$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/4ca47a9b-52e4-3efa-8fd1-d15efc20ad46.roa File: 4ca47a9b-52e4-3efa-8fd1-d15efc20ad46.roa (raw, json) Hash identifier: xaLf74mjYtpa86iLuHyGqz2FXiZkwbHgUmlWEcWAW1I= Subject key identifier: 07:03:56:D6:4D:9E:53:E4:5D:30:C6:11:71:03:48:EF:0B:CB:B6:24 Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F4328584D47C4DC09ABD8D1FC9701DC00 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/4ca47a9b-52e4-3efa-8fd1-d15efc20ad46.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 3356 IP address blocks: 172.84.180.0/24 maxlen: 24 172.84.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:dc:09:ab:d8:d1:fc:97:01:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=b7ff3f07-b18c-42fc-8376-27ca73f830fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1a:a6:24:fc:3c:fb:ff:a7:0f:78:1b:b3:20: 73:6f:76:59:fb:0e:ca:2c:36:9f:53:53:be:a1:e9: 0d:e2:d8:83:79:67:68:80:5b:45:a3:54:88:10:a3: 01:bf:60:a2:17:99:6a:8c:bd:cf:83:ed:e4:29:47: 4f:fe:8d:3c:6e:b0:81:15:4a:9d:cd:ad:f9:c1:88: 24:c3:85:3c:4b:f4:64:99:36:e5:18:a5:2d:b9:f0: 7b:97:ee:07:06:eb:e7:22:62:df:46:79:fd:89:c9: fc:f1:03:26:f0:f1:c9:7e:cb:3f:fd:46:91:61:d1: 95:0d:ab:d4:de:61:64:67:e5:23:a8:d2:67:69:bf: d0:9c:78:59:f2:55:df:a1:0d:8c:9d:05:6b:62:3e: 44:64:66:8b:03:ce:ae:e6:39:49:ee:76:76:64:ec: b0:68:db:fa:4d:cd:fa:f0:27:dc:72:c5:58:8b:4f: c9:46:c1:c8:d4:15:6a:26:14:c1:05:26:fb:e6:5a: 7f:86:dd:6e:46:4a:9a:e3:f4:2b:6e:15:33:cc:a7: ab:24:9a:53:2a:df:2a:38:22:c1:ac:07:b5:6b:45: d0:ba:b7:43:a7:90:90:c0:28:65:04:0f:2c:d5:c4: e1:f3:8d:97:9f:50:b0:71:42:28:aa:fe:57:60:56: 99:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:03:56:D6:4D:9E:53:E4:5D:30:C6:11:71:03:48:EF:0B:CB:B6:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/4ca47a9b-52e4-3efa-8fd1-d15efc20ad46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 172.84.180.0/24 172.84.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:9b:76:81:ad:8d:0d:19:b7:43:62:a2:f4:52:67:be:a1:49: 3e:07:78:e6:d2:29:89:0d:62:5d:92:6d:09:4b:b8:15:79:ab: 50:c6:e6:af:ce:77:24:a5:07:98:4b:a3:77:47:16:31:63:71: ac:c6:45:07:3a:b8:8a:06:94:b8:f1:22:0f:f1:e2:63:a3:f7: ae:34:1e:d3:a5:30:2c:fc:b9:11:e1:b2:2a:15:78:a6:29:f3: 2d:32:5a:46:fa:7f:ae:4c:f1:6f:34:ad:1d:5b:93:6e:49:66: ca:94:4f:e9:af:a5:f6:21:5d:6d:e8:5b:45:dd:fd:9d:d1:e2: b0:f1:b5:30:8c:43:83:b8:7b:b9:68:e3:13:80:09:88:cf:ce: 92:25:4d:bf:6a:8f:ee:d8:37:88:82:21:5d:ec:58:63:7d:7e: 32:54:4e:e8:4d:cd:74:8d:bc:17:1d:e6:9e:e1:9b:16:d2:8c: 80:94:5d:5c:4a:29:d0:58:1d:1f:2d:2d:a6:0a:9e:ab:3a:11: 8b:45:d7:d3:09:55:a3:a7:a1:9a:ed:1c:db:95:c7:7e:db:b3: b3:dd:62:be:e6:c6:26:e6:0f:43:58:98:c4:4f:1d:a7:0c:77: 37:6f:a6:fe:a4:8a:67:27:e3:d2:36:fe:d8:d7:3b:30:62:ba: ea:58:8e:56 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1HxNwJq9jR/JcB3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk YjdmZjNmMDctYjE4Yy00MmZjLTgzNzYtMjdjYTczZjgzMGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixqmJPw8+/+nD3gbsyBzb3ZZ+w7KLDafU1O+ oekN4tiDeWdogFtFo1SIEKMBv2CiF5lqjL3Pg+3kKUdP/o08brCBFUqdza35wYgk w4U8S/RkmTblGKUtufB7l+4HBuvnImLfRnn9icn88QMm8PHJfss//UaRYdGVDavU 3mFkZ+UjqNJnab/QnHhZ8lXfoQ2MnQVrYj5EZGaLA86u5jlJ7nZ2ZOywaNv6Tc36 8CfccsVYi0/JRsHI1BVqJhTBBSb75lp/ht1uRkqa4/QrbhUzzKerJJpTKt8qOCLB rAe1a0XQurdDp5CQwChlBA8s1cTh842Xn1CwcUIoqv5XYFaZ6QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAcDVtZNnlPkXTDGEXEDSO8Ly7YkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvNGNhNDdhOWItNTJlNC0z ZWZhLThmZDEtZDE1ZWZjMjBhZDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArFS0AwQA rFS+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADCbdoGtjQ0Zt0NiovRSZ76hST4HeObSKYkNYl2SbQlLuBV5 q1DG5q/OdySlB5hLo3dHFjFjcazGRQc6uIoGlLjxIg/x4mOj9640HtOlMCz8uRHh sioVeKYp8y0yWkb6f65M8W80rR1bk25JZsqUT+mvpfYhXW3oW0Xd/Z3R4rDxtTCM Q4O4e7lo4xOACYjPzpIlTb9qj+7YN4iCIV3sWGN9fjJUTuhNzXSNvBcd5p7hmxbS jICUXVxKKdBYHR8tLaYKnqs6EYtF19MJVaOnoZrtHNuVx37bs7PdYr7mxibmD0NY mMRPHacMdzdvpv6kimcn49I2/tjXOzBiuupYjlY= -----END CERTIFICATE-----Generated at Thu Mar 26 17:04:00 2026 by rpki-client