$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/aa07813c-e54d-39ae-923a-6c45eed1c1a4.roa File: aa07813c-e54d-39ae-923a-6c45eed1c1a4.roa (raw, json) Hash identifier: 9Lmy+0k75qsXYsRdC06Gh979CftlbDqFq0x3ggXbqTU= Subject key identifier: 2C:D9:29:B0:0B:E6:0E:C1:70:9D:1E:80:98:13:26:11:C2:7F:78:6B Certificate issuer: /CN=73980674-4684-4801-b116-e9e08b4ff9f4 Certificate serial: 010D0C9F4328584D359FD9F4E2622AAF585EE140 Authority key identifier: 14:DD:E8:8A:3F:2B:21:89:32:80:26:85:A2:B1:DD:8F:BB:30:75:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/aa07813c-e54d-39ae-923a-6c45eed1c1a4.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 7018 IP address blocks: 152.37.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:d9:f4:e2:62:2a:af:58:5e:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73980674-4684-4801-b116-e9e08b4ff9f4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=0c7396a5-7bea-4e72-a0bc-c6b3efce601d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2a:39:71:eb:99:c4:11:50:11:f1:a4:0a:96: 18:4b:b5:d5:3d:2b:73:41:a2:71:56:6e:22:3c:f4: c7:56:17:84:63:bc:64:35:5f:ae:77:d5:b4:09:e9: 1a:f7:f0:e2:05:a1:e9:44:23:67:b9:43:74:9c:cb: 1b:36:52:d3:80:d3:c7:77:1a:6c:88:bd:11:45:24: e8:37:a3:3c:9a:d9:4f:92:36:20:3d:49:92:ed:93: 16:d2:92:48:c9:c4:a8:87:b6:8f:e7:51:a6:8c:89: ce:97:84:65:69:75:83:ce:87:af:bd:de:80:3b:37: b5:b7:40:01:f6:c8:b0:bb:5c:3e:6d:d5:a1:4a:08: 79:26:41:fb:67:ad:68:aa:8b:76:47:ef:50:28:ba: a4:56:54:a5:4b:c9:b3:85:f4:59:1c:0f:81:59:cf: cc:98:5a:df:66:d6:e2:5f:d4:c3:dd:38:88:9b:e9: 50:da:8b:d4:cf:7b:1b:93:79:37:80:87:25:02:da: 98:a0:a4:56:fa:2c:e0:e9:02:eb:72:81:9f:bf:5d: 57:0a:4a:e0:c3:f4:d1:5f:dc:c3:95:17:10:50:46: 2d:0f:80:4b:8c:e8:3d:d3:9b:2b:c7:34:86:c8:02: 4b:47:8a:4a:78:1b:fd:88:41:95:3e:16:6d:4a:90: a7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D9:29:B0:0B:E6:0E:C1:70:9D:1E:80:98:13:26:11:C2:7F:78:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/aa07813c-e54d-39ae-923a-6c45eed1c1a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.crl X509v3 Authority Key Identifier: keyid:14:DD:E8:8A:3F:2B:21:89:32:80:26:85:A2:B1:DD:8F:BB:30:75:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer sbgp-ipAddrBlock: critical IPv4: 152.37.