$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fa5647e-73c4-3e48-bb4b-fde8187cb4b7.roa File: 1fa5647e-73c4-3e48-bb4b-fde8187cb4b7.roa (raw, json) Hash identifier: xSZVMgLCrn9L21IRCcyMQkExUkHaXkLETJc1740WJm8= Subject key identifier: A1:53:C0:C8:60:4A:84:00:AF:70:73:C2:F7:3B:C6:20:52:C5:00:FF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D0D425D95E92B43E35D7A0880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fa5647e-73c4-3e48-bb4b-fde8187cb4b7.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 63949 IP address blocks: 172.239.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:5d:95:e9:2b:43:e3:5d:7a:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=37299d35-ce31-426a-b4a4-9ac56739a69c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cd:21:27:5f:f7:70:89:17:55:f1:a8:b3:40: b9:09:37:b9:fe:ac:df:2d:ac:5d:07:60:09:82:b7: 7e:28:db:8c:81:59:d4:ec:17:55:3f:71:0e:4e:5a: 8a:e5:0c:c5:77:74:f8:61:cf:04:b3:d4:43:8d:02: 65:a5:10:ab:08:7c:47:56:8f:da:b8:c8:1c:c8:22: d3:0f:0d:06:a7:aa:0a:a5:58:9f:11:46:99:a3:18: a8:90:f9:f5:7c:cf:40:d1:31:dd:88:d4:fd:02:7a: e2:19:90:9f:76:1e:9e:60:b3:17:e3:eb:8c:2d:62: b2:d6:82:0d:63:74:17:18:e2:e5:88:ca:0b:c1:ba: 06:46:0b:8e:be:bc:51:1d:90:de:d5:6f:41:9d:56: e8:f3:09:25:73:9c:ff:0d:74:2e:eb:ec:90:0d:b8: b5:f1:7f:fd:f1:bc:64:38:c4:37:34:2c:ed:dd:a9: 6d:e6:b4:de:16:06:39:5f:5e:58:89:45:40:44:cd: 6a:5c:61:2c:a6:2e:e6:24:6d:79:ac:7a:30:ea:c6: 3a:5b:f6:ed:5a:15:c1:bd:fc:81:04:3a:cc:31:c0: b9:3d:c1:6e:09:a5:43:80:5a:74:ea:06:57:1b:0c: 13:02:b8:c1:42:68:e2:7e:ff:ac:ec:61:61:4b:c2: 11:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:53:C0:C8:60:4A:84:00:AF:70:73:C2:F7:3B:C6:20:52:C5:00:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fa5647e-73c4-3e48-bb4b-fde8187cb4b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.239.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:b8:ed:83:b4:62:0e:7a:5b:d8:50:45:51:5c:61:6c:41:17: c3:f0:4f:9a:d0:59:33:fc:26:15:3f:77:8b:59:25:f2:b4:49: d3:ff:e4:01:ad:8c:1f:b4:74:48:94:c2:36:71:1d:17:5e:91: 47:af:42:a2:ce:31:be:02:96:ed:b0:69:d3:79:61:7e:dd:24: 9d:de:aa:c7:dd:e9:34:6b:28:d9:26:54:d2:dc:e7:ff:bd:0a: 01:4a:34:d5:29:c5:49:7a:27:f5:cb:d8:6b:a6:4a:10:2e:3e: 10:e4:9d:01:2a:39:b8:83:8b:63:9f:ea:4a:38:be:90:9d:75: a1:d7:a6:55:4c:47:99:6f:66:90:7b:11:c5:9b:fd:4c:d9:3d: b5:bd:ad:57:38:5c:c5:92:07:15:2b:b3:c6:e0:40:ba:e1:b5: da:ef:3f:cd:68:e4:c4:b0:4a:b2:df:d2:d9:bd:a2:48:30:89: 75:cb:ac:a2:09:a2:26:55:9f:16:37:cc:7c:76:1c:f8:80:18: 80:ae:32:29:97:ea:65:d8:97:91:88:2b:41:70:71:d1:1e:39: fb:98:47:ab:f0:29:f6:72:8c:0c:2e:f8:56:2a:d3:91:7c:6e: 07:f3:40:1d:f1:25:13:a1:9f:56:05:9a:a9:11:2e:a8:41:1e: 27:aa:9f:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQl2V6StD4116CIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk MzcyOTlkMzUtY2UzMS00MjZhLWI0YTQtOWFjNTY3MzlhNjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv80hJ1/3cIkXVfGos0C5CTe5/qzfLaxdB2AJ grd+KNuMgVnU7BdVP3EOTlqK5QzFd3T4Yc8Es9RDjQJlpRCrCHxHVo/auMgcyCLT Dw0Gp6oKpVifEUaZoxiokPn1fM9A0THdiNT9AnriGZCfdh6eYLMX4+uMLWKy1oIN Y3QXGOLliMoLwboGRguOvrxRHZDe1W9BnVbo8wklc5z/DXQu6+yQDbi18X/98bxk OMQ3NCzt3alt5rTeFgY5X15YiUVARM1qXGEspi7mJG15rHow6sY6W/btWhXBvfyB BDrMMcC5PcFuCaVDgFp06gZXGwwTArjBQmjifv+s7GFhS8IRjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFTwMhgSoQAr3Bzwvc7xiBSxQD/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWZhNTY0N2UtNzNjNC0z ZTQ4LWJiNGItZmRlODE4N2NiNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrO+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADG47YO0Yg56W9hQRVFcYWxBF8PwT5rQWTP8JhU/d4tZJfK0SdP/5AGt jB+0dEiUwjZxHRdekUevQqLOMb4Clu2wadN5YX7dJJ3eqsfd6TRrKNkmVNLc5/+9 CgFKNNUpxUl6J/XL2GumShAuPhDknQEqObiDi2Of6ko4vpCddaHXplVMR5lvZpB7 EcWb/UzZPbW9rVc4XMWSBxUrs8bgQLrhtdrvP81o5MSwSrLf0tm9okgwiXXLrKIJ oiZVnxY3zHx2HPiAGICuMimX6mXYl5GIK0FwcdEeOfuYR6vwKfZyjAwu+FYq05F8 bgfzQB3xJROhn1YFmqkRLqhBHieqn9U= -----END CERTIFICATE-----Generated at Sat Mar 7 19:38:25 2026 by rpki-client