$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/b5934f7c-5b65-3efa-991f-cc82903aa949.roa File: b5934f7c-5b65-3efa-991f-cc82903aa949.roa (raw, json) Hash identifier: pBMrNwx54Rt+roegvQyPeU0e5ahE+LFkuC7xTz4kb4Y= Subject key identifier: 5C:AB:FD:6E:F1:5F:F2:02:88:3B:C1:D3:CA:DC:C6:49:86:24:2C:0F Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F4328584DC5659FC5C2236C8A3012B700 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/b5934f7c-5b65-3efa-991f-cc82903aa949.roa Signing time: Sat 09 May 2026 01:00:25 +0000 ROA not before: Sat 09 May 2026 01:00:25 +0000 ROA not after: Fri 07 Aug 2026 01:00:25 +0000 asID: 14618 IP address blocks: 170.200.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c5:65:9f:c5:c2:23:6c:8a:30:12:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: May 9 01:00:25 2026 GMT Not After : Aug 7 01:00:25 2026 GMT Subject: CN=7b07b2f1-4fac-4fe6-88a5-ad425cf7b534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cf:28:ca:18:5a:84:ef:4b:29:fa:12:41:ed: a2:a5:43:09:54:31:2e:13:52:dd:91:b8:2d:cb:c3: 01:8e:1f:4f:ab:bc:9b:79:55:d6:d6:66:87:ab:21: fb:c1:1a:b9:58:d4:a2:b6:df:36:85:e7:94:61:56: 35:5c:4b:ce:61:42:48:06:76:87:bb:6f:c1:99:d4: 90:6d:b0:65:84:02:cd:6e:f1:b9:68:59:4e:a8:1c: 40:6e:2d:bf:cb:3e:0f:14:30:6d:ec:3f:ff:d0:0b: 5e:e9:cb:92:93:21:db:94:93:d7:0d:a0:37:26:69: 5e:59:40:94:b6:16:01:c7:5a:a1:39:c1:c5:40:d4: 91:5e:6b:f3:9b:15:56:de:42:ff:73:dd:d9:fe:4c: b9:f1:bb:cb:dd:1e:1c:35:7e:d2:ab:7c:80:f3:40: be:5f:3d:a6:b5:03:b9:06:2f:4a:4b:9b:f9:62:4f: fc:f1:93:50:72:58:31:2a:cf:03:18:f9:73:fa:1f: 13:79:5c:47:34:75:2a:b8:20:21:eb:18:60:68:01: 12:32:bf:e6:c7:bd:39:91:31:ae:01:db:73:01:0b: 6f:b5:92:a9:18:c4:41:d3:69:b2:5f:32:85:23:aa: 33:23:15:be:56:9b:e4:54:b8:92:4d:ab:d2:03:c9: ae:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AB:FD:6E:F1:5F:F2:02:88:3B:C1:D3:CA:DC:C6:49:86:24:2C:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/b5934f7c-5b65-3efa-991f-cc82903aa949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:89:96:76:67:73:bf:76:cd:5f:12:10:38:10:8a:68:25:9e: d3:5a:26:25:dc:eb:35:45:50:71:fe:13:36:5e:4e:88:e7:4c: 37:7a:a0:db:23:5e:21:64:2b:a3:06:60:fe:f6:87:28:89:70: d8:f4:22:a1:67:c5:56:aa:02:85:30:2e:d3:ca:53:c8:00:b4: 90:fa:72:0a:77:5f:34:95:67:e1:44:8c:af:81:f2:59:d9:b4: fa:eb:61:1a:0f:a6:84:b8:ab:2a:81:1c:07:58:e7:e1:eb:fb: f4:a9:ed:f8:57:3b:23:6b:b3:98:66:ed:bf:ce:61:f0:32:15: 26:d3:44:cc:ff:3e:27:e6:94:18:28:8c:f9:b5:53:16:8a:fd: 38:39:d2:b2:11:7a:dc:aa:e2:a6:ff:dd:45:b2:0e:7a:4e:d6: bc:fe:28:1e:41:0b:3d:32:50:45:c4:82:e6:21:82:cf:83:10: 47:c2:8b:e3:d1:12:a3:d3:91:d7:6b:7d:59:7f:fe:75:b5:4c: 5a:7b:1f:e8:84:e7:09:7a:1c:61:88:4f:ac:8f:66:84:46:21: d8:63:55:01:9f:9d:62:b5:0c:89:52:aa:65:bc:2b:73:4c:96: d3:63:a3:38:27:96:54:0f:51:07:1e:f1:37:04:ca:03:74:8f: ee:b0:6c:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3FZZ/FwiNsijAStwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk N2IwN2IyZjEtNGZhYy00ZmU2LTg4YTUtYWQ0MjVjZjdiNTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM8oyhhahO9LKfoSQe2ipUMJVDEuE1Ldkbgt y8MBjh9Pq7ybeVXW1maHqyH7wRq5WNSitt82heeUYVY1XEvOYUJIBnaHu2/BmdSQ bbBlhALNbvG5aFlOqBxAbi2/yz4PFDBt7D//0Ate6cuSkyHblJPXDaA3JmleWUCