$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa File: 3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa (raw, json) Hash identifier: RNbPHryFIIXF60wjLE7fqAP4NsM43HujeYNQCaDF0QM= Subject key identifier: 11:46:09:02:25:62:D5:1A:2B:DF:EC:C4:22:46:BC:66:50:43:D2:8B Certificate issuer: /CN=94543699-4d50-4a37-8000-038c38671a86 Certificate serial: 010D0C9F4328584C8B718A94A7187A093DA40380 Authority key identifier: 03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa Signing time: Fri 16 Jan 2026 14:00:40 +0000 ROA not before: Fri 16 Jan 2026 14:00:40 +0000 ROA not after: Thu 16 Apr 2026 13:00:40 +0000 asID: 40562 IP address blocks: 172.111.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Feb 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8b:71:8a:94:a7:18:7a:09:3d:a4:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94543699-4d50-4a37-8000-038c38671a86 Validity Not Before: Jan 16 14:00:40 2026 GMT Not After : Apr 16 13:00:40 2026 GMT Subject: CN=005d40ed-45cd-491b-a352-b6dfa0aa9862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5a:9e:a6:12:37:ba:cf:72:a3:0b:a1:0e:78: 64:60:b4:2c:9a:57:58:2d:c0:47:3b:d0:c5:4b:a7: c6:b6:d9:81:13:35:b3:8c:96:3d:5d:bd:10:cd:bc: b1:47:56:3d:53:48:07:bb:35:2b:97:ba:7c:c2:3f: e9:ab:73:29:42:2e:b2:41:7d:2a:cb:79:2f:c9:61: 87:81:d3:c6:b2:6d:60:4b:83:02:da:43:07:ab:78: 39:e8:eb:c5:81:9e:09:43:03:50:52:f5:3b:09:fc: f9:a8:08:fe:4b:bb:2e:56:63:ca:40:18:29:c1:24: 38:80:71:30:4d:fa:4b:0a:85:44:eb:1d:bf:4d:55: 90:f8:8d:9d:55:92:1f:ac:82:02:12:db:96:cf:bb: e8:cf:35:56:d0:b3:f2:84:81:ec:5f:ef:70:86:82: 68:1d:e3:04:20:91:02:18:a2:50:0f:e8:58:05:a8: e3:24:05:45:e3:f4:16:62:e1:55:77:e1:f2:7d:e9: d3:12:87:54:ef:20:af:6e:4c:1a:65:7d:65:8c:06: 80:f9:ef:7e:d3:3a:74:74:8a:2b:b5:9d:96:ef:bc: 37:f9:14:5b:5d:54:a5:09:59:41:08:1b:f6:7f:59: 4a:b0:9b:a2:69:e7:42:1b:b1:1a:73:15:a0:03:09: a8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:46:09:02:25:62:D5:1A:2B:DF:EC:C4:22:46:BC:66:50:43:D2:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl X509v3 Authority Key Identifier: keyid:03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer sbgp-ipAddrBlock: critical IPv4: 172.111.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:b9:be:9c:37:37:35:4e:07:45:8d:b2:e5:bc:5a:85:51:60: cc:aa:44:6e:9d:b3:3f:e6:5f:df:32:20:cf:49:b6:ec:03:1f: 4b:3c:21:ef:29:a8:d8:13:36:d0:ea:3f:29:e3:28:4f:32:8a: 94:4b:33:3d:42:76:0c:3e:35:12:9e:87:9a:74:a6:58:cf:fd: 37:4f:15:5f:e7:5d:b3:96:30:db:b7:c7:ee:7d:3a:cd:5c:b2: 47:52:21:e1:d5:a9:7e:59:b8:a5:10:1c:03:6b:eb:18:53:01: 76:28:5a:94:da:bf:17:28:78:da:d5:87:70:be:ed:c4:18:e1: a9:5f:33:bb:eb:e1:ba:cb:ff:7e:b4:4c:48:ef:d5:5a:55:fd: c1:ab:f9:2d:66:98:76:93:c5:07:cc:57:d1:5e:4a:f5:fd:a6: ff:6a:2c:2a:b6:c5:05:b9:72:1b:1e:90:30:24:c8:5f:ad:a3: 6c:26:d4:14:36:52:c6:20:cb:85:77:8c:a9:94:bf:06:f2:ea: fa:cc:08:4d:21:6d:3c:9a:cc:63:43:9f:1f:ec:ef:3d:93:9b: f3:88:aa:5f:09:20:f8:3c:d4:06:17:ee:1a:f0:ca:91:3a:7a: 5e:f2:91:c6:7b:87:9a:65:12:1d:42:44:50:24:2b:78:8c:77: 91:e9:73:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyLcYqUpxh6CT2kA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1NDM2OTktNGQ1MC00YTM3LTgwMDAtMDM4YzM4Njcx YTg2MB4XDTI2MDExNjE0MDA0MFoXDTI2MDQxNjEzMDA0MFowLzEtMCsGA1UEAxMk MDA1ZDQwZWQtNDVjZC00OTFiLWEzNTItYjZkZmEwYWE5ODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFqephI3us9yowuhDnhkYLQsmldYLcBHO9DF S6fGttmBEzWzjJY9Xb0QzbyxR1Y9U0gHuzUrl7p8wj/pq3MpQi6yQX0qy3kvyWGH gdPGsm1gS4MC2kMHq3g56OvFgZ4JQwNQUvU7Cfz5qAj+S7suVmPKQBgpwSQ4gHEw TfpLCoVE6x2/TVWQ+I2dVZIfrIICEtuWz7vozzVW0LPyhIHsX+9whoJoHeMEIJEC GKJQD+hYBajjJAVF4/QWYuFVd+HyfenTEodU7yCvbkwaZX1ljAaA+e9+0zp0dIor tZ2W77w3+RRbXVSlCVlBCBv2f1lKsJuiaedCG7EacxWgAwmoDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFGCQIlYtUaK9/sxCJGvGZQQ9KLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0 MzY5OS00ZDUwLTRhMzctODAwMC0wMzhjMzg2NzFhODYvMzAwNmI3Y2YtZWM3OC0z ZmU2LTkyZTEtMDRiMDg0M2Y1OTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTQ1NDM2OTktNGQ1MC00YTM3LTgw MDAtMDM4YzM4NjcxYTg2Lzk0NTQzNjk5LTRkNTAtNGEzNy04MDAwLTAzOGMzODY3 MWE4Ni5jcmwwHwYDVR0jBBgwFoAUA/mT0DrEyfWVfSGEZ/9sW9FWgeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0MzY5OS00ZDUwLTRhMzctODAwMC0wMzhj Mzg2NzFhODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHi5vpw3NzVOB0WNsuW8WoVRYMyqRG6dsz/mX98yIM9JtuwDH0s8Ie8p qNgTNtDqPynjKE8yipRLMz1Cdgw+NRKeh5p0pljP/TdPFV/nXbOWMNu3x+59Os1c skdSIeHVqX5ZuKUQHANr6xhTAXYoWpTavxcoeNrVh3C+7cQY4alfM7vr4brL/360 TEjv1VpV/cGr+S1mmHaTxQfMV9FeSvX9pv9qLCq2xQW5chsekDAkyF+to2wm1BQ2 UsYgy4V3jKmUvwby6vrMCE0hbTyazGNDnx/s7z2Tm/OIql8JIPg81AYX7hrwypE6 el7ykcZ7h5plEh1CRFAkK3iMd5HpcyM= -----END CERTIFICATE-----Generated at Sat Feb 21 00:55:58 2026 by rpki-client