$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ef85418-07b4-39b8-b356-8afa01cfcb5a.roa File: 1ef85418-07b4-39b8-b356-8afa01cfcb5a.roa (raw, json) Hash identifier: rkqevyH21HuRbgSQYtE5Xbpf/E5MFZD38G4mWL5Z9+s= Subject key identifier: 3E:79:98:20:CF:86:84:8A:AA:13:FC:2C:1F:F2:63:B2:F8:A6:F4:9B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C751C329CB7D3D6750A69E900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ef85418-07b4-39b8-b356-8afa01cfcb5a.roa Signing time: Thu 08 Jan 2026 14:00:39 +0000 ROA not before: Thu 08 Jan 2026 14:00:39 +0000 ROA not after: Wed 08 Apr 2026 13:00:39 +0000 asID: 36183 IP address blocks: 172.224.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:1c:32:9c:b7:d3:d6:75:0a:69:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 8 14:00:39 2026 GMT Not After : Apr 8 13:00:39 2026 GMT Subject: CN=519ce403-df1a-4645-a6c9-c6622d2a9bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b6:40:d0:7b:5f:44:78:85:93:be:fa:30:1d: 47:7e:81:ed:dc:14:df:69:2c:cb:2c:9c:47:d8:af: 9a:f5:53:4a:50:a0:27:50:03:ad:fb:f9:bc:00:ac: 8b:95:f1:a4:60:7d:42:92:0c:c0:90:21:b4:68:41: d0:37:df:f5:39:0c:f5:01:3c:2f:bb:8a:88:0b:56: 71:8c:e0:a2:0d:a7:7b:36:ef:e7:6c:63:70:08:cf: ad:f5:c0:f6:fc:d0:68:ae:64:aa:d8:ef:4a:4b:80: e0:55:ce:3e:43:d6:b3:4b:86:3b:8e:65:85:be:ac: 6b:29:f8:4c:87:e6:b2:a4:08:11:60:48:9c:4b:99: 9a:80:83:53:f0:0f:a0:e2:36:fa:f0:9c:fb:69:e9: 1b:9a:07:3f:55:76:a1:ac:80:3e:d6:31:18:fe:33: a4:00:90:61:66:b1:30:7f:5e:a1:48:8f:0a:48:63: 29:7a:42:dc:ed:19:dd:36:34:de:3d:f0:87:ac:3a: 3a:6b:e5:b4:c4:36:2c:e2:63:24:9d:ce:02:ca:b9: ca:29:32:4f:af:9f:cc:b7:a6:8a:d7:df:06:28:be: 68:95:4d:17:19:64:4d:2c:77:da:ea:4e:9b:7d:be: ba:2e:40:ce:3a:40:6b:50:f0:b8:c8:fb:92:3a:d7: af:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:79:98:20:CF:86:84:8A:AA:13:FC:2C:1F:F2:63:B2:F8:A6:F4:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ef85418-07b4-39b8-b356-8afa01cfcb5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:81:8b:a1:19:71:7f:50:c2:7b:6d:76:5a:0f:a0:38:94:52: 94:2c:31:69:12:9c:a8:b1:40:a3:e9:12:7a:fa:d3:f2:e9:95: bb:62:14:7b:ec:c3:83:50:a4:ef:65:0d:33:af:9d:06:eb:88: e8:f4:bb:8a:86:e8:5d:c0:6f:31:38:3e:3a:61:34:9a:d8:d7: a4:a1:07:7c:03:11:f6:69:6f:2a:34:55:d0:f8:71:f6:ac:7e: c5:b0:fe:fa:94:6a:b8:59:9d:2a:af:52:05:81:d9:f5:9b:20: 7b:74:ad:aa:fb:27:59:39:3c:b8:de:84:9a:7a:8b:d9:9b:ea: 85:43:41:61:68:77:7c:cd:18:0f:7c:dd:d6:9f:af:62:9b:34: 05:6a:7e:39:40:fb:e9:10:a5:c0:d4:78:6a:93:4b:64:09:56: 9c:e5:3f:bc:53:7b:1c:9e:84:6c:7b:6c:82:8b:07:fb:2c:c8: 0d:85:63:e3:8e:c5:89:14:66:ca:87:e1:84:8e:ae:53:54:c2: 39:df:ef:0f:f4:83:c7:c8:18:a6:ca:d6:d7:12:7a:a8:01:8e: 51:99:d8:13:7a:c4:41:24:c8:7a:90:dc:ef:49:75:24:a1:e0: 15:b2:0c:98:a0:1c:a5:c9:7d:bb:2b:58:fa:a0:3d:2e:3e:a5: 43:56:32:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1HDKct9PWdQpp6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk NTE5Y2U0MDMtZGYxYS00NjQ1LWE2YzktYzY2MjJkMmE5YmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbZA0HtfRHiFk776MB1HfoHt3BTfaSzLLJxH 2K+a9VNKUKAnUAOt+/m8AKyLlfGkYH1CkgzAkCG0aEHQN9/1OQz1ATwvu4qIC1Zx jOCiDad7Nu/nbGNwCM+t9cD2/NBormSq2O9KS4DgVc4+Q9azS4Y7jmWFvqxrKfhM h+aypAgRYEicS5magINT8A+g4jb68Jz7aekbmgc/VXahrIA+1jEY/jOkAJBhZrEw f16hSI8KSGMpekLc7RndNjTePfCHrDo6a+W0xDYs4mMknc4CyrnKKTJPr5/Mt6aK 198GKL5olU0XGWRNLHfa6k6bfb66LkDOOkBrUPC4yPuSOtevgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD55mCDPhoSKqhP8LB/yY7L4pvSbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWVmODU0MTgtMDdiNC0z OWI4LWIzNTYtOGFmYTAxY2ZjYjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKBi6EZcX9QwnttdloPoDiUUpQsMWkSnKixQKPpEnr60/LplbtiFHvs w4NQpO9lDTOvnQbriOj0u4qG6F3AbzE4PjphNJrY16ShB3wDEfZpbyo0VdD4cfas fsWw/vqUarhZnSqvUgWB2fWbIHt0rar7J1k5PLjehJp6i9mb6oVDQWFod3zNGA98 3dafr2KbNAVqfjlA++kQpcDUeGqTS2QJVpzlP7xTexyehGx7bIKLB/ssyA2FY+OO xYkUZsqH4YSOrlNUwjnf7w/0g8fIGKbK1tcSeqgBjlGZ2BN6xEEkyHqQ3O9JdSSh 4BWyDJigHKXJfbsrWPqgPS4+pUNWMjs= -----END CERTIFICATE-----Generated at Mon Mar 2 04:37:42 2026 by rpki-client