$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/98d49bac-c691-3623-a65a-1cec36f6f712.roa File: 98d49bac-c691-3623-a65a-1cec36f6f712.roa (raw, json) Hash identifier: JKAFheF54iEFHgryPwAmWfsbSWbQnXmuzt/M1MMNgWk= Subject key identifier: 96:47:F3:B8:EA:08:CB:81:F4:C6:7B:C8:3E:F0:B4:A9:37:B5:12:52 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CAB8C5EBB4158C8D677F62900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/98d49bac-c691-3623-a65a-1cec36f6f712.roa Signing time: Wed 28 Jan 2026 02:00:29 +0000 ROA not before: Wed 28 Jan 2026 02:00:29 +0000 ROA not after: Tue 28 Apr 2026 01:00:29 +0000 asID: 63949 IP address blocks: 172.235.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ab:8c:5e:bb:41:58:c8:d6:77:f6:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 28 02:00:29 2026 GMT Not After : Apr 28 01:00:29 2026 GMT Subject: CN=432dfd35-1a8e-4b49-b201-ba5623f1a272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ae:81:b1:c2:e5:ee:d5:72:85:20:2c:a9:3b: 25:18:d7:d0:34:b2:92:90:35:e1:18:ee:9e:63:19: 87:bd:14:52:4e:92:0b:09:72:7f:18:6c:1d:67:8d: 97:88:f1:d5:01:fa:82:e0:06:2d:63:5f:19:fd:b7: 15:ab:28:1f:6c:a4:f3:63:5c:8b:d2:48:85:81:e9: ce:40:96:80:2a:fa:f0:aa:89:87:01:11:72:21:ef: 98:ec:a0:9e:39:48:af:3c:69:70:12:ef:a2:4e:41: a0:71:ea:75:9b:e1:d6:71:e0:42:c7:aa:88:57:56: 5c:5a:0d:be:d2:87:32:55:45:4b:06:a5:3c:e5:bf: bd:15:b9:f7:f3:ec:4d:1e:9c:2d:6d:72:98:57:ba: be:76:46:87:5a:12:f5:31:1c:43:55:51:b6:06:67: a2:5f:f3:a9:58:b7:dd:e4:43:2a:2b:aa:09:0b:2c: c7:14:0d:96:6b:f2:9e:b7:ce:46:3b:eb:32:21:b1: b3:35:b8:10:7b:40:b7:35:0f:f2:8e:fe:00:ed:75: 4b:9d:73:c9:32:d7:02:ab:80:2a:6a:47:a3:e5:8b: 97:33:a4:b1:dc:aa:8a:0f:a2:d0:ee:e5:a3:d6:0f: e9:5c:74:0b:71:2f:62:90:96:c7:58:3f:65:b1:53: d2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:47:F3:B8:EA:08:CB:81:F4:C6:7B:C8:3E:F0:B4:A9:37:B5:12:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/98d49bac-c691-3623-a65a-1cec36f6f712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:de:38:5e:44:c5:21:4a:63:39:3a:5b:57:1a:0c:9d:3a:06: 06:93:75:54:d7:e2:23:73:fd:7e:ef:d0:36:66:7c:64:94:e9: a3:03:27:9b:28:b0:db:b2:54:b1:2b:99:3b:f5:ff:5d:e1:49: a9:cc:94:6b:ce:91:93:40:45:39:7c:7e:3b:a4:0a:f7:a4:05: 77:d8:a8:aa:c7:b0:3a:54:da:42:2d:62:4c:b6:0c:1d:55:b9: 37:22:9d:63:11:ad:b5:bb:41:fc:f3:ba:fa:8d:5c:84:ad:f8: 47:07:c0:f3:5e:1e:3d:59:c6:14:96:62:52:7b:1a:04:d4:55: 5b:83:c0:3a:b1:45:5a:33:c5:d5:0e:50:e0:4b:c7:eb:7d:9b: ae:43:cd:a3:30:07:2a:73:d5:bd:2e:f8:03:cc:1e:e6:9e:d4: dd:77:bb:62:3f:49:96:40:f2:80:3a:a9:2a:87:44:65:0d:50: 3c:fe:d0:ad:9b:c3:f9:3d:7c:bd:b9:b5:48:ba:4c:4f:93:ce: e5:d8:e2:cd:b6:9f:c9:64:b3:f7:0f:08:ab:cd:a5:d0:66:e6: 5a:8c:cb:91:09:11:4e:f3:20:56:7c:34:69:ce:d7:0d:a8:1a: 60:01:1e:03:1d:61:3c:2c:33:40:97:a8:7e:6d:24:7d:8a:12: bc:87:da:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyrjF67QVjI1nf2KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEyODAyMDAyOVoXDTI2MDQyODAxMDAyOVowLzEtMCsGA1UEAxMk NDMyZGZkMzUtMWE4ZS00YjQ5LWIyMDEtYmE1NjIzZjFhMjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs66BscLl7tVyhSAsqTslGNfQNLKSkDXhGO6e YxmHvRRSTpILCXJ/GGwdZ42XiPHVAfqC4AYtY18Z/bcVqygfbKTzY1yL0kiFgenO QJaAKvrwqomHARFyIe+Y7KCeOUivPGlwEu+iTkGgcep1m+HWceBCx6qIV1ZcWg2+ 0ocyVUVLBqU85b+9Fbn38+xNHpwtbXKYV7q+dkaHWhL1MRxDVVG2BmeiX/OpWLfd 5EMqK6oJCyzHFA2Wa/Ket85GO+syIbGzNbgQe0C3NQ/yjv4A7XVLnXPJMtcCq4Aq akej5YuXM6Sx3KqKD6LQ7uWj1g/pXHQLcS9ikJbHWD9lsVPSBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZH87jqCMuB9MZ7yD7wtKk3tRJSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOThkNDliYWMtYzY5MS0z NjIzLWE2NWEtMWNlYzM2ZjZmNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOtmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEneOF5ExSFKYzk6W1caDJ06BgaTdVTX4iNz/X7v0DZmfGSU6aMDJ5so sNuyVLErmTv1/13hSanMlGvOkZNARTl8fjukCvekBXfYqKrHsDpU2kItYky2DB1V uTcinWMRrbW7QfzzuvqNXISt+EcHwPNeHj1ZxhSWYlJ7GgTUVVuDwDqxRVozxdUO UOBLx+t9m65DzaMwBypz1b0u+APMHuae1N13u2I/SZZA8oA6qSqHRGUNUDz+0K2b w/k9fL25tUi6TE+TzuXY4s22n8lks/cPCKvNpdBm5lqMy5EJEU7zIFZ8NGnO1w2o GmABHgMdYTwsM0CXqH5tJH2KEryH2hM= -----END CERTIFICATE-----Generated at Mon Mar 2 07:52:42 2026 by rpki-client