$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/a73c81a0-c7cf-3aa8-b452-358d26a129a3.roa File: a73c81a0-c7cf-3aa8-b452-358d26a129a3.roa (raw, json) Hash identifier: AhgPxB++APRHukGBVdbDqSa/cNUarBfdjq5PBMLRGA4= Subject key identifier: 5A:9C:55:99:2B:F0:0F:9C:B1:5D:BF:5E:36:03:E4:A0:6C:9C:14:5A Certificate issuer: /CN=da2a5577-6855-4d86-a3f1-a04b562e9c06 Certificate serial: 010D0C9F4328584D386A627F4509D2C34837B3C0 Authority key identifier: 48:B8:10:96:24:E1:DE:79:8E:A4:47:64:72:2E:2E:61:2E:54:99:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/a73c81a0-c7cf-3aa8-b452-358d26a129a3.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 32248 IP address blocks: 162.250.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/da2a5577-6855-4d86-a3f1-a04b562e9c06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/da2a5577-6855-4d86-a3f1-a04b562e9c06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:62:7f:45:09:d2:c3:48:37:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da2a5577-6855-4d86-a3f1-a04b562e9c06 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=268ee57a-bdcf-4ca5-bf41-212e3e1346a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:03:ab:fc:18:d9:e8:43:7c:15:2b:15:0f:66: fd:ec:11:e8:cd:37:b9:d8:85:13:1e:ca:a7:70:ce: b7:5a:08:be:0e:d1:10:28:59:1a:47:85:be:b9:f3: 85:0a:e2:8d:d6:9c:8a:17:f9:ea:83:ae:f5:08:f8: 4b:f7:3f:f2:bd:0a:85:61:4a:9b:1a:29:5b:1d:d6: 78:f2:67:f9:c8:f7:ac:3e:b0:9d:f6:3a:92:45:96: 14:1d:d8:c6:3d:15:48:18:12:c7:49:37:3e:6a:b5: e9:df:5a:16:de:49:6f:6a:71:79:61:a1:b7:7f:9f: 97:3d:16:79:24:98:1c:9d:16:6e:3b:9b:10:7c:38: d1:24:48:26:2f:9d:e0:26:8a:08:38:9c:81:d4:a3: 33:82:eb:f0:b1:82:97:78:74:90:87:20:ff:da:d5: 88:eb:01:3f:db:12:8f:a0:5d:82:f7:3b:8b:32:9f: 88:e6:70:79:72:06:3b:ce:78:6f:ce:04:66:6d:fb: 67:cc:d3:80:50:54:65:3f:4a:45:0d:69:ba:3a:4b: 3b:a3:bc:8b:b5:6f:97:15:06:dd:45:1e:5b:f4:73: 43:99:07:d7:29:81:ea:96:84:74:e4:62:0b:f4:45: 38:d4:c1:88:a0:71:b6:eb:c7:c8:69:e5:6c:aa:54: 57:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9C:55:99:2B:F0:0F:9C:B1:5D:BF:5E:36:03:E4:A0:6C:9C:14:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/a73c81a0-c7cf-3aa8-b452-358d26a129a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/da2a5577-6855-4d86-a3f1-a04b562e9c06.crl X509v3 Authority Key Identifier: keyid:48:B8:10:96:24:E1:DE:79:8E:A4:47:64:72:2E:2E:61:2E:54:99:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06.cer sbgp-ipAddrBlock: critical IPv4: 162.250.