$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/68f97bfc-bd88-3cb6-bfdf-a37eb17bcd59.roa File: 68f97bfc-bd88-3cb6-bfdf-a37eb17bcd59.roa (raw, json) Hash identifier: g3PVGT89vz4nwcJ8LR1nVZMQZSi/OHqRCFvA655+MsM= Subject key identifier: 3E:9C:05:F5:82:7F:BA:4A:7B:D5:D6:FD:04:95:5E:35:17:A1:96:D1 Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584DCC6064B2C7C4266136780A40 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/68f97bfc-bd88-3cb6-bfdf-a37eb17bcd59.roa Signing time: Mon 11 May 2026 13:00:31 +0000 ROA not before: Mon 11 May 2026 13:00:31 +0000 ROA not after: Sun 09 Aug 2026 13:00:31 +0000 asID: 22142 IP address blocks: 170.186.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cc:60:64:b2:c7:c4:26:61:36:78:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: May 11 13:00:31 2026 GMT Not After : Aug 9 13:00:31 2026 GMT Subject: CN=474d5533-7e98-44e0-b992-d715d8b2dbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5c:41:87:ac:4e:cd:2c:90:b4:c6:67:69:0c: 84:54:d7:70:82:54:22:43:e2:22:34:50:9c:dc:f8: 15:d9:72:ab:30:fa:06:ed:77:b3:04:8e:03:20:8c: 00:a3:c1:a7:20:d0:28:ee:41:cd:8d:5e:44:87:b5: 2c:a7:04:14:7c:12:cb:6d:02:ab:d7:6c:69:90:bf: 91:4e:cb:e4:d8:d8:a5:e2:c4:5c:37:04:27:4f:7f: 22:43:7c:06:96:c6:98:bd:b7:a1:38:f7:b4:9f:bf: 0d:a7:9f:01:63:05:2b:87:72:68:7b:9b:e4:69:9d: d0:d4:31:4c:fd:4c:47:51:33:e7:01:61:09:e8:2a: 89:b2:54:b5:9a:44:a7:5a:78:9b:ed:be:a2:53:57: 25:a6:49:ff:c2:c3:22:83:f3:6d:f1:29:ea:c8:6c: ba:aa:74:4b:5c:b0:61:9a:d1:74:0a:37:64:fb:23: 09:8c:8c:43:be:a0:7d:38:a0:c3:fa:e0:b6:e0:77: 35:eb:e5:3d:1d:dd:9c:c5:dd:6e:38:38:d1:8d:a5: af:12:41:91:5d:8b:84:32:7e:df:15:72:9c:70:90: 83:5c:74:bb:56:0f:4d:15:25:f9:a6:d8:b2:f7:1e: 57:38:e0:bf:3b:e8:7a:99:37:9f:18:67:92:48:a1: 07:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9C:05:F5:82:7F:BA:4A:7B:D5:D6:FD:04:95:5E:35:17:A1:96:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/68f97bfc-bd88-3cb6-bfdf-a37eb17bcd59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 170.186.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:8d:cb:a1:4d:99:eb:53:d3:ca:6e:a3:84:1f:b7:a7:95:11: c2:17:a1:50:f9:40:e1:f0:89:e0:be:e5:ff:83:70:31:70:d9: 09:e8:e4:e0:36:01:c7:32:7d:8f:b8:dd:82:55:ee:26:f0:62: 38:f9:99:3e:a5:b8:f4:1b:96:97:50:4e:27:51:95:50:04:fc: 77:7d:80:f1:42:cd:60:33:b8:24:b7:a6:42:96:79:aa:cc:00: 40:79:5c:a6:dd:55:2b:7a:e9:a5:0b:f9:95:4c:6e:78:a7:72: 75:87:9e:ab:9b:ec:93:e5:89:31:d7:a0:e9:b3:ab:92:f9:46: 46:24:ab:8a:87:1a:e4:ec:fd:23:b0:a2:11:1e:89:c6:70:0d: 59:e0:0c:89:3c:31:c7:a5:14:13:da:e6:f6:b2:91:c4:ff:ec: fb:88:26:7e:d2:f3:ea:bc:ca:d6:3c:1a:1f:73:a2:50:84:64: f2:38:16:24:c0:e8:9c:fb:0c:73:fc:d4:8f:d4:a4:3e:c7:6c: 58:a1:06:66:87:fe:0a:7a:79:d6:95:04:1e:6e:6d:b1:88:b6: 1c:33:0d:dd:e1:cb:f7:d2:ea:2a:d6:8c:62:23:6f:bd:bd:e6: 06:50:a1:86:95:92:2a:75:a3:97:04:1c:3f:0b:6f:ae:3b:65: cf:1c:6d:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3MYGSyx8QmYTZ4CkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI2MDUxMTEzMDAzMVoXDTI2MDgwOTEzMDAzMVowLzEtMCsGA1UEAxMk NDc0ZDU1MzMtN2U5OC00NGUwLWI5OTItZDcxNWQ4YjJkYmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlxBh6xOzSyQtMZnaQyEVNdwglQiQ+IiNFCc 3PgV2XKrMPoG7XezBI4DIIwAo8GnINAo7kHNjV5Eh7UspwQUfBLLbQKr12xpkL+R Tsvk2Nil4sRcNwQnT38iQ3wGlsaYvbehOPe0n78Np58BYwUrh3Joe5vkaZ3Q1DFM /UxHUTPnAWEJ6CqJslS1mkSnWnib7b6iU1clpkn/wsMig/Nt8SnqyGy6qnRLXLBh mtF0Cjdk+yMJjIxDvqB9OKDD+uC24Hc16+U9Hd2cxd1uODjRjaWvEkGRXYuEMn7f FXKccJCDXHS7Vg9NFSX5ptiy9x5XOOC/O+h6mTefGGeSSKEHNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6cBfWCf7pKe9XW/QSVXjUXoZbRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvNjhmOTdiZmMtYmQ4OC0z Y2I2LWJmZGYtYTM3ZWIxN2JjZDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrqaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmNy6FNmetT08puo4Qft6eVEcIXoVD5QOHwieC+5f+DcDFw2Qno5OA2 AccyfY+43YJV7ibwYjj5mT6luPQblpdQTidRlVAE/Hd9gPFCzWAzuCS3pkKWearM AEB5XKbdVSt66aUL+ZVMbnincnWHnqub7JPliTHXoOmzq5L5RkYkq4qHGuTs/SOw ohEeicZwDVngDIk8McelFBPa5vaykcT/7PuIJn7S8+q8ytY8Gh9zolCEZPI4FiTA 6Jz7DHP81I/UpD7HbFihBmaH/gp6edaVBB5ubbGIthwzDd3hy/fS6irWjGIjb729 5gZQoYaVkip1o5cEHD8Lb647Zc8cbT8= -----END CERTIFICATE-----Generated at Wed May 13 15:01:09 2026 by rpki-client