$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/8f43b484-80c8-39e0-8d40-3087acda04cc.roa File: 8f43b484-80c8-39e0-8d40-3087acda04cc.roa (raw, json) Hash identifier: PqGcsCqpWe3ZUZuiU/MDMUUJ8KAcpWEKTCB1ehxwvDw= Subject key identifier: 18:A5:AA:EB:6C:E7:54:42:26:37:45:A2:57:C1:06:03:DC:39:A5:7A Certificate issuer: /CN=174db496-399b-48c7-919e-3e6dfd4a5584 Certificate serial: 010D0C9F4328584D2644D6001406D738A13F5A40 Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/8f43b484-80c8-39e0-8d40-3087acda04cc.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 40934 IP address blocks: 141.109.161.0/24 maxlen: 24 159.48.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:d6:00:14:06:d7:38:a1:3f:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=5923cfd3-d842-4ba5-a576-596adbf4a14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7b:db:a0:af:6f:2d:fe:49:d2:1e:1e:71:9e: 90:2a:ab:cc:64:a1:4a:e8:33:69:d5:dc:46:23:4b: 31:1f:d7:57:2f:7e:09:02:2f:fa:47:8e:d4:62:f3: 44:c5:9c:dd:8c:10:c6:1f:cd:8e:01:d0:39:b3:c1: 92:0e:8c:82:73:70:45:f2:8a:db:8f:2a:ab:a6:f6: 06:33:0e:dd:da:22:74:55:c8:fa:f5:b7:81:ed:09: d9:23:51:27:a9:3d:f5:b3:8a:02:4f:d4:31:9a:2f: 48:12:07:bf:a5:65:9a:9f:03:bc:4d:73:3b:ab:49: 3b:c6:5a:97:bd:d7:e4:31:5c:ac:0e:78:cd:13:c4: f3:9b:96:28:5f:1a:c1:7c:a9:7f:86:ee:65:c9:8d: 34:d3:bb:49:fd:81:83:42:17:97:51:d7:4e:ae:0b: 90:6a:03:01:f3:ea:0d:8c:98:6d:7b:7b:59:f6:76: d2:41:ef:a2:f7:9e:5e:c4:a6:b8:5a:8c:fb:2a:66: 40:8e:92:b5:b7:96:66:1b:f0:8b:07:e2:58:8b:63: 69:ef:f4:cd:37:03:3c:f0:27:5d:a1:db:18:f5:fa: 9b:da:25:03:ab:08:cd:43:77:59:43:ad:4b:09:72: 98:91:fd:bc:c9:cf:b8:60:52:14:7c:4d:31:21:44: 21:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A5:AA:EB:6C:E7:54:42:26:37:45:A2:57:C1:06:03:DC:39:A5:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/8f43b484-80c8-39e0-8d40-3087acda04cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl X509v3 Authority Key Identifier: keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer sbgp-ipAddrBlock: critical IPv4: 141.109.161.0/24 159.48.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:62:87:d7:2d:43:b7:38:85:84:5f:c5:a6:91:20:65:9a:43: 2a:75:6d:6b:09:f5:67:ab:25:86:01:4a:cb:cc:84:fb:b0:a0: 33:5f:2f:8b:70:9a:dc:4d:dd:53:3f:7e:0a:1b:0f:61:16:21: be:0c:47:4d:a9:37:c7:8d:f1:eb:c0:a0:65:50:f9:4d:e1:84: 86:bc:e8:64:b9:67:5c:01:02:6f:6a:3e:9c:ef:99:2e:3b:95: 2a:04:75:9a:a4:ca:10:18:f5:2f:b8:bd:c9:18:9b:3b:3a:fe: 4d:a6:e8:65:26:8a:9e:b2:f8:b7:2d:50:1a:b1:86:22:73:d7: 9e:71:b6:35:a5:c8:be:c9:83:16:66:07:88:92:27:d9:1f:7e: 02:88:48:6e:ba:05:7e:6f:6f:07:c5:b4:3f:e5:84:b7:a9:32: 52:f3:c7:cd:49:a2:d2:1c:cb:f3:5c:ad:32:0a:a7:04:5d:a1: 2f:5c:0e:9e:57:1e:d6:48:67:a9:0b:ac:e8:8e:06:80:07:53: aa:2c:ff:48:0e:b5:42:78:1a:be:76:56:92:3c:05:e8:6b:57: 83:55:e7:7e:68:27:d7:2a:c8:25:25:0f:ba:d3:d2:df:4d:17: 79:d4:88:40:7b:fc:78:08:41:11:ff:34:cd:9b:37:05:31:a9: ce:66:c6:7d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0mRNYAFAbXOKE/WkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1 NTg0MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk NTkyM2NmZDMtZDg0Mi00YmE1LWE1NzYtNTk2YWRiZjRhMTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHvboK9vLf5J0h4ecZ6QKqvMZKFK6DNp1dxG I0sxH9dXL34JAi/6R47UYvNExZzdjBDGH82OAdA5s8GSDoyCc3BF8orbjyqrpvYG Mw7d2iJ0Vcj69beB7QnZI1EnqT31s4oCT9Qxmi9IEge/pWWanwO8TXM7q0k7xlqX vdfkMVysDnjNE8Tzm5YoXxrBfKl/hu5lyY0007tJ/YGDQheXUddOrguQagMB8+oN jJhte3tZ9nbSQe+i955exKa4Woz7KmZAjpK1t5ZmG/CLB+JYi2Np7/TNNwM88Cdd odsY9fqb2iUDqwjNQ3dZQ61LCXKYkf28yc+4YFIUfE0xIUQhCQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBilquts51RCJjdFolfBBgPcOaV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvOGY0M2I0ODQtODBjOC0z OWUwLThkNDAtMzA4N2FjZGEwNGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk ZmQ0YTU1ODQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjW2hAwQA nzCtMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEJih9ctQ7c4hYRfxaaRIGWaQyp1bWsJ9WerJYYBSsvMhPuw oDNfL4twmtxN3VM/fgobD2EWIb4MR02pN8eN8evAoGVQ+U3hhIa86GS5Z1wBAm9q PpzvmS47lSoEdZqkyhAY9S+4vckYmzs6/k2m6GUmip6y+LctUBqxhiJz155xtjWl yL7JgxZmB4iSJ9kffgKISG66BX5vbwfFtD/lhLepMlLzx81JotIcy/NcrTIKpwRd oS9cDp5XHtZIZ6kLrOiOBoAHU6os/0gOtUJ4Gr52VpI8BehrV4NV535oJ9cqyCUl D7rT0t9NF3nUiEB7/HgIQRH/NM2bNwUxqc5mxn0= -----END CERTIFICATE-----Generated at Thu Mar 26 16:43:34 2026 by rpki-client