$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a24a5b45-65e4-3787-acd8-b655e54a2021.roa File: a24a5b45-65e4-3787-acd8-b655e54a2021.roa (raw, json) Hash identifier: bARrwYzcdyCRqhjOmYXIsKhaKMDSJ/XrIVkeMmNcFgk= Subject key identifier: A4:21:AE:1E:08:91:08:32:61:A9:06:7C:17:74:1B:29:0E:D1:A0:78 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D3DFFB8220E211C07E725AB80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a24a5b45-65e4-3787-acd8-b655e54a2021.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 20115 IP address blocks: 172.223.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b8:22:0e:21:1c:07:e7:25:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=bb9282c3-523e-45ed-a129-03b68cdb0984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ea:6d:21:b9:ee:44:18:7b:2b:8c:6e:3a:f5: e5:7d:78:f6:f2:8e:17:c3:c9:cc:ef:0d:d9:68:19: 5c:2e:59:cd:b0:c0:36:94:07:d9:4e:c1:10:c9:83: 33:6b:dc:f9:ae:15:ae:af:88:ac:e7:cb:8c:2b:a6: 1d:3b:0b:80:25:b4:ac:a1:ef:1e:f1:ba:5d:35:7b: 65:41:5b:15:14:86:67:cf:d2:82:2d:65:68:46:ad: 73:6a:80:8d:e8:6a:3f:c7:d0:3f:dc:61:da:78:50: 69:ea:af:e0:d8:2e:8a:e3:ce:98:3b:3b:9a:ea:da: da:81:23:d9:ec:c4:2e:b2:36:e5:64:b9:40:d6:05: d7:12:dd:94:32:df:35:c7:79:ba:6a:91:c9:58:45: 33:e3:0e:a5:8c:c8:ce:2d:19:92:0f:41:bc:46:b4: 23:e2:99:03:14:9f:fd:fd:18:e8:37:2b:36:8f:8c: 4d:d7:da:a5:0c:4e:92:4d:37:ef:f8:ba:0a:e1:56: 21:1b:da:f8:f0:9a:b0:b4:16:a9:df:8c:53:76:d1: c2:eb:e3:df:cb:83:54:70:33:09:47:13:5a:97:5e: 5a:2e:a2:a7:4c:d8:8e:c0:ab:57:10:05:a0:bc:6f: 1e:18:09:92:53:dc:a2:22:25:34:8b:19:94:07:13: 0a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:21:AE:1E:08:91:08:32:61:A9:06:7C:17:74:1B:29:0E:D1:A0:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a24a5b45-65e4-3787-acd8-b655e54a2021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.223.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:09:74:3e:6a:4b:46:26:07:62:af:3d:b2:de:78:91:0c:26: ea:c5:0e:33:40:4b:11:ef:c3:60:38:39:aa:45:7d:f8:b1:4c: 3f:62:d3:f1:7f:70:a7:b4:3e:3c:75:d9:02:7d:26:62:21:de: 4c:14:54:68:ac:af:d0:89:40:8d:2f:34:ea:ed:a1:2d:4c:c5: 5e:5d:a3:86:db:ee:d7:b7:49:9b:20:16:b8:c3:e2:46:60:1a: d7:3f:25:1c:6b:2c:db:a6:31:d9:1f:6e:0c:3c:0b:e3:41:e9: 08:a0:4c:7d:8e:c3:52:06:68:d1:f9:e4:88:09:d0:61:3b:f0: 8f:cf:03:ea:bf:ea:89:f2:4f:5c:f9:87:97:b2:05:a8:4a:f7: 26:77:c5:82:4e:10:59:f0:0a:c0:4a:2f:9c:cd:f5:16:5d:1e: 00:c0:50:88:8d:7a:ab:53:73:68:07:5d:0a:d5:d7:09:f4:32: db:22:66:34:03:05:53:e2:aa:96:a2:5f:7c:fe:fe:31:f2:58: b2:5d:ae:04:7d:52:06:c7:75:bd:4a:dc:35:30:d7:af:f6:2e: 4e:ec:55:98:4c:ce:ba:4a:41:ec:02:1b:8b:7d:cd:36:2a:f6: f4:61:d6:dd:30:77:e8:0b:5d:47:36:a2:5a:4c:3c:5e:60:61: 47:8f:c6:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7giDiEcB+clq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YmI5MjgyYzMtNTIzZS00NWVkLWExMjktMDNiNjhjZGIwOTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOptIbnuRBh7K4xuOvXlfXj28o4Xw8nM7w3Z aBlcLlnNsMA2lAfZTsEQyYMza9z5rhWur4is58uMK6YdOwuAJbSsoe8e8bpdNXtl QVsVFIZnz9KCLWVoRq1zaoCN6Go/x9A/3GHaeFBp6q/g2C6K486YOzua6tragSPZ 7MQusjblZLlA1gXXEt2UMt81x3m6apHJWEUz4w6ljMjOLRmSD0G8RrQj4pkDFJ/9 /RjoNys2j4xN19qlDE6STTfv+LoK4VYhG9r48JqwtBap34xTdtHC6+Pfy4NUcDMJ RxNal15aLqKnTNiOwKtXEAWgvG8eGAmSU9yiIiU0ixmUBxMK0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQhrh4IkQgyYakGfBd0GykO0aB4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTI0YTViNDUtNjVlNC0z Nzg3LWFjZDgtYjY1NWU1NGEyMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrN+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMJdD5qS0YmB2KvPbLeeJEMJurFDjNASxHvw2A4OapFffixTD9i0/F/ cKe0Pjx12QJ9JmIh3kwUVGisr9CJQI0vNOrtoS1MxV5do4bb7te3SZsgFrjD4kZg Gtc/JRxrLNumMdkfbgw8C+NB6QigTH2Ow1IGaNH55IgJ0GE78I/PA+q/6onyT1z5 h5eyBahK9yZ3xYJOEFnwCsBKL5zN9RZdHgDAUIiNeqtTc2gHXQrV1wn0MtsiZjQD BVPiqpaiX3z+/jHyWLJdrgR9UgbHdb1K3DUw16/2Lk7sVZhMzrpKQewCG4t9zTYq 9vRh1t0wd+gLXUc2olpMPF5gYUePxm0= -----END CERTIFICATE-----Generated at Thu Mar 26 19:27:18 2026 by rpki-client