$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfc70af9-4005-3ca6-bdf4-1aea8d7ba15e.roa File: dfc70af9-4005-3ca6-bdf4-1aea8d7ba15e.roa (raw, json) Hash identifier: ZvBAuPE+gQfkvh1VQkKtmBez7JlCtPbmpnFjkd9332M= Subject key identifier: 55:A8:4F:B1:CE:79:46:14:36:DF:F5:DA:10:A1:A8:3E:80:29:BD:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C768185DFB8D90CAA071C1580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfc70af9-4005-3ca6-bdf4-1aea8d7ba15e.roa Signing time: Fri 09 Jan 2026 02:00:31 +0000 ROA not before: Fri 09 Jan 2026 02:00:31 +0000 ROA not after: Thu 09 Apr 2026 01:00:31 +0000 asID: 36183 IP address blocks: 172.224.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:76:81:85:df:b8:d9:0c:aa:07:1c:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 9 02:00:31 2026 GMT Not After : Apr 9 01:00:31 2026 GMT Subject: CN=f9b23955-bf7f-4ff7-a056-0ec4b36a6c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:26:27:ea:d2:cf:b2:bf:66:f9:cf:13:cd:8d: 93:93:f8:cb:63:11:45:41:f0:ce:f7:2c:a4:f1:d0: bc:67:0b:ee:8c:2b:04:a1:14:12:b0:3d:e5:08:f6: 01:96:ac:36:4c:55:42:7e:d8:e7:e9:b4:85:1a:05: 50:aa:71:e1:8d:0d:0d:af:b2:ae:51:8d:fa:37:b5: 5c:56:db:7c:58:c1:fa:a6:f0:8f:1b:bc:28:35:62: 43:55:99:e0:a0:82:1e:89:66:2a:78:2c:ea:7c:3c: f4:23:d2:f2:96:ce:4d:7e:f0:05:48:21:67:57:e8: b9:ad:78:f3:ac:f6:3f:76:38:6a:05:17:51:23:9a: ab:35:ae:2d:22:ad:67:80:cd:6b:03:75:ec:70:84: 22:70:bc:c6:6e:bd:30:09:71:9b:4d:51:f4:36:d6: 3f:24:cd:1c:1e:b8:53:77:6a:fb:58:01:e9:8b:d0: f6:5e:41:4e:09:19:f4:1a:b5:0b:7e:32:c1:d3:ac: 0c:21:d1:f3:4c:64:80:ca:47:44:c7:2e:f2:14:2d: 06:95:c1:69:f2:43:e3:92:60:60:d5:92:0b:00:0d: 88:39:84:c5:50:ee:e5:70:a6:30:b6:58:7a:67:49: 4e:f9:be:65:ed:51:1b:a1:7a:d7:02:ce:0a:22:55: c0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A8:4F:B1:CE:79:46:14:36:DF:F5:DA:10:A1:A8:3E:80:29:BD:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfc70af9-4005-3ca6-bdf4-1aea8d7ba15e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:c7:67:e3:71:60:b5:be:13:6d:4f:4c:70:28:7a:d1:00:09: c2:7a:c7:e9:7c:36:53:a4:4b:88:ae:36:b1:3b:8e:c1:61:12: 88:c5:51:33:36:d8:b7:e1:b6:19:9e:da:e4:d4:b5:1f:78:af: 20:6f:f4:22:30:ee:42:82:83:be:d5:a9:a7:32:1c:dc:ce:45: b0:87:bf:87:1a:1f:d1:e0:ea:24:88:eb:b1:51:5a:73:e4:47: 16:bc:66:fd:4f:3c:9b:31:8d:58:e2:6e:62:40:b4:ba:49:1c: 16:69:cd:2f:f8:59:64:52:d9:63:2b:d5:b3:6a:6c:4f:a5:08: 20:54:d8:4b:41:7e:c6:c5:d4:16:a7:96:9d:98:6b:24:cf:b4: 5a:17:4a:cb:a2:44:6a:ff:27:0f:92:bb:70:45:d8:5e:c5:9c: fd:95:3e:a7:93:3d:87:36:ed:8c:b4:b2:fb:4f:94:e9:37:a2: d5:68:ca:9c:3a:6d:25:49:6c:8c:62:7e:89:4b:7c:9a:e8:48: e9:30:aa:0c:45:59:0b:9a:ec:94:23:b3:10:24:a0:38:a7:d4: 3b:00:6f:a8:03:32:5a:89:81:92:78:c7:22:18:d3:50:d8:4f: 10:58:1f:36:c6:f4:70:2e:ee:d8:55:54:74:fa:95:a5:15:f9: 05:ca:04:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx2gYXfuNkMqgccFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEwOTAyMDAzMVoXDTI2MDQwOTAxMDAzMVowLzEtMCsGA1UEAxMk ZjliMjM5NTUtYmY3Zi00ZmY3LWEwNTYtMGVjNGIzNmE2YzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCYn6tLPsr9m+c8TzY2Tk/jLYxFFQfDO9yyk 8dC8ZwvujCsEoRQSsD3lCPYBlqw2TFVCftjn6bSFGgVQqnHhjQ0Nr7KuUY36N7Vc Vtt8WMH6pvCPG7woNWJDVZngoIIeiWYqeCzqfDz0I9Lyls5NfvAFSCFnV+i5rXjz rPY/djhqBRdRI5qrNa4tIq1ngM1rA3XscIQicLzGbr0wCXGbTVH0NtY/JM0cHrhT d2r7WAHpi9D2XkFOCRn0GrULfjLB06wMIdHzTGSAykdExy7yFC0GlcFp8kPjkmBg 1ZILAA2IOYTFUO7lcKYwtlh6Z0lO+b5l7VEboXrXAs4KIlXAYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWoT7HOeUYUNt/12hChqD6AKb0NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGZjNzBhZjktNDAwNS0z Y2E2LWJkZjQtMWFlYThkN2JhMTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzHZ+NxYLW+E21PTHAoetEACcJ6x+l8NlOkS4iuNrE7jsFhEojFUTM2 2Lfhthme2uTUtR94ryBv9CIw7kKCg77VqacyHNzORbCHv4caH9Hg6iSI67FRWnPk Rxa8Zv1PPJsxjVjibmJAtLpJHBZpzS/4WWRS2WMr1bNqbE+lCCBU2EtBfsbF1Ban lp2YayTPtFoXSsuiRGr/Jw+Su3BF2F7FnP2VPqeTPYc27Yy0svtPlOk3otVoypw6 bSVJbIxifolLfJroSOkwqgxFWQua7JQjsxAkoDin1DsAb6gDMlqJgZJ4xyIY01DY TxBYHzbG9HAu7thVVHT6laUV+QXKBJ4= -----END CERTIFICATE-----Generated at Sun Mar 1 22:55:02 2026 by rpki-client