$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a96f8b6-5bd6-3cb3-9c94-cca87f4425db.roa File: 8a96f8b6-5bd6-3cb3-9c94-cca87f4425db.roa (raw, json) Hash identifier: GN8bEyt7llxtJS1GFjgvCUU7Dbqgtl6GDLE1vCAbIks= Subject key identifier: 52:A1:1B:94:8B:2E:CA:65:89:04:36:06:C1:45:F3:42:04:83:CD:FA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CB81C776B47659BC05E9449E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a96f8b6-5bd6-3cb3-9c94-cca87f4425db.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 36183 IP address blocks: 172.224.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:77:6b:47:65:9b:c0:5e:94:49:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=75818611-6c18-41bb-bfae-f0caa41bc206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:df:e0:7b:ce:1a:49:3e:97:4e:bf:3d:e6:38: 88:58:c7:2b:17:e6:28:80:9a:42:8e:b8:2e:80:77: 1b:74:5e:7d:1a:e7:9c:b9:f0:e3:d2:3c:9f:2c:32: cf:7a:da:ed:6a:ec:24:6f:62:01:55:e0:e4:4a:98: 61:c8:7d:ce:4f:9f:db:3d:f8:70:40:07:1b:a0:49: 9a:87:1b:3f:4c:c6:fb:55:86:0f:ec:f7:5d:e2:af: 6d:af:aa:b6:1f:c4:07:a8:6b:f5:c6:aa:84:72:12: ff:5b:79:ec:83:52:ea:d1:43:d2:67:f1:cf:14:1c: cc:3e:43:3c:4a:07:df:54:0e:e4:ad:af:b6:5e:78: 56:52:d6:e2:24:94:e8:3a:29:06:9f:75:b1:8a:14: ac:be:8e:02:4d:fc:7c:55:fe:38:18:75:11:22:9b: 9e:12:b6:f1:a8:24:0a:26:ac:46:0b:cb:5e:58:b0: 8e:7a:52:66:c2:17:d4:8e:b2:4d:5e:33:6d:0f:24: 65:ed:bd:bd:59:ac:4c:71:26:2a:23:65:9e:be:06: 48:a3:ba:b9:5d:61:0f:da:e0:77:c3:16:02:cc:b0: b7:23:91:b0:2e:ce:43:0d:e8:3c:b8:59:d0:30:ca: 95:35:0e:62:f3:d1:d5:32:05:48:e5:de:36:ca:8f: e3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A1:1B:94:8B:2E:CA:65:89:04:36:06:C1:45:F3:42:04:83:CD:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a96f8b6-5bd6-3cb3-9c94-cca87f4425db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:2c:8e:43:94:9f:b7:5c:72:9e:4b:f2:01:1b:8d:52:65:9d: 69:26:30:63:d9:59:e7:de:3a:1c:66:35:d0:a2:db:81:fc:e1: d2:f7:8e:05:2c:d0:ee:0e:33:37:87:24:1c:f3:de:5f:df:c9: 0b:bf:40:f8:48:7c:0e:32:da:6d:98:34:ee:58:1e:b2:b3:e8: 60:1c:a4:b1:d7:d2:6d:c4:52:db:e8:3d:63:0c:13:6e:32:27: b3:75:2e:77:b6:5a:81:ca:84:0e:20:d0:f8:5b:1a:c6:69:af: b4:cd:c4:89:c4:76:51:06:bb:c2:76:88:bf:96:14:df:56:59: cf:d5:f7:43:6e:a4:87:85:10:7b:c4:11:d2:c0:e9:94:25:e3: ea:eb:21:62:c3:13:3a:6f:8c:c2:b3:57:49:e5:37:dd:21:24: 69:94:c8:c0:b6:08:67:e7:b0:2a:d0:cd:d5:6b:5e:4d:01:66: 77:fb:b8:23:fb:fc:4e:d7:1f:ac:af:54:8c:2a:9e:2b:60:19: dc:1c:8c:9b:30:7c:78:a6:7f:5f:8d:93:93:cf:5f:a5:b3:a6: 98:a7:dc:2d:2c:1a:53:b1:1f:3c:95:86:12:a6:35:f3:1d:70: 25:ba:46:a5:f5:b0:50:ad:2e:65:93:18:86:a0:10:ae:04:a1: c9:89:89:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HHdrR2WbwF6USeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk NzU4MTg2MTEtNmMxOC00MWJiLWJmYWUtZjBjYWE0MWJjMjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN/ge84aST6XTr895jiIWMcrF+YogJpCjrgu gHcbdF59GuecufDj0jyfLDLPetrtauwkb2IBVeDkSphhyH3OT5/bPfhwQAcboEma hxs/TMb7VYYP7Pdd4q9tr6q2H8QHqGv1xqqEchL/W3nsg1Lq0UPSZ/HPFBzMPkM8 SgffVA7kra+2XnhWUtbiJJToOikGn3WxihSsvo4CTfx8Vf44GHURIpueErbxqCQK JqxGC8teWLCOelJmwhfUjrJNXjNtDyRl7b29WaxMcSYqI2WevgZIo7q5XWEP2uB3 wxYCzLC3I5GwLs5DDeg8uFnQMMqVNQ5i89HVMgVI5d42yo/jcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKhG5SLLspliQQ2BsFF80IEg836MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGE5NmY4YjYtNWJkNi0z Y2IzLTljOTQtY2NhODdmNDQyNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArODQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYsjkOUn7dccp5L8gEbjVJlnWkmMGPZWefeOhxmNdCi24H84dL3jgUs 0O4OMzeHJBzz3l/fyQu/QPhIfA4y2m2YNO5YHrKz6GAcpLHX0m3EUtvoPWMME24y J7N1Lne2WoHKhA4g0PhbGsZpr7TNxInEdlEGu8J2iL+WFN9WWc/V90NupIeFEHvE EdLA6ZQl4+rrIWLDEzpvjMKzV0nlN90hJGmUyMC2CGfnsCrQzdVrXk0BZnf7uCP7 /E7XH6yvVIwqnitgGdwcjJswfHimf1+Nk5PPX6Wzppin3C0sGlOxHzyVhhKmNfMd cCW6RqX1sFCtLmWTGIagEK4EocmJiZ4= -----END CERTIFICATE-----Generated at Mon Mar 2 04:17:18 2026 by rpki-client