$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2d8ca45f-228d-3ffc-9008-f26a1700290a.roa File: 2d8ca45f-228d-3ffc-9008-f26a1700290a.roa (raw, json) Hash identifier: hGwLXCwJNwupmw7EXuAJw6j+Kt23ICEyLN+Y2nR9Bcs= Subject key identifier: D6:92:10:83:2C:7A:BE:52:8F:56:13:8A:15:72:7C:28:B3:8A:94:94 Certificate issuer: /CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7 Certificate serial: 010D0C9F4328584CA5F7100644824735C3FDF100 Authority key identifier: BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2d8ca45f-228d-3ffc-9008-f26a1700290a.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 8075 IP address blocks: 216.99.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:10:06:44:82:47:35:c3:fd:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=87420784-54a4-4901-89f8-3072bfaa18d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4f:2e:15:e9:69:7f:a2:d7:e5:30:da:c8:d2: c3:08:e9:6b:39:83:6c:8f:f4:03:5a:14:7b:24:96: ee:f2:cd:f8:08:13:b6:6d:30:56:bd:0e:d9:f9:9e: 17:7f:ef:d7:78:d6:42:79:5f:73:e3:57:58:d6:f1: 2b:8f:3e:91:0d:4f:a6:39:a4:93:6d:47:d7:a3:4f: 5e:b9:49:45:2c:cf:58:0f:b4:00:b8:2e:77:cf:61: 41:2c:eb:48:de:24:d0:4a:d3:ab:ff:46:d4:f3:2f: c9:3c:ac:59:6e:b3:7a:d6:63:ec:91:ed:da:bf:c8: dd:99:e0:fb:99:8a:ba:11:5b:5e:7f:47:17:49:23: ef:64:c6:26:b5:bd:7d:57:88:b2:1c:9e:63:70:15: 5c:13:e3:40:45:41:0a:4d:2e:bb:35:74:df:dc:a7: 5b:1d:f1:90:44:9f:a3:7b:35:86:77:94:48:a4:9f: 3a:d1:ba:00:3a:94:a1:67:e2:1b:9d:27:6a:9b:ff: 09:3e:60:79:31:a6:6f:b5:e9:12:5d:21:2a:d2:71: ed:95:3b:5c:f4:ae:21:dd:e7:fb:f4:95:01:b3:16: 05:99:32:d3:20:1c:6a:a1:c5:20:f1:b3:50:29:a8: 8c:fe:bc:27:66:00:ce:2c:20:b9:4e:7b:04:da:15: 28:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:92:10:83:2C:7A:BE:52:8F:56:13:8A:15:72:7C:28:B3:8A:94:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2d8ca45f-228d-3ffc-9008-f26a1700290a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl X509v3 Authority Key Identifier: keyid:BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer sbgp-ipAddrBlock: critical IPv4: 216.99.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:71:44:4f:24:4d:25:bc:12:5b:5b:f4:6b:cd:93:0b:92:da: e3:a6:a3:b2:2e:3f:50:3a:70:21:7b:e1:03:24:78:c5:3c:90: e4:98:66:5f:63:3d:e1:35:ef:45:b9:e8:e4:05:24:8f:e6:33: f1:55:da:31:74:1a:8d:04:50:e0:8a:6e:fd:08:80:e5:92:41: af:4b:0c:ec:6a:7a:21:89:81:87:a1:b0:ae:69:f3:28:28:60: 95:99:ed:30:1d:74:f1:46:51:80:d8:cd:59:f2:69:92:88:11: 94:0c:01:9b:9c:45:f2:2f:20:03:b1:5c:e3:2a:ae:59:3f:b8: 39:0a:9f:07:49:c6:79:f5:7c:d5:a8:4c:f2:5e:6b:24:46:07: 28:bc:6c:81:76:57:69:1f:92:29:f9:0e:47:3d:c2:61:64:7c: 86:7a:2b:a0:04:92:3c:ea:89:d4:3c:17:b8:1e:db:bd:8f:44: 3e:7f:e9:e1:3d:93:71:45:f9:08:84:f5:25:9f:f1:ff:60:f3: 36:cc:eb:13:e2:e8:c6:0f:0c:87:91:3d:a1:54:da:90:d3:b5: 99:27:69:08:e1:27:02:39:c3:13:63:64:59:b1:d9:99:89:2e: 35:98:a3:10:57:8f:71:7a:a1:7f:95:63:36:37:41:74:55:a2: df:11:3f:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9xAGRIJHNcP98QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY3MmE3OTgtYTk3OS00ZjUxLTg1YWUtZTBlZWMzZGNi OWY3MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk ODc0MjA3ODQtNTRhNC00OTAxLTg5ZjgtMzA3MmJmYWExOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE8uFelpf6LX5TDayNLDCOlrOYNsj/QDWhR7 JJbu8s34CBO2bTBWvQ7Z+Z4Xf+/XeNZCeV9z41dY1vErjz6RDU+mOaSTbUfXo09e uUlFLM9YD7QAuC53z2FBLOtI3iTQStOr/0bU8y/JPKxZbrN61mPske3av8jdmeD7 mYq6EVtef0cXSSPvZMYmtb19V4iyHJ5jcBVcE+NARUEKTS67NXTf3KdbHfGQRJ+j ezWGd5RIpJ860boAOpShZ+IbnSdqm/8JPmB5MaZvtekSXSEq0nHtlTtc9K4h3ef7 9JUBsxYFmTLTIBxqocUg8bNQKaiM/rwnZgDOLCC5TnsE2hUoDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNaSEIMser5Sj1YTihVyfCizipSUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNjcy YTc5OC1hOTc5LTRmNTEtODVhZS1lMGVlYzNkY2I5ZjcvMmQ4Y2E0NWYtMjI4ZC0z ZmZjLTkwMDgtZjI2YTE3MDAyOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzY3MmE3OTgtYTk3OS00ZjUxLTg1 YWUtZTBlZWMzZGNiOWY3L2M2NzJhNzk4LWE5NzktNGY1MS04NWFlLWUwZWVjM2Rj YjlmNy5jcmwwHwYDVR0jBBgwFoAUuikoNWCwwHyqzvaenrqtsKIgNgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNjcyYTc5OC1hOTc5LTRmNTEtODVhZS1lMGVl YzNkY2I5ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2GOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlxRE8kTSW8Eltb9GvNkwuS2uOmo7IuP1A6cCF74QMkeMU8kOSYZl9j PeE170W56OQFJI/mM/FV2jF0Go0EUOCKbv0IgOWSQa9LDOxqeiGJgYehsK5p8ygo YJWZ7TAddPFGUYDYzVnyaZKIEZQMAZucRfIvIAOxXOMqrlk/uDkKnwdJxnn1fNWo TPJeayRGByi8bIF2V2kfkin5Dkc9wmFkfIZ6K6AEkjzqidQ8F7ge272PRD5/6eE9 k3FF+QiE9SWf8f9g8zbM6xPi6MYPDIeRPaFU2pDTtZknaQjhJwI5wxNjZFmx2ZmJ LjWYoxBXj3F6oX+VYzY3QXRVot8RP/o= -----END CERTIFICATE-----Generated at Mon Mar 2 10:02:43 2026 by rpki-client