$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/fdbb518e-6301-32f6-9311-491af1e25efe.roa File: fdbb518e-6301-32f6-9311-491af1e25efe.roa (raw, json) Hash identifier: 1vZymKTigBTgYO4I1PrCvceedbexwgTHXuA8xHAckS4= Subject key identifier: EA:48:CE:68:D0:3C:4B:8C:E5:38:F0:D2:2E:3C:A6:6D:E2:AD:3A:9F Certificate issuer: /CN=0dc32e52-7919-4ad4-a486-4bed23a5c3ab Certificate serial: 010D0C9F4328584D19B4ACC03E62051AE7D0D6B0 Authority key identifier: E5:FD:14:F3:B0:8F:71:D2:1F:E9:CA:63:A4:F4:70:53:F8:F0:02:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/fdbb518e-6301-32f6-9311-491af1e25efe.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 394434 IP address blocks: 168.86.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:ac:c0:3e:62:05:1a:e7:d0:d6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dc32e52-7919-4ad4-a486-4bed23a5c3ab Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=d7be3a9a-dee9-4562-98ca-ddd8c72b9826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:87:f0:3d:43:d8:9b:13:70:0e:34:a8:e1:b1: d7:09:ac:fa:0f:3b:96:9c:91:e4:f0:88:24:e7:ac: cd:10:e2:a0:b1:4c:93:67:50:0b:63:df:6f:06:85: 94:a5:29:bc:43:51:af:2e:1e:a0:fc:8d:49:3d:27: 24:fb:a5:ee:e4:d6:9b:7b:d7:97:3f:53:6c:6b:43: 10:ca:82:cc:5d:b0:46:09:09:e6:0a:8b:66:f9:2c: 2f:bd:ea:2d:f1:fb:6c:05:b3:db:1a:23:41:5d:e8: be:ae:9b:fa:bf:0f:db:be:29:ad:5e:47:f4:e6:70: b0:6a:69:67:ab:ba:1a:b8:66:81:e8:c2:8e:0c:01: a2:95:3a:94:f4:80:00:cf:38:ce:f0:2d:21:b3:00: 6d:92:3e:bb:2d:75:70:dc:17:5e:33:b3:02:4c:33: fa:5a:64:5e:de:56:47:a3:37:04:35:e5:a3:e6:46: b5:0b:21:7d:09:c9:53:16:1b:72:59:38:43:b2:85: c1:0e:b4:e7:f7:52:c6:01:16:49:c6:d0:38:8c:1a: 3d:12:48:43:5c:71:c6:71:3a:18:22:6f:4d:fc:48: 86:96:83:db:de:61:96:51:4b:79:4f:9d:32:1b:fb: fd:eb:92:43:dd:44:6e:e0:21:32:39:cb:75:59:cf: f5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:48:CE:68:D0:3C:4B:8C:E5:38:F0:D2:2E:3C:A6:6D:E2:AD:3A:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/fdbb518e-6301-32f6-9311-491af1e25efe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.crl X509v3 Authority Key Identifier: keyid:E5:FD:14:F3:B0:8F:71:D2:1F:E9:CA:63:A4:F4:70:53:F8:F0:02:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer sbgp-ipAddrBlock: critical IPv4: 168.86.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:ea:46:9d:61:03:bf:49:e0:ce:da:94:ee:fe:02:3b:15:86: d3:b8:73:d3:00:c3:be:b2:94:92:44:a5:2a:3e:7b:ce:1c:45: fd:50:38:97:84:73:14:65:3e:73:7b:62:c5:c7:05:30:94:07: 41:a3:79:dc:26:09:44:57:ab:bd:92:14:06:3d:d6:15:b3:91: 2a:f5:b0:ff:34:1a:88:74:4f:5e:7f:68:fb:07:c7:86:b5:20: 6e:59:17:c3:19:6c:4d:50:e9:5d:eb:b0:c2:05:a6:c3:84:db: 73:d4:b8:00:9a:02:b0:72:eb:95:0a:93:d8:73:c2:53:c2:85: d0:5f:5b:36:18:66:b3:6a:2e:8f:51:16:ee:70:98:5a:f6:e0: ad:d0:2b:4e:8e:9d:dc:cb:b7:da:06:0a:47:57:bb:29:de:03: 88:d1:ff:2b:35:75:3e:04:6c:e1:e3:a9:c4:1e:43:de:72:e1: da:8f:e1:c2:a5:4b:ba:01:04:50:b0:30:32:10:80:4f:32:21: 6a:2f:4e:85:a2:71:67:91:b5:38:0d:83:32:84:41:e5:a2:5f: 5a:a4:70:9a:be:b4:6b:41:73:44:f2:a8:bf:51:ac:2e:e6:14: da:7b:66:58:6f:e6:fa:5e:4d:76:cf:dc:a0:c1:82:88:3d:53: 1b:43:06:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtKzAPmIFGufQ1rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRjMzJlNTItNzkxOS00YWQ0LWE0ODYtNGJlZDIzYTVj M2FiMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZDdiZTNhOWEtZGVlOS00NTYyLTk4Y2EtZGRkOGM3MmI5ODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYfwPUPYmxNwDjSo4bHXCaz6DzuWnJHk8Igk 56zNEOKgsUyTZ1ALY99vBoWUpSm8Q1GvLh6g/I1JPSck+6Xu5Nabe9eXP1Nsa0MQ yoLMXbBGCQnmCotm+Swvveot8ftsBbPbGiNBXei+rpv6vw/bvimtXkf05nCwamln q7oauGaB6MKODAGilTqU9IAAzzjO8C0hswBtkj67LXVw3BdeM7MCTDP6WmRe3lZH ozcENeWj5ka1CyF9CclTFhtyWThDsoXBDrTn91LGARZJxtA4jBo9EkhDXHHGcToY Im9N/EiGloPb3mGWUUt5T50yG/v965JD3URu4CEyOct1Wc/1UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpIzmjQPEuM5Tjw0i48pm3irTqfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZGMz MmU1Mi03OTE5LTRhZDQtYTQ4Ni00YmVkMjNhNWMzYWIvZmRiYjUxOGUtNjMwMS0z MmY2LTkzMTEtNDkxYWYxZTI1ZWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGRjMzJlNTItNzkxOS00YWQ0LWE0 ODYtNGJlZDIzYTVjM2FiLzBkYzMyZTUyLTc5MTktNGFkNC1hNDg2LTRiZWQyM2E1 YzNhYi5jcmwwHwYDVR0jBBgwFoAU5f0U87CPcdIf6cpjpPRwU/jwArIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZGMzMmU1Mi03OTE5LTRhZDQtYTQ4Ni00YmVk MjNhNWMzYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqFaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3qRp1hA79J4M7alO7+AjsVhtO4c9MAw76ylJJEpSo+e84cRf1QOJeE cxRlPnN7YsXHBTCUB0GjedwmCURXq72SFAY91hWzkSr1sP80Goh0T15/aPsHx4a1 IG5ZF8MZbE1Q6V3rsMIFpsOE23PUuACaArBy65UKk9hzwlPChdBfWzYYZrNqLo9R Fu5wmFr24K3QK06OndzLt9oGCkdXuyneA4jR/ys1dT4EbOHjqcQeQ95y4dqP4cKl S7oBBFCwMDIQgE8yIWovToWicWeRtTgNgzKEQeWiX1qkcJq+tGtBc0TyqL9RrC7m FNp7Zlhv5vpeTXbP3KDBgog9UxtDBvI= -----END CERTIFICATE-----Generated at Thu Mar 26 02:45:09 2026 by rpki-client