$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21b2e951-d6b0-34ba-bed0-f11e7c63dc5e.roa File: 21b2e951-d6b0-34ba-bed0-f11e7c63dc5e.roa (raw, json) Hash identifier: Yx2WErWAVBwaH6TBxD+9/Y2UVS1UcO89rX8sexbvwE4= Subject key identifier: 66:CC:B9:CF:FB:06:8D:C2:D5:5F:A8:87:46:97:B3:45:21:15:8F:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C6E21946913ED644777D425C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21b2e951-d6b0-34ba-bed0-f11e7c63dc5e.roa Signing time: Tue 06 Jan 2026 02:00:31 +0000 ROA not before: Tue 06 Jan 2026 02:00:31 +0000 ROA not after: Mon 06 Apr 2026 01:00:31 +0000 asID: 36183 IP address blocks: 172.226.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6e:21:94:69:13:ed:64:47:77:d4:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 6 02:00:31 2026 GMT Not After : Apr 6 01:00:31 2026 GMT Subject: CN=90943b7f-e5cc-4704-a64b-8654791ade82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b5:2a:86:0f:7a:4f:d5:c1:4f:cb:7d:5d:a1: b5:56:f3:b3:55:9c:d9:66:6d:89:0d:42:0b:cc:44: e5:41:15:3f:9a:a3:59:88:e0:cb:20:34:4c:05:72: 9a:77:6a:36:f3:63:22:ec:d0:52:c6:5e:b4:fd:1b: a4:56:ee:f1:ba:91:04:4b:cb:fc:8d:67:b3:ea:b4: 8a:bd:47:d9:e1:86:1d:b6:d1:1d:bd:f6:97:fb:f9: be:b3:32:9c:6f:90:3f:e9:dd:15:b0:ae:43:57:71: 22:54:c9:90:79:52:44:6e:f9:39:a3:8a:2e:7a:f0: a3:14:93:7e:42:c7:90:72:41:07:21:61:9a:86:6c: a7:e2:db:7d:95:b4:32:b8:88:0f:73:2f:1a:0e:7e: 32:02:5f:db:53:6c:24:67:1a:df:e4:dc:a0:be:b4: 3c:e0:61:86:b8:4c:7e:72:97:ac:66:de:c3:e5:77: 77:b6:31:0f:bb:66:f2:d5:d0:cf:64:f0:a6:94:79: 82:45:50:e7:cb:e9:b5:c4:f5:2a:f5:3e:69:c4:26: 6a:4d:47:49:2d:af:82:8d:81:96:83:33:4c:fb:3f: b7:20:3a:d4:e4:b6:ca:9a:d4:7b:27:77:18:d6:c1: 26:aa:8f:f5:b9:2e:1f:cb:34:e2:18:2a:44:66:29: 9e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CC:B9:CF:FB:06:8D:C2:D5:5F:A8:87:46:97:B3:45:21:15:8F:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21b2e951-d6b0-34ba-bed0-f11e7c63dc5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:70:3c:a9:f4:17:a3:6c:ca:87:e4:b6:09:db:12:53:7b:bf: 4d:cd:ea:25:c3:80:0d:2b:65:95:7c:8a:c6:93:f7:d2:0f:29: 86:89:63:b5:38:8d:95:8a:73:2d:8e:64:bf:b2:33:58:43:26: 1c:67:de:7f:a0:5e:21:dc:b8:e7:3c:f6:5c:45:d5:bb:d2:05: 99:e2:10:04:f3:9f:b8:45:b3:2f:0c:ba:73:34:5d:8d:06:5b: b7:17:d2:1d:43:00:39:19:a3:a2:7e:28:5f:b8:55:c8:39:fa: 68:4a:57:9e:7d:cc:6b:89:96:91:c8:5d:36:09:3c:dd:af:27: 66:df:57:53:1b:46:5d:c0:e1:d6:5c:46:dd:51:47:ab:9b:22: 19:73:e6:82:84:d8:85:2b:1e:2d:d7:89:65:3b:43:5d:0c:5b: f3:a1:b5:64:0a:45:88:56:79:4b:64:03:45:ad:57:ab:d5:15: 48:62:fd:55:20:53:0c:a7:2a:7c:ba:6e:97:7d:8e:41:12:fe: 92:04:02:3f:b7:21:78:65:9b:59:d9:63:ae:d5:6b:fc:7e:e1: 6f:b1:1e:21:ed:19:75:75:99:32:d9:45:b4:a6:fb:bc:4c:bf: ea:2f:f8:1f:4c:f9:4d:0a:f0:0b:3a:97:32:17:1d:88:85:c6: fb:d1:b5:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExuIZRpE+1kR3fUJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk OTA5NDNiN2YtZTVjYy00NzA0LWE2NGItODY1NDc5MWFkZTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurUqhg96T9XBT8t9XaG1VvOzVZzZZm2JDUIL zETlQRU/mqNZiODLIDRMBXKad2o282Mi7NBSxl60/RukVu7xupEES8v8jWez6rSK vUfZ4YYdttEdvfaX+/m+szKcb5A/6d0VsK5DV3EiVMmQeVJEbvk5o4ouevCjFJN+ QseQckEHIWGahmyn4tt9lbQyuIgPcy8aDn4yAl/bU2wkZxrf5NygvrQ84GGGuEx+ cpesZt7D5Xd3tjEPu2by1dDPZPCmlHmCRVDny+m1xPUq9T5pxCZqTUdJLa+CjYGW gzNM+z+3IDrU5LbKmtR7J3cY1sEmqo/1uS4fyzTiGCpEZimeeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbMuc/7Bo3C1V+oh0aXs0UhFY8NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjFiMmU5NTEtZDZiMC0z NGJhLWJlZDAtZjExZTdjNjNkYzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOJEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItwPKn0F6NsyofktgnbElN7v03N6iXDgA0rZZV8isaT99IPKYaJY7U4 jZWKcy2OZL+yM1hDJhxn3n+gXiHcuOc89lxF1bvSBZniEATzn7hFsy8MunM0XY0G W7cX0h1DADkZo6J+KF+4Vcg5+mhKV559zGuJlpHIXTYJPN2vJ2bfV1MbRl3A4dZc Rt1RR6ubIhlz5oKE2IUrHi3XiWU7Q10MW/OhtWQKRYhWeUtkA0WtV6vVFUhi/VUg UwynKny6bpd9jkES/pIEAj+3IXhlm1nZY67Va/x+4W+xHiHtGXV1mTLZRbSm+7xM v+ov+B9M+U0K8As6lzIXHYiFxvvRtaE= -----END CERTIFICATE-----Generated at Mon Mar 2 12:17:57 2026 by rpki-client