$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/197fe0ef-c0a7-308c-b4a2-82b1c3ba00db.roa File: 197fe0ef-c0a7-308c-b4a2-82b1c3ba00db.roa (raw, json) Hash identifier: OnznXsHbQJuqmI2GBGQOm13mxW8nmcOMZ6KEsbJQ9Ss= Subject key identifier: A0:6E:9C:0E:8B:47:DC:39:09:A8:8B:20:D7:D8:67:B8:FF:CF:F0:4F Certificate issuer: /CN=9c86f5c3-cc81-4acd-8209-c28b6f5b7984 Certificate serial: 010D0C9F4328584D11726BBA19385C296A2F6B00 Authority key identifier: 02:D2:86:34:A6:8D:40:07:1A:18:26:BB:67:47:8B:58:91:FF:D2:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/197fe0ef-c0a7-308c-b4a2-82b1c3ba00db.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 400648 IP address blocks: 163.182.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:6b:ba:19:38:5c:29:6a:2f:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c86f5c3-cc81-4acd-8209-c28b6f5b7984 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=634b6416-4079-4967-96ad-71e6db6226e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b5:b7:e8:4a:22:35:9b:68:2c:c5:f2:20:ef: 61:05:7e:12:00:bd:14:33:8d:ec:ab:2c:9d:dd:db: a5:20:50:dc:ee:61:ae:d4:a1:8f:79:04:6f:f2:46: 10:29:6c:b0:0b:0c:70:a6:c7:46:43:1c:70:d4:ef: 6e:12:c8:93:67:7b:30:2b:66:ec:d7:cc:76:ae:08: b5:91:bf:a9:83:fe:1c:7e:8a:43:f5:02:45:a3:56: 58:d0:04:be:84:36:b9:2c:5c:0c:3c:a4:75:b1:28: a3:6a:58:d7:91:12:6c:7e:6e:db:9d:6a:78:65:bd: 39:1b:cc:f8:68:bc:ca:d5:50:da:b4:b2:29:bb:72: 06:9f:06:0b:18:04:18:10:ee:59:f0:ce:1f:d3:8e: ae:db:58:0a:b5:3e:38:b0:10:28:79:d1:83:62:38: 62:f2:73:95:b6:25:a5:97:67:2e:76:c9:18:dc:dd: 37:9f:c7:10:04:0c:16:21:e9:0e:6b:7b:10:ba:24: 7e:13:94:a7:13:b8:18:30:87:ff:ad:6e:7b:d6:ad: e7:7d:29:86:a4:41:1d:97:6b:24:28:8c:db:3e:4e: e1:b1:e8:61:ae:1b:08:5c:0f:35:d3:d2:f7:5e:e6: fe:65:87:69:c4:e4:70:61:14:93:3c:ea:c6:10:e8: 6c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6E:9C:0E:8B:47:DC:39:09:A8:8B:20:D7:D8:67:B8:FF:CF:F0:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/197fe0ef-c0a7-308c-b4a2-82b1c3ba00db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.crl X509v3 Authority Key Identifier: keyid:02:D2:86:34:A6:8D:40:07:1A:18:26:BB:67:47:8B:58:91:FF:D2:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.cer sbgp-ipAddrBlock: critical IPv4: 163.182.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0d:e4:b8:f3:29:e7:6b:91:74:98:18:74:d5:34:45:d9:7e: 9f:74:10:30:7e:59:33:7e:1f:68:f1:76:a2:0d:71:71:3c:d9: fd:90:35:03:93:1d:ee:91:03:d3:e9:b3:ca:b8:70:3a:76:eb: 0e:8d:62:5c:cb:a0:4f:14:2a:08:ae:fb:e9:16:63:c6:80:ab: 85:cd:b4:d6:00:8a:13:99:95:c0:82:80:d4:b2:e1:e6:7b:11: bc:41:b4:1e:30:e1:59:38:27:ed:22:89:08:f2:be:29:09:ae: 41:69:7f:21:49:e0:21:2e:07:bb:63:10:70:c8:d2:58:4b:e9: aa:63:8a:05:b6:ef:86:e7:24:00:4b:b0:30:7f:19:e2:5d:5b: e6:de:fc:4b:54:d8:76:01:6b:7b:f3:ba:2b:c2:94:b5:92:ff: c8:90:34:4a:15:ae:63:c5:82:41:e9:62:00:65:79:60:4e:87: 24:b5:09:a8:34:6d:9d:72:46:aa:b6:88:40:16:62:ec:ab:64: d1:9b:d7:00:dd:02:c3:47:85:af:3c:dc:4b:85:7d:45:91:35: 29:58:2b:b5:17:9b:0d:d1:4b:ed:2d:c6:2f:89:90:9d:9f:3a: 7b:7a:a1:3a:bc:a8:10:58:03:53:5d:c9:80:53:6a:a6:3a:76: 73:d6:23:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Rcmu6GThcKWovawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM4NmY1YzMtY2M4MS00YWNkLTgyMDktYzI4YjZmNWI3 OTg0MB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk NjM0YjY0MTYtNDA3OS00OTY3LTk2YWQtNzFlNmRiNjIyNmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbW36EoiNZtoLMXyIO9hBX4SAL0UM43sqyyd 3dulIFDc7mGu1KGPeQRv8kYQKWywCwxwpsdGQxxw1O9uEsiTZ3swK2bs18x2rgi1 kb+pg/4cfopD9QJFo1ZY0AS+hDa5LFwMPKR1sSijaljXkRJsfm7bnWp4Zb05G8z4 aLzK1VDatLIpu3IGnwYLGAQYEO5Z8M4f046u21gKtT44sBAoedGDYjhi8nOVtiWl l2cudskY3N03n8cQBAwWIekOa3sQuiR+E5SnE7gYMIf/rW571q3nfSmGpEEdl2sk KIzbPk7hsehhrhsIXA8109L3Xub+ZYdpxORwYRSTPOrGEOhsFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBunA6LR9w5CaiLINfYZ7j/z/BPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Yzg2 ZjVjMy1jYzgxLTRhY2QtODIwOS1jMjhiNmY1Yjc5ODQvMTk3ZmUwZWYtYzBhNy0z MDhjLWI0YTItODJiMWMzYmEwMGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWM4NmY1YzMtY2M4MS00YWNkLTgy MDktYzI4YjZmNWI3OTg0LzljODZmNWMzLWNjODEtNGFjZC04MjA5LWMyOGI2ZjVi Nzk4NC5jcmwwHwYDVR0jBBgwFoAUAtKGNKaNQAcaGCa7Z0eLWJH/0icwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Yzg2ZjVjMy1jYzgxLTRhY2QtODIwOS1jMjhi NmY1Yjc5ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBo7agMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcN5LjzKedrkXSYGHTVNEXZfp90EDB+WTN+H2jxdqINcXE82f2QNQOT He6RA9Pps8q4cDp26w6NYlzLoE8UKgiu++kWY8aAq4XNtNYAihOZlcCCgNSy4eZ7 EbxBtB4w4Vk4J+0iiQjyvikJrkFpfyFJ4CEuB7tjEHDI0lhL6apjigW274bnJABL sDB/GeJdW+be/EtU2HYBa3vzuivClLWS/8iQNEoVrmPFgkHpYgBleWBOhyS1Cag0 bZ1yRqq2iEAWYuyrZNGb1wDdAsNHha883EuFfUWRNSlYK7UXmw3RS+0txi+JkJ2f Ont6oTq8qBBYA1NdyYBTaqY6dnPWI5Y= -----END CERTIFICATE-----Generated at Thu Mar 26 17:01:49 2026 by rpki-client