$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa File: f890b188-b610-38a0-89b0-8a1a62d249f7.roa (raw, json) Hash identifier: Hf03OzKvrVBAQE95m2vYqs9e6mwkVpJ3BXA9Ir39Xmg= Subject key identifier: E2:EA:3D:5E:C8:DA:1D:C5:27:4E:F9:38:A2:6B:7A:86:D3:4F:BE:DF Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584CAE572109A0F4FFC4875ED440 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 14618 IP address blocks: 216.245.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:21:09:a0:f4:ff:c4:87:5e:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=1e581d77-796f-4775-b5e7-0cd2a7116cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1f:c4:1c:a6:85:5c:32:d6:37:30:1d:ff:72: 90:1a:6e:4e:6b:73:b8:0e:05:38:03:4e:2a:47:4d: 97:be:ad:7d:d0:c3:4f:b2:3f:47:88:49:20:23:b7: 91:73:1a:03:22:9a:3d:b2:8f:8d:db:3d:4d:25:e1: 1f:39:b1:2c:ed:40:c1:82:21:24:ea:5f:59:3b:f5: 52:8a:de:2b:9f:a5:61:1c:de:c1:49:3c:b1:98:19: 81:0c:a4:24:fe:c1:45:a0:9c:37:7c:5f:6d:1c:7a: f5:1f:45:2f:b0:ea:9d:d3:27:8a:5e:1e:f9:05:07: fb:96:a4:dd:57:56:54:7b:e4:ae:03:bc:2a:4c:4d: cd:d2:ac:e8:50:83:c1:35:c8:b3:bd:66:de:ba:f4: 9f:ea:9d:0e:b0:c5:81:7d:22:56:fd:1b:33:df:89: 18:91:9c:6d:16:cc:8c:c5:b6:a1:a7:40:2e:e1:8c: 51:51:bf:13:71:a6:a3:9c:c0:f9:e6:ab:c1:25:63: 0a:75:40:21:c2:6a:e5:7f:53:a6:ba:a8:e6:c2:b7: 39:70:89:68:45:37:aa:77:f4:56:d2:80:4e:58:bd: 3f:7f:16:16:86:c4:d1:81:79:e6:a4:dd:d5:d8:46: 5f:79:bf:8f:ce:4c:9e:6d:d3:e7:0b:76:d4:23:a6: 7e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EA:3D:5E:C8:DA:1D:C5:27:4E:F9:38:A2:6B:7A:86:D3:4F:BE:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 216.245.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:9e:b4:08:69:7f:4c:44:b5:0c:fe:54:5d:31:c4:3b:83:e3: 90:48:d7:5f:95:dc:bc:a8:86:84:5f:7b:84:33:31:0e:4a:5a: fc:f1:a2:7b:42:4c:21:d9:4b:db:f1:42:fa:8b:c7:7e:1c:14: 26:08:a8:16:93:cd:31:b8:db:f5:7c:ce:d3:4f:97:0a:0c:31: 9f:e3:90:2d:9e:d7:d8:c4:ee:0d:af:2d:26:09:c1:73:c7:d2: 34:97:3d:a4:9c:e0:45:c7:cf:cb:20:d6:0f:e7:b2:ed:1a:40: 9e:2d:27:52:4b:dd:59:87:a6:fb:2e:20:cf:91:65:7b:44:ae: ee:88:1d:d3:01:de:b0:4c:9a:0f:f6:ba:40:c8:2b:69:99:28: d8:fe:08:75:4d:f5:9d:d5:69:3c:af:d3:6e:5a:2e:dd:01:ca: 29:cf:4c:3e:fa:c6:d9:57:6f:da:e8:3f:94:67:d1:92:dd:6f: 4c:8c:9a:9c:91:d9:2f:db:5e:4e:37:c8:4c:54:ea:5c:33:58: 52:ab:6a:4f:47:fb:b9:84:4f:ba:58:a2:f6:12:c0:fb:fb:34: 96:29:e0:fa:d6:aa:7c:2e:4c:97:ec:16:8c:70:5e:8d:2a:76: ed:69:23:53:a5:71:6b:df:9c:36:77:98:ed:4c:7e:1f:c0:cc: df:27:bb:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVyEJoPT/xIde1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MWU1ODFkNzctNzk2Zi00Nzc1LWI1ZTctMGNkMmE3MTE2Y2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR/EHKaFXDLWNzAd/3KQGm5Oa3O4DgU4A04q R02Xvq190MNPsj9HiEkgI7eRcxoDIpo9so+N2z1NJeEfObEs7UDBgiEk6l9ZO/VS it4rn6VhHN7BSTyxmBmBDKQk/sFFoJw3fF9tHHr1H0UvsOqd0yeKXh75BQf7lqTd V1ZUe+SuA7wqTE3N0qzoUIPBNcizvWbeuvSf6p0OsMWBfSJW/Rsz34kYkZxtFsyM xbahp0Au4YxRUb8TcaajnMD55qvBJWMKdUAhwmrlf1Omuqjmwrc5cIloRTeqd/RW 0oBOWL0/fxYWhsTRgXnmpN3V2EZfeb+PzkyebdPnC3bUI6Z+zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLqPV7I2h3FJ075OKJreobTT77fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvZjg5MGIxODgtYjYxMC0z OGEwLTg5YjAtOGExYTYyZDI0OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PW1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqetAhpf0xEtQz+VF0xxDuD45BI11+V3LyohoRfe4QzMQ5KWvzxontC TCHZS9vxQvqLx34cFCYIqBaTzTG42/V8ztNPlwoMMZ/jkC2e19jE7g2vLSYJwXPH 0jSXPaSc4EXHz8sg1g/nsu0aQJ4tJ1JL3VmHpvsuIM+RZXtEru6IHdMB3rBMmg/2 ukDIK2mZKNj+CHVN9Z3VaTyv025aLt0ByinPTD76xtlXb9roP5Rn0ZLdb0yMmpyR 2S/bXk43yExU6lwzWFKrak9H+7mET7pYovYSwPv7NJYp4PrWqnwuTJfsFoxwXo0q du1pI1OlcWvfnDZ3mO1Mfh/AzN8nuxg= -----END CERTIFICATE-----Generated at Mon Mar 2 15:16:09 2026 by rpki-client