$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/042fdff5-d209-3f15-8e0f-8658e95971ec.roa File: 042fdff5-d209-3f15-8e0f-8658e95971ec.roa (raw, json) Hash identifier: Ji4swxw0jyvyVAz3avi6VFr39YSPgvB/Bs8wADbNHno= Subject key identifier: AC:34:8A:55:20:C3:2D:62:3C:A3:12:A6:77:D3:46:33:6F:9A:01:0F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C768187246E1CB3EAF9021680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/042fdff5-d209-3f15-8e0f-8658e95971ec.roa Signing time: Fri 09 Jan 2026 02:00:31 +0000 ROA not before: Fri 09 Jan 2026 02:00:31 +0000 ROA not after: Thu 09 Apr 2026 01:00:31 +0000 asID: 36183 IP address blocks: 172.224.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:76:81:87:24:6e:1c:b3:ea:f9:02:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 9 02:00:31 2026 GMT Not After : Apr 9 01:00:31 2026 GMT Subject: CN=fb013574-4c93-4920-90b8-8b0ee7f8d717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:11:c2:af:76:06:41:59:6e:22:86:e6:72:29: bb:5a:d1:25:cc:66:f4:a1:c0:a1:68:ab:d3:f6:7d: 35:e5:c3:86:31:76:59:89:7f:5e:80:2e:ca:75:19: ea:be:be:c7:1b:42:22:17:d5:87:f6:58:36:d9:55: f4:e5:60:18:c8:0f:96:13:74:cb:17:02:e2:3f:1d: b9:e1:f7:f3:d8:69:b8:93:11:44:9a:5a:43:9e:39: 62:e2:7f:7d:ee:89:9a:6a:cd:73:87:5a:3d:15:b6: a4:27:f2:6c:7c:e5:15:1d:f9:76:dd:3c:b6:fe:3f: 2c:6b:b0:6b:0f:eb:c2:30:89:20:27:27:0b:69:a9: 70:3d:5a:84:0f:dc:17:b6:65:42:b0:e0:e4:84:f4: 23:f4:4c:c7:00:b7:ea:00:a4:5a:ec:56:b4:9f:8b: 6f:05:d4:a5:12:e5:ea:25:cd:26:ae:b8:0d:42:23: 68:24:2c:0a:65:78:f0:f8:ff:4b:0b:77:60:7a:36: dc:88:67:fd:94:f4:73:32:86:81:a0:4f:bc:5f:0d: fb:92:f3:93:25:a7:d3:52:65:88:6c:44:f1:59:cf: 77:7c:39:40:5b:7d:e7:c9:78:42:4b:52:90:0d:ec: 3e:f8:ac:2b:37:01:50:b1:48:cf:f7:ac:6d:e6:17: be:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:34:8A:55:20:C3:2D:62:3C:A3:12:A6:77:D3:46:33:6F:9A:01:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/042fdff5-d209-3f15-8e0f-8658e95971ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:7f:a2:a0:6b:84:bc:d0:cc:2d:46:06:75:eb:59:08:10:03: 7e:00:30:1a:4a:b2:fc:19:cb:b8:9e:d6:70:44:d8:a2:92:51: 14:10:31:c2:5c:aa:a7:3d:15:c6:db:a7:d6:c3:60:2b:c3:99: 13:2e:81:3c:cb:17:1d:f8:e3:f5:3e:30:ee:c5:e1:f8:23:3f: df:72:bc:d8:08:0b:27:f8:ee:fc:ba:b4:16:ff:98:10:cc:37: 2c:7d:2b:9d:00:d0:83:25:4e:eb:23:f5:6e:93:d2:df:80:e7: e0:eb:9d:42:24:07:e6:d7:b1:56:df:bd:2e:d7:91:03:d9:db: 77:cc:59:93:06:73:44:d0:a8:38:59:0d:53:9e:41:db:97:17: ad:c1:5c:8c:ba:32:b5:7a:98:a8:47:df:9a:49:b9:3d:a4:41: 14:d8:b3:61:f1:42:ee:42:f7:10:f7:6c:be:2b:8a:43:0d:d7: 4f:13:c6:ca:b2:81:3a:04:da:4f:ba:c8:9d:b0:ff:ac:c2:86: a7:e4:28:8f:b6:dd:c3:a8:fd:47:2e:0a:77:89:66:ba:3e:93: 96:b0:dc:9c:1c:eb:e5:d4:b6:3d:3c:0a:ea:41:0a:e7:a4:07: 86:12:a1:a7:9c:49:8b:7a:d5:6f:00:f1:05:a1:37:a7:2f:2e: 0e:dd:f0:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx2gYckbhyz6vkCFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEwOTAyMDAzMVoXDTI2MDQwOTAxMDAzMVowLzEtMCsGA1UEAxMk ZmIwMTM1NzQtNGM5My00OTIwLTkwYjgtOGIwZWU3ZjhkNzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RHCr3YGQVluIobmcim7WtElzGb0ocChaKvT 9n015cOGMXZZiX9egC7KdRnqvr7HG0IiF9WH9lg22VX05WAYyA+WE3TLFwLiPx25 4ffz2Gm4kxFEmlpDnjli4n997omaas1zh1o9FbakJ/JsfOUVHfl23Ty2/j8sa7Br D+vCMIkgJycLaalwPVqED9wXtmVCsODkhPQj9EzHALfqAKRa7Fa0n4tvBdSlEuXq Jc0mrrgNQiNoJCwKZXjw+P9LC3dgejbciGf9lPRzMoaBoE+8Xw37kvOTJafTUmWI bETxWc93fDlAW33nyXhCS1KQDew++KwrNwFQsUjP96xt5he+BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKw0ilUgwy1iPKMSpnfTRjNvmgEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDQyZmRmZjUtZDIwOS0z ZjE1LThlMGYtODY1OGU5NTk3MWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADx/oqBrhLzQzC1GBnXrWQgQA34AMBpKsvwZy7ie1nBE2KKSURQQMcJc qqc9Fcbbp9bDYCvDmRMugTzLFx344/U+MO7F4fgjP99yvNgICyf47vy6tBb/mBDM Nyx9K50A0IMlTusj9W6T0t+A5+DrnUIkB+bXsVbfvS7XkQPZ23fMWZMGc0TQqDhZ DVOeQduXF63BXIy6MrV6mKhH35pJuT2kQRTYs2HxQu5C9xD3bL4rikMN108Txsqy gToE2k+6yJ2w/6zChqfkKI+23cOo/UcuCneJZro+k5aw3Jwc6+XUtj08CupBCuek B4YSoaecSYt61W8A8QWhN6cvLg7d8BE= -----END CERTIFICATE-----Generated at Mon Mar 2 06:51:06 2026 by rpki-client