$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef8c9806-70b6-3a18-a6bc-913e3e7de05f.roa File: ef8c9806-70b6-3a18-a6bc-913e3e7de05f.roa (raw, json) Hash identifier: d5enWl4EzchsZDBjq0lPwLySFNur/XpinLpMASdVQpA= Subject key identifier: DC:E0:02:E9:02:AA:4B:00:81:98:B0:79:3C:0D:16:B1:87:A9:65:C2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D00B289B1A501219283557480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef8c9806-70b6-3a18-a6bc-913e3e7de05f.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 36183 IP address blocks: 172.224.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:89:b1:a5:01:21:92:83:55:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=5f16a6de-b443-49a7-9052-b0f94a2daf5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:94:62:77:52:be:3a:20:6b:9d:3f:1a:e6:9e: b8:33:a3:44:9a:64:a0:54:de:56:b3:d6:cb:d9:02: 50:4a:c1:82:e8:7d:b1:d0:f5:29:64:3a:77:af:9a: b7:f6:d0:0c:b3:06:2c:98:27:9a:1a:7f:a9:d3:71: 65:6a:e4:37:d5:80:e4:0a:52:63:e6:fe:50:be:8c: d4:8c:89:04:58:39:09:c0:95:10:ae:89:5c:bc:7a: a1:2e:51:28:43:a0:66:40:a4:7e:62:c9:c9:be:b3: d3:75:ea:94:d1:5e:fd:bc:09:1c:66:31:a1:c0:32: 99:be:57:90:ed:f8:bd:95:a9:ce:37:93:9d:96:95: 4a:fe:8e:ac:f6:5c:fd:44:77:93:2a:3d:1b:24:4e: 0e:a5:62:fd:6c:ae:23:0f:1c:35:33:db:66:bd:60: 28:26:d2:10:c2:a8:6d:03:74:2a:28:83:00:92:76: fd:cb:15:18:85:6c:1f:2a:cd:4f:ca:54:7c:8a:55: 7d:8f:4e:48:d6:b1:a1:4e:0d:57:b6:43:ab:50:a3: 42:75:44:e5:a2:f6:76:bc:2f:a7:9a:98:0d:d8:ac: 71:f4:7e:9f:fe:bf:1b:ce:28:21:a9:07:25:f2:bd: 31:d5:b7:6e:c6:e4:4e:b2:48:7d:2d:18:ef:72:05: 72:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E0:02:E9:02:AA:4B:00:81:98:B0:79:3C:0D:16:B1:87:A9:65:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef8c9806-70b6-3a18-a6bc-913e3e7de05f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:a5:49:e8:f6:05:64:f9:13:f6:0e:a3:c3:f0:3c:66:4f:dc: 9f:e8:bb:c4:f2:60:06:96:04:0e:9b:bf:54:5b:66:32:59:f1: a2:69:cf:60:f4:0f:47:e6:2e:80:96:40:0a:ef:7f:95:98:7f: 21:2e:de:75:1c:e7:df:09:a8:36:f0:de:9f:2d:a2:88:78:b7: 68:61:86:40:90:2f:d3:d6:22:31:7e:28:29:16:9a:01:35:a6: 14:35:32:9a:7d:cb:c2:14:0e:de:86:ba:fc:7b:c4:9f:fd:8c: 9c:79:c2:15:66:be:f5:56:12:b5:66:16:89:81:2a:74:96:bc: 53:f8:1b:eb:b7:bf:0d:14:35:cf:9c:7e:d1:52:f8:7e:7d:cc: 07:a8:75:45:da:33:16:8e:d3:23:15:b1:19:94:b1:79:42:c4: e7:b3:52:be:6a:47:81:d3:a5:77:be:c3:66:41:32:14:b2:38: 24:64:de:b6:f1:1c:a5:80:cc:74:f1:75:82:77:3d:ab:7c:e7: ce:21:1a:89:c9:bc:02:e9:01:16:c3:e8:06:db:45:5e:26:42: 8b:8d:16:57:84:ec:b7:c5:e5:20:93:a9:fc:62:d5:99:3e:a3: da:8a:5a:02:76:5e:35:e8:58:bd:ed:08:c6:d6:57:d1:d6:77: 39:af:88:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AsomxpQEhkoNVdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk NWYxNmE2ZGUtYjQ0My00OWE3LTkwNTItYjBmOTRhMmRhZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5Rid1K+OiBrnT8a5p64M6NEmmSgVN5Ws9bL 2QJQSsGC6H2x0PUpZDp3r5q39tAMswYsmCeaGn+p03FlauQ31YDkClJj5v5QvozU jIkEWDkJwJUQrolcvHqhLlEoQ6BmQKR+YsnJvrPTdeqU0V79vAkcZjGhwDKZvleQ 7fi9lanON5OdlpVK/o6s9lz9RHeTKj0bJE4OpWL9bK4jDxw1M9tmvWAoJtIQwqht A3QqKIMAknb9yxUYhWwfKs1PylR8ilV9j05I1rGhTg1XtkOrUKNCdUTlovZ2vC+n mpgN2Kxx9H6f/r8bzighqQcl8r0x1bduxuROskh9LRjvcgVyDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzgAukCqksAgZiweTwNFrGHqWXCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWY4Yzk4MDYtNzBiNi0z YTE4LWE2YmMtOTEzZTNlN2RlMDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArODkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHulSej2BWT5E/YOo8PwPGZP3J/ou8TyYAaWBA6bv1RbZjJZ8aJpz2D0 D0fmLoCWQArvf5WYfyEu3nUc598JqDbw3p8tooh4t2hhhkCQL9PWIjF+KCkWmgE1 phQ1Mpp9y8IUDt6Guvx7xJ/9jJx5whVmvvVWErVmFomBKnSWvFP4G+u3vw0UNc+c ftFS+H59zAeodUXaMxaO0yMVsRmUsXlCxOezUr5qR4HTpXe+w2ZBMhSyOCRk3rbx HKWAzHTxdYJ3Pat8584hGonJvALpARbD6AbbRV4mQouNFleE7LfF5SCTqfxi1Zk+ o9qKWgJ2XjXoWL3tCMbWV9HWdzmviIA= -----END CERTIFICATE-----Generated at Mon Mar 2 09:23:02 2026 by rpki-client