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:6c:c7:6f:a5:b7:1b:3d:88:c9:df:b7:18:06:bb:5a:eb:17: a0:d6:b4:7b:28:dc:e5:1f:19:a0:1a:bc:79:5e:99:24:eb:cb: dc:fe:cf:53:48:1e:36:18:8c:26:fa:72:68:f1:c8:c4:b2:44: 20:21:66:0e:0c:a5:92:ef:ed:8e:e2:6d:f0:9a:ff:30:0d:d5: c2:78:a9:6d:8a:5a:b5:a0:2e:4e:7c:8e:0d:8d:fb:b6:67:a5: 8d:66:49:dc:b9:fa:c8:d4:5e:b3:f9:56:58:a0:5d:14:bd:3b: 34:a0:1a:3d:b6:e9:cc:32:ee:79:fa:1d:10:f4:bd:ea:d8:9b: 5e:1c:50:0f:20:7c:d9:3f:e9:1d:df:b4:a5:cf:3a:3c:c6:fd: f2:e4:12:53:8f:80:53:e4:6b:df:1b:d8:c6:30:a6:ac:ec:3c: f9:6a:ee:11:73:9f:a4:83:18:2f:6c:b2:ce:cb:65:b7:04:ca: 6d:8f:ef:2c:87:e0:f6:00:93:a6:7c:2d:25:78:5a:04:87:8a: c1:0a:46:15:cf:59:e9:87:78:b3:95:3f:20:9d:9d:9c:a1:94: 9d:1e:1a:8c:84:f6:76:14:38:2c:9c:ba:69:39:98:61:22:14: 27:c8:1b:ad:e8:b9:98:19:e3:8d:d9:ea:c3:2f:cb:d1:0f:81: 9a:89:f1:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n9n04mIqr1he4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzM5ODA2NzQtNDY4NC00ODAxLWIxMTYtZTllMDhiNGZm OWY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MGM3Mzk2YTUtN2JlYS00ZTcyLWEwYmMtYzZiM2VmY2U2MDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqio5ceuZxBFQEfGkCpYYS7XVPStzQaJxVm4i PPTHVheEY7xkNV+ud9W0Ceka9/DiBaHpRCNnuUN0nMsbNlLTgNPHdxpsiL0RRSTo N6M8mtlPkjYgPUmS7ZMW0pJIycSoh7aP51GmjInOl4RlaXWDzoevvd6AOze1t0AB 9siwu1w+bdWhSgh5JkH7Z61oqot2R+9QKLqkVlSlS8mzhfRZHA+BWc/MmFrfZtbi X9TD3TiIm+lQ2ovUz3sbk3k3gIclAtqYoKRW+izg6QLrcoGfv11XCkrgw/TRX9zD lRcQUEYtD4BLjOg905srxzSGyAJLR4pKeBv9iEGVPhZtSpCnWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzZKbAL5g7BcJ0egJgTJhHCf3hrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83Mzk4 MDY3NC00Njg0LTQ4MDEtYjExNi1lOWUwOGI0ZmY5ZjQvYWEwNzgxM2MtZTU0ZC0z OWFlLTkyM2EtNmM0NWVlZDFjMWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzM5ODA2NzQtNDY4NC00ODAxLWIx MTYtZTllMDhiNGZmOWY0LzczOTgwNjc0LTQ2ODQtNDgwMS1iMTE2LWU5ZTA4YjRm ZjlmNC5jcmwwHwYDVR0jBBgwFoAUFN3oij8rIYkygCaForHdj7swdRswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83Mzk4MDY3NC00Njg0LTQ4MDEtYjExNi1lOWUw OGI0ZmY5ZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmCUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtsx2+ltxs9iMnftxgGu1rrF6DWtHso3OUfGaAavHlemSTry9z+z1NI HjYYjCb6cmjxyMSyRCAhZg4MpZLv7Y7ibfCa/zAN1cJ4qW2KWrWgLk58jg2N+7Zn pY1mSdy5+sjUXrP5VligXRS9OzSgGj226cwy7nn6HRD0verYm14cUA8gfNk/6R3f tKXPOjzG/fLkElOPgFPka98b2MYwpqzsPPlq7hFzn6SDGC9sss7LZbcEym2P7yyH 4PYAk6Z8LSV4WgSHisEKRhXPWemHeLOVPyCdnZyhlJ0eGoyE9nYUOCycumk5mGEi FCfIG63ouZgZ443Z6sMvy9EPgZqJ8YI= -----END CERTIFICATE-----Generated at Wed Mar 25 21:28:04 2026 by rpki-client