$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa File: 2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa (raw, json) Hash identifier: NVBuClW1OY0auT/nlvG01sQR/itq/GtrH3/Vt8NV+JE= Subject key identifier: 61:27:DB:21:ED:B3:C4:35:FE:B8:6A:63:A9:F1:B6:D2:68:72:5B:A5 Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F4328584DA8157BEC8A4ABCE924E2CB80 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 17044 IP address blocks: 170.200.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:7b:ec:8a:4a:bc:e9:24:e2:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=9bf1c686-c179-49a5-b620-2fa389d538cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1c:6d:ae:57:0d:1d:76:b0:92:ba:17:2b:68: fc:9b:93:d6:80:60:7d:cd:28:53:08:d7:3c:b2:2a: 99:ec:94:12:f5:8c:71:6e:de:72:ac:02:0d:b3:57: 56:4d:e6:b1:51:9c:9e:ee:f8:4c:10:c0:e2:00:0c: 65:16:69:a3:29:0c:e4:e7:51:9c:25:b3:ca:9d:9d: 6a:20:73:5d:75:01:34:07:d6:0b:87:51:08:b1:f9: e0:f1:92:53:e5:76:94:e2:36:a2:48:5e:b9:0c:4d: ac:4b:e3:d4:ab:87:7d:a9:cf:78:6b:85:08:21:55: aa:81:cd:0f:f1:ed:4f:6b:da:a5:1e:66:d1:93:16: 25:94:53:70:2b:a7:ac:e3:4e:6a:ba:95:35:a4:27: 0b:3d:77:38:de:2b:66:ed:57:50:03:f7:93:58:a2: d2:8d:76:c5:b2:c8:66:45:d8:f3:84:39:0c:9c:e1: d9:67:94:78:02:b6:b6:33:6e:eb:ae:1e:df:9f:14: fe:66:32:fb:3c:45:e4:78:13:2c:17:60:74:5b:45: 0c:31:16:2b:1c:b2:68:62:61:01:1d:84:84:f7:0b: 9b:6c:95:13:18:9c:15:81:e5:e7:b4:bf:31:9c:77: 3c:2a:78:39:c9:b6:6e:e7:47:19:85:2a:36:74:8d: e6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:27:DB:21:ED:B3:C4:35:FE:B8:6A:63:A9:F1:B6:D2:68:72:5B:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ab:4c:2e:d6:c5:c0:d8:b4:c0:b0:dc:01:ba:2a:2b:0d:36: 49:10:2a:7d:0c:85:cc:04:28:11:86:0f:7a:4e:1d:27:b4:06: fa:ce:df:d3:cc:93:58:5a:11:1f:81:61:06:f3:1d:ed:5b:dd: 6b:a9:40:5b:02:68:ec:1c:30:82:43:0a:45:a5:1e:39:4d:8c: 15:36:dc:38:a1:f4:eb:e1:d7:06:d9:8c:10:15:26:a3:76:75: 21:14:7a:02:66:bd:ab:1a:3f:ab:83:3b:35:68:ff:a6:86:f1: 7a:a1:ed:38:92:59:08:49:d5:a2:3e:5c:47:62:78:92:f2:cb: ca:4e:65:6e:bd:24:6f:63:39:d0:2a:07:da:95:96:d5:79:19: 29:8a:24:ea:8c:ff:ca:74:64:b3:55:49:0d:c5:05:3e:86:b4: 34:75:2c:c6:72:d4:3e:60:7f:ae:07:3d:9b:45:36:d2:4b:0a: 17:e5:39:41:60:76:77:cc:ad:aa:91:87:af:ff:0e:08:37:18: ff:e8:53:f3:4f:60:b8:41:57:5c:4f:68:5e:c4:83:b5:64:21: a7:1d:4c:1c:3c:a0:83:8a:5c:19:04:b3:ba:45:ba:ce:45:a8: 66:1f:c8:77:62:4b:f4:56:01:27:ff:2a:98:8f:f5:b6:cf:bf: 0f:aa:02:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFXvsikq86STiy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk OWJmMWM2ODYtYzE3OS00OWE1LWI2MjAtMmZhMzg5ZDUzOGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxxtrlcNHXawkroXK2j8m5PWgGB9zShTCNc8 siqZ7JQS9Yxxbt5yrAINs1dWTeaxUZye7vhMEMDiAAxlFmmjKQzk51GcJbPKnZ1q IHNddQE0B9YLh1EIsfng8ZJT5XaU4jaiSF65DE2sS+PUq4d9qc94a4UIIVWqgc0P 8e1Pa9qlHmbRkxYllFNwK6es405qupU1pCcLPXc43itm7VdQA/eTWKLSjXbFsshm RdjzhDkMnOHZZ5R4Ara2M27rrh7fnxT+ZjL7PEXkeBMsF2B0W0UMMRYrHLJoYmEB HYSE9wubbJUTGJwVgeXntL8xnHc8Kng5ybZu50cZhSo2dI3mJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEn2yHts8Q1/rhqY6nxttJoclulMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvMmZmZTdmYTMtZTNlOS0z ZTkyLWI5MGUtMjcwNDcxYTg5ZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsgwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKrTC7WxcDYtMCw3AG6KisNNkkQKn0MhcwEKBGGD3pOHSe0BvrO39PM k1haER+BYQbzHe1b3WupQFsCaOwcMIJDCkWlHjlNjBU23Dih9Ovh1wbZjBAVJqN2 dSEUegJmvasaP6uDOzVo/6aG8Xqh7TiSWQhJ1aI+XEdieJLyy8pOZW69JG9jOdAq B9qVltV5GSmKJOqM/8p0ZLNVSQ3FBT6GtDR1LMZy1D5gf64HPZtFNtJLChflOUFg dnfMraqRh6//Dgg3GP/oU/NPYLhBV1xPaF7Eg7VkIacdTBw8oIOKXBkEs7pFus5F qGYfyHdiS/RWASf/KpiP9bbPvw+qAhM= -----END CERTIFICATE-----Generated at Wed May 13 11:06:47 2026 by rpki-client