$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/8a36e7fa-9c0c-39d9-8d73-1eec7757d97c.roa File: 8a36e7fa-9c0c-39d9-8d73-1eec7757d97c.roa (raw, json) Hash identifier: iTMk2YesCsLGG41FG7ZjjSU2riXqIEh9Vvm0N4grt/s= Subject key identifier: 93:A8:F1:3E:10:B4:BE:6C:37:DE:15:12:6A:21:BA:D6:05:AC:E9:C1 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584D11B052C1A03BBA9741703B80 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/8a36e7fa-9c0c-39d9-8d73-1eec7757d97c.roa Signing time: Thu 05 Mar 2026 16:05:35 +0000 ROA not before: Thu 05 Mar 2026 16:05:35 +0000 ROA not after: Wed 03 Jun 2026 15:05:35 +0000 asID: 14618 IP address blocks: 69.170.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:b0:52:c1:a0:3b:ba:97:41:70:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Mar 5 16:05:35 2026 GMT Not After : Jun 3 15:05:35 2026 GMT Subject: CN=aa04841b-c32a-49f9-8a7e-24ef7d07983d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:11:41:a3:2e:c5:78:5c:17:f5:9c:26:e0:72: b5:a2:7d:f7:50:be:f8:0c:b6:69:5f:72:03:ab:90: 3e:c4:cd:05:25:22:f6:c2:ac:09:88:fc:c0:1b:18: fb:03:0c:de:7e:f9:c2:53:9c:a5:eb:42:c4:6e:c3: b2:d4:b2:d5:59:f7:75:07:1d:fd:a2:cd:fd:b7:16: d2:a0:42:55:88:8c:a3:4c:b9:7c:cd:50:bb:61:30: 4b:2b:33:a7:86:6b:12:b0:f7:78:d9:7c:3b:76:4e: 49:37:95:9b:21:9d:9e:71:62:e3:ce:ce:f5:c7:0c: f8:44:6e:45:f1:ac:db:c7:40:31:62:80:e9:2e:e0: b5:93:2b:e2:d3:f3:29:16:03:87:7f:55:3f:e6:63: 00:ae:90:2b:0d:63:d8:3f:f9:87:af:fe:dd:b3:2c: 48:11:93:05:6e:4b:7d:cc:af:12:97:6a:cd:82:e1: da:f8:e6:79:47:75:60:4c:ca:d6:a3:41:13:c1:15: 68:f1:74:60:2a:63:72:84:a0:5c:f0:17:1d:19:34: 63:3e:f8:79:26:eb:f1:55:eb:3f:c9:b9:6a:d0:98: 2a:3f:e3:0e:e4:60:84:e3:d8:b6:37:79:f9:2f:ba: 23:b8:09:b5:c0:51:73:75:3d:59:09:eb:8a:4f:b0: 16:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A8:F1:3E:10:B4:BE:6C:37:DE:15:12:6A:21:BA:D6:05:AC:E9:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/8a36e7fa-9c0c-39d9-8d73-1eec7757d97c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 69.170.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:cf:58:3b:1e:cc:25:8b:84:cc:0e:b4:fc:ab:1d:8c:29:db: 74:57:61:7f:d6:81:96:5b:63:f6:b2:29:ce:19:b5:7b:63:d4: 2e:51:21:b1:8f:99:55:8e:6c:89:f5:a7:38:22:e0:f3:fd:80: 9c:a4:5d:de:a1:42:b6:0f:e2:48:19:24:0e:16:9c:f6:1b:55: 61:c2:74:02:9b:bb:fe:e7:44:69:b8:47:08:44:df:5b:72:69: ff:0f:30:0f:46:a3:0e:49:ee:d9:94:76:12:9c:b5:35:b8:97: 2c:35:2c:d4:c0:ec:31:43:c3:a6:5f:e6:79:8c:04:81:36:dd: 01:0c:c8:cf:bd:5b:5e:e9:b8:f3:56:c8:3a:f9:7c:23:52:72: 87:05:e0:c0:79:f3:e8:f7:e8:72:f8:bf:89:f9:8d:04:98:03: 75:24:6b:a2:cf:f2:6e:eb:9b:4b:2a:ed:46:1f:bf:35:b4:48: df:47:e1:46:dd:44:f6:68:0f:df:66:ac:d7:c3:fa:21:92:21: d9:79:8c:de:1e:99:b2:fa:e5:9a:08:b6:9b:3d:45:6e:1a:dc: 7e:f2:de:f0:4f:5c:82:ae:ea:98:44:cd:54:0d:c5:82:6b:43: c4:08:ee:ed:bf:ed:20:ff:df:5d:b8:cc:7d:e9:b2:f8:21:86: 6d:a8:e9:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RsFLBoDu6l0FwO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI2MDMwNTE2MDUzNVoXDTI2MDYwMzE1MDUzNVowLzEtMCsGA1UEAxMk YWEwNDg0MWItYzMyYS00OWY5LThhN2UtMjRlZjdkMDc5ODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBFBoy7FeFwX9Zwm4HK1on33UL74DLZpX3ID q5A+xM0FJSL2wqwJiPzAGxj7AwzefvnCU5yl60LEbsOy1LLVWfd1Bx39os39txbS oEJViIyjTLl8zVC7YTBLKzOnhmsSsPd42Xw7dk5JN5WbIZ2ecWLjzs71xwz4RG5F 8azbx0AxYoDpLuC1kyvi0/MpFgOHf1U/5mMArpArDWPYP/mHr/7dsyxIEZMFbkt9 zK8Sl2rNguHa+OZ5R3VgTMrWo0ETwRVo8XRgKmNyhKBc8BcdGTRjPvh5JuvxVes/ yblq0JgqP+MO5GCE49i2N3n5L7ojuAm1wFFzdT1ZCeuKT7AWMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOo8T4QtL5sN94VEmohutYFrOnBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvOGEzNmU3ZmEtOWMwYy0z OWQ5LThkNzMtMWVlYzc3NTdkOTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARaq6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvPWDsezCWLhMwOtPyrHYwp23RXYX/WgZZbY/ayKc4ZtXtj1C5RIbGP mVWObIn1pzgi4PP9gJykXd6hQrYP4kgZJA4WnPYbVWHCdAKbu/7nRGm4RwhE31ty af8PMA9Gow5J7tmUdhKctTW4lyw1LNTA7DFDw6Zf5nmMBIE23QEMyM+9W17puPNW yDr5fCNScocF4MB58+j36HL4v4n5jQSYA3Uka6LP8m7rm0sq7UYfvzW0SN9H4Ubd RPZoD99mrNfD+iGSIdl5jN4embL65ZoItps9RW4a3H7y3vBPXIKu6phEzVQNxYJr Q8QI7u2/7SD/3124zH3psvghhm2o6TY= -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:47 2026 by rpki-client