$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ddb2afa1-7e36-3ac3-9514-51ff2b9d5018.roa File: ddb2afa1-7e36-3ac3-9514-51ff2b9d5018.roa (raw, json) Hash identifier: ZLmN2pGJ8QqTkta3i+L1szRnHVQ/HfgUwVQyIHSTzXs= Subject key identifier: 37:5D:B2:66:78:23:00:E0:3F:C4:E7:84:76:1E:BC:06:0E:F4:7B:8E Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584D143D464C6C29CDA6FFEBA700 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ddb2afa1-7e36-3ac3-9514-51ff2b9d5018.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 19886 IP address blocks: 171.162.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:46:4c:6c:29:cd:a6:ff:eb:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=039fb38c-cf2e-48bd-97ef-6e9e43b66fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5b:e1:64:de:e0:1e:50:52:27:e4:cf:bb:af: 69:dd:5f:6c:3b:0c:cc:2f:91:28:af:d4:e6:cc:5f: ea:01:2b:99:97:27:84:16:67:fc:b3:d5:84:5d:62: f5:74:87:92:4b:ae:6f:be:22:33:fc:2c:f0:19:6d: 60:ed:2a:44:fa:0b:f9:02:46:94:04:9c:25:61:57: ce:37:16:d4:b3:70:4a:d9:f9:b2:aa:e4:ca:d3:e2: 6d:27:60:41:49:2f:c9:70:14:91:56:10:e5:7a:59: 6d:99:4e:bc:a9:50:6e:fc:a1:07:b6:47:20:1c:44: e2:af:d5:f5:84:2f:c1:4d:08:7e:04:b4:96:78:bb: e9:66:f1:e3:da:14:33:a0:16:4e:50:f5:6a:fe:57: 37:57:e1:b1:ad:29:f1:70:22:6c:fb:0d:ad:50:c4: 66:1c:92:39:4d:94:be:30:a0:84:b4:a9:81:0e:e7: 8d:e5:2b:f1:c9:bd:35:d1:71:76:ce:63:e6:d6:86: 29:31:78:41:aa:2a:c0:ba:a7:df:bd:0e:cf:2b:a9: e2:1a:5d:c7:be:14:3c:af:a1:9f:b1:4c:18:3a:ac: 17:fe:d0:26:e5:a8:cd:7b:f8:4b:6c:19:e4:f3:05: 50:51:24:90:1c:52:d0:e2:a6:2c:71:c8:9b:9f:ca: e7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5D:B2:66:78:23:00:E0:3F:C4:E7:84:76:1E:BC:06:0E:F4:7B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ddb2afa1-7e36-3ac3-9514-51ff2b9d5018.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d6:bd:55:90:4c:57:13:21:1b:f1:05:e6:55:81:67:30:f6: 91:47:96:eb:69:f6:3e:9f:f3:fa:2d:e6:08:1c:ca:7c:c2:13: be:0c:7a:d0:0f:02:f7:ee:05:9a:13:c2:c0:31:45:c6:28:24: ab:54:20:f6:dc:2f:d5:af:6b:af:14:5d:a9:83:ff:4a:b3:ec: 51:bc:1b:0c:df:c6:72:5f:19:7e:a0:d6:4e:00:93:3d:8e:c1: a6:b4:e4:b5:da:db:1e:34:21:51:f2:80:4c:15:47:cf:d3:ea: 19:3e:e4:d1:8d:43:0f:7f:ba:ae:0d:f3:23:12:3d:97:c8:64: e4:c6:d2:df:a6:7f:54:f2:0b:c3:3e:13:f2:55:4b:de:84:97: 64:c0:96:81:c5:71:64:94:15:e2:75:48:87:41:ed:67:b4:7d: 06:19:f8:9b:e0:40:28:10:11:af:c0:df:16:3c:71:47:77:0c: a1:99:55:8a:d5:7a:35:f9:52:f7:46:3b:f2:85:c3:dd:46:ec: 9a:10:d4:91:2c:b8:00:e0:f2:36:bf:00:ca:91:20:98:8e:f0: 2b:3f:ae:4a:17:95:2a:71:af:2a:38:19:f0:72:1c:ba:81:b6: 7d:c8:9e:4f:1c:51:13:56:05:70:91:83:40:9d:a3:8e:84:c1: 81:a7:12:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUZMbCnNpv/rpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MDM5ZmIzOGMtY2YyZS00OGJkLTk3ZWYtNmU5ZTQzYjY2ZmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVvhZN7gHlBSJ+TPu69p3V9sOwzML5Eor9Tm zF/qASuZlyeEFmf8s9WEXWL1dIeSS65vviIz/CzwGW1g7SpE+gv5AkaUBJwlYVfO NxbUs3BK2fmyquTK0+JtJ2BBSS/JcBSRVhDlelltmU68qVBu/KEHtkcgHETir9X1 hC/BTQh+BLSWeLvpZvHj2hQzoBZOUPVq/lc3V+GxrSnxcCJs+w2tUMRmHJI5TZS+ MKCEtKmBDueN5Svxyb010XF2zmPm1oYpMXhBqirAuqffvQ7PK6niGl3HvhQ8r6Gf sUwYOqwX/tAm5ajNe/hLbBnk8wVQUSSQHFLQ4qYsccibn8rnzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDddsmZ4IwDgP8TnhHYevAYO9HuOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvZGRiMmFmYTEtN2UzNi0z YWMzLTk1MTQtNTFmZjJiOWQ1MDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6J6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXWvVWQTFcTIRvxBeZVgWcw9pFHlutp9j6f8/ot5ggcynzCE74MetAP AvfuBZoTwsAxRcYoJKtUIPbcL9Wva68UXamD/0qz7FG8GwzfxnJfGX6g1k4Akz2O waa05LXa2x40IVHygEwVR8/T6hk+5NGNQw9/uq4N8yMSPZfIZOTG0t+mf1TyC8M+ E/JVS96El2TAloHFcWSUFeJ1SIdB7We0fQYZ+JvgQCgQEa/A3xY8cUd3DKGZVYrV ejX5UvdGO/KFw91G7JoQ1JEsuADg8ja/AMqRIJiO8Cs/rkoXlSpxryo4GfByHLqB tn3Ink8cURNWBXCRg0Cdo46EwYGnEkg= -----END CERTIFICATE-----Generated at Thu Mar 26 14:11:22 2026 by rpki-client