$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/ec2fa4f8-a7b3-38e2-aa1a-85221290d1dd.roa File: ec2fa4f8-a7b3-38e2-aa1a-85221290d1dd.roa (raw, json) Hash identifier: lmiSrrhB9jw5G3PEqi3rqb/o9i1IwDmiTb9VhD99PPI= Subject key identifier: C1:ED:42:56:B1:AC:66:82:01:27:CA:F2:17:5B:29:09:9D:7F:5D:C9 Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584D19B4B38BDDED4ACDEF1A4A40 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/ec2fa4f8-a7b3-38e2-aa1a-85221290d1dd.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 11273 IP address blocks: 170.186.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:b3:8b:dd:ed:4a:cd:ef:1a:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=a1ca0103-54dd-4d08-bb43-3554c140fca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ba:b9:96:17:ac:fc:81:e8:be:63:6c:f0:db: ad:32:a5:08:29:56:d9:98:e6:36:56:af:43:64:b5: a6:6d:35:04:79:88:cd:80:cd:3f:0e:d6:1a:ff:84: 7e:27:3a:fa:89:d3:40:2e:29:6f:87:80:b5:ec:6e: 8f:1a:e1:5e:d7:5f:3f:5c:b1:d8:cd:99:3b:01:16: 07:81:b1:da:34:da:5f:e4:b4:9d:a8:f8:ac:ad:f8: 84:6d:4b:33:88:83:00:ce:d6:95:ed:1b:ba:62:85: f4:6f:4c:26:31:1c:a0:f5:24:f7:e2:d3:24:04:a1: 1c:3e:3f:e9:c8:df:a3:af:53:28:24:d1:06:78:e2: 9e:d1:4e:03:72:ba:6c:f4:e8:e8:49:82:1a:73:b4: 7d:fb:8f:a8:10:52:09:8a:a4:88:c3:1f:0b:4a:96: f0:68:5c:2b:20:57:ee:71:df:b6:60:a6:65:1a:86: e0:1d:8f:12:ae:8c:f3:b2:a5:68:1d:0e:73:79:2f: b7:5e:24:32:e8:56:e7:68:b9:c6:5e:cd:97:e2:63: 37:2a:2a:c5:34:67:63:d5:81:5d:06:c0:a9:5c:54: c9:b9:03:5a:39:44:7c:0d:b4:36:75:40:f5:d6:e4: e7:6d:fd:a0:04:4d:50:26:c1:3e:5b:2e:dd:db:aa: 88:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:ED:42:56:B1:AC:66:82:01:27:CA:F2:17:5B:29:09:9D:7F:5D:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/ec2fa4f8-a7b3-38e2-aa1a-85221290d1dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 170.186.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:2c:da:a3:41:3d:44:24:68:0f:35:6f:b5:6f:16:fc:22:8e: 34:22:26:dc:a0:32:22:82:91:44:35:d5:3a:f4:ce:fa:43:58: e7:0c:f1:eb:08:25:fa:3d:4e:01:24:26:96:1b:9b:4e:b1:65: 5f:54:1a:08:35:cb:dc:15:be:5c:c7:df:0c:f6:c9:b5:6e:f5: 02:78:30:50:85:51:86:bc:99:84:29:16:1c:cb:53:69:27:ed: 42:a0:fd:09:42:7f:c5:0d:8d:fa:b7:a8:cf:cd:44:b8:2a:bf: 76:85:34:c9:9c:5e:15:4c:c3:71:8e:f8:16:a2:aa:e8:fd:58: 55:a8:d6:81:b7:91:66:20:7e:72:5e:1f:68:d0:a0:33:dd:2a: c2:38:18:61:62:9d:9f:e5:5d:ad:bd:c5:7d:23:30:86:6a:f3: cf:35:f0:12:6b:7e:b2:db:42:ab:60:0a:25:de:e4:0d:ff:7d: d5:d9:7e:a5:22:32:79:72:4e:80:dc:d4:64:e3:70:ec:da:e9: 98:aa:6d:9a:8e:33:7f:d1:af:d1:cf:9f:f9:b5:80:ea:24:6b: 12:3f:2f:67:23:42:fe:2d:ac:2c:44:c9:82:37:6b:5b:4b:bc: 64:dc:ca:47:ed:b2:4f:1b:67:ab:37:55:c6:6d:d9:c7:7d:71: 4e:94:d9:ac -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0ZtLOL3e1Kze8aSkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk YTFjYTAxMDMtNTRkZC00ZDA4LWJiNDMtMzU1NGMxNDBmY2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bq5lhes/IHovmNs8NutMqUIKVbZmOY2Vq9D ZLWmbTUEeYjNgM0/DtYa/4R+Jzr6idNALilvh4C17G6PGuFe118/XLHYzZk7ARYH gbHaNNpf5LSdqPisrfiEbUsziIMAztaV7Ru6YoX0b0wmMRyg9ST34tMkBKEcPj/p yN+jr1MoJNEGeOKe0U4Dcrps9OjoSYIac7R9+4+oEFIJiqSIwx8LSpbwaFwrIFfu cd+2YKZlGobgHY8SrozzsqVoHQ5zeS+3XiQy6FbnaLnGXs2X4mM3KirFNGdj1YFd BsCpXFTJuQNaOUR8DbQ2dUD11uTnbf2gBE1QJsE+Wy7d26qI+wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMHtQlaxrGaCASfK8hdbKQmdf13JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvZWMyZmE0ZjgtYTdiMy0z OGUyLWFhMWEtODUyMjEyOTBkMWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqrowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAgCzao0E9RCRoDzVvtW8W/CKONCIm3KAyIoKRRDXVOvTO+kNY5wzx6wgl +j1OASQmlhubTrFlX1QaCDXL3BW+XMffDPbJtW71AngwUIVRhryZhCkWHMtTaSft QqD9CUJ/xQ2N+reoz81EuCq/doU0yZxeFUzDcY74FqKq6P1YVajWgbeRZiB+cl4f aNCgM90qwjgYYWKdn+Vdrb3FfSMwhmrzzzXwEmt+sttCq2AKJd7kDf991dl+pSIy eXJOgNzUZONw7NrpmKptmo4zf9Gv0c+f+bWA6iRrEj8vZyNC/i2sLETJgjdrW0u8 ZNzKR+2yTxtnqzdVxm3Zx31xTpTZrA== -----END CERTIFICATE-----Generated at Thu Mar 26 05:20:30 2026 by rpki-client