$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ff45b1fc-7070-315b-af69-e349af3a0636.roa File: ff45b1fc-7070-315b-af69-e349af3a0636.roa (raw, json) Hash identifier: aO1yXGFndGrwqalzgaJcQ4tV4Bz1l7RR3aqjzeFK96c= Subject key identifier: E7:3E:2F:AA:60:73:B8:76:CD:8B:20:FE:90:7E:3B:17:8D:83:EA:9C Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584D143D4C9332B1377E78F57AC0 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ff45b1fc-7070-315b-af69-e349af3a0636.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 19886 IP address blocks: 171.162.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:4c:93:32:b1:37:7e:78:f5:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=baa68714-09fb-408d-b103-deb95593c393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a0:4a:fb:79:66:81:fb:b2:66:b9:09:62:9a: 3a:a2:c3:23:50:39:4f:39:31:4c:06:9e:fc:2c:88: 81:60:6a:0a:c4:4f:8b:3e:78:db:b8:40:28:4f:7c: bc:60:40:eb:0a:e0:84:49:2c:97:d6:c9:08:04:67: 2c:cb:b5:6b:5a:d8:e6:54:27:61:12:ca:d7:c6:95: ab:c4:bf:dd:f4:82:cd:87:d1:14:5e:c0:b7:1f:cd: ef:29:95:3c:6c:7d:5d:c8:88:e8:a0:7f:a8:63:26: 4a:1f:43:b2:39:f8:46:bf:da:77:b5:2b:90:c0:cf: 13:fe:96:b9:9c:99:67:06:ac:c9:c0:fe:7e:44:97: ef:b7:86:3b:f0:a4:2e:cd:e1:a8:51:c2:17:35:6a: 65:7e:9e:23:78:69:2d:e0:bb:03:d7:8b:2a:08:e1: 21:32:47:40:15:05:db:24:8e:84:cd:3c:f6:97:df: 61:e6:b2:65:82:02:e9:31:c8:3c:a2:e6:b1:1d:f9: 63:7c:f8:ac:ce:01:4c:22:21:24:ee:42:8f:7d:b7: 71:0b:09:eb:8f:33:7f:41:ec:58:f5:13:a6:47:ac: 0e:52:c8:c2:72:5d:99:2f:2c:7e:91:a7:17:ad:11: 73:40:56:e4:a8:5c:ef:20:16:da:7d:af:04:a1:de: 25:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3E:2F:AA:60:73:B8:76:CD:8B:20:FE:90:7E:3B:17:8D:83:EA:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ff45b1fc-7070-315b-af69-e349af3a0636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:df:02:1b:88:84:32:cf:28:5e:65:6b:70:54:e2:17:fa:5a: 22:19:88:79:80:e4:cb:70:57:3e:cd:d5:22:e6:3a:0f:d3:67: 02:68:69:08:37:2c:ff:c5:f8:f0:9d:98:39:9c:3d:83:42:3f: e5:d2:aa:3d:36:31:ef:04:01:6b:76:90:6b:0e:07:36:be:54: 36:ef:cf:c4:1d:b4:48:25:6a:60:43:e1:75:b9:2a:be:6f:1f: 5e:63:17:bd:54:67:fd:96:0d:4a:a8:5f:60:1a:89:12:e2:ea: ea:34:0e:30:86:8f:bc:55:f4:75:45:93:ea:00:7a:d9:68:f7: d3:22:0f:63:a3:09:59:4b:59:0a:77:36:f7:8e:31:da:05:7a: f2:18:4e:45:f9:5e:89:94:0a:98:d4:6c:87:16:ba:9b:35:41: e5:97:60:68:cc:fc:14:42:33:08:dc:45:ae:11:8d:90:24:9d: 7f:6d:8c:83:35:60:44:97:56:2f:39:22:cb:b5:ba:f3:9d:02: 2a:8f:35:4d:bb:01:30:e6:65:37:c3:15:64:24:18:0d:15:a4: 7e:50:ce:7c:c5:6f:86:45:90:58:4b:dd:57:6d:cb:2a:f1:d5: 18:a9:97:29:45:42:2a:14:59:39:ee:1d:68:58:67:9c:04:66: 45:51:b7:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUyTMrE3fnj1esAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YmFhNjg3MTQtMDlmYi00MDhkLWIxMDMtZGViOTU1OTNjMzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16BK+3lmgfuyZrkJYpo6osMjUDlPOTFMBp78 LIiBYGoKxE+LPnjbuEAoT3y8YEDrCuCESSyX1skIBGcsy7VrWtjmVCdhEsrXxpWr xL/d9ILNh9EUXsC3H83vKZU8bH1dyIjooH+oYyZKH0OyOfhGv9p3tSuQwM8T/pa5 nJlnBqzJwP5+RJfvt4Y78KQuzeGoUcIXNWplfp4jeGkt4LsD14sqCOEhMkdAFQXb JI6EzTz2l99h5rJlggLpMcg8ouaxHfljfPiszgFMIiEk7kKPfbdxCwnrjzN/QexY 9ROmR6wOUsjCcl2ZLyx+kacXrRFzQFbkqFzvIBbafa8Eod4l0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOc+L6pgc7h2zYsg/pB+OxeNg+qcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvZmY0NWIxZmMtNzA3MC0z MTViLWFmNjktZTM0OWFmM2EwNjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6LjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjfAhuIhDLPKF5la3BU4hf6WiIZiHmA5MtwVz7N1SLmOg/TZwJoaQg3 LP/F+PCdmDmcPYNCP+XSqj02Me8EAWt2kGsOBza+VDbvz8QdtEglamBD4XW5Kr5v H15jF71UZ/2WDUqoX2AaiRLi6uo0DjCGj7xV9HVFk+oAetlo99MiD2OjCVlLWQp3 NveOMdoFevIYTkX5XomUCpjUbIcWups1QeWXYGjM/BRCMwjcRa4RjZAknX9tjIM1 YESXVi85Isu1uvOdAiqPNU27ATDmZTfDFWQkGA0VpH5QznzFb4ZFkFhL3Vdtyyrx 1RiplylFQioUWTnuHWhYZ5wEZkVRtxQ= -----END CERTIFICATE-----Generated at Thu Mar 26 14:10:43 2026 by rpki-client