$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28b09633-56ea-303f-ae65-54763fa31125.roa File: 28b09633-56ea-303f-ae65-54763fa31125.roa (raw, json) Hash identifier: uWdROQWsYWq6L8ds86aNyuzu979btEGOV5ABo9eUUQ0= Subject key identifier: F7:DA:D8:86:41:C8:43:08:0F:F1:21:91:B6:36:E1:7F:69:B7:A8:43 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D00B28A4D333997E664C8E7C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28b09633-56ea-303f-ae65-54763fa31125.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 36183 IP address blocks: 172.224.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:8a:4d:33:39:97:e6:64:c8:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=1d1f476f-0533-44d0-acc9-c383379b8fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:47:97:99:3f:6a:ce:09:a6:bc:ac:1a:1c:85: cb:b8:fa:f2:d5:36:ab:ef:8e:17:74:5e:00:26:ed: 4a:a7:59:05:c7:51:49:49:89:94:f5:c3:30:6e:47: f5:ce:ce:4b:69:83:6b:7d:df:5f:7f:b4:67:87:95: 6b:40:0c:75:7c:26:69:6b:c0:80:fc:b2:f9:83:f1: e3:91:7f:15:a9:ff:0e:66:9b:2d:1f:4b:72:c8:f9: 85:1f:75:93:de:f0:47:90:2d:3c:b5:69:3e:02:ff: 7f:62:16:23:5a:70:59:c1:a7:50:cc:62:f1:43:95: b8:7f:09:03:bb:4c:c1:14:20:77:3a:bd:d3:b8:2e: d0:5c:fc:71:fd:ad:46:19:c8:e6:b1:c9:9e:d8:3a: 5d:ab:31:4c:1a:db:05:4e:44:bd:a8:09:d6:7f:dc: 60:3e:c6:e0:90:82:0a:52:7e:e9:26:f7:00:66:51: 25:4a:cd:85:db:bc:1e:05:0d:6a:9c:00:ae:8f:74: 4d:28:b8:0c:35:33:da:c2:99:74:f7:58:ad:68:1e: 13:50:d6:8c:59:87:7a:5c:08:4c:94:40:b5:b6:64: cf:ea:e7:aa:04:85:7a:5d:4f:e1:24:82:0b:e2:ad: c3:6a:67:1e:15:5e:87:ab:8e:40:82:b0:ff:54:94: d3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DA:D8:86:41:C8:43:08:0F:F1:21:91:B6:36:E1:7F:69:B7:A8:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28b09633-56ea-303f-ae65-54763fa31125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:bb:d9:79:84:d4:51:1c:88:dd:c1:ac:52:79:81:9d:b7:80: 0d:54:8d:9a:64:b5:54:a2:99:2f:62:51:16:9a:0f:a9:3b:6b: 76:40:71:02:4d:6c:0d:e1:95:c0:34:1f:03:cf:1c:3f:af:d5: fe:ca:81:0a:53:56:39:49:a1:52:59:18:03:ff:49:a5:4d:76: b0:51:0c:41:0c:52:6e:1a:14:12:40:14:37:8c:d7:08:46:dd: 62:61:10:f3:4e:3f:bd:25:ab:9a:ae:52:5f:cd:91:4c:65:93: 45:71:1e:30:b7:78:53:70:a0:94:08:b1:4d:02:c4:e8:5b:5b: 79:61:69:6e:62:4e:94:6b:db:39:94:50:0f:4a:30:03:d8:1d: c3:bc:d1:8d:44:b5:6a:37:23:8e:af:f1:bf:88:fe:80:1c:39: 9a:2e:18:e7:77:e7:a1:1f:f1:d7:b3:e7:b4:b7:74:f2:f5:8a: 84:7e:4b:c6:fc:32:61:61:f9:32:84:dd:f4:ff:d8:bd:91:63: 57:b5:67:b1:de:f2:e2:b2:a6:06:98:a1:cf:26:fd:73:2c:0c: c2:43:9e:cc:0b:1c:c3:9b:a4:b4:18:19:de:09:98:ce:0b:55: 8c:6f:1e:c8:a3:1b:bf:37:62:ef:e4:70:1d:ce:31:ce:df:78: b2:13:6a:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AsopNMzmX5mTI58AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk MWQxZjQ3NmYtMDUzMy00NGQwLWFjYzktYzM4MzM3OWI4ZmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0eXmT9qzgmmvKwaHIXLuPry1Tar744XdF4A Ju1Kp1kFx1FJSYmU9cMwbkf1zs5LaYNrfd9ff7Rnh5VrQAx1fCZpa8CA/LL5g/Hj kX8Vqf8OZpstH0tyyPmFH3WT3vBHkC08tWk+Av9/YhYjWnBZwadQzGLxQ5W4fwkD u0zBFCB3Or3TuC7QXPxx/a1GGcjmscme2DpdqzFMGtsFTkS9qAnWf9xgPsbgkIIK Un7pJvcAZlElSs2F27weBQ1qnACuj3RNKLgMNTPawpl091itaB4TUNaMWYd6XAhM lEC1tmTP6ueqBIV6XU/hJIIL4q3DamceFV6Hq45AgrD/VJTTOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfa2IZByEMID/EhkbY24X9pt6hDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjhiMDk2MzMtNTZlYS0z MDNmLWFlNjUtNTQ3NjNmYTMxMTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOD6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHi72XmE1FEciN3BrFJ5gZ23gA1UjZpktVSimS9iURaaD6k7a3ZAcQJN bA3hlcA0HwPPHD+v1f7KgQpTVjlJoVJZGAP/SaVNdrBRDEEMUm4aFBJAFDeM1whG 3WJhEPNOP70lq5quUl/NkUxlk0VxHjC3eFNwoJQIsU0CxOhbW3lhaW5iTpRr2zmU UA9KMAPYHcO80Y1EtWo3I46v8b+I/oAcOZouGOd356Ef8dez57S3dPL1ioR+S8b8 MmFh+TKE3fT/2L2RY1e1Z7He8uKypgaYoc8m/XMsDMJDnswLHMObpLQYGd4JmM4L VYxvHsijG783Yu/kcB3OMc7feLITapI= -----END CERTIFICATE-----Generated at Mon Mar 2 09:48:01 2026 by rpki-client