c4:64:49:4c:21:db:e8:c6:ea:41:6a:ef:16: 2b:81:91:e9:33:52:d5:86:6f:c8:b8:9c:8c:a5:4b:71:73:ca: 9f:96:2a:f0:5e:0d:2b:d6:7e:90:d9:85:37:4e:18:2e:82:60: 56:8b:15:af:44:f1:c6:f0:48:5e:90:d0:46:c4:36:e1:8b:39: 84:cb:1d:a4:4b:a7:10:6f:5c:f5:ed:7e:69:ea:6e:82:df:53: 47:53:4d:41:53:16:cd:3c:81:f9:29:6e:3a:c5:37:af:51:bf: 53:56:b9:d7:26:35:90:74:38:36:0c:7b:41:ff:2c:20:23:2c: 06:cc:c8:17:38:1b:83:6b:7e:c0:ed:8c:40:62:36:27:86:11: dc:dd:e6:14:15:36:d3:d5:be:5b:1d:89:cf:7b:24:ef:61:61: ac:01:92:c6:66:0d:e2:b3:65:df:4f:7a:c4:59:cc:90:5d:a3: 0e:95:8f:d9:72:02:d2:88:62:9a:f8:73:9d:52:44:f8:b6:e6: b9:6d:3f:c1:e9:09:2e:d9:31:fd:23:2f:c1:1d:81:1a:d6:4c: 36:37:f8:be:30:f8:e0:f2:7a:9e:46:35:6c:59:51:34:9a:11: 5a:4c:7c:07:7c:bb:f6:92:2d:f4:28:da:7a:ea:fe:4c:49:ef: 43:44:ec:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExuIXOYsP/D0dQF+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk OWVmMjUxM2MtYzkxMy00OWM2LWJmNTMtNzMwMTQ0ZTVkMTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle99t5pHN3MI/bRXp9smcKlmdc69t0qw6LjS sP2TfKen9tuHa2Kn6cWjdzmIs34xhTHjnYEp2ORqvQkZ6KQOcqOeKHq9mTKXLZXk 5UPu/e7+DRfXA7PFHl1bEn9RZgmOA90UNaDVfMPc3OAyBVN8nAC4cESYzYGcA2Pk FfHItMqromKcXa/y1jdt6/oqTenRcBCDGe7Wwr9rQe5T6kXEp15Uih14nX3KfbIy etGz26DdKEt52gZ5eq1RkMA5/R/04doQzBga17GP7B7w8nWtT6VCpX90GLZMQfK/ AtO1c5Uxn9xgfwuBV8nMbRAL0gNpsD11sxqXgHINREDhF3g33wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4QYj79u/FV07+8HzzetMaGyr8kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvNTU4NDYzNGMtMDdhNi0z Zjg1LTlmOTYtY2ViZDJhZTA3NDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfCSYSyxGRJTCHb6MbqQWrvFiuBkekzUtWGb8i4nIylS3Fzyp+WKvBe DSvWfpDZhTdOGC6CYFaLFa9E8cbwSF6Q0EbENuGLOYTLHaRLpxBvXPXtfmnqboLf U0dTTUFTFs08gfkpbjrFN69Rv1NWudcmNZB0ODYMe0H/LCAjLAbMyBc4G4NrfsDt jEBiNieGEdzd5hQVNtPVvlsdic97JO9hYawBksZmDeKzZd9PesRZzJBdow6Vj9ly AtKIYpr4c51SRPi25rltP8HpCS7ZMf0jL8EdgRrWTDY3+L4w+ODyep5GNWxZUTSa EVpMfAd8u/aSLfQo2nrq/kxJ70NE7Dg= -----END CERTIFICATE-----Generated at Mon Mar 2 02:28:25 2026 by rpki-client