$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/603e6bb2-52b7-31a0-acb7-fd8ecd5d2a78.roa File: 603e6bb2-52b7-31a0-acb7-fd8ecd5d2a78.roa (raw, json) Hash identifier: hicj9wnOmkM+M9S495mVftn8DtvQwSN0cXpe09jisy8= Subject key identifier: 91:A9:3E:25:73:B2:96:29:1F:E8:F3:66:80:F0:54:6E:37:3A:29:45 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C8A0C69BEB2A3BC20F6197A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/603e6bb2-52b7-31a0-acb7-fd8ecd5d2a78.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 12222 IP address blocks: 72.246.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:69:be:b2:a3:bc:20:f6:19:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=71f51dae-d10f-4d1f-8cc6-6fe0d0b64847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:11:09:c7:fb:93:ac:b0:df:86:8f:d5:b7:05: 8c:98:25:4a:be:73:fd:c8:65:36:07:9b:3b:02:33: 30:22:ff:45:8c:b1:8d:e5:01:6c:39:ce:42:c5:43: fa:22:69:b2:a5:ea:b2:25:2f:92:2a:4d:be:66:04: 75:95:18:19:93:2c:b4:b8:55:99:11:e4:51:cc:81: bc:8d:d4:c5:d5:54:58:11:3f:f8:0c:9a:fe:f5:4b: 6d:15:f1:00:23:59:86:ce:46:bc:52:e1:56:cc:f1: 75:f8:f8:df:1f:ec:c2:00:a3:a7:0b:5a:b0:9c:4f: 14:41:d2:4f:c6:e0:7c:85:f0:c3:96:13:1e:33:d1: 7a:7b:26:22:9f:fe:e0:44:5e:bc:3b:2b:d0:ce:b1: 25:95:1a:b0:0b:9e:08:9c:3a:12:9a:eb:52:8f:e8: 71:fc:80:27:cc:6e:47:3e:16:a4:2e:a6:2e:6d:c5: cf:27:40:2e:91:7a:d1:99:be:a9:e0:ec:fb:69:1b: 2a:4a:a6:64:d7:83:11:74:4c:f0:06:d9:30:48:c3: 97:b5:77:65:8b:4f:f1:2a:eb:94:f1:a9:fa:2b:90: 99:97:6e:e0:4b:8e:0f:93:46:b2:ad:97:70:38:37: f8:5e:a1:28:db:7b:ac:bc:7c:86:c7:45:97:e2:2e: 60:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A9:3E:25:73:B2:96:29:1F:E8:F3:66:80:F0:54:6E:37:3A:29:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/603e6bb2-52b7-31a0-acb7-fd8ecd5d2a78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:2f:e7:59:4d:78:d1:ef:44:23:33:f7:7e:89:29:9a:4f:23: d0:d2:9d:b2:87:d9:f3:53:f0:14:ca:b3:e1:0f:d2:de:3c:d7: e8:49:ae:56:9b:95:4b:97:71:a4:bc:b7:0f:38:55:f6:92:bd: df:47:f2:b3:e8:9f:16:ca:97:33:33:01:c7:60:67:5d:b5:cc: d8:d2:ea:96:1e:a3:32:63:83:46:1b:cb:31:34:88:3e:f9:4f: 1d:4f:4e:2d:a5:41:06:a5:0d:1d:e4:4a:85:5f:50:f7:90:f0: 82:ae:6c:71:f8:9a:77:95:29:4e:f1:e3:25:44:87:5e:1b:eb: ad:85:c2:9e:84:6c:a7:2a:df:86:80:15:a2:d4:4e:41:f6:6e: 1e:4b:bc:a6:a3:a5:f1:ec:56:bf:d3:b8:90:c8:63:eb:cb:b5: fb:5f:c1:a6:ae:18:10:58:91:55:a8:85:89:ac:5b:10:c4:bb: cf:b4:02:c1:23:33:a3:c5:83:80:bd:b8:85:f6:3d:39:f5:9e: b0:69:c4:b3:b9:b0:9f:8c:6b:2a:80:39:27:6b:06:38:57:6a: c1:56:9e:39:d3:f8:a2:b4:6b:44:a9:49:2a:41:c0:85:29:03: 6f:34:20:ba:31:e3:39:4d:77:d2:c3:52:3d:b6:0d:f4:5b:09: a8:df:19:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyKDGm+sqO8IPYZeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk NzFmNTFkYWUtZDEwZi00ZDFmLThjYzYtNmZlMGQwYjY0ODQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgREJx/uTrLDfho/VtwWMmCVKvnP9yGU2B5s7 AjMwIv9FjLGN5QFsOc5CxUP6ImmypeqyJS+SKk2+ZgR1lRgZkyy0uFWZEeRRzIG8 jdTF1VRYET/4DJr+9UttFfEAI1mGzka8UuFWzPF1+PjfH+zCAKOnC1qwnE8UQdJP xuB8hfDDlhMeM9F6eyYin/7gRF68OyvQzrEllRqwC54InDoSmutSj+hx/IAnzG5H PhakLqYubcXPJ0AukXrRmb6p4Oz7aRsqSqZk14MRdEzwBtkwSMOXtXdli0/xKuuU 8an6K5CZl27gS44Pk0ayrZdwODf4XqEo23usvHyGx0WX4i5ghwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGpPiVzspYpH+jzZoDwVG43OilFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjAzZTZiYjItNTJiNy0z MWEwLWFjYjctZmQ4ZWNkNWQyYTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPbHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUv51lNeNHvRCMz936JKZpPI9DSnbKH2fNT8BTKs+EP0t481+hJrlab lUuXcaS8tw84VfaSvd9H8rPonxbKlzMzAcdgZ121zNjS6pYeozJjg0YbyzE0iD75 Tx1PTi2lQQalDR3kSoVfUPeQ8IKubHH4mneVKU7x4yVEh14b662Fwp6EbKcq34aA FaLUTkH2bh5LvKajpfHsVr/TuJDIY+vLtftfwaauGBBYkVWohYmsWxDEu8+0AsEj M6PFg4C9uIX2PTn1nrBpxLO5sJ+MayqAOSdrBjhXasFWnjnT+KK0a0SpSSpBwIUp A280ILox4zlNd9LDUj22DfRbCajfGfk= -----END CERTIFICATE-----Generated at Sun Mar 1 22:47:57 2026 by rpki-client