$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b255f4ee-0d21-3aa5-b8b2-270d6299253b.roa File: b255f4ee-0d21-3aa5-b8b2-270d6299253b.roa (raw, json) Hash identifier: +R3ad/xGSTbtXDeZWi0J1R1KhDbYhdzDMljMN1UAv/Q= Subject key identifier: AC:8B:86:BC:BF:95:7F:DF:E3:2A:5D:21:23:06:3C:EF:AD:2F:79:6A Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F4328584CA06195952FEC8E7D00549C08 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b255f4ee-0d21-3aa5-b8b2-270d6299253b.roa Signing time: Sat 24 Jan 2026 02:00:31 +0000 ROA not before: Sat 24 Jan 2026 02:00:31 +0000 ROA not after: Fri 24 Apr 2026 01:00:31 +0000 asID: 397865 IP address blocks: 135.84.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a0:61:95:95:2f:ec:8e:7d:00:54:9c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Jan 24 02:00:31 2026 GMT Not After : Apr 24 01:00:31 2026 GMT Subject: CN=cadb67bf-0767-4d1a-ad13-8c975aac6eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:91:0b:de:a4:b4:a2:62:27:9e:77:8b:db:de: e7:77:58:d2:23:bd:f5:fa:49:4f:13:86:aa:4b:da: e3:a2:b5:41:b4:aa:c0:7a:d0:26:a2:26:85:21:6c: d5:0f:c1:0e:8a:e7:7b:6e:06:ac:95:09:5e:25:58: 45:58:99:40:62:c4:3a:a4:aa:75:8e:af:a4:c9:7c: b2:09:90:24:b7:6c:0a:a7:ad:a8:fb:4b:fe:b2:94: 83:3e:4f:dc:2e:56:0f:48:85:bf:99:9d:52:93:4b: 60:53:3f:6c:2d:f9:e9:f9:88:7a:3b:bb:6b:c1:87: b3:36:8c:1c:ba:5d:a2:37:b5:e8:85:40:a7:cb:f8: 41:b5:bd:6e:3c:78:74:78:9d:e4:01:5f:a9:48:a2: 6b:6e:96:17:2b:71:a7:2a:8f:50:5a:c4:8b:d7:2f: 8d:b9:89:bf:da:f0:72:91:0a:91:ef:4b:14:79:c5: 98:a6:36:6e:27:3e:52:2b:92:40:df:24:10:19:2c: e8:31:bc:ab:1c:cf:22:87:f5:21:8d:58:3e:56:4e: b7:a7:15:45:dc:5c:f2:f6:6d:0a:40:a1:14:41:a1: cc:d7:42:3d:72:c5:1e:b2:e3:89:9f:98:37:cc:dd: d8:08:14:e0:52:20:96:2b:05:14:06:d6:51:10:0e: c8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8B:86:BC:BF:95:7F:DF:E3:2A:5D:21:23:06:3C:EF:AD:2F:79:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b255f4ee-0d21-3aa5-b8b2-270d6299253b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 135.84.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a6:91:b2:5e:16:0a:1a:53:b4:63:7c:62:57:1a:ee:7c:a3: 9c:28:7d:9e:74:d3:0b:92:ed:5a:94:e9:05:1b:ab:46:1e:2a: 6a:cc:21:37:40:3a:b7:26:c4:4c:5f:a6:ed:ae:43:6f:ed:dd: ba:4a:38:94:c0:73:6c:2d:71:98:51:a2:bd:ab:7f:9a:5b:00: 73:5e:3d:c1:66:46:c9:7b:1c:f1:0a:bd:74:ea:27:d7:d3:5f: 61:8b:76:d8:c4:3f:b5:d3:fd:59:f5:c0:88:2d:5e:70:85:31: fa:9a:81:f8:15:83:03:38:11:b4:05:72:18:57:67:44:97:23: 89:ce:80:64:e3:ff:0a:de:75:f0:e7:82:09:0a:a5:f7:0a:dd: 60:7f:99:74:5f:7f:9e:f7:a1:53:3c:be:d2:b5:b1:67:ef:6f: 45:f0:ed:28:40:80:0b:37:56:2b:ee:17:b0:13:02:6a:65:4d: 09:53:83:7f:c6:ca:1e:fa:53:d8:2a:e1:b4:f7:46:30:0a:5b: 07:5d:ff:3a:c9:0d:46:06:e4:3e:29:ad:c0:01:6d:29:bd:83: a2:2d:93:f3:d0:e6:da:6a:57:0b:93:fa:d2:7e:66:43:09:9c: a2:08:7d:ee:a8:d0:de:61:e4:af:24:81:42:f4:0a:5a:32:12: a7:ce:35:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEygYZWVL+yOfQBUnAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI2MDEyNDAyMDAzMVoXDTI2MDQyNDAxMDAzMVowLzEtMCsGA1UEAxMk Y2FkYjY3YmYtMDc2Ny00ZDFhLWFkMTMtOGM5NzVhYWM2ZWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpEL3qS0omInnneL297nd1jSI731+klPE4aq S9rjorVBtKrAetAmoiaFIWzVD8EOiud7bgaslQleJVhFWJlAYsQ6pKp1jq+kyXyy CZAkt2wKp62o+0v+spSDPk/cLlYPSIW/mZ1Sk0tgUz9sLfnp+Yh6O7trwYezNowc ul2iN7XohUCny/hBtb1uPHh0eJ3kAV+pSKJrbpYXK3GnKo9QWsSL1y+NuYm/2vBy kQqR70sUecWYpjZuJz5SK5JA3yQQGSzoMbyrHM8ih/UhjVg+Vk63pxVF3Fzy9m0K QKEUQaHM10I9csUesuOJn5g3zN3YCBTgUiCWKwUUBtZREA7ItwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyLhry/lX/f4ypdISMGPO+tL3lqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvYjI1NWY0ZWUtMGQyMS0z YWE1LWI4YjItMjcwZDYyOTkyNTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBh1R4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSmkbJeFgoaU7RjfGJXGu58o5wofZ500wuS7VqU6QUbq0YeKmrMITdA OrcmxExfpu2uQ2/t3bpKOJTAc2wtcZhRor2rf5pbAHNePcFmRsl7HPEKvXTqJ9fT X2GLdtjEP7XT/Vn1wIgtXnCFMfqagfgVgwM4EbQFchhXZ0SXI4nOgGTj/wredfDn ggkKpfcK3WB/mXRff573oVM8vtK1sWfvb0Xw7ShAgAs3VivuF7ATAmplTQlTg3/G yh76U9gq4bT3RjAKWwdd/zrJDUYG5D4prcABbSm9g6Itk/PQ5tpqVwuT+tJ+ZkMJ nKIIfe6o0N5h5K8kgUL0CloyEqfONZI= -----END CERTIFICATE-----Generated at Mon Mar 2 07:47:23 2026 by rpki-client