$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/85e6adee-b389-3dc7-8d34-6ef4bc2d9e72.roa File: 85e6adee-b389-3dc7-8d34-6ef4bc2d9e72.roa (raw, json) Hash identifier: xLrvT02sGy++OOwKFh5lq9JRYNCNc3DT4xYeClF1FFA= Subject key identifier: 8F:05:22:FB:D9:C4:4C:7F:E7:8D:70:8C:B6:58:B6:89:4C:92:3C:1D Certificate issuer: /CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Certificate serial: 010D0C9F4328584D0912581709CFF2282A982D70 Authority key identifier: 96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/85e6adee-b389-3dc7-8d34-6ef4bc2d9e72.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 22280 IP address blocks: 69.173.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:58:17:09:cf:f2:28:2a:98:2d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=db9b6f9f-4bef-4f69-ba27-b0a0f45fc4b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ca:ae:b4:0f:39:c6:15:16:31:01:cd:af:39: be:a1:b4:86:95:5a:a2:82:36:3f:2b:f3:8c:cc:24: ba:de:d3:1b:9c:12:b6:31:e4:80:ee:01:30:cc:21: 32:b4:0b:e7:d9:7b:0b:a3:48:3c:82:62:da:6e:8d: 3f:e3:bc:6f:89:a0:68:f6:db:94:25:50:b3:ee:c2: 66:0a:49:76:5c:d3:93:86:29:ca:47:a0:c6:14:a3: 5b:44:cc:7d:a2:a3:8f:9b:2d:b9:22:6d:57:78:45: b8:71:f3:3e:4f:fa:87:7a:61:f2:50:d3:15:3b:24: 96:16:13:60:c0:4b:0d:7c:19:43:fb:9c:19:e3:af: 35:b1:1d:4e:78:5b:9b:45:cd:d4:cc:b9:f2:ec:d7: 79:f2:2d:e9:1a:97:cf:0f:06:61:1e:de:a3:a6:f5: 90:ce:79:38:69:84:20:b0:25:0e:75:09:ba:c6:dc: 63:20:cb:9c:77:bd:bc:9b:cf:28:f1:53:c0:dd:50: 20:09:df:15:33:6d:34:88:e9:b1:e3:31:89:e6:f2: 5f:83:22:bc:cd:49:3a:fb:31:ad:dd:cc:5c:62:1e: 95:66:fe:e5:4d:2a:53:03:cc:53:46:78:59:17:f1: 1e:fc:1c:4f:be:36:78:24:d4:c1:83:42:3d:17:f3: 0c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:05:22:FB:D9:C4:4C:7F:E7:8D:70:8C:B6:58:B6:89:4C:92:3C:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/85e6adee-b389-3dc7-8d34-6ef4bc2d9e72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl X509v3 Authority Key Identifier: keyid:96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer sbgp-ipAddrBlock: critical IPv4: 69.173.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:02:66:82:9f:1f:fc:95:9d:04:c4:cb:42:91:8e:68:7a:a9: d5:c5:53:a3:18:55:a9:c8:39:0e:2a:88:c4:41:eb:f4:f2:c4: 20:51:2e:8b:eb:a3:24:e1:e5:f4:30:8f:37:8f:3b:01:79:d1: 9f:a3:42:33:74:b9:c8:03:88:6e:e1:81:8d:61:d6:ba:99:a7: db:2a:0e:ca:47:8e:5d:80:5e:13:6c:32:29:e8:01:0c:51:09: 0e:55:1f:08:4b:bb:2d:3d:82:c4:9e:6c:12:c6:70:d6:d5:f7: ca:f7:2b:94:c6:04:ee:9f:73:54:77:32:72:e0:e3:62:1e:55: 59:4e:c0:68:31:c6:c0:9d:ee:c0:48:40:0c:fe:fa:42:e1:9a: 77:e8:0f:c9:ce:9a:93:11:80:32:09:17:e0:7a:8c:97:14:76: e7:94:8c:ec:89:9e:cb:e8:38:cf:0c:35:37:3a:09:5f:8a:ab: 62:63:30:38:30:2f:a6:a4:96:02:da:0f:24:eb:f9:08:fa:a2: 74:a0:35:ab:48:ed:be:d9:a3:98:d4:43:81:31:31:e4:2c:b4: 5e:45:e1:55:d3:a7:54:15:1f:78:33:36:e1:c2:ce:ec:8f:78: 8e:08:cd:7a:79:64:54:fe:bb:ae:cc:a1:14:62:c9:36:2d:1c: 84:d7:bd:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JElgXCc/yKCqYLXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYTRiN2EtZGU3Yi00ZTg0LWI5MTMtYTFiZWRiZTU4 ZjlhMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZGI5YjZmOWYtNGJlZi00ZjY5LWJhMjctYjBhMGY0NWZjNGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MqutA85xhUWMQHNrzm+obSGlVqigjY/K/OM zCS63tMbnBK2MeSA7gEwzCEytAvn2XsLo0g8gmLabo0/47xviaBo9tuUJVCz7sJm Ckl2XNOThinKR6DGFKNbRMx9oqOPmy25Im1XeEW4cfM+T/qHemHyUNMVOySWFhNg wEsNfBlD+5wZ4681sR1OeFubRc3UzLny7Nd58i3pGpfPDwZhHt6jpvWQznk4aYQg sCUOdQm6xtxjIMucd728m88o8VPA3VAgCd8VM200iOmx4zGJ5vJfgyK8zUk6+zGt 3cxcYh6VZv7lTSpTA8xTRnhZF/Ee/BxPvjZ4JNTBg0I9F/MM1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8FIvvZxEx/541wjLZYtolMkjwdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJh NGI3YS1kZTdiLTRlODQtYjkxMy1hMWJlZGJlNThmOWEvODVlNmFkZWUtYjM4OS0z ZGM3LThkMzQtNmVmNGJjMmQ5ZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYTRiN2EtZGU3Yi00ZTg0LWI5 MTMtYTFiZWRiZTU4ZjlhLzVhYmE0YjdhLWRlN2ItNGU4NC1iOTEzLWExYmVkYmU1 OGY5YS5jcmwwHwYDVR0jBBgwFoAUllRkOrAdiKVOgO9UnjMuz1ujWekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJhNGI3YS1kZTdiLTRlODQtYjkxMy1hMWJl ZGJlNThmOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRa3oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMCZoKfH/yVnQTEy0KRjmh6qdXFU6MYVanIOQ4qiMRB6/TyxCBRLovr oyTh5fQwjzePOwF50Z+jQjN0ucgDiG7hgY1h1rqZp9sqDspHjl2AXhNsMinoAQxR CQ5VHwhLuy09gsSebBLGcNbV98r3K5TGBO6fc1R3MnLg42IeVVlOwGgxxsCd7sBI QAz++kLhmnfoD8nOmpMRgDIJF+B6jJcUdueUjOyJnsvoOM8MNTc6CV+Kq2JjMDgw L6aklgLaDyTr+Qj6onSgNatI7b7Zo5jUQ4ExMeQstF5F4VXTp1QVH3gzNuHCzuyP eI4IzXp5ZFT+u67MoRRiyTYtHITXvSs= -----END CERTIFICATE-----Generated at Thu Mar 26 20:58:24 2026 by rpki-client