$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/88b5e838-17e5-3bb7-a470-56d17a1746b6.roa File: 88b5e838-17e5-3bb7-a470-56d17a1746b6.roa (raw, json) Hash identifier: rlo+f3qixfhntz54wVr7F1cJHKTnqfAWMp+xkJTPbkY= Subject key identifier: F3:AD:22:69:8D:FC:2D:AE:EC:DD:A6:1B:29:FC:54:DB:2E:CA:60:B8 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584D143D467EDA330EB95051A780 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/88b5e838-17e5-3bb7-a470-56d17a1746b6.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 19886 IP address blocks: 171.162.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:46:7e:da:33:0e:b9:50:51:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=0b05afe1-95a3-4f30-9938-ff2b3e764925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4b:a1:8d:34:59:1e:81:2c:42:f6:4a:0d:a9: 78:77:2f:12:f4:00:58:c5:bf:f0:7d:e5:95:ea:ab: 46:05:8d:e4:39:c3:28:59:5c:1d:05:47:0a:23:7b: 62:4d:b2:d3:c3:3c:41:d8:32:ce:60:a7:91:45:e1: 99:45:70:08:71:af:bb:db:92:7b:d4:50:38:a8:11: 1f:6e:85:9b:6c:b4:68:f8:43:75:3f:8b:9d:3d:f2: 17:60:78:9a:73:90:9a:d2:1b:24:36:d2:d0:e9:d8: 00:49:63:c4:90:38:a3:73:4a:03:55:de:79:a3:0b: 08:d2:3b:65:ea:2e:5d:e9:cb:92:d3:93:22:d1:39: 97:fe:e5:b1:87:99:3d:aa:a4:17:7e:f7:db:7e:77: 92:f3:13:5c:31:18:a1:34:58:6d:1a:2e:1d:03:c8: 76:b8:ad:3f:26:53:fb:ea:19:7b:e6:22:d6:fa:ee: 21:55:d0:04:18:97:ce:5c:91:10:c5:d5:a4:13:8e: 09:ca:6d:dc:7a:c1:6e:03:32:fc:3a:9b:80:28:de: fb:85:3e:7a:95:0b:37:65:f2:98:1f:f6:3a:83:f8: 0f:d0:3c:9f:0b:1c:d0:56:f7:f8:7a:13:98:19:9b: 5a:32:87:9f:0d:82:99:b2:e1:11:d5:44:7b:02:11: 30:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AD:22:69:8D:FC:2D:AE:EC:DD:A6:1B:29:FC:54:DB:2E:CA:60:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/88b5e838-17e5-3bb7-a470-56d17a1746b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:dd:2e:be:c0:f7:3d:cb:35:09:85:37:f1:88:18:71:15:57: 39:07:08:f7:de:51:51:31:c2:81:42:27:a2:ed:61:6e:0e:8f: ac:bf:37:7f:53:4a:fc:fa:e1:61:a7:30:43:a6:0c:c9:da:41: 93:ae:8e:60:68:53:ea:cf:3a:17:9a:d2:11:1d:2f:d6:88:90: 41:61:a9:58:f2:86:06:f8:d5:29:87:75:12:f6:6a:3f:99:fa: 44:d8:67:95:ce:a5:34:a1:b1:38:e9:bf:0f:8f:2c:bc:2b:ad: 20:9c:0f:13:ed:46:ec:62:a5:b5:8a:bf:96:77:68:15:21:88: 2a:ad:7c:c8:60:8a:56:c2:19:9e:a6:95:33:56:92:8d:0c:6a: 1e:52:7f:34:82:cc:ad:86:c2:ea:2f:83:6a:97:b0:98:77:ee: 2b:6c:02:9c:f9:8c:3d:da:4b:47:e4:f8:ff:01:3c:3e:26:cb: 42:02:91:63:34:2d:a8:c6:1d:d1:7f:59:36:22:9b:a0:2a:0d: 07:1d:b1:56:a4:29:93:e9:ad:36:89:86:e7:13:65:08:2d:20: 92:cb:9c:2a:68:82:87:b0:1f:ee:e3:da:30:df:fd:1e:97:98: f8:37:27:d8:3e:d8:60:b7:c1:70:ab:f7:a8:1a:bc:ab:68:6e: ab:06:63:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUZ+2jMOuVBRp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MGIwNWFmZTEtOTVhMy00ZjMwLTk5MzgtZmYyYjNlNzY0OTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0uhjTRZHoEsQvZKDal4dy8S9ABYxb/wfeWV 6qtGBY3kOcMoWVwdBUcKI3tiTbLTwzxB2DLOYKeRReGZRXAIca+725J71FA4qBEf boWbbLRo+EN1P4udPfIXYHiac5Ca0hskNtLQ6dgASWPEkDijc0oDVd55owsI0jtl 6i5d6cuS05Mi0TmX/uWxh5k9qqQXfvfbfneS8xNcMRihNFhtGi4dA8h2uK0/JlP7 6hl75iLW+u4hVdAEGJfOXJEQxdWkE44Jym3cesFuAzL8OpuAKN77hT56lQs3ZfKY H/Y6g/gP0DyfCxzQVvf4ehOYGZtaMoefDYKZsuER1UR7AhEw4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOtImmN/C2u7N2mGyn8VNsuymC4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvODhiNWU4MzgtMTdlNS0z YmI3LWE0NzAtNTZkMTdhMTc0NmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6J/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLdLr7A9z3LNQmFN/GIGHEVVzkHCPfeUVExwoFCJ6LtYW4Oj6y/N39T Svz64WGnMEOmDMnaQZOujmBoU+rPOhea0hEdL9aIkEFhqVjyhgb41SmHdRL2aj+Z +kTYZ5XOpTShsTjpvw+PLLwrrSCcDxPtRuxipbWKv5Z3aBUhiCqtfMhgilbCGZ6m lTNWko0Mah5SfzSCzK2Gwuovg2qXsJh37itsApz5jD3aS0fk+P8BPD4my0ICkWM0 LajGHdF/WTYim6AqDQcdsVakKZPprTaJhucTZQgtIJLLnCpogoewH+7j2jDf/R6X mPg3J9g+2GC3wXCr96gavKtobqsGY1A= -----END CERTIFICATE-----Generated at Fri Mar 27 05:20:52 2026 by rpki-client