$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/395c0dc9-2753-334d-8d45-7b06bbeef517.roa File: 395c0dc9-2753-334d-8d45-7b06bbeef517.roa (raw, json) Hash identifier: YBh/7Ks576SWhei5OYoSb8f3c+Gr0jyfqAEtMpW+mJ8= Subject key identifier: 05:04:02:D8:C8:B2:9B:E8:52:10:03:C5:E6:7F:DF:BC:63:78:77:E5 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584C6B56ACCE2317E9C077189C00 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/395c0dc9-2753-334d-8d45-7b06bbeef517.roa Signing time: Mon 05 Jan 2026 02:00:31 +0000 ROA not before: Mon 05 Jan 2026 02:00:31 +0000 ROA not after: Sun 05 Apr 2026 01:00:31 +0000 asID: 40948 IP address blocks: 162.247.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6b:56:ac:ce:23:17:e9:c0:77:18:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Jan 5 02:00:31 2026 GMT Not After : Apr 5 01:00:31 2026 GMT Subject: CN=d92eefd3-322b-4102-8aa1-614f1b81ee56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c0:1a:48:1c:c2:c9:9c:6b:1e:59:31:03:94: 59:25:98:21:a0:cf:f2:c9:16:41:78:0d:80:6d:5e: 70:c4:b0:9c:d3:07:23:02:8a:49:3d:33:b3:13:73: 75:e1:93:d4:52:0d:5a:1e:b2:77:d3:67:1d:ad:9e: 42:83:a9:be:63:bf:6c:76:c2:fb:f8:7d:c9:18:f2: 2f:cb:c0:9a:c5:8a:ef:e3:17:16:e1:51:cf:4a:1c: 41:b5:60:6b:a7:ac:74:e0:f4:44:ac:cc:54:6b:3e: a9:32:11:bf:dd:37:d6:f1:d2:c9:51:70:3c:b3:88: bb:19:2b:de:48:93:a2:ce:63:8d:87:5c:ec:20:9d: 32:c0:df:cc:ac:58:ce:36:85:88:b6:30:b3:5b:ff: 88:9d:32:ef:38:6e:9d:3f:ce:1b:5a:fb:db:54:e2: 4b:98:e4:f3:1c:d4:0c:8a:09:b4:50:70:a7:b0:e8: 53:3b:80:db:2e:19:61:ce:76:ea:fb:98:31:8a:5a: 8c:74:e9:74:52:98:15:02:32:59:07:e9:c9:dd:ce: 4b:52:71:4a:58:e5:22:be:41:77:f7:ea:31:1e:91: 77:39:17:61:56:87:f3:6d:4a:0c:a1:79:1b:ef:ae: d0:93:e6:44:24:9e:a8:36:2e:04:7d:28:60:d3:6c: 9e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:04:02:D8:C8:B2:9B:E8:52:10:03:C5:E6:7F:DF:BC:63:78:77:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/395c0dc9-2753-334d-8d45-7b06bbeef517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 162.247.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:08:01:77:f1:a9:5a:e5:4b:44:90:03:e2:2b:c2:47:59:a6: 17:ff:e0:a3:98:36:23:78:9d:b5:f8:40:a9:a2:90:6a:ca:1d: ca:ec:49:49:88:fb:a4:1a:4b:32:88:2f:d9:2e:f9:1a:03:3b: 91:c5:47:19:45:65:83:20:59:62:5f:0e:fc:ff:5e:8f:68:55: 81:09:93:c2:90:08:26:bc:b6:6c:ae:3a:f6:db:96:31:90:25: 34:2c:58:b3:b6:b2:e5:18:dd:ed:bc:19:a2:2c:a8:4e:5e:1d: 48:dc:96:25:aa:e2:54:73:45:45:25:40:f5:b8:1f:b2:ae:bf: 59:39:a5:b3:87:3b:74:f2:d9:98:74:69:17:92:74:39:8d:d5: 34:e3:ce:0e:59:fb:aa:8c:d4:ed:97:3d:09:37:e3:13:fb:d0: 05:64:bb:ca:a9:28:83:9b:ff:6d:7c:c6:56:fa:18:64:2b:52: 7f:07:42:1a:d6:ad:40:4f:8c:65:f2:1c:55:85:56:61:e3:7c: d9:59:26:2b:ad:b1:1e:2b:e5:64:0d:0a:8a:55:9f:c3:e7:65: 3e:aa:bc:80:fb:c2:45:26:06:99:c3:4e:05:cb:15:ea:28:15: ce:3f:2e:73:01:02:44:37:32:db:81:93:a7:ed:82:6a:c8:3b: 99:12:95:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExrVqzOIxfpwHcYnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MDEwNTAyMDAzMVoXDTI2MDQwNTAxMDAzMVowLzEtMCsGA1UEAxMk ZDkyZWVmZDMtMzIyYi00MTAyLThhYTEtNjE0ZjFiODFlZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsAaSBzCyZxrHlkxA5RZJZghoM/yyRZBeA2A bV5wxLCc0wcjAopJPTOzE3N14ZPUUg1aHrJ302cdrZ5Cg6m+Y79sdsL7+H3JGPIv y8CaxYrv4xcW4VHPShxBtWBrp6x04PRErMxUaz6pMhG/3TfW8dLJUXA8s4i7GSve SJOizmONh1zsIJ0ywN/MrFjONoWItjCzW/+InTLvOG6dP84bWvvbVOJLmOTzHNQM igm0UHCnsOhTO4DbLhlhznbq+5gxilqMdOl0UpgVAjJZB+nJ3c5LUnFKWOUivkF3 9+oxHpF3ORdhVofzbUoMoXkb767Qk+ZEJJ6oNi4EfShg02yeFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUEAtjIspvoUhADxeZ/37xjeHflMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvMzk1YzBkYzktMjc1My0z MzRkLThkNDUtN2IwNmJiZWVmNTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoveEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMIAXfxqVrlS0SQA+IrwkdZphf/4KOYNiN4nbX4QKmikGrKHcrsSUmI +6QaSzKIL9ku+RoDO5HFRxlFZYMgWWJfDvz/Xo9oVYEJk8KQCCa8tmyuOvbbljGQ JTQsWLO2suUY3e28GaIsqE5eHUjcliWq4lRzRUUlQPW4H7Kuv1k5pbOHO3Ty2Zh0 aReSdDmN1TTjzg5Z+6qM1O2XPQk34xP70AVku8qpKIOb/218xlb6GGQrUn8HQhrW rUBPjGXyHFWFVmHjfNlZJiutsR4r5WQNCopVn8PnZT6qvID7wkUmBpnDTgXLFeoo Fc4/LnMBAkQ3MtuBk6ftgmrIO5kSleI= -----END CERTIFICATE-----Generated at Mon Mar 2 09:49:18 2026 by rpki-client