$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ba3718d6-b79b-3161-a4a0-732b49a958d4.roa File: ba3718d6-b79b-3161-a4a0-732b49a958d4.roa (raw, json) Hash identifier: aTZ/IqUfOgY6BWj+pPpdrP15VxjSwZj7NSOnuaWd9Sw= Subject key identifier: D9:FD:24:64:43:86:BA:40:C2:98:46:8E:D9:FD:E9:25:EE:DF:A4:4C Certificate issuer: /CN=2fd92816-1579-4d40-9111-f86331c3fd8f Certificate serial: 010D0C9F4328584D3DFFAADD3938BA4FA7930AE3 Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ba3718d6-b79b-3161-a4a0-732b49a958d4.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 14977 IP address blocks: 137.90.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:aa:dd:39:38:ba:4f:a7:93:0a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=f176a447-b5c3-42e2-8cf1-c0872bec878f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:77:47:1b:cf:0f:15:05:86:b5:2a:be:ae:20: 03:41:43:bb:fc:a0:ad:46:3a:52:f8:0e:dc:e1:81: 5e:c3:aa:b8:0d:40:25:bb:68:13:4c:9d:d6:72:fd: aa:35:b2:66:b4:e4:4b:1a:3e:fa:3e:76:98:4e:87: a1:10:3a:66:6f:56:0e:25:4e:ae:5e:b1:e4:0c:92: 38:3e:43:ab:72:22:41:cf:33:c9:c9:75:c8:82:64: a6:a9:5f:92:0c:3e:c1:5b:16:77:e6:7e:dd:46:7a: e4:87:e8:02:ee:3e:c5:d6:ce:5d:89:a6:d1:7c:e3: da:18:2c:c2:46:ec:8b:ae:e3:fa:55:ac:46:47:eb: cc:d7:15:35:a6:af:93:43:82:4c:4a:ba:f1:7a:c0: 90:f0:9c:46:24:0f:eb:5f:6c:16:ca:62:84:dd:32: f4:63:fa:8e:5b:0f:54:85:a1:e3:cf:5f:e0:da:2a: 57:a1:79:62:ea:8c:87:9d:21:15:89:fa:32:6c:1e: 31:d2:61:4f:79:40:ae:a8:da:f3:b4:43:df:31:b2: f3:06:ec:71:18:6c:9d:de:19:84:2b:f1:2d:45:f6: be:9b:22:e6:99:43:74:52:7b:ce:12:d9:0e:36:84: 25:d7:83:07:e6:0b:be:00:31:9e:0a:8e:26:da:f4: f8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FD:24:64:43:86:BA:40:C2:98:46:8E:D9:FD:E9:25:EE:DF:A4:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ba3718d6-b79b-3161-a4a0-732b49a958d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl X509v3 Authority Key Identifier: keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer sbgp-ipAddrBlock: critical IPv4: 137.90.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:7e:16:ea:36:65:c9:b7:24:ca:5c:92:c4:36:7f:7b:11:97: 98:77:6a:ce:c7:36:30:d5:9c:d0:b3:7e:ea:7c:92:5e:de:02: 44:98:b9:b1:48:5c:54:f8:32:8d:b4:f5:0d:d7:49:2f:81:f6: cb:ff:6b:ad:dc:6b:d6:b9:53:ba:95:ff:96:9a:d6:65:54:e6: 19:53:28:ec:6d:d3:c1:7e:c8:a0:ff:6c:6c:40:95:44:41:8c: 1a:e0:a1:6d:84:85:24:8b:4e:d0:9e:1b:8e:26:13:c4:c1:33: 6a:10:a0:74:0a:a3:80:51:05:02:f4:31:40:cb:73:11:1f:7c: 0c:7c:98:ac:d5:4c:13:44:8b:36:9f:0e:80:e8:26:08:2b:7e: 5e:37:c7:c8:ce:e5:d2:ba:f7:8d:e4:ed:44:b2:9d:46:2d:75: 8c:9f:81:fd:51:94:5d:fd:d2:a5:39:8c:ab:73:9c:38:5d:6e: 75:0e:ab:39:8b:00:a6:d2:ab:8b:c8:14:58:50:a6:6d:ba:fe: 32:57:5c:e0:27:5c:61:2a:09:8c:58:46:30:7f:72:fb:04:db: 62:0b:39:c1:e4:a2:00:ba:28:fe:d4:17:5b:f0:7c:be:1e:1c: ae:28:6a:af:6d:d5:92:db:f7:26:00:c1:bc:e8:86:bb:04:19: 09:cf:70:69 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE09/6rdOTi6T6eTCuMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZkOTI4MTYtMTU3OS00ZDQwLTkxMTEtZjg2MzMxYzNm ZDhmMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZjE3NmE0NDctYjVjMy00MmUyLThjZjEtYzA4NzJiZWM4NzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXdHG88PFQWGtSq+riADQUO7/KCtRjpS+A7c 4YFew6q4DUAlu2gTTJ3Wcv2qNbJmtORLGj76PnaYToehEDpmb1YOJU6uXrHkDJI4 PkOrciJBzzPJyXXIgmSmqV+SDD7BWxZ35n7dRnrkh+gC7j7F1s5diabRfOPaGCzC RuyLruP6VaxGR+vM1xU1pq+TQ4JMSrrxesCQ8JxGJA/rX2wWymKE3TL0Y/qOWw9U haHjz1/g2ipXoXli6oyHnSEVifoybB4x0mFPeUCuqNrztEPfMbLzBuxxGGyd3hmE K/EtRfa+myLmmUN0UnvOEtkONoQl14MH5gu+ADGeCo4m2vT44wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNn9JGRDhrpAwphGjtn96SXu36RMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5 MjgxNi0xNTc5LTRkNDAtOTExMS1mODYzMzFjM2ZkOGYvYmEzNzE4ZDYtYjc5Yi0z MTYxLWE0YTAtNzMyYjQ5YTk1OGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZkOTI4MTYtMTU3OS00ZDQwLTkx MTEtZjg2MzMxYzNmZDhmLzJmZDkyODE2LTE1NzktNGQ0MC05MTExLWY4NjMzMWMz ZmQ4Zi5jcmwwHwYDVR0jBBgwFoAUt6qI9fIKuBQY0nfTo1Gl7/5Il/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5MjgxNi0xNTc5LTRkNDAtOTExMS1mODYz MzFjM2ZkOGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiVowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAin4W6jZlybckylySxDZ/exGXmHdqzsc2MNWc0LN+6nySXt4CRJi5sUhc VPgyjbT1DddJL4H2y/9rrdxr1rlTupX/lprWZVTmGVMo7G3TwX7IoP9sbECVREGM GuChbYSFJItO0J4bjiYTxMEzahCgdAqjgFEFAvQxQMtzER98DHyYrNVME0SLNp8O gOgmCCt+XjfHyM7l0rr3jeTtRLKdRi11jJ+B/VGUXf3SpTmMq3OcOF1udQ6rOYsA ptKri8gUWFCmbbr+Mldc4CdcYSoJjFhGMH9y+wTbYgs5weSiALoo/tQXW/B8vh4c rihqr23Vktv3JgDBvOiGuwQZCc9waQ== -----END CERTIFICATE-----Generated at Thu Mar 26 15:45:08 2026 by rpki-client