$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab7328fc-0352-304e-9435-df90dd511034.roa File: ab7328fc-0352-304e-9435-df90dd511034.roa (raw, json) Hash identifier: yX9LDlu2jJC3c8WaixXJuKDcIrH9bw/jZrKeh2qCBZ0= Subject key identifier: 98:38:30:79:3F:72:FF:14:DE:81:81:24:45:57:12:74:90:85:CC:2F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C768183964145537709237600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab7328fc-0352-304e-9435-df90dd511034.roa Signing time: Fri 09 Jan 2026 02:00:31 +0000 ROA not before: Fri 09 Jan 2026 02:00:31 +0000 ROA not after: Thu 09 Apr 2026 01:00:31 +0000 asID: 36183 IP address blocks: 172.224.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:76:81:83:96:41:45:53:77:09:23:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 9 02:00:31 2026 GMT Not After : Apr 9 01:00:31 2026 GMT Subject: CN=a781493c-f194-403b-aaa7-9e8dd36850f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9c:74:b6:e5:1d:24:ff:a3:05:94:5e:51:eb: 9b:21:5c:dd:08:58:0c:b4:b5:ec:00:70:a2:16:53: aa:61:d5:f5:4e:02:43:9a:5f:36:c1:55:d0:f7:89: 2b:48:b2:b8:9a:a8:97:4a:ca:be:cb:66:e6:70:88: c3:94:8c:c1:39:c7:62:3f:13:5d:45:38:32:84:aa: e8:14:05:f0:0c:ff:cb:0c:e3:07:99:73:17:32:f3: 83:c1:29:81:da:c7:1d:50:36:a6:8f:17:63:b1:eb: 4c:51:cf:44:f6:f4:ec:26:48:9d:81:61:88:06:e4: 83:1c:c3:13:b2:96:1c:37:02:ac:ff:a9:67:f2:9a: 79:e8:d6:17:95:f6:da:de:9a:01:54:2c:08:82:62: 46:b2:c8:59:e4:7f:7d:9f:e2:fa:a7:c9:cc:f3:1d: bd:24:a8:1d:0d:35:0d:ab:e1:c2:12:77:f4:a7:33: dd:24:fd:2a:0a:a7:33:34:8f:fd:1b:a6:08:f6:28: 3e:e2:35:a4:1b:53:b9:8c:0a:09:9f:1f:92:50:83: e4:f6:4a:fe:e2:fd:75:ce:cc:20:b3:2a:fd:00:73: ba:ed:eb:12:86:50:cb:26:39:69:96:97:7c:fa:89: 9d:3b:6e:b2:29:cd:b1:0c:f4:e4:86:fa:e9:59:ec: a3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:38:30:79:3F:72:FF:14:DE:81:81:24:45:57:12:74:90:85:CC:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab7328fc-0352-304e-9435-df90dd511034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:39:3e:95:f5:07:9e:ad:7e:b0:0d:63:74:ee:43:9f:79:da: d2:cd:33:ae:68:3d:2a:c8:ab:fe:ae:51:c0:b6:ba:1d:97:ae: ea:30:bb:bb:8f:ba:db:de:3c:51:c6:16:9f:c7:bc:44:20:07: cd:11:85:85:27:73:01:5d:c6:58:be:af:8e:ea:19:99:a5:5f: 85:4e:cb:47:57:4c:fa:f6:c5:61:25:28:07:43:a5:e1:11:4a: 5e:ee:f7:5c:5c:06:ba:3d:83:3b:4c:f5:9a:96:e2:56:62:c0: 9a:1b:2d:f8:06:3f:3b:e2:be:ac:39:11:8b:f7:53:42:13:00: cd:99:67:4c:7c:95:ff:ef:e2:19:83:f5:22:da:cb:08:c4:70: e3:6e:99:a2:4e:c6:78:dd:89:1b:18:63:9c:df:78:1d:d1:70: 14:e5:d9:e2:78:69:b4:a1:e6:6d:25:39:1f:97:4f:f9:60:a5: bf:53:37:16:18:5e:b8:d6:8b:b3:0f:f3:8a:ae:36:3d:dd:a7: 53:a4:fe:4b:c3:02:0a:be:5b:12:73:1f:8a:f1:a7:38:4b:69: df:a0:af:26:55:41:79:de:a4:95:ee:6f:d9:37:4d:6f:22:eb: c2:cf:3e:39:c8:5b:44:20:3e:07:bb:1a:99:e1:3c:cf:6e:3c: a8:c2:88:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx2gYOWQUVTdwkjdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEwOTAyMDAzMVoXDTI2MDQwOTAxMDAzMVowLzEtMCsGA1UEAxMk YTc4MTQ5M2MtZjE5NC00MDNiLWFhYTctOWU4ZGQzNjg1MGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJx0tuUdJP+jBZReUeubIVzdCFgMtLXsAHCi FlOqYdX1TgJDml82wVXQ94krSLK4mqiXSsq+y2bmcIjDlIzBOcdiPxNdRTgyhKro FAXwDP/LDOMHmXMXMvODwSmB2scdUDamjxdjsetMUc9E9vTsJkidgWGIBuSDHMMT spYcNwKs/6ln8pp56NYXlfba3poBVCwIgmJGsshZ5H99n+L6p8nM8x29JKgdDTUN q+HCEnf0pzPdJP0qCqczNI/9G6YI9ig+4jWkG1O5jAoJnx+SUIPk9kr+4v11zswg syr9AHO67esShlDLJjlplpd8+omdO26yKc2xDPTkhvrpWeyjcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJg4MHk/cv8U3oGBJEVXEnSQhcwvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWI3MzI4ZmMtMDM1Mi0z MDRlLTk0MzUtZGY5MGRkNTExMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOArMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACI5PpX1B56tfrANY3TuQ5952tLNM65oPSrIq/6uUcC2uh2Xruowu7uP utvePFHGFp/HvEQgB80RhYUncwFdxli+r47qGZmlX4VOy0dXTPr2xWElKAdDpeER Sl7u91xcBro9gztM9ZqW4lZiwJobLfgGPzvivqw5EYv3U0ITAM2ZZ0x8lf/v4hmD 9SLaywjEcONumaJOxnjdiRsYY5zfeB3RcBTl2eJ4abSh5m0lOR+XT/lgpb9TNxYY XrjWi7MP84quNj3dp1Ok/kvDAgq+WxJzH4rxpzhLad+gryZVQXnepJXub9k3TW8i 68LPPjnIW0QgPge7GpnhPM9uPKjCiMw= -----END CERTIFICATE-----Generated at Mon Mar 2 09:32:03 2026 by rpki-client