$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/906e3684-aa68-3939-97e4-36543bf711de.roa File: 906e3684-aa68-3939-97e4-36543bf711de.roa (raw, json) Hash identifier: wU5Yne0a5wqbNk9SRL71+zfvIe0I6pgLmfBSlKlM/sU= Subject key identifier: C6:AC:03:24:23:10:AC:CE:60:A9:36:24:60:99:15:21:98:EC:33:83 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAE5E63B1DCE721D4FCBC6F80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/906e3684-aa68-3939-97e4-36543bf711de.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 144.25.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:63:b1:dc:e7:21:d4:fc:bc:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=bc8b2ef2-f323-4269-bdd0-33c2f9255f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ae:08:96:b1:f6:d1:81:fd:1a:57:6d:88:f6: 13:63:22:c3:a7:e6:79:47:20:5e:fd:b0:b4:55:4c: 05:84:79:fd:be:07:f1:68:31:3e:aa:4a:1a:df:83: a6:70:1b:02:17:3d:76:ba:1b:33:19:f1:8b:d2:5d: df:3e:a5:48:74:fd:c4:4c:a1:4b:31:17:c0:c0:56: 4d:ab:0e:44:7d:82:54:a3:f3:11:5e:c2:26:08:18: 32:c0:73:52:ad:13:49:12:89:2d:fd:7f:c4:18:3e: 1a:c3:a0:e6:49:c4:96:1d:7b:ff:04:d9:41:51:db: 8d:6b:06:f2:08:79:cd:59:ae:91:b7:33:f4:bb:a3: 35:a6:22:2a:9e:3f:c2:41:f1:b1:19:4c:b2:1e:5d: ef:4b:0a:be:0c:a0:db:3e:5b:bb:25:15:37:1a:ee: e4:14:f4:81:b2:a9:e9:e7:d5:6c:6b:ba:32:05:a3: 7c:9a:01:00:c7:21:e2:76:e9:14:f5:dc:e4:ab:f9: 8b:62:01:6e:53:9b:a7:cf:2a:f1:c9:b1:f7:94:a3: 66:68:5f:9f:29:e9:14:03:75:9d:4f:7a:0c:1f:3b: 9f:1d:44:bc:c5:34:2f:04:6c:0e:ab:be:6d:21:05: 62:10:26:57:0c:23:5b:85:9c:58:bc:dc:a3:99:4e: be:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AC:03:24:23:10:AC:CE:60:A9:36:24:60:99:15:21:98:EC:33:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/906e3684-aa68-3939-97e4-36543bf711de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:43:9c:1a:af:8b:fb:37:94:c5:f2:2f:ee:a9:8b:f2:d8:07: 90:6d:f8:16:54:e1:6f:b9:70:96:de:d0:f0:86:98:ad:46:30: ad:9d:e4:fa:80:b8:2b:3d:03:80:cc:28:a3:9c:bc:8f:17:3b: 78:d6:ae:ba:65:40:aa:87:9b:27:43:56:dc:cf:12:72:69:fa: 0c:dc:5a:e8:18:92:a4:41:69:cb:85:ca:de:0e:e1:9a:30:5e: 97:3e:8f:49:e1:3d:e6:b7:47:f2:81:da:bd:c7:4a:9d:13:40: 3e:96:59:65:23:66:16:9a:9e:c3:9d:4f:c6:37:13:57:b9:0e: 1f:54:3e:0f:92:da:71:5a:21:ea:97:a9:66:2a:47:c6:5f:76: f1:7c:70:76:32:53:02:f9:89:20:0d:70:e0:72:73:c1:e6:61: de:41:b5:5e:db:b4:23:ba:a7:9f:ea:58:fe:f1:08:00:1b:26: 7f:99:83:eb:c6:83:2c:46:42:48:42:27:92:5c:73:31:6f:08: 00:a6:e0:23:24:b1:1b:cf:cf:d4:97:c6:90:5a:00:fd:1e:c8: 3d:f3:8d:3f:20:1a:a8:43:74:fd:5b:44:63:dc:a5:9c:5f:44: a4:ea:71:5f:9e:7c:38:5a:af:17:67:c8:c8:c8:d4:80:67:d5: 72:49:21:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXmOx3Och1Py8b4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YmM4YjJlZjItZjMyMy00MjY5LWJkZDAtMzNjMmY5MjU1ZjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK4IlrH20YH9GldtiPYTYyLDp+Z5RyBe/bC0 VUwFhHn9vgfxaDE+qkoa34OmcBsCFz12uhszGfGL0l3fPqVIdP3ETKFLMRfAwFZN qw5EfYJUo/MRXsImCBgywHNSrRNJEokt/X/EGD4aw6DmScSWHXv/BNlBUduNawby CHnNWa6RtzP0u6M1piIqnj/CQfGxGUyyHl3vSwq+DKDbPlu7JRU3Gu7kFPSBsqnp 59Vsa7oyBaN8mgEAxyHidukU9dzkq/mLYgFuU5unzyrxybH3lKNmaF+fKekUA3Wd T3oMHzufHUS8xTQvBGwOq75tIQViECZXDCNbhZxYvNyjmU6+zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMasAyQjEKzOYKk2JGCZFSGY7DODMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvOTA2ZTM2ODQtYWE2OC0z OTM5LTk3ZTQtMzY1NDNiZjcxMWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkBlIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVDnBqvi/s3lMXyL+6pi/LYB5Bt+BZU4W+5cJbe0PCGmK1GMK2d5PqA uCs9A4DMKKOcvI8XO3jWrrplQKqHmydDVtzPEnJp+gzcWugYkqRBacuFyt4O4Zow Xpc+j0nhPea3R/KB2r3HSp0TQD6WWWUjZhaansOdT8Y3E1e5Dh9UPg+S2nFaIeqX qWYqR8ZfdvF8cHYyUwL5iSANcOByc8HmYd5BtV7btCO6p5/qWP7xCAAbJn+Zg+vG gyxGQkhCJ5JcczFvCACm4CMksRvPz9SXxpBaAP0eyD3zjT8gGqhDdP1bRGPcpZxf RKTqcV+efDharxdnyMjI1IBn1XJJIVs= -----END CERTIFICATE-----Generated at Thu Feb 26 03:31:58 2026 by rpki-client