$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dd92185b-56d8-3495-a9cd-4dc7554df2c8.roa File: dd92185b-56d8-3495-a9cd-4dc7554df2c8.roa (raw, json) Hash identifier: m5R5LAwQ7/qOU+j+VMsnE+2TqxbNFS3Dcvrke9rreJA= Subject key identifier: 62:4A:AF:25:CF:DA:F7:04:A1:04:3C:10:51:C9:D4:2D:70:1D:88:72 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D3DFFB83F4DF2741F43DD9850 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dd92185b-56d8-3495-a9cd-4dc7554df2c8.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 20115 IP address blocks: 172.223.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b8:3f:4d:f2:74:1f:43:dd:98:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=dc9baca9-454d-4c69-8f82-09abe431400f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a4:ca:dc:5d:0f:ea:b2:62:2e:29:33:c3:29: 7c:e4:6d:70:b0:ad:cd:bc:ca:4b:4e:81:22:e6:56: 97:cd:b4:e4:7f:c4:3b:9c:6e:7f:34:fd:90:22:3e: 35:df:46:0f:30:f9:46:1c:a9:e2:d1:59:6f:84:b5: 0f:c0:2b:15:51:36:52:64:e1:c6:02:67:75:52:f9: 10:a0:db:b9:34:29:60:1e:e7:3a:22:f8:f6:02:00: 26:fb:1e:25:c0:8e:01:01:70:32:c0:bd:79:09:8d: c9:f0:84:56:9a:ab:d6:0e:7e:4f:f3:95:8f:78:e5: e5:6d:bd:01:40:c1:ec:31:c8:3a:8a:a9:6b:0a:87: 19:c0:bb:7b:05:8e:18:34:0c:d9:4e:f9:73:72:bf: ba:f5:74:f4:0c:7d:5c:ea:d0:af:dd:09:ec:df:d9: 2a:47:06:a8:c0:3c:b3:49:09:5b:73:05:4f:39:78: 2c:29:d1:d9:05:62:bb:9b:5b:92:27:28:e3:66:ca: 2a:7b:3d:62:42:67:92:57:63:5e:0d:1a:f4:ed:98: 1b:ff:dc:6c:99:78:70:9f:b1:81:6d:56:fa:91:8e: 49:52:13:ad:06:61:86:b8:7f:98:3a:6f:a0:e5:a4: b8:e7:62:40:3e:43:a2:bf:43:3b:c5:da:0c:3b:8f: cb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4A:AF:25:CF:DA:F7:04:A1:04:3C:10:51:C9:D4:2D:70:1D:88:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dd92185b-56d8-3495-a9cd-4dc7554df2c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.223.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:5b:e9:19:3f:13:b9:d4:9c:d7:93:08:ff:d8:30:e0:1e:19: 97:d4:16:cd:03:0d:97:ae:f2:9b:c7:f8:6b:b1:9e:82:94:5f: 4c:36:2d:a7:64:29:e3:c8:24:44:ae:ed:a8:ef:47:85:d9:de: 68:0b:20:9e:24:88:0b:ed:8f:c9:c5:42:f8:a2:0f:24:3d:0a: e4:88:21:bd:73:ee:1b:a3:54:8a:71:2f:38:d5:c1:82:e0:95: b5:1a:6f:bd:5e:46:de:91:82:af:2f:4b:0c:0e:80:bd:a9:6f: a6:ab:11:9d:c3:d3:f9:5b:b2:48:1f:0d:f9:b3:98:49:cc:91: 22:d7:b5:23:0d:f9:c4:29:5d:29:b2:2d:ea:41:d1:68:7a:11: da:a6:68:6e:7d:1f:7a:cd:06:84:ac:38:e0:83:bf:55:d8:14: 07:bc:7e:13:91:87:6e:c1:d7:7a:bf:63:a9:5c:cd:25:52:ca: 01:4b:7a:5f:94:1e:31:c1:9b:de:fd:af:47:00:0a:5d:82:04: 98:51:d2:3e:1b:9c:c1:62:6f:bc:22:bf:d4:3c:4b:96:cf:90: 97:30:af:6e:82:32:4e:00:97:6b:91:9d:10:7c:0d:32:8b:2d: ba:2b:42:c4:1a:cd:c0:2d:bd:b9:38:ed:fa:9e:24:7d:e4:fc: f3:ee:be:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7g/TfJ0H0PdmFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZGM5YmFjYTktNDU0ZC00YzY5LThmODItMDlhYmU0MzE0MDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aTK3F0P6rJiLikzwyl85G1wsK3NvMpLToEi 5laXzbTkf8Q7nG5/NP2QIj4130YPMPlGHKni0VlvhLUPwCsVUTZSZOHGAmd1UvkQ oNu5NClgHuc6Ivj2AgAm+x4lwI4BAXAywL15CY3J8IRWmqvWDn5P85WPeOXlbb0B QMHsMcg6iqlrCocZwLt7BY4YNAzZTvlzcr+69XT0DH1c6tCv3Qns39kqRwaowDyz SQlbcwVPOXgsKdHZBWK7m1uSJyjjZsoqez1iQmeSV2NeDRr07Zgb/9xsmXhwn7GB bVb6kY5JUhOtBmGGuH+YOm+g5aS452JAPkOiv0M7xdoMO4/LiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJKryXP2vcEoQQ8EFHJ1C1wHYhyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZGQ5MjE4NWItNTZkOC0z NDk1LWE5Y2QtNGRjNzU1NGRmMmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrN8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZb6Rk/E7nUnNeTCP/YMOAeGZfUFs0DDZeu8pvH+GuxnoKUX0w2Ladk KePIJESu7ajvR4XZ3mgLIJ4kiAvtj8nFQviiDyQ9CuSIIb1z7hujVIpxLzjVwYLg lbUab71eRt6Rgq8vSwwOgL2pb6arEZ3D0/lbskgfDfmzmEnMkSLXtSMN+cQpXSmy LepB0Wh6EdqmaG59H3rNBoSsOOCDv1XYFAe8fhORh27B13q/Y6lczSVSygFLel+U HjHBm979r0cACl2CBJhR0j4bnMFib7wiv9Q8S5bPkJcwr26CMk4Al2uRnRB8DTKL LborQsQazcAtvbk47fqeJH3k/PPuvgg= -----END CERTIFICATE-----Generated at Thu Mar 26 05:45:53 2026 by rpki-client