$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/f90be7cf-3f8c-3aee-aaf0-c6167b324188.roa File: f90be7cf-3f8c-3aee-aaf0-c6167b324188.roa (raw, json) Hash identifier: 7TR3/RH7GbcVY5eVk3G+ssZZhmoPzz+uv/3hGUOvQiE= Subject key identifier: D2:0B:96:48:E1:EE:E7:11:1A:ED:89:F4:B1:A1:FC:67:8E:B8:17:5C Certificate issuer: /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d Certificate serial: 010D0C9F4328584D422F89D25CC3722367ED7880 Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/f90be7cf-3f8c-3aee-aaf0-c6167b324188.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 36734 IP address blocks: 173.241.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:89:d2:5c:c3:72:23:67:ed:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=0c0fa4b6-00d7-49ec-9b10-f8716f8997cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:a4:be:75:e5:eb:01:0f:d0:2d:df:45:c8: 1d:f4:da:92:38:1c:8d:98:db:f9:b7:48:91:d3:0a: f1:4b:58:5b:6f:aa:cd:52:c5:5c:35:3d:92:0c:6c: 50:11:48:e3:d4:08:f9:52:5c:13:0c:46:63:fc:3b: ce:60:c5:6b:92:7f:77:ab:7d:0b:79:20:13:0f:6c: 01:30:0a:d1:65:b3:16:aa:63:45:a1:89:77:d6:96: 10:ca:9b:a3:94:b6:91:ed:ef:c1:16:57:ab:e1:b1: 32:47:cb:62:81:ec:5c:fd:d7:0a:80:ba:fe:86:e7: c5:7d:d4:08:2c:6c:10:87:60:11:ac:00:2f:3a:01: 60:ba:25:22:80:e5:1a:1e:08:3d:02:0f:f5:9c:f2: 7c:c1:d3:f2:e3:1a:b0:5a:4d:2f:e6:34:fc:35:1b: 74:cb:d2:a3:13:bb:fe:94:98:ca:c7:77:4a:7a:8d: 12:17:7b:f5:cc:fa:77:c0:0f:a9:83:5d:60:0b:59: 64:86:ab:5c:a6:3f:23:5e:95:81:85:69:58:67:50: 88:28:9d:e4:f9:4d:69:e7:9e:6f:a4:38:f0:e0:74: 8f:0b:6a:05:0e:2f:88:b8:31:bd:ae:0f:ec:33:3f: c1:6b:04:eb:94:50:e2:0d:10:d9:b9:e5:6a:30:52: 64:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0B:96:48:E1:EE:E7:11:1A:ED:89:F4:B1:A1:FC:67:8E:B8:17:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/f90be7cf-3f8c-3aee-aaf0-c6167b324188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl X509v3 Authority Key Identifier: keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer sbgp-ipAddrBlock: critical IPv4: 173.241.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:12:86:39:50:7f:5c:de:7c:23:e7:ed:c8:0c:09:88:6e:1a: 22:e0:77:17:bb:33:fc:6a:56:38:18:32:18:d7:14:23:95:f8: 41:86:0f:51:6a:de:5a:48:0f:e5:b6:8c:b4:0f:06:f0:fa:d1: b7:56:5b:d7:82:b8:bf:c8:90:ac:da:58:f1:20:2b:c3:f0:19: d5:67:13:e2:40:3e:5c:98:82:f0:8b:e1:e6:97:a9:53:dc:34: 20:8c:19:d6:2b:a2:b8:d2:da:58:cb:92:66:e8:67:b8:72:f8: 5a:a0:27:56:31:6f:37:e9:8b:25:ad:cd:72:57:99:68:07:15: 59:1e:f7:49:23:ed:3d:5e:fe:e2:c5:4e:58:be:b6:72:4a:f2: 8b:4f:92:5d:6c:84:14:8b:43:19:5d:71:1b:73:c1:ec:15:23: b3:aa:d3:95:d4:58:8b:8e:f2:d3:d0:f7:6d:5c:80:24:31:27: 1a:9f:c2:a8:f9:6f:1d:a0:eb:77:48:45:7c:a8:2b:1a:86:f0: c6:73:0a:a6:24:28:9c:31:e0:97:61:13:70:4e:88:4c:5d:7b: 10:5b:c8:f5:2e:3b:9a:78:57:bc:a3:28:87:ec:36:e6:fc:47: 62:26:0f:78:c3:0c:3e:1f:d3:f3:d0:9e:9b:e1:bb:a7:cf:17: 57:c8:8b:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL4nSXMNyI2fteIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNiZTJjYWYtYWZkMC00ZWRmLWE3NDMtYjM1MGMyM2Uz MDdkMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk MGMwZmE0YjYtMDBkNy00OWVjLTliMTAtZjg3MTZmODk5N2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNakvnXl6wEP0C3fRcgd9NqSOByNmNv5t0iR 0wrxS1hbb6rNUsVcNT2SDGxQEUjj1Aj5UlwTDEZj/DvOYMVrkn93q30LeSATD2wB MArRZbMWqmNFoYl31pYQypujlLaR7e/BFler4bEyR8tigexc/dcKgLr+hufFfdQI LGwQh2ARrAAvOgFguiUigOUaHgg9Ag/1nPJ8wdPy4xqwWk0v5jT8NRt0y9KjE7v+ lJjKx3dKeo0SF3v1zPp3wA+pg11gC1lkhqtcpj8jXpWBhWlYZ1CIKJ3k+U1p555v pDjw4HSPC2oFDi+IuDG9rg/sMz/BawTrlFDiDRDZueVqMFJkiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNILlkjh7ucRGu2J9LGh/GeOuBdcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lY2Jl MmNhZi1hZmQwLTRlZGYtYTc0My1iMzUwYzIzZTMwN2QvZjkwYmU3Y2YtM2Y4Yy0z YWVlLWFhZjAtYzYxNjdiMzI0MTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWNiZTJjYWYtYWZkMC00ZWRmLWE3 NDMtYjM1MGMyM2UzMDdkL2VjYmUyY2FmLWFmZDAtNGVkZi1hNzQzLWIzNTBjMjNl MzA3ZC5jcmwwHwYDVR0jBBgwFoAUwnZy+KO6PDsEP1vhWw2QXNk6WFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lY2JlMmNhZi1hZmQwLTRlZGYtYTc0My1iMzUw YzIzZTMwN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEShjlQf1zefCPn7cgMCYhuGiLgdxe7M/xqVjgYMhjXFCOV+EGGD1Fq 3lpID+W2jLQPBvD60bdWW9eCuL/IkKzaWPEgK8PwGdVnE+JAPlyYgvCL4eaXqVPc NCCMGdYrorjS2ljLkmboZ7hy+FqgJ1YxbzfpiyWtzXJXmWgHFVke90kj7T1e/uLF Tli+tnJK8otPkl1shBSLQxldcRtzwewVI7Oq05XUWIuO8tPQ921cgCQxJxqfwqj5 bx2g63dIRXyoKxqG8MZzCqYkKJwx4JdhE3BOiExdexBbyPUuO5p4V7yjKIfsNub8 R2ImD3jDDD4f0/PQnpvhu6fPF1fIi3U= -----END CERTIFICATE-----Generated at Thu Mar 26 13:10:57 2026 by rpki-client