$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/b8d23e08-eb0d-3e57-9ffc-aa63eadf01d5.roa File: b8d23e08-eb0d-3e57-9ffc-aa63eadf01d5.roa (raw, json) Hash identifier: 5+xxaMW0XsnUbERF15tJ4PnNtB1+KGUG2N3JppyoSvc= Subject key identifier: A9:0A:13:40:BD:B7:8E:9A:0B:BB:53:11:0E:97:45:13:A5:1B:78:E4 Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F4328584D24E0321BBBD1F8C7C280DE00 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/b8d23e08-eb0d-3e57-9ffc-aa63eadf01d5.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 36492 IP address blocks: 172.102.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:32:1b:bb:d1:f8:c7:c2:80:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=dfd70de7-7a39-4d23-be4a-f4385f39d673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b9:f1:f8:2f:26:d1:9e:c0:5a:8c:4d:ed:a2: aa:6a:7a:45:f9:18:dc:1e:0d:b3:78:06:c7:96:41: 74:83:15:a6:3e:bc:19:fe:1d:05:d1:48:cb:3a:52: db:e7:5b:f9:67:81:1d:e4:fe:aa:b5:7b:ec:7c:56: a4:d5:bc:a8:d4:c6:9f:bb:3d:7f:89:2e:44:e4:f5: fd:7d:2a:da:2a:53:58:bd:65:1e:90:2c:65:15:f8: af:92:16:b0:59:a0:29:30:ac:b4:82:b5:38:75:be: 2a:17:21:82:1a:68:b6:15:64:47:31:71:f3:88:5d: c8:5d:ae:7b:87:c4:ce:d6:87:0f:22:f1:d8:b0:5a: e3:12:02:db:9d:f9:ea:a0:1d:4c:29:ba:d7:a3:ad: 95:bf:43:b5:39:12:d2:86:5a:cd:99:41:49:e9:b0: f7:66:25:3d:63:d4:f7:59:bc:57:0b:e1:bc:9e:77: 87:b8:76:6e:29:22:da:3e:34:63:29:2d:e8:2e:98: f5:89:26:7f:14:c0:f4:f8:ab:0a:ac:ba:22:41:ac: 8b:92:44:8e:3b:e9:d3:ec:a0:8a:f9:ec:23:9b:29: f7:32:0a:a7:b9:dd:5a:3f:7b:ef:6a:f2:6d:c6:2d: 8b:d7:b6:70:ed:f9:88:6b:4b:44:ba:f1:b2:67:75: 30:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0A:13:40:BD:B7:8E:9A:0B:BB:53:11:0E:97:45:13:A5:1B:78:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/b8d23e08-eb0d-3e57-9ffc-aa63eadf01d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 172.102.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:d2:25:43:f8:4d:4e:ef:46:09:8a:90:2e:cd:6d:b2:89:b0: 8d:99:04:a4:1e:83:f5:6d:83:fd:1f:1f:9e:8b:fc:f0:a4:55: 99:41:04:4e:29:c5:18:8f:6f:6f:8a:bb:71:e1:ff:09:e0:50: cb:47:03:4b:e5:a7:17:1e:35:55:87:fe:a6:e9:d4:26:dd:0d: 9b:39:98:d7:aa:aa:28:4c:ce:de:c0:d9:67:64:5f:45:a5:0e: 53:2d:63:c1:93:f5:86:db:2d:26:17:35:d6:54:17:3a:33:1e: 72:0c:72:08:b8:b6:10:58:70:70:05:76:82:4d:db:58:b4:22: 1a:cb:45:15:5f:e6:85:d9:8e:53:ba:9a:e3:c5:e8:3b:48:93: ff:75:3f:f0:07:f1:a3:53:92:f5:53:23:a0:8a:0f:a1:c7:4c: e8:32:00:cc:77:a2:15:77:02:7f:98:5d:8c:b5:49:d8:ff:e1: 1e:cb:2a:d9:b1:e7:73:1d:18:67:88:9d:b9:72:af:56:dd:6f: 97:fe:02:e1:1f:a9:82:06:0a:5d:4b:a9:87:06:17:89:c8:bb: b9:3b:f4:db:16:49:6c:31:30:5f:15:dc:32:b0:98:d0:ea:36: 7b:54:61:f4:d1:f0:f2:6c:56:87:1c:79:a9:c3:b1:d0:55:8b: 6b:9b:62:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4DIbu9H4x8KA3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGZkNzBkZTctN2EzOS00ZDIzLWJlNGEtZjQzODVmMzlkNjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7nx+C8m0Z7AWoxN7aKqanpF+RjcHg2zeAbH lkF0gxWmPrwZ/h0F0UjLOlLb51v5Z4Ed5P6qtXvsfFak1byo1Mafuz1/iS5E5PX9 fSraKlNYvWUekCxlFfivkhawWaApMKy0grU4db4qFyGCGmi2FWRHMXHziF3IXa57 h8TO1ocPIvHYsFrjEgLbnfnqoB1MKbrXo62Vv0O1ORLShlrNmUFJ6bD3ZiU9Y9T3 WbxXC+G8nneHuHZuKSLaPjRjKS3oLpj1iSZ/FMD0+KsKrLoiQayLkkSOO+nT7KCK +ewjmyn3Mgqnud1aP3vvavJtxi2L17Zw7fmIa0tEuvGyZ3UwNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkKE0C9t46aC7tTEQ6XRROlG3jkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvYjhkMjNlMDgtZWIwZC0z ZTU3LTlmZmMtYWE2M2VhZGYwMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGYMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfSJUP4TU7vRgmKkC7NbbKJsI2ZBKQeg/Vtg/0fH56L/PCkVZlBBE4p xRiPb2+Ku3Hh/wngUMtHA0vlpxceNVWH/qbp1CbdDZs5mNeqqihMzt7A2WdkX0Wl DlMtY8GT9YbbLSYXNdZUFzozHnIMcgi4thBYcHAFdoJN21i0IhrLRRVf5oXZjlO6 muPF6DtIk/91P/AH8aNTkvVTI6CKD6HHTOgyAMx3ohV3An+YXYy1Sdj/4R7LKtmx 53MdGGeInblyr1bdb5f+AuEfqYIGCl1LqYcGF4nIu7k79NsWSWwxMF8V3DKwmNDq NntUYfTR8PJsVocceanDsdBVi2ubYi4= -----END CERTIFICATE-----Generated at Thu Mar 26 07:26:37 2026 by rpki-client