$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20d7972c-2796-3545-8efc-4bdfc2689ac8.roa File: 20d7972c-2796-3545-8efc-4bdfc2689ac8.roa (raw, json) Hash identifier: 3Xaw5Zcvy8sDEeZp6ZSjN5ExWBBX2lsPtDC1FhtZGnc= Subject key identifier: CF:3C:EC:79:E3:1B:C3:44:B8:BA:C5:1F:DC:13:B4:22:67:77:79:CE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CAA2726FBCA28FF7F05D51000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20d7972c-2796-3545-8efc-4bdfc2689ac8.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31984 IP address blocks: 173.222.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:26:fb:ca:28:ff:7f:05:d5:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=127404e5-c3bf-497b-a248-87694b72ac7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:c7:57:9b:6a:d6:e1:b9:26:dd:bb:c3:61: 36:32:12:15:6f:eb:38:99:71:66:b1:0f:c8:27:ce: 11:c2:dc:9f:9d:07:90:42:03:6b:e8:d9:12:51:10: e8:ed:11:7f:df:8e:aa:d6:27:17:ff:94:cb:f7:7e: 0b:b1:df:6d:f9:f7:b2:36:25:84:ba:4c:1e:03:21: ad:bc:cc:0c:2f:72:32:d6:0b:02:1d:a3:2d:b7:0c: f2:4d:7f:fe:1c:3c:18:4d:f5:8a:67:64:65:95:06: a8:fb:1d:ea:c8:66:ec:2c:04:60:4b:fd:0a:d3:23: 95:c7:43:9d:e5:ad:a7:d6:34:b9:82:cc:1e:62:39: 3f:80:39:60:c9:9e:b7:63:41:31:27:d3:be:e6:1a: ac:28:63:76:69:c2:d7:62:6c:50:64:b1:7e:97:9b: 96:49:91:71:4f:f0:3a:ea:36:98:85:81:37:65:eb: 00:83:bd:f8:11:4a:e8:d9:5d:a9:ea:67:fb:64:7a: a4:d8:8d:a5:c6:54:f8:fd:2a:5d:2e:04:60:27:db: 6a:2c:fe:3e:2a:af:f8:24:1a:cf:35:c6:18:4d:a7: 15:eb:49:f1:31:ce:bf:75:f7:e0:31:b5:b3:a0:89: fb:69:67:4d:86:b3:44:ae:17:c9:8c:95:13:c5:7c: 30:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3C:EC:79:E3:1B:C3:44:B8:BA:C5:1F:DC:13:B4:22:67:77:79:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20d7972c-2796-3545-8efc-4bdfc2689ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:a0:a6:98:e7:69:e2:8c:61:95:52:ed:25:5c:ff:71:05:e5: 8d:c8:5a:2f:22:f7:a9:3b:98:99:97:78:bc:30:38:3f:e5:8f: 60:6c:e2:9a:0f:77:23:69:8a:fe:dc:8a:d1:5e:d4:85:0a:f3: ce:8e:d4:b9:f9:3b:9b:2e:68:c5:d5:3a:87:8e:ad:36:ff:82: 62:4e:48:9d:ed:f8:2e:ab:c5:ca:07:78:be:dc:c3:59:44:ee: 00:19:e1:ff:e6:7d:72:e4:b6:22:19:2b:bd:83:56:72:46:41: f2:82:6e:9e:86:e6:50:bb:b6:3d:20:fc:ac:05:45:ce:a1:11: df:30:9a:a1:2f:5f:e7:77:ac:1c:fe:63:c9:5f:f1:af:58:ba: 1b:9b:65:f5:d1:dd:bb:af:a9:d5:dd:08:7f:a0:12:8c:8e:92: 83:d1:7d:e0:69:4d:b0:a1:73:8d:0e:ba:b1:67:66:6a:ad:7a: 0c:a5:f4:8d:40:2a:66:9b:86:43:4b:1b:2c:76:9b:1f:66:47: f2:7a:57:98:35:ad:a7:29:b8:93:f9:04:0a:7e:bc:c7:c3:b3: 31:6f:f5:19:2e:bb:51:b0:df:e2:3f:c0:16:88:57:3f:08:79: 91:fc:e9:66:0a:34:e1:a7:62:58:fd:d2:41:69:1d:a9:19:c1: ea:da:99:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJyb7yij/fwXVEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk MTI3NDA0ZTUtYzNiZi00OTdiLWEyNDgtODc2OTRiNzJhYzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3nHV5tq1uG5Jt27w2E2MhIVb+s4mXFmsQ/I J84RwtyfnQeQQgNr6NkSURDo7RF/346q1icX/5TL934Lsd9t+feyNiWEukweAyGt vMwML3Iy1gsCHaMttwzyTX/+HDwYTfWKZ2RllQao+x3qyGbsLARgS/0K0yOVx0Od 5a2n1jS5gsweYjk/gDlgyZ63Y0ExJ9O+5hqsKGN2acLXYmxQZLF+l5uWSZFxT/A6 6jaYhYE3ZesAg734EUro2V2p6mf7ZHqk2I2lxlT4/SpdLgRgJ9tqLP4+Kq/4JBrP NcYYTacV60nxMc6/dffgMbWzoIn7aWdNhrNErhfJjJUTxXwwZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM887HnjG8NEuLrFH9wTtCJnd3nOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjBkNzk3MmMtMjc5Ni0z NTQ1LThlZmMtNGJkZmMyNjg5YWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd7sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2gppjnaeKMYZVS7SVc/3EF5Y3IWi8i96k7mJmXeLwwOD/lj2Bs4poP dyNpiv7citFe1IUK886O1Ln5O5suaMXVOoeOrTb/gmJOSJ3t+C6rxcoHeL7cw1lE 7gAZ4f/mfXLktiIZK72DVnJGQfKCbp6G5lC7tj0g/KwFRc6hEd8wmqEvX+d3rBz+ Y8lf8a9YuhubZfXR3buvqdXdCH+gEoyOkoPRfeBpTbChc40OurFnZmqtegyl9I1A KmabhkNLGyx2mx9mR/J6V5g1racpuJP5BAp+vMfDszFv9Rkuu1Gw3+I/wBaIVz8I eZH86WYKNOGnYlj90kFpHakZweramd8= -----END CERTIFICATE-----Generated at Mon Mar 2 06:36:22 2026 by rpki-client