$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/cb45d63c-d1bd-38a2-ad3f-6adfb6620306.roa File: cb45d63c-d1bd-38a2-ad3f-6adfb6620306.roa (raw, json) Hash identifier: Tw+vq1X6w8/Vf/ik2JMr/o9HGwateJi6YjNrJoE1/y0= Subject key identifier: 36:C6:20:79:81:20:3B:47:DE:DF:C6:9E:14:C6:B5:62:84:D0:74:20 Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Certificate serial: 010D0C9F4328584D40CA32FDF6A007D7DCC7F680 Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/cb45d63c-d1bd-38a2-ad3f-6adfb6620306.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 202 IP address blocks: 170.188.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:32:fd:f6:a0:07:d7:dc:c7:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=ecda4866-90b9-4b13-b488-22ca4c1daf71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f0:e4:c2:61:0d:39:68:1c:5b:7b:3e:a6:0a: 16:a8:22:55:a8:69:77:97:74:90:fc:73:64:00:16: 60:82:19:e7:ce:a7:75:62:83:1f:d8:22:08:01:ba: cf:03:32:48:cb:18:88:ba:8d:7a:50:46:a1:d1:08: 2f:18:5f:f8:fe:ac:1b:ac:22:91:cc:ea:13:46:59: 04:98:cc:d6:5f:5a:28:fd:12:92:6c:9c:7c:e2:dc: e7:7e:fe:9b:fa:36:3f:95:9a:d0:2e:6a:40:dd:53: f0:7a:81:31:dc:cf:6d:72:64:d4:4d:71:6d:a8:a4: f1:d5:6a:68:94:9d:73:3e:90:cf:4f:0a:ee:97:01: 02:fb:bd:8f:ea:0e:5f:e1:b6:85:d9:bd:2f:3d:d6: 93:5b:a2:5e:c6:a1:30:25:91:c6:c3:af:29:f8:41: 75:e8:48:f0:02:b7:f8:ee:e5:32:8a:0f:13:87:67: 97:3a:7e:0f:82:ec:d3:12:67:1a:c4:46:73:b0:23: 35:6e:b9:48:ce:1d:8b:7a:00:b8:b7:d8:5b:75:19: 7a:5d:d2:19:b1:63:c5:24:30:c5:51:0c:c5:ab:f1: 51:17:7e:c1:ed:0d:06:18:f2:87:86:d5:39:f3:ee: f5:0c:1d:19:6b:c5:74:43:ee:b8:a8:bc:5c:1f:b4: f2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C6:20:79:81:20:3B:47:DE:DF:C6:9E:14:C6:B5:62:84:D0:74:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/cb45d63c-d1bd-38a2-ad3f-6adfb6620306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl X509v3 Authority Key Identifier: keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer sbgp-ipAddrBlock: critical IPv4: 170.188.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:c0:13:e6:e0:06:55:43:1a:f0:40:dd:cd:ed:8a:d1:72:6e: bb:92:dd:77:cf:23:f5:97:d2:25:92:03:2c:39:31:d6:a4:e7: ee:a2:14:a8:f1:f5:e7:0f:d6:a0:fc:f7:6e:c0:75:ef:8e:82: 47:3a:dd:b9:cf:10:48:f3:0c:f5:a3:78:bb:ed:0d:b1:97:8d: a0:b9:3f:f8:80:13:c0:a5:b7:36:a7:19:a3:fb:cc:b9:73:f3: b5:0b:72:02:b9:09:1b:ae:d4:49:ee:d6:07:ed:34:80:ff:31: 14:3f:6e:fc:1f:e8:05:e9:c6:48:01:b4:0a:5d:03:6d:cb:30: 96:d1:69:f6:0a:1d:32:60:76:3c:64:b5:36:92:09:53:3f:57: 13:7c:2b:83:b3:eb:ce:ad:c3:9a:f6:49:a5:a9:02:6d:0c:47: 98:1d:6a:11:7a:12:91:f6:1d:bf:2f:9c:94:13:0d:03:b6:4d: 4e:6a:af:4a:cf:a2:17:ad:f3:85:fe:fa:7c:76:d2:ea:41:fe: 8f:aa:bb:5f:e1:f9:77:58:b6:2a:63:cd:e6:16:5b:4d:8e:3c: ab:d8:45:c7:15:e9:f1:c3:d9:41:fc:5c:66:bf:ac:6f:7b:0f: 52:ac:46:84:8a:86:4c:0e:aa:a8:7a:96:a9:58:0c:fb:d3:cf: b0:d4:87:b9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1AyjL99qAH19zH9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3 N2YxMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk ZWNkYTQ4NjYtOTBiOS00YjEzLWI0ODgtMjJjYTRjMWRhZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPDkwmENOWgcW3s+pgoWqCJVqGl3l3SQ/HNk ABZgghnnzqd1YoMf2CIIAbrPAzJIyxiIuo16UEah0QgvGF/4/qwbrCKRzOoTRlkE mMzWX1oo/RKSbJx84tznfv6b+jY/lZrQLmpA3VPweoEx3M9tcmTUTXFtqKTx1Wpo lJ1zPpDPTwrulwEC+72P6g5f4baF2b0vPdaTW6JexqEwJZHGw68p+EF16EjwArf4 7uUyig8Th2eXOn4PguzTEmcaxEZzsCM1brlIzh2LegC4t9hbdRl6XdIZsWPFJDDF UQzFq/FRF37B7Q0GGPKHhtU58+71DB0Za8V0Q+64qLxcH7TymQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDbGIHmBIDtH3t/GnhTGtWKE0HQgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1 MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvY2I0NWQ2M2MtZDFiZC0z OGEyLWFkM2YtNmFkZmI2NjIwMzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1 NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0 ZWUyNTc3ZjEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqrwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAecAT5uAGVUMa8EDdze2K0XJuu5Ldd88j9ZfSJZIDLDkx1qTn7qIUqPH1 5w/WoPz3bsB1746CRzrduc8QSPMM9aN4u+0NsZeNoLk/+IATwKW3NqcZo/vMuXPz tQtyArkJG67USe7WB+00gP8xFD9u/B/oBenGSAG0Cl0DbcswltFp9godMmB2PGS1 NpIJUz9XE3wrg7Przq3DmvZJpakCbQxHmB1qEXoSkfYdvy+clBMNA7ZNTmqvSs+i F63zhf76fHbS6kH+j6q7X+H5d1i2KmPN5hZbTY48q9hFxxXp8cPZQfxcZr+sb3sP UqxGhIqGTA6qqHqWqVgM+9PPsNSHuQ== -----END CERTIFICATE-----Generated at Thu Mar 26 16:25:10 2026 by rpki-client