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:48:62:8e:00:0d:42:67:9e:2b:94:fa:ad:12:7b:ad:7c:41: 7a:4f:a8:db:68:a4:37:8b:10:2a:3d:f3:3c:66:c9:b2:af:17: f9:84:e0:72:66:a5:dc:d5:d9:4d:ba:af:45:77:9a:6a:b0:89: 41:0a:2e:2f:1c:9e:1e:c7:c3:9d:3b:3b:35:ff:c8:ff:dd:fc: 15:f8:05:ca:88:9e:ba:7a:00:7c:4f:95:12:23:34:97:17:d1: dc:d4:d9:ad:b7:07:8d:1b:22:29:67:c5:e8:5d:13:65:a5:ac: 20:b5:e0:8c:b7:5e:4f:88:d0:d8:9f:00:f7:90:2d:80:4c:2b: e8:a4:b5:14:42:1a:bb:af:47:0a:bd:df:83:c2:4a:e5:21:0e: 78:2c:32:4e:ed:78:f3:3e:fe:5e:1a:38:60:ac:e7:f6:1e:0f: 67:44:4b:b5:e9:95:75:6c:7b:a7:7f:44:8c:01:08:36:d9:0b: bc:e7:ff:0e:cb:cb:97:be:39:74:ef:d1:a1:71:28:a8:4c:dd: 23:65:a5:76:42:58:9d:2a:52:13:49:e2:02:db:96:af:08:dc: 1e:27:84:1b:63:5b:a6:ee:39:cb:d2:57:99:5a:fa:44:1f:54: 2b:80:9f:b1:54:46:48:0f:9f:21:d7:25:18:df:9a:d7:86:38: f7:44:56:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04amJ/RQnSw0g3s8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEyYTU1NzctNjg1NS00ZDg2LWEzZjEtYTA0YjU2MmU5 YzA2MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk MjY4ZWU1N2EtYmRjZi00Y2E1LWJmNDEtMjEyZTNlMTM0NmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwOr/BjZ6EN8FSsVD2b97BHozTe52IUTHsqn cM63Wgi+DtEQKFkaR4W+ufOFCuKN1pyKF/nqg671CPhL9z/yvQqFYUqbGilbHdZ4 8mf5yPesPrCd9jqSRZYUHdjGPRVIGBLHSTc+arXp31oW3klvanF5YaG3f5+XPRZ5 JJgcnRZuO5sQfDjRJEgmL53gJooIOJyB1KMzguvwsYKXeHSQhyD/2tWI6wE/2xKP oF2C9zuLMp+I5nB5cgY7znhvzgRmbftnzNOAUFRlP0pFDWm6Oks7o7yLtW+XFQbd RR5b9HNDmQfXKYHqloR05GIL9EU41MGIoHG268fIaeVsqlRXywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqcVZkr8A+csV2/XjYD5KBsnBRaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTJh NTU3Ny02ODU1LTRkODYtYTNmMS1hMDRiNTYyZTljMDYvYTczYzgxYTAtYzdjZi0z YWE4LWI0NTItMzU4ZDI2YTEyOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEyYTU1NzctNjg1NS00ZDg2LWEz ZjEtYTA0YjU2MmU5YzA2L2RhMmE1NTc3LTY4NTUtNGQ4Ni1hM2YxLWEwNGI1NjJl OWMwNi5jcmwwHwYDVR0jBBgwFoAUSLgQliTh3nmOpEdkci4uYS5UmcowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTJhNTU3Ny02ODU1LTRkODYtYTNmMS1hMDRi NTYyZTljMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdIYo4ADUJnniuU+q0Se618QXpPqNtopDeLECo98zxmybKvF/mE4HJm pdzV2U26r0V3mmqwiUEKLi8cnh7Hw507OzX/yP/d/BX4BcqInrp6AHxPlRIjNJcX 0dzU2a23B40bIilnxehdE2WlrCC14Iy3Xk+I0NifAPeQLYBMK+iktRRCGruvRwq9 34PCSuUhDngsMk7tePM+/l4aOGCs5/YeD2dES7XplXVse6d/RIwBCDbZC7zn/w7L y5e+OXTv0aFxKKhM3SNlpXZCWJ0qUhNJ4gLblq8I3B4nhBtjW6buOcvSV5la+kQf VCuAn7FURkgPnyHXJRjfmteGOPdEVsE= -----END CERTIFICATE-----Generated at Thu Mar 26 15:17:59 2026 by rpki-client