$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1adc26a3-e69e-3a60-abcd-835a6904b3a1.roa File: 1adc26a3-e69e-3a60-abcd-835a6904b3a1.roa (raw, json) Hash identifier: jRwAN1qUFoDAwhbHtQrJRHcBwJdyHnkWgp2iUI8uURA= Subject key identifier: 18:37:07:AF:DB:86:F2:28:02:E1:89:2C:06:6D:F9:EF:04:50:C0:E5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D09126932AFA1C9658D819B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1adc26a3-e69e-3a60-abcd-835a6904b3a1.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 63949 IP address blocks: 172.235.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:69:32:af:a1:c9:65:8d:81:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=6396210c-82e5-4d0f-995b-995533c37db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fd:a7:bf:f7:1c:0e:60:13:b2:36:f8:e2:b4: 3a:f9:75:aa:f8:33:fa:15:66:e3:88:12:98:3b:74: 6b:83:bc:3f:22:ca:d6:a7:45:f3:5c:c0:e4:4d:95: e0:fd:96:37:d0:f8:2f:b6:1a:bc:1b:a7:2d:a6:94: 98:18:c0:52:a2:8f:76:0c:11:fc:99:6c:bc:28:90: 88:72:a5:ea:0b:9b:38:cc:cc:7d:b3:34:e5:6a:12: 06:46:c3:58:db:7d:01:e1:c7:1c:0d:56:a2:a2:03: 5e:4c:78:c0:3c:14:99:af:ed:1c:84:88:24:53:34: ae:2b:16:a2:4f:81:cf:34:48:86:d9:91:19:57:67: ee:88:61:5b:11:88:81:3b:15:8e:9f:7e:5a:38:15: 66:6c:d8:79:24:51:7f:c0:13:03:e2:55:9d:24:57: b0:f8:e1:35:d0:db:09:2a:4d:54:c0:2b:89:95:98: e4:b8:6b:6a:8c:b8:21:d2:b0:5f:ed:f5:5a:ba:3d: 59:ce:1d:b2:5d:80:a6:d4:c3:ab:a5:25:1c:b2:c1: b7:88:da:05:9f:ec:37:c6:3d:34:7b:cc:6c:6f:52: 6e:a5:64:45:ad:67:6f:c7:55:90:fa:52:90:7b:38: 60:2a:97:25:0e:59:45:60:b1:2c:6f:2b:e5:f5:87: bf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:37:07:AF:DB:86:F2:28:02:E1:89:2C:06:6D:F9:EF:04:50:C0:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1adc26a3-e69e-3a60-abcd-835a6904b3a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:68:64:62:e7:e3:90:64:e8:e7:5a:f6:a3:93:8d:33:50:15: b6:16:3e:8b:09:2d:ea:a4:53:f0:58:d3:1f:de:ca:21:a7:34: 90:eb:12:5b:85:8a:b0:ca:ff:83:fa:10:34:e7:40:de:b6:bf: 70:fe:ca:fb:ae:2f:84:72:c7:18:4d:fb:f2:d6:76:60:ef:09: 9e:1e:ed:36:1f:ff:8a:d6:1d:14:19:1e:13:c5:a9:0a:8e:e2: 31:c7:67:b3:a3:4b:45:5b:55:68:40:89:17:53:65:f0:b0:d4: c4:63:d9:f3:ec:62:74:4b:05:16:a4:e1:a0:80:3e:87:d6:c9: f6:d8:2e:4f:64:31:da:0e:43:dd:39:85:09:60:82:a0:98:79: d0:e1:67:f9:d7:c4:7a:48:47:73:c7:c6:4a:31:29:aa:fc:9f: 61:c7:26:14:3f:1f:1f:c8:98:d4:ab:dc:b7:51:b6:36:87:eb: 73:fe:c4:3a:33:a9:fa:6c:47:e3:26:64:a7:9a:f6:be:55:4d: d6:fd:de:7a:30:e4:df:04:2c:92:6c:eb:3e:a9:d4:3d:7b:91: a2:71:ad:a6:3b:a5:59:67:90:18:ba:76:01:57:cb:54:f7:5d: 1b:6f:71:68:5b:9f:06:99:d9:09:45:e2:13:de:c8:dc:d7:a1: 5e:6e:b6:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEmkyr6HJZY2BmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NjM5NjIxMGMtODJlNS00ZDBmLTk5NWItOTk1NTMzYzM3ZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf2nv/ccDmATsjb44rQ6+XWq+DP6FWbjiBKY O3Rrg7w/IsrWp0XzXMDkTZXg/ZY30Pgvthq8G6ctppSYGMBSoo92DBH8mWy8KJCI cqXqC5s4zMx9szTlahIGRsNY230B4cccDVaiogNeTHjAPBSZr+0chIgkUzSuKxai T4HPNEiG2ZEZV2fuiGFbEYiBOxWOn35aOBVmbNh5JFF/wBMD4lWdJFew+OE10NsJ Kk1UwCuJlZjkuGtqjLgh0rBf7fVauj1Zzh2yXYCm1MOrpSUcssG3iNoFn+w3xj00 e8xsb1JupWRFrWdvx1WQ+lKQezhgKpclDllFYLEsbyvl9Ye/jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBg3B6/bhvIoAuGJLAZt+e8EUMDlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWFkYzI2YTMtZTY5ZS0z YTYwLWFiY2QtODM1YTY5MDRiM2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErOvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxoZGLn45Bk6Oda9qOTjTNQFbYWPosJLeqkU/BY0x/eyiGnNJDrEluF irDK/4P6EDTnQN62v3D+yvuuL4RyxxhN+/LWdmDvCZ4e7TYf/4rWHRQZHhPFqQqO 4jHHZ7OjS0VbVWhAiRdTZfCw1MRj2fPsYnRLBRak4aCAPofWyfbYLk9kMdoOQ905 hQlggqCYedDhZ/nXxHpIR3PHxkoxKar8n2HHJhQ/Hx/ImNSr3LdRtjaH63P+xDoz qfpsR+MmZKea9r5VTdb93now5N8ELJJs6z6p1D17kaJxraY7pVlnkBi6dgFXy1T3 XRtvcWhbnwaZ2QlF4hPeyNzXoV5utlM= -----END CERTIFICATE-----Generated at Sat Mar 7 17:28:43 2026 by rpki-client