$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/04ff5347-ecb0-3e2b-96ac-a6a1254ef420.roa File: 04ff5347-ecb0-3e2b-96ac-a6a1254ef420.roa (raw, json) Hash identifier: 3dxSNfsTl5sah+ikT/2saEi2WdIsc7H+UNCQzFC2VeA= Subject key identifier: 6C:E8:8A:BC:AD:B2:C7:0E:00:8B:13:7E:ED:20:09:A7:65:25:0D:00 Certificate issuer: /CN=11f590b6-eb6e-4969-824b-0df247220283 Certificate serial: 010D0C9F4328584CAC6741CCD16A7C7401402860 Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/04ff5347-ecb0-3e2b-96ac-a6a1254ef420.roa Signing time: Tue 06 Jan 2026 02:00:31 +0000 ROA not before: Tue 06 Jan 2026 02:00:31 +0000 ROA not after: Mon 06 Apr 2026 01:00:31 +0000 asID: 395301 IP address blocks: 162.120.64.0/23 maxlen: 23 162.120.64.0/24 maxlen: 24 162.120.65.0/24 maxlen: 24 162.120.66.0/24 maxlen: 24 162.120.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:67:41:cc:d1:6a:7c:74:01:40:28:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283 Validity Not Before: Jan 6 02:00:31 2026 GMT Not After : Apr 6 01:00:31 2026 GMT Subject: CN=872d99b1-9a47-4377-8f5d-add2f8140030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ce:89:70:a6:de:69:f0:1f:04:bc:e8:4d:5c: 74:c6:87:ac:45:d0:20:30:b9:dd:92:9a:aa:27:95: 6c:26:d7:e0:d6:71:92:2d:a7:99:80:37:aa:1b:a0: c6:17:1e:85:b3:ca:f9:c0:d8:37:83:68:9b:0c:6a: ba:84:ad:8f:16:e3:88:72:0b:e4:2e:d5:af:d6:3b: 6a:91:89:8b:11:4a:48:ff:63:27:63:38:d8:fa:c3: d9:43:c6:b8:d7:df:58:be:c7:44:6a:a3:c6:63:e8: b6:e5:97:5e:f5:2d:88:27:36:12:ff:41:76:ab:a2: 9e:c5:38:97:f8:0d:b0:8c:1f:ad:28:69:69:92:c1: 93:f3:0c:1f:68:8f:13:51:01:ea:44:3e:8b:7d:58: e6:da:81:53:5f:c5:79:89:d4:f3:4f:08:aa:65:6d: 6e:32:a8:18:02:ad:72:79:4f:86:03:f3:0a:e9:7b: eb:f3:56:50:2e:ca:3e:6b:c9:e9:0d:c9:20:e1:28: 53:2a:e0:c6:4f:f8:12:5c:9a:9d:d9:a2:9d:74:48: 97:d4:25:2c:36:e3:82:70:e0:34:3e:0e:ad:73:5c: 60:83:01:c7:6a:cd:1c:a2:4b:6b:13:10:d6:6f:7a: 2f:e5:9c:c4:72:41:fa:37:f8:9a:de:45:7c:44:0c: f1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E8:8A:BC:AD:B2:C7:0E:00:8B:13:7E:ED:20:09:A7:65:25:0D:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/04ff5347-ecb0-3e2b-96ac-a6a1254ef420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl X509v3 Authority Key Identifier: keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer sbgp-ipAddrBlock: critical IPv4: 162.120.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:33:d9:0f:12:35:80:74:93:87:ee:8f:f3:5e:08:13:d0:ed: fe:aa:c1:5f:4e:a0:60:18:e6:77:af:80:d9:77:1d:9f:43:b5: b8:01:24:92:93:c8:f9:b9:8f:69:01:60:63:9c:4c:ea:4c:15: 9b:28:ba:8c:10:ae:b4:ca:d9:59:47:30:70:46:c0:f8:d2:6b: 5c:ef:ec:c7:56:a4:a6:2d:31:1f:4c:48:8a:38:0f:ad:bb:9e: 6d:57:e4:fe:20:f9:16:3d:a2:f4:da:8a:06:98:6d:72:a3:98: 4a:c1:4c:35:8c:c1:f9:27:83:f9:e5:fb:67:ca:6e:fc:96:22: d2:d9:b1:f6:5d:fc:ab:8f:99:d0:83:79:cf:f1:fd:00:22:0d: 66:5c:3e:f5:de:2e:81:bc:11:76:9d:b1:17:0e:18:27:a4:1e: 41:82:ed:85:c6:d7:1a:87:44:4f:b4:a8:77:22:a0:4b:36:63: 33:87:3c:fe:ed:22:6e:4f:2d:14:1b:39:fe:43:89:9e:63:c5: f7:f4:ee:79:19:dc:31:d0:2c:e5:cd:4f:bc:4c:68:e6:92:24: 94:5d:59:2e:5b:90:1b:f9:a9:37:8e:ce:84:cc:03:2b:fc:27: 53:49:85:a4:38:03:4f:72:f5:9e:e7:9e:5b:b1:ed:08:8c:35: 2d:06:2f:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEysZ0HM0Wp8dAFAKGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFmNTkwYjYtZWI2ZS00OTY5LTgyNGItMGRmMjQ3MjIw MjgzMB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk ODcyZDk5YjEtOWE0Ny00Mzc3LThmNWQtYWRkMmY4MTQwMDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs6JcKbeafAfBLzoTVx0xoesRdAgMLndkpqq J5VsJtfg1nGSLaeZgDeqG6DGFx6Fs8r5wNg3g2ibDGq6hK2PFuOIcgvkLtWv1jtq kYmLEUpI/2MnYzjY+sPZQ8a4199YvsdEaqPGY+i25Zde9S2IJzYS/0F2q6KexTiX +A2wjB+tKGlpksGT8wwfaI8TUQHqRD6LfVjm2oFTX8V5idTzTwiqZW1uMqgYAq1y eU+GA/MK6Xvr81ZQLso+a8npDckg4ShTKuDGT/gSXJqd2aKddEiX1CUsNuOCcOA0 Pg6tc1xggwHHas0coktrExDWb3ov5ZzEckH6N/ia3kV8RAzxEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzoirytsscOAIsTfu0gCadlJQ0AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1 OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcyMjAyODMvMDRmZjUzNDctZWNiMC0z ZTJiLTk2YWMtYTZhMTI1NGVmNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTFmNTkwYjYtZWI2ZS00OTY5LTgy NGItMGRmMjQ3MjIwMjgzLzExZjU5MGI2LWViNmUtNDk2OS04MjRiLTBkZjI0NzIy MDI4My5jcmwwHwYDVR0jBBgwFoAUguMk2L7Ghd1PatUmk2y+CkgxGFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYy NDcyMjAyODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQConhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEz2Q8SNYB0k4fuj/NeCBPQ7f6qwV9OoGAY5nevgNl3HZ9DtbgBJJKT yPm5j2kBYGOcTOpMFZsouowQrrTK2VlHMHBGwPjSa1zv7MdWpKYtMR9MSIo4D627 nm1X5P4g+RY9ovTaigaYbXKjmErBTDWMwfkng/nl+2fKbvyWItLZsfZd/KuPmdCD ec/x/QAiDWZcPvXeLoG8EXadsRcOGCekHkGC7YXG1xqHRE+0qHcioEs2YzOHPP7t Im5PLRQbOf5DiZ5jxff07nkZ3DHQLOXNT7xMaOaSJJRdWS5bkBv5qTeOzoTMAyv8 J1NJhaQ4A09y9Z7nnlux7QiMNS0GL1w= -----END CERTIFICATE-----Generated at Sun Feb 22 19:23:06 2026 by rpki-client