$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/7326f45f-6f77-38c4-9372-e6fbf4a022c5.roa File: 7326f45f-6f77-38c4-9372-e6fbf4a022c5.roa (raw, json) Hash identifier: Nm/bVZjqU/WrHI3Gm0KsuHPDJBqvNTmxzjXlkUZn2Zc= Subject key identifier: FE:44:23:30:B6:A2:DE:01:D2:D8:D4:9E:62:A7:B6:AC:4C:9E:27:55 Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F4328584CAE5714C059589C90A22DCE00 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/7326f45f-6f77-38c4-9372-e6fbf4a022c5.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 397423 IP address blocks: 170.39.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:14:c0:59:58:9c:90:a2:2d:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=ef430671-136a-4b29-8248-f0bd91792acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:2e:b2:06:3e:c1:3a:c2:70:3b:04:47:59: f6:da:6d:9c:34:78:b3:67:b6:bc:0a:46:9b:c4:db: e7:88:d0:ff:65:2e:c8:a1:09:69:54:6d:f7:b5:28: ce:14:10:9b:98:24:7a:d3:6f:e1:94:ee:f0:e1:f4: 90:55:98:6e:22:55:ba:a4:7c:30:d1:b4:c6:f3:5c: 5d:06:94:8c:f8:52:b6:60:dd:fb:30:5d:03:ad:61: 31:84:24:a6:0e:bf:20:8a:55:7f:0a:ad:1a:93:5e: 63:59:cf:b1:f6:25:b2:80:5b:e3:f3:79:b6:c5:1f: 8d:7e:25:2c:39:93:ae:e8:40:f7:71:a2:7e:25:b6: 46:07:1d:8f:57:e0:b9:0a:62:94:52:f0:2f:50:a2: 72:18:1a:7d:b0:69:a0:6f:02:9b:b7:d1:99:e4:7a: 06:00:32:99:80:76:3c:f2:76:0a:7c:80:46:2a:7b: a9:b1:c1:a1:df:a2:77:a9:a5:ba:e7:fa:f7:83:12: 16:8b:49:d7:07:b0:f5:17:53:2c:db:46:d4:39:39: a5:7a:df:aa:bc:92:10:48:6f:93:06:51:76:8a:9b: 7b:c2:80:3b:48:28:ea:02:7d:1f:68:df:db:75:8e: ae:7c:df:43:8e:86:dc:46:87:7e:b5:38:57:85:4c: 40:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:44:23:30:B6:A2:DE:01:D2:D8:D4:9E:62:A7:B6:AC:4C:9E:27:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/7326f45f-6f77-38c4-9372-e6fbf4a022c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 170.39.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:36:88:02:2b:06:cf:39:eb:9c:63:26:32:94:38:b0:f7:8a: 92:fb:64:84:c1:b0:07:9c:9e:e9:e1:ae:96:dc:20:ee:31:59: 12:06:77:98:c6:ff:5c:e0:82:a5:54:3a:86:46:a1:8a:af:48: a5:a9:28:9a:d8:c8:08:ad:5c:4d:f9:66:7c:6f:84:34:58:f4: 6a:d2:2e:7f:c8:13:ea:63:d6:03:d2:3a:7d:0b:65:04:ae:e0: e8:12:41:01:fc:fa:66:6a:63:2f:a8:b3:d7:a6:7e:9f:39:92: 1f:ba:8b:e5:24:f2:fa:b6:b7:00:ff:00:90:8f:af:a2:94:2f: 42:4b:af:7e:14:56:d0:e8:95:64:8e:35:de:5a:a8:ae:4f:c7: b6:ad:de:9d:84:0d:34:f2:7a:f8:e6:59:3a:a5:5b:c5:d8:d2: af:cc:ec:e4:cf:b8:fc:64:26:22:44:1e:3a:7b:2a:2a:e5:c9: 01:42:55:41:56:e3:c9:fb:b0:19:da:44:c9:49:d6:c2:a3:1a: ee:a3:40:aa:ea:a9:e8:ec:0c:89:e9:45:cf:31:73:90:6c:99: 09:5f:a0:5b:46:63:01:17:15:20:a4:dc:11:17:0c:9a:bc:d9: 7f:2d:48:f8:12:bd:2d:33:6c:b0:9f:6e:82:ef:2c:5b:ea:bb: 79:0b:f7:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVxTAWVickKItzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZWY0MzA2NzEtMTM2YS00YjI5LTgyNDgtZjBiZDkxNzkyYWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto8usgY+wTrCcDsER1n22m2cNHizZ7a8Ckab xNvniND/ZS7IoQlpVG33tSjOFBCbmCR602/hlO7w4fSQVZhuIlW6pHww0bTG81xd BpSM+FK2YN37MF0DrWExhCSmDr8gilV/Cq0ak15jWc+x9iWygFvj83m2xR+NfiUs OZOu6ED3caJ+JbZGBx2PV+C5CmKUUvAvUKJyGBp9sGmgbwKbt9GZ5HoGADKZgHY8 8nYKfIBGKnupscGh36J3qaW65/r3gxIWi0nXB7D1F1Ms20bUOTmlet+qvJIQSG+T BlF2ipt7woA7SCjqAn0faN/bdY6ufN9DjobcRod+tThXhUxAYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5EIzC2ot4B0tjUnmKntqxMnidVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvNzMyNmY0NWYtNmY3Ny0z OGM0LTkzNzItZTZmYmY0YTAyMmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqifUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD82iAIrBs8565xjJjKUOLD3ipL7ZITBsAecnunhrpbcIO4xWRIGd5jG /1zggqVUOoZGoYqvSKWpKJrYyAitXE35ZnxvhDRY9GrSLn/IE+pj1gPSOn0LZQSu 4OgSQQH8+mZqYy+os9emfp85kh+6i+Uk8vq2twD/AJCPr6KUL0JLr34UVtDolWSO Nd5aqK5Px7at3p2EDTTyevjmWTqlW8XY0q/M7OTPuPxkJiJEHjp7KirlyQFCVUFW 48n7sBnaRMlJ1sKjGu6jQKrqqejsDInpRc8xc5BsmQlfoFtGYwEXFSCk3BEXDJq8 2X8tSPgSvS0zbLCfboLvLFvqu3kL9yg= -----END CERTIFICATE-----Generated at Mon Mar 2 02:39:44 2026 by rpki-client