$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/9db79cf5-ebb8-3665-9853-daad08be8e02.roa File: 9db79cf5-ebb8-3665-9853-daad08be8e02.roa (raw, json) Hash identifier: u+XoRwoJsmEWWWqBirj7tzLQRY0dziA6W50qESDq4dE= Subject key identifier: 5C:3C:CD:45:33:BA:2E:11:68:42:C4:A4:A6:C9:6A:33:A4:88:EF:2D Certificate issuer: /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04 Certificate serial: 010D0C9F4328584D237A76BD667ABD9411F4C1C0 Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/9db79cf5-ebb8-3665-9853-daad08be8e02.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 207.170.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:76:bd:66:7a:bd:94:11:f4:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=bf0bc193-e114-45fe-9c50-bc8e7d8822af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b2:4a:b4:ed:18:1a:8d:a5:14:b7:e7:20:82: bc:fb:83:c6:b6:6a:ae:2f:2b:7d:45:ff:f2:22:c4: 05:a4:d4:e5:f1:55:a3:f3:ca:81:c8:66:64:92:3f: 54:15:48:29:47:7e:35:63:be:26:60:9d:d9:71:30: 6c:f9:4f:27:cd:40:d5:78:ca:f5:51:6d:f5:24:1a: 30:bf:d8:1a:88:09:e3:5f:64:38:c9:ee:e2:36:99: 8d:22:1d:13:5e:a4:68:77:fe:08:5e:da:ef:75:c8: 59:9a:cb:5c:3b:78:67:b8:8b:52:4d:3b:19:5a:c6: b7:c5:da:78:e8:5a:a1:44:83:81:78:ea:2c:85:b1: cf:ef:dc:56:b5:ff:64:96:93:c4:96:4d:8d:02:9f: 42:e7:05:a2:9d:c5:b5:bc:af:30:b9:24:81:32:d8: 4f:6f:1f:d4:ba:4e:6d:f7:20:1c:0d:a9:81:46:4d: 30:e9:92:0b:90:b9:df:47:4d:59:8e:53:75:aa:7b: b1:79:b4:32:72:b2:20:5f:0a:27:18:03:45:69:1f: b2:a3:91:11:83:15:a8:ac:61:44:5a:f5:08:73:64: 11:c6:31:c9:ac:69:79:77:ac:26:ca:c8:48:db:3f: f1:13:14:85:1e:d4:ae:e2:3d:3f:fb:a5:ec:32:9b: 27:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3C:CD:45:33:BA:2E:11:68:42:C4:A4:A6:C9:6A:33:A4:88:EF:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/9db79cf5-ebb8-3665-9853-daad08be8e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl X509v3 Authority Key Identifier: keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer sbgp-ipAddrBlock: critical IPv4: 207.170.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:12:d1:c5:78:73:ca:85:3d:92:2e:48:59:32:aa:4c:48:75: 95:44:8e:7e:5f:7f:1e:64:d5:7d:02:be:67:b3:59:f0:06:cb: 62:da:29:93:f9:5c:ff:cf:ed:46:76:46:05:28:d2:ba:4b:e2: 1b:52:62:6c:c9:18:e3:b7:27:18:ba:77:f1:e2:82:89:66:02: e0:bb:39:68:dd:85:62:e2:03:b8:27:48:27:dc:c5:ac:59:b6: a4:76:a2:ef:d9:16:fc:14:51:3a:7c:40:33:9c:6b:85:6b:2d: 57:26:ec:90:ed:be:55:e5:0f:5d:0f:0c:cc:47:d6:6a:fc:40: 0d:59:83:64:eb:5a:6e:65:75:69:4e:b5:41:60:b9:6e:08:92: 93:12:4f:d9:2f:6f:4f:2e:7d:c3:15:c5:9b:d5:b2:01:00:13: a2:66:08:77:41:f5:58:43:ba:7d:e2:7f:f7:c5:aa:30:6a:68: da:fb:c2:c6:a1:e9:71:5f:b8:c7:d8:f5:b3:fc:4d:25:0f:9f: 1a:70:22:17:72:92:ab:d1:3e:4e:2e:fa:ec:12:f2:c6:cc:72: 0b:1f:7b:b1:c0:c6:c1:18:c8:2f:52:33:6f:3c:4a:70:3f:f3: 86:67:a5:5c:6a:41:90:ce:42:10:cc:73:5d:18:3e:40:ae:36: 29:01:8c:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jena9Znq9lBH0wcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWZhYjYzNzgtZTE1ZC00NDcxLWIwMWYtYmUxNWZjNWJm YTA0MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YmYwYmMxOTMtZTExNC00NWZlLTljNTAtYmM4ZTdkODgyMmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbJKtO0YGo2lFLfnIIK8+4PGtmquLyt9Rf/y IsQFpNTl8VWj88qByGZkkj9UFUgpR341Y74mYJ3ZcTBs+U8nzUDVeMr1UW31JBow v9gaiAnjX2Q4ye7iNpmNIh0TXqRod/4IXtrvdchZmstcO3hnuItSTTsZWsa3xdp4 6FqhRIOBeOoshbHP79xWtf9klpPElk2NAp9C5wWincW1vK8wuSSBMthPbx/Uuk5t 9yAcDamBRk0w6ZILkLnfR01ZjlN1qnuxebQycrIgXwonGANFaR+yo5ERgxWorGFE WvUIc2QRxjHJrGl5d6wmyshI2z/xExSFHtSu4j0/+6XsMpsnjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFw8zUUzui4RaELEpKbJajOkiO8tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmFi NjM3OC1lMTVkLTQ0NzEtYjAxZi1iZTE1ZmM1YmZhMDQvOWRiNzljZjUtZWJiOC0z NjY1LTk4NTMtZGFhZDA4YmU4ZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWZhYjYzNzgtZTE1ZC00NDcxLWIw MWYtYmUxNWZjNWJmYTA0LzVmYWI2Mzc4LWUxNWQtNDQ3MS1iMDFmLWJlMTVmYzVi ZmEwNC5jcmwwHwYDVR0jBBgwFoAUYUBDv+JQs0dk/NFzD2KYA1AyGNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmFiNjM3OC1lMTVkLTQ0NzEtYjAxZi1iZTE1 ZmM1YmZhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz6qsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoS0cV4c8qFPZIuSFkyqkxIdZVEjn5ffx5k1X0CvmezWfAGy2LaKZP5 XP/P7UZ2RgUo0rpL4htSYmzJGOO3Jxi6d/HigolmAuC7OWjdhWLiA7gnSCfcxaxZ tqR2ou/ZFvwUUTp8QDOca4VrLVcm7JDtvlXlD10PDMxH1mr8QA1Zg2TrWm5ldWlO tUFguW4IkpMST9kvb08ufcMVxZvVsgEAE6JmCHdB9VhDun3if/fFqjBqaNr7wsah 6XFfuMfY9bP8TSUPnxpwIhdykqvRPk4u+uwS8sbMcgsfe7HAxsEYyC9SM288SnA/ 84ZnpVxqQZDOQhDMc10YPkCuNikBjIE= -----END CERTIFICATE-----Generated at Thu Mar 26 11:37:53 2026 by rpki-client