$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/cffb2afc-1c5c-3086-b3a6-8048790da8db.roa File: cffb2afc-1c5c-3086-b3a6-8048790da8db.roa (raw, json) Hash identifier: FaFJ1/xdqaN6SlkjYKCpgogJ9Va83AOTEfWVcmhs/zo= Subject key identifier: 8B:FF:F9:0D:E8:72:99:3B:DF:55:A7:27:88:DB:34:91:CD:D2:BD:10 Certificate issuer: /CN=174db496-399b-48c7-919e-3e6dfd4a5584 Certificate serial: 010D0C9F4328584D359FD7F7D6B13BFDE5489AA0 Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/cffb2afc-1c5c-3086-b3a6-8048790da8db.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 40934 IP address blocks: 173.243.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:d7:f7:d6:b1:3b:fd:e5:48:9a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=c5034d0c-7aeb-4c4a-8b27-ea763e7dca06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4e:f0:51:29:ee:bc:69:b1:75:85:ff:ae:a7: cb:f9:8e:53:94:8d:7f:b7:e1:af:7d:66:32:6a:14: 98:8f:77:08:db:59:71:8f:17:02:b6:d0:04:32:18: 8d:2b:83:5c:41:69:24:1a:27:10:b4:25:c8:06:8c: 9f:f8:27:e6:15:11:7f:c6:2c:3b:f6:c8:eb:22:a3: b9:df:5f:bd:12:49:72:9e:97:59:12:ba:36:98:69: f4:a5:38:9a:b8:8a:33:6a:c7:28:89:37:33:0a:39: 4b:60:e5:75:c7:d8:6e:15:59:58:85:9d:d6:74:e4: cc:46:a7:56:1a:6c:9f:0f:44:13:04:34:e9:8f:2a: 91:12:81:62:f8:9e:f9:4d:80:c3:28:00:69:4a:46: 70:87:a9:c5:4b:1e:0c:90:4c:2a:41:ba:63:b8:13: 72:8f:b0:d8:fa:73:48:80:a4:24:df:1c:a9:09:59: 39:07:be:fa:32:42:51:bb:0f:0f:fe:71:e6:bc:a3: be:3a:f6:cf:e4:e8:54:0c:df:44:39:60:c5:5e:64: 6a:66:00:26:7d:3f:fa:79:b2:e3:f8:94:55:ad:03: 76:44:ed:63:79:0d:5f:c5:38:6b:4e:c5:60:b3:e1: e8:8b:41:47:50:8e:6e:27:37:f3:3a:6a:e4:ce:3b: da:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FF:F9:0D:E8:72:99:3B:DF:55:A7:27:88:DB:34:91:CD:D2:BD:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/cffb2afc-1c5c-3086-b3a6-8048790da8db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl X509v3 Authority Key Identifier: keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer sbgp-ipAddrBlock: critical IPv4: 173.243.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:17:4f:78:47:92:a0:23:7d:cc:4e:a4:a2:16:28:ba:07:25: 71:89:19:a3:49:5e:13:04:df:11:58:d6:30:98:64:6a:e3:46: 5c:3a:3b:a9:14:ab:94:1d:ff:13:4b:f1:23:81:a9:91:71:52: a3:a6:4d:19:4f:4a:ed:af:12:e3:bb:f4:47:4b:1f:af:2a:ec: a0:5d:25:37:b2:f2:56:70:65:41:f6:be:27:d8:d8:e8:33:98: 6b:8c:51:59:67:9a:da:37:16:8f:42:c5:af:21:88:b2:4d:04: 88:ee:e5:61:e0:fc:16:b7:01:21:55:7a:f2:e2:a2:a5:e7:ff: e8:95:4f:1f:07:e1:2f:d9:b4:d3:c7:23:e8:9d:07:21:b2:37: 88:00:70:e1:24:01:10:ee:0e:35:07:85:ac:e8:fc:2f:1c:53: 3d:77:45:f6:bb:ad:1a:0d:e3:dd:d9:38:fa:b2:23:5a:20:a5: 52:55:04:28:d6:d7:50:ac:96:37:e5:02:95:08:43:f2:39:aa: b2:1a:e0:da:81:3c:34:3e:15:f4:46:d0:32:12:d2:12:c6:77: aa:51:98:95:6c:69:d4:fa:bf:87:6e:c2:e8:50:c2:2d:f4:24: 34:a1:9e:3c:e9:95:6b:44:e0:a7:10:bf:2a:38:3f:aa:56:5c: c8:e5:0c:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n9f31rE7/eVImqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1 NTg0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YzUwMzRkMGMtN2FlYi00YzRhLThiMjctZWE3NjNlN2RjYTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh07wUSnuvGmxdYX/rqfL+Y5TlI1/t+GvfWYy ahSYj3cI21lxjxcCttAEMhiNK4NcQWkkGicQtCXIBoyf+CfmFRF/xiw79sjrIqO5 31+9EklynpdZEro2mGn0pTiauIozascoiTczCjlLYOV1x9huFVlYhZ3WdOTMRqdW GmyfD0QTBDTpjyqREoFi+J75TYDDKABpSkZwh6nFSx4MkEwqQbpjuBNyj7DY+nNI gKQk3xypCVk5B776MkJRuw8P/nHmvKO+OvbP5OhUDN9EOWDFXmRqZgAmfT/6ebLj +JRVrQN2RO1jeQ1fxThrTsVgs+Hoi0FHUI5uJzfzOmrkzjvanwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIv/+Q3ocpk731WnJ4jbNJHN0r0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvY2ZmYjJhZmMtMWM1Yy0z MDg2LWIzYTYtODA0ODc5MGRhOGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk ZmQ0YTU1ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfOBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8XT3hHkqAjfcxOpKIWKLoHJXGJGaNJXhME3xFY1jCYZGrjRlw6O6kU q5Qd/xNL8SOBqZFxUqOmTRlPSu2vEuO79EdLH68q7KBdJTey8lZwZUH2vifY2Ogz mGuMUVlnmto3Fo9Cxa8hiLJNBIju5WHg/Ba3ASFVevLioqXn/+iVTx8H4S/ZtNPH I+idByGyN4gAcOEkARDuDjUHhazo/C8cUz13Rfa7rRoN493ZOPqyI1ogpVJVBCjW 11CsljflApUIQ/I5qrIa4NqBPDQ+FfRG0DIS0hLGd6pRmJVsadT6v4duwuhQwi30 JDShnjzplWtE4KcQvyo4P6pWXMjlDPE= -----END CERTIFICATE-----Generated at Thu Mar 26 16:55:26 2026 by rpki-client