$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/a7c7708c-a8b9-3ab8-be88-97548bbc3121.roa File: a7c7708c-a8b9-3ab8-be88-97548bbc3121.roa (raw, json) Hash identifier: gYnQOtC95fXh3idnpa5hOGpgFaUyo0RYclafIlJgsgs= Subject key identifier: 59:6B:32:24:79:AA:DF:2D:3C:FD:3E:14:A8:F0:4F:53:6E:CE:EA:0F Certificate issuer: /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Certificate serial: 010D0C9F4328584D2A74C7BDA9389E0B1382A000 Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/a7c7708c-a8b9-3ab8-be88-97548bbc3121.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 40495 IP address blocks: 174.137.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:c7:bd:a9:38:9e:0b:13:82:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=652ccf2a-fd0f-47cc-bfba-d563c268bba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4c:4c:65:48:57:e3:b8:45:7f:f0:81:f9:40: 7a:74:17:ed:2a:c8:7f:2a:09:42:44:e6:b7:9d:75: c6:c7:36:35:dc:62:f3:68:b3:97:49:4f:41:76:b3: fd:72:86:4e:72:a4:29:39:33:8b:a9:a6:a1:77:fd: 5a:03:93:b9:fa:af:4e:ff:ff:21:0e:dd:63:12:09: 09:b8:4c:ab:cb:bf:bf:ae:1d:3e:a6:ec:7b:1d:1f: ce:90:c2:51:9f:ba:17:d5:59:63:7f:31:6f:be:87: 15:7c:ed:f0:3e:85:58:c2:3f:36:ca:a4:56:42:9c: 2b:9f:96:53:e0:f0:1e:df:fd:5c:0a:63:8f:72:0f: 4e:88:f3:4c:72:87:30:65:d2:3f:6e:56:94:f8:3d: 5f:46:27:cc:d7:0e:2d:9d:9c:fc:c1:af:e2:99:48: b7:83:36:01:a0:f0:23:9d:56:e6:82:77:f4:1d:76: 34:df:c3:5a:b7:0a:8f:9c:75:7d:22:22:f2:e5:b8: 78:39:51:50:56:56:47:8a:1c:58:2f:5e:a9:c0:e9: f2:16:46:a0:7b:eb:bc:11:16:b5:3a:27:04:89:df: b3:43:37:db:4c:3f:bf:64:e1:15:81:f6:1d:c5:ed: b3:95:75:32:31:a7:ca:20:2e:b1:f9:45:27:b1:b1: 88:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6B:32:24:79:AA:DF:2D:3C:FD:3E:14:A8:F0:4F:53:6E:CE:EA:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/a7c7708c-a8b9-3ab8-be88-97548bbc3121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl X509v3 Authority Key Identifier: keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer sbgp-ipAddrBlock: critical IPv4: 174.137.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:6f:8c:3b:ec:b9:6a:9b:99:d4:90:72:98:48:ce:a1:96:9c: 29:b6:b9:36:17:b2:ad:9d:a3:48:bf:cf:79:0e:af:eb:5a:7e: 7f:f7:84:b6:b3:1b:2c:2c:5a:f4:c0:b8:16:db:24:95:12:e1: 6a:8d:08:f1:7e:1a:08:38:71:09:14:b1:55:72:9f:6d:2c:e5: cd:72:58:8b:1a:fb:4b:96:3a:e3:11:54:69:1f:9a:2d:b3:66: a1:5e:ee:45:01:47:b0:54:d8:7b:5a:c0:3b:6b:42:f8:ab:45: 1c:5a:de:dc:7d:00:ce:07:65:de:2a:02:5b:f6:81:8e:75:a2: 08:db:cf:8f:a4:bc:7e:b0:9d:39:42:55:b2:3f:af:86:d1:09: a3:a4:43:68:32:85:e5:af:02:74:f3:50:00:57:29:01:bd:f9: 81:0b:93:e1:f4:17:ca:a8:f5:bf:5a:09:73:9e:51:df:2f:96: 31:10:6c:54:7b:44:38:bc:c4:e3:07:ce:96:2e:28:1b:9e:62: b7:85:22:c0:d6:fa:96:19:e3:7d:ed:2b:33:43:de:3b:1e:8d: 1c:a4:b7:75:c1:6a:7f:5f:10:c8:03:6c:a0:c8:f0:e5:3a:08: db:31:e8:a4:71:77:24:3b:31:9c:56:e2:a2:59:ea:da:56:2b: 63:19:8e:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdMe9qTieCxOCoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWVjMDg2ZTItMzA1NC00YjM5LWFjNjktNmY3NDUzZWQx ODhmMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NjUyY2NmMmEtZmQwZi00N2NjLWJmYmEtZDU2M2MyNjhiYmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkxMZUhX47hFf/CB+UB6dBftKsh/KglCROa3 nXXGxzY13GLzaLOXSU9BdrP9coZOcqQpOTOLqaahd/1aA5O5+q9O//8hDt1jEgkJ uEyry7+/rh0+pux7HR/OkMJRn7oX1VljfzFvvocVfO3wPoVYwj82yqRWQpwrn5ZT 4PAe3/1cCmOPcg9OiPNMcocwZdI/blaU+D1fRifM1w4tnZz8wa/imUi3gzYBoPAj nVbmgnf0HXY038NatwqPnHV9IiLy5bh4OVFQVlZHihxYL16pwOnyFkage+u8ERa1 OicEid+zQzfbTD+/ZOEVgfYdxe2zlXUyMafKIC6x+UUnsbGIXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlrMiR5qt8tPP0+FKjwT1NuzuoPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMw ODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0NTNlZDE4OGYvYTdjNzcwOGMtYThiOS0z YWI4LWJlODgtOTc1NDhiYmMzMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWVjMDg2ZTItMzA1NC00YjM5LWFj NjktNmY3NDUzZWQxODhmLzFlYzA4NmUyLTMwNTQtNGIzOS1hYzY5LTZmNzQ1M2Vk MTg4Zi5jcmwwHwYDVR0jBBgwFoAUs5ge2ktB1FAXDDXcH9pAYauvSX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMwODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0 NTNlZDE4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArol3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdvjDvsuWqbmdSQcphIzqGWnCm2uTYXsq2do0i/z3kOr+tafn/3hLaz GywsWvTAuBbbJJUS4WqNCPF+Ggg4cQkUsVVyn20s5c1yWIsa+0uWOuMRVGkfmi2z ZqFe7kUBR7BU2HtawDtrQvirRRxa3tx9AM4HZd4qAlv2gY51ogjbz4+kvH6wnTlC VbI/r4bRCaOkQ2gyheWvAnTzUABXKQG9+YELk+H0F8qo9b9aCXOeUd8vljEQbFR7 RDi8xOMHzpYuKBueYreFIsDW+pYZ433tKzND3jsejRykt3XBan9fEMgDbKDI8OU6 CNsx6KRxdyQ7MZxW4qJZ6tpWK2MZjvM= -----END CERTIFICATE-----Generated at Fri Mar 27 08:31:37 2026 by rpki-client