$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/3929a969-6b96-389e-aeac-0034a05d30fd.roa File: 3929a969-6b96-389e-aeac-0034a05d30fd.roa (raw, json) Hash identifier: hVK2y3yu8Wh6u9Zu6v5ktCZoJ7+B+TkKgo79WSiGex8= Subject key identifier: 40:0D:91:66:FF:D6:0F:69:6F:19:D7:45:2F:4C:CB:DC:4D:FC:F7:C7 Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F4328584D3F64F13EA29BD39899FF67E0 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/3929a969-6b96-389e-aeac-0034a05d30fd.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 55410 IP address blocks: 172.84.180.0/24 maxlen: 24 172.84.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f1:3e:a2:9b:d3:98:99:ff:67:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=fca7d6d1-d22e-4e4a-a27e-950e8cc18451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6f:1e:43:0a:a9:3f:4e:bc:5e:8d:b0:df:9f: 3c:53:b8:08:c8:75:87:5e:55:1b:33:aa:f6:25:bf: 2d:28:b9:f4:7a:d3:47:b9:37:c2:e6:eb:e0:cb:17: b1:ac:82:3f:a7:dc:c7:05:45:a1:6f:f5:0e:25:dc: 52:4d:fb:33:d3:bd:ff:c5:18:49:69:e3:c4:97:c4: 07:44:35:46:4c:48:85:19:e1:b3:71:d2:df:7f:17: fa:9d:f5:92:df:b6:c7:29:b2:54:19:05:1e:ff:69: f4:87:89:72:9f:3a:36:c9:4e:91:58:96:94:be:fe: be:65:58:39:9e:9b:81:03:b5:2e:ed:24:ca:fc:51: d6:95:0f:3b:ee:50:eb:0c:4d:09:2f:3e:25:c4:56: 6a:1c:7e:3c:fd:ac:5c:42:5a:90:ad:d7:6a:df:e0: 25:4a:a7:c0:41:29:30:40:40:41:7b:9e:26:8a:37: 77:d6:3b:01:cf:07:77:0d:0c:e3:2b:1c:43:c7:98: 08:27:69:1d:ad:e9:48:47:0c:3a:d2:80:86:65:b8: a4:f6:ca:99:2a:01:f8:00:60:9b:50:ce:32:15:4c: 0e:37:9c:bb:ed:65:2e:ff:2a:92:1c:44:39:08:68: 44:36:ce:a7:3f:3a:ca:59:5a:c3:e1:59:47:a8:32: fa:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0D:91:66:FF:D6:0F:69:6F:19:D7:45:2F:4C:CB:DC:4D:FC:F7:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/3929a969-6b96-389e-aeac-0034a05d30fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 172.84.180.0/24 172.84.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:4d:c9:d0:90:3a:3f:5b:c4:30:1e:90:6e:66:f9:bc:cd:ec: 64:65:56:92:40:40:89:9d:5c:de:26:22:28:3c:f4:55:77:da: 43:49:de:c7:e0:31:84:13:12:36:84:5c:38:34:5d:df:38:01: 6c:f5:58:a8:28:f9:06:71:c7:78:7b:17:3a:cc:6b:ae:0e:89: ba:19:9a:1f:4c:06:68:c3:a2:e2:34:7b:cc:02:9e:87:78:6d: ab:5d:00:36:f3:ca:e2:81:2c:66:4f:2b:70:77:e5:aa:82:c7: 1c:2a:75:aa:c9:27:6d:7f:ee:d6:92:a8:26:33:ac:9c:b9:bb: 87:df:23:a5:99:e5:a3:e9:f7:59:f3:be:13:56:00:aa:ec:97: 94:3d:cf:c9:93:d5:15:1d:52:a2:4d:c8:94:d9:dc:52:d6:c4: 61:c2:9b:cd:67:a1:fd:a7:30:fe:5a:1f:72:b2:01:d1:f3:3e: df:2a:79:8a:d5:5c:41:4c:52:7a:23:4a:2d:d8:0a:41:de:2f: 63:1c:c9:b4:fb:13:5b:ba:f0:30:ab:c4:4a:62:f3:aa:02:10: 79:e3:5c:0f:99:e4:09:55:1b:57:9b:d6:ba:5d:06:7d:5e:36: 32:1d:eb:98:bc:d7:c5:d5:bf:c8:af:84:13:97:81:23:a6:4a: 5e:5e:f9:ca -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0/ZPE+opvTmJn/Z+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZmNhN2Q2ZDEtZDIyZS00ZTRhLWEyN2UtOTUwZThjYzE4NDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG8eQwqpP068Xo2w3588U7gIyHWHXlUbM6r2 Jb8tKLn0etNHuTfC5uvgyxexrII/p9zHBUWhb/UOJdxSTfsz073/xRhJaePEl8QH RDVGTEiFGeGzcdLffxf6nfWS37bHKbJUGQUe/2n0h4lynzo2yU6RWJaUvv6+ZVg5 npuBA7Uu7STK/FHWlQ877lDrDE0JLz4lxFZqHH48/axcQlqQrddq3+AlSqfAQSkw QEBBe54mijd31jsBzwd3DQzjKxxDx5gIJ2kdrelIRww60oCGZbik9sqZKgH4AGCb UM4yFUwON5y77WUu/yqSHEQ5CGhENs6nPzrKWVrD4VlHqDL6/QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEANkWb/1g9pbxnXRS9My9xN/PfHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvMzkyOWE5NjktNmI5Ni0z ODllLWFlYWMtMDAzNGEwNWQzMGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArFS0AwQA rFS+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKlNydCQOj9bxDAekG5m+bzN7GRlVpJAQImdXN4mIig89FV3 2kNJ3sfgMYQTEjaEXDg0Xd84AWz1WKgo+QZxx3h7FzrMa64OiboZmh9MBmjDouI0 e8wCnod4batdADbzyuKBLGZPK3B35aqCxxwqdarJJ21/7taSqCYzrJy5u4ffI6WZ 5aPp91nzvhNWAKrsl5Q9z8mT1RUdUqJNyJTZ3FLWxGHCm81nof2nMP5aH3KyAdHz Pt8qeYrVXEFMUnojSi3YCkHeL2McybT7E1u68DCrxEpi86oCEHnjXA+Z5AlVG1eb 1rpdBn1eNjId65i818XVv8ivhBOXgSOmSl5e+co= -----END CERTIFICATE-----Generated at Thu Mar 26 23:04:49 2026 by rpki-client