$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c1bb196-7c8b-30a1-a588-4bd1703475f7.roa File: 0c1bb196-7c8b-30a1-a588-4bd1703475f7.roa (raw, json) Hash identifier: uEpltMzP/YpLfTEBFXl+FOYtB9QV2UKz8GskzSvzuOY= Subject key identifier: D2:D7:BC:B3:E0:C1:B0:97:7E:BA:C0:3A:BE:F6:15:47:2B:57:E9:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C76818714236903E107E12690 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c1bb196-7c8b-30a1-a588-4bd1703475f7.roa Signing time: Fri 09 Jan 2026 02:00:31 +0000 ROA not before: Fri 09 Jan 2026 02:00:31 +0000 ROA not after: Thu 09 Apr 2026 01:00:31 +0000 asID: 36183 IP address blocks: 172.224.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:76:81:87:14:23:69:03:e1:07:e1:26:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 9 02:00:31 2026 GMT Not After : Apr 9 01:00:31 2026 GMT Subject: CN=96ea2c15-4e46-405e-81ac-d0a15e0d3745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e9:11:91:57:09:dd:d1:f9:b4:ac:af:52:ad: d7:e6:30:59:ac:ee:e3:e1:f8:58:6f:b7:86:ed:8b: a5:8f:88:a5:1e:38:43:8d:59:4c:62:75:44:12:3c: 28:9a:67:24:74:38:4f:93:ad:5d:f1:03:72:3d:c8: 09:14:a3:5a:c4:8c:30:95:0d:ba:c7:8d:ad:54:c1: f7:8c:8a:85:07:3d:3d:69:c8:96:b7:29:61:9a:27: ff:e8:bd:33:7c:71:7c:55:7c:ce:50:1b:82:74:30: 9b:b0:fe:de:22:cf:c2:39:82:9e:51:f7:13:57:2e: fe:4a:3b:81:58:73:04:9c:46:82:20:01:6a:8c:d7: f6:07:10:64:62:4a:1c:36:cd:a3:7b:4c:33:e5:51: 2c:52:3d:b9:cb:a8:8f:d2:c4:a1:31:c8:58:97:db: 70:70:9a:b8:1f:aa:22:d0:71:9c:23:21:b1:9f:58: 2e:92:83:8f:1b:b3:1b:4f:0f:3f:59:8f:66:11:3b: a7:bb:98:fa:60:c5:c8:48:31:14:86:4a:4f:f8:bc: e5:45:cd:65:e3:28:bd:24:8d:4f:1f:61:8c:ce:c2: e8:2f:65:bc:16:40:fd:3b:99:d7:81:4d:35:d7:b1: d2:0e:d9:90:ce:37:c6:8d:98:d6:cc:ba:ea:db:db: f0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D7:BC:B3:E0:C1:B0:97:7E:BA:C0:3A:BE:F6:15:47:2B:57:E9:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c1bb196-7c8b-30a1-a588-4bd1703475f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:df:50:1c:ea:ce:35:10:cf:0e:d9:08:ac:d2:9c:3e:94:bb: ad:a2:c6:7a:2e:48:ff:83:33:be:42:da:73:60:8a:64:5c:45: eb:71:ab:51:45:f8:23:c7:74:27:30:17:64:1a:71:10:25:ea: 87:67:29:93:ba:14:a3:c8:38:05:80:8a:0e:b4:5f:5f:4e:70: a3:68:e4:ce:5c:6b:91:9c:cf:bd:69:71:57:4f:60:3d:24:46: 95:9a:ca:cb:e2:6c:f9:59:46:12:c0:50:f0:2f:b7:ac:33:50: bf:de:99:38:e0:66:ec:98:cb:a4:5d:56:ae:f9:1c:90:ec:4c: 37:0a:f6:84:e5:b5:fe:8e:3c:b1:59:30:77:8e:60:17:63:da: f5:44:ab:fb:93:c4:1a:f1:83:a4:79:05:68:c7:63:24:ee:d6: f2:a4:a5:b7:07:86:e8:6b:15:98:36:be:25:07:32:a3:8f:94: 8c:a2:1b:60:62:2c:b0:7e:a5:8c:47:15:96:ab:29:2b:b7:86: 33:9d:2f:92:bd:b0:85:02:13:cf:9d:73:97:8e:3f:62:5c:4f: a1:17:2b:47:c7:fc:f9:1d:3d:5a:0e:9c:6f:45:fa:a1:9b:51: 1f:d6:9c:ba:4c:96:1b:2f:22:bc:00:3c:3e:33:b3:66:20:c2: 50:51:fd:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx2gYcUI2kD4QfhJpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEwOTAyMDAzMVoXDTI2MDQwOTAxMDAzMVowLzEtMCsGA1UEAxMk OTZlYTJjMTUtNGU0Ni00MDVlLTgxYWMtZDBhMTVlMGQzNzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiekRkVcJ3dH5tKyvUq3X5jBZrO7j4fhYb7eG 7Yulj4ilHjhDjVlMYnVEEjwommckdDhPk61d8QNyPcgJFKNaxIwwlQ26x42tVMH3 jIqFBz09aciWtylhmif/6L0zfHF8VXzOUBuCdDCbsP7eIs/COYKeUfcTVy7+SjuB WHMEnEaCIAFqjNf2BxBkYkocNs2je0wz5VEsUj25y6iP0sShMchYl9twcJq4H6oi 0HGcIyGxn1gukoOPG7MbTw8/WY9mETunu5j6YMXISDEUhkpP+LzlRc1l4yi9JI1P H2GMzsLoL2W8FkD9O5nXgU0117HSDtmQzjfGjZjWzLrq29vwUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLXvLPgwbCXfrrAOr72FUcrV+mQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGMxYmIxOTYtN2M4Yi0z MGExLWE1ODgtNGJkMTcwMzQ3NWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOADMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/fUBzqzjUQzw7ZCKzSnD6Uu62ixnouSP+DM75C2nNgimRcRetxq1FF +CPHdCcwF2QacRAl6odnKZO6FKPIOAWAig60X19OcKNo5M5ca5Gcz71pcVdPYD0k RpWaysvibPlZRhLAUPAvt6wzUL/emTjgZuyYy6RdVq75HJDsTDcK9oTltf6OPLFZ MHeOYBdj2vVEq/uTxBrxg6R5BWjHYyTu1vKkpbcHhuhrFZg2viUHMqOPlIyiG2Bi LLB+pYxHFZarKSu3hjOdL5K9sIUCE8+dc5eOP2JcT6EXK0fH/PkdPVoOnG9F+qGb UR/WnLpMlhsvIrwAPD4zs2YgwlBR/X0= -----END CERTIFICATE-----Generated at Sun Mar 1 23:07:32 2026 by rpki-client