$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/cd124e97-9822-3851-8c41-a26a1b62603f.roa File: cd124e97-9822-3851-8c41-a26a1b62603f.roa (raw, json) Hash identifier: z6/jBjpgN3klANnkLkVPU//rBDPq7jr5zOF79bw07xE= Subject key identifier: A2:EA:89:BE:20:37:6C:7C:97:2D:E4:D0:76:89:C1:E9:CF:40:A7:F9 Certificate issuer: /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Certificate serial: 010D0C9F4328584D465F95F399F01761B11B5B40 Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/cd124e97-9822-3851-8c41-a26a1b62603f.roa Signing time: Tue 24 Mar 2026 13:00:41 +0000 ROA not before: Tue 24 Mar 2026 13:00:41 +0000 ROA not after: Mon 22 Jun 2026 13:00:41 +0000 asID: 14555 IP address blocks: 170.10.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:5f:95:f3:99:f0:17:61:b1:1b:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Validity Not Before: Mar 24 13:00:41 2026 GMT Not After : Jun 22 13:00:41 2026 GMT Subject: CN=03ee9517-6c29-486b-b207-02f19f176fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:07:83:6b:0e:2b:02:71:dd:35:87:5e:3f:6f: 64:f9:c1:5f:53:01:2e:cb:66:d9:9d:68:ca:59:12: f6:df:25:93:23:81:bf:e4:f7:1a:b9:46:e2:cf:03: 77:e3:cc:22:96:66:cd:da:ea:b4:88:de:6c:da:e1: f8:bc:6f:b4:a2:0e:9d:e4:7f:08:14:ed:0f:29:17: 75:cb:8b:33:07:de:36:25:32:bc:29:bd:b3:49:f3: 1d:98:8c:7f:93:bf:52:bf:78:bf:72:00:9a:a9:3e: 01:57:27:3f:b2:f5:71:12:ad:1e:b7:6c:42:86:c8: fe:88:3a:4b:f2:2d:85:7c:47:22:6f:3b:e1:e3:65: df:a2:f3:b2:e2:5d:d0:ec:52:96:e8:82:ac:44:04: ad:c3:9e:be:52:69:0b:5d:c6:a1:7f:e4:6f:0f:6d: 5e:6f:73:15:df:8f:09:c7:3d:8b:dc:33:76:f8:84: 2f:23:8b:35:14:34:d7:7b:90:35:fb:27:ed:1f:08: 01:a6:38:65:f6:22:c7:6a:36:6d:e3:31:45:41:36: 40:27:05:40:5e:54:7c:48:7d:c7:39:c2:69:e7:7e: f9:6b:47:c5:11:e8:e9:56:9a:e0:29:59:4b:15:94: d4:8a:be:cf:62:8f:9a:e4:3f:dc:91:65:46:46:81: b0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EA:89:BE:20:37:6C:7C:97:2D:E4:D0:76:89:C1:E9:CF:40:A7:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/cd124e97-9822-3851-8c41-a26a1b62603f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl X509v3 Authority Key Identifier: keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer sbgp-ipAddrBlock: critical IPv4: 170.10.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:25:77:54:7e:ff:51:ec:df:32:b4:5a:4d:c6:79:a9:b1:5b: 56:93:b1:37:d1:94:fe:4d:c7:52:75:e0:5c:cd:3b:e0:fe:22: 38:11:ef:18:93:2a:58:97:6b:f6:0a:46:61:78:20:11:9e:da: 32:19:12:c9:ef:cb:9b:18:83:c5:d7:85:0f:4e:a9:16:4b:8d: 0b:2d:ad:dd:a7:95:1f:f7:81:ee:7c:73:8f:2d:cf:b3:92:3d: 70:48:d8:97:d2:da:8c:b2:5c:55:f3:88:ce:8b:21:5e:08:3a: 85:7a:35:a5:4b:80:de:f3:3b:3e:aa:5f:c7:56:bd:3a:cf:68: f0:a2:bb:27:ae:b8:cf:39:7f:d8:f5:26:39:bd:44:46:9a:56: ad:da:19:a5:74:f3:dc:bf:f6:44:7b:b0:bb:26:4e:19:1d:6a: 28:b0:76:ac:43:26:fa:ef:ab:f8:5e:70:ba:42:c6:66:86:97: 29:e6:dc:fc:02:58:fd:74:4e:7f:8c:b9:ba:6e:10:6a:e2:8a: 1f:7c:20:a2:aa:c6:48:0e:f7:6a:6b:af:c0:e6:5e:aa:95:04: f3:7d:be:4e:d6:da:45:3f:79:a0:62:e3:8c:d5:56:6b:fc:da: 3f:bd:e2:f2:3e:95:f0:3b:f5:c7:d8:39:51:b1:ad:0c:fe:f1: 87:c4:13:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GX5XzmfAXYbEbW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IxNDM3MTMtNzkyMy00ZTRkLTk0NzYtYjhlNWNlMWNh OWM5MB4XDTI2MDMyNDEzMDA0MVoXDTI2MDYyMjEzMDA0MVowLzEtMCsGA1UEAxMk MDNlZTk1MTctNmMyOS00ODZiLWIyMDctMDJmMTlmMTc2ZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgeDaw4rAnHdNYdeP29k+cFfUwEuy2bZnWjK WRL23yWTI4G/5PcauUbizwN348wilmbN2uq0iN5s2uH4vG+0og6d5H8IFO0PKRd1 y4szB942JTK8Kb2zSfMdmIx/k79Sv3i/cgCaqT4BVyc/svVxEq0et2xChsj+iDpL 8i2FfEcibzvh42XfovOy4l3Q7FKW6IKsRAStw56+UmkLXcahf+RvD21eb3MV348J xz2L3DN2+IQvI4s1FDTXe5A1+yftHwgBpjhl9iLHajZt4zFFQTZAJwVAXlR8SH3H OcJp5375a0fFEejpVprgKVlLFZTUir7PYo+a5D/ckWVGRoGwBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLqib4gN2x8ly3k0HaJwenPQKf5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0 MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1Y2UxY2E5YzkvY2QxMjRlOTctOTgyMi0z ODUxLThjNDEtYTI2YTFiNjI2MDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2IxNDM3MTMtNzkyMy00ZTRkLTk0 NzYtYjhlNWNlMWNhOWM5LzdiMTQzNzEzLTc5MjMtNGU0ZC05NDc2LWI4ZTVjZTFj YTljOS5jcmwwHwYDVR0jBBgwFoAUYdUy6W27yi6kNGeQ5T4cjK+y2TAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1 Y2UxY2E5YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwld1R+/1Hs3zK0Wk3GeamxW1aTsTfRlP5Nx1J14FzNO+D+IjgR7xiT KliXa/YKRmF4IBGe2jIZEsnvy5sYg8XXhQ9OqRZLjQstrd2nlR/3ge58c48tz7OS PXBI2JfS2oyyXFXziM6LIV4IOoV6NaVLgN7zOz6qX8dWvTrPaPCiuyeuuM85f9j1 Jjm9REaaVq3aGaV089y/9kR7sLsmThkdaiiwdqxDJvrvq/hecLpCxmaGlynm3PwC WP10Tn+MubpuEGriih98IKKqxkgO92prr8DmXqqVBPN9vk7W2kU/eaBi44zVVmv8 2j+94vI+lfA79cfYOVGxrQz+8YfEE2k= -----END CERTIFICATE-----Generated at Thu Mar 26 13:39:12 2026 by rpki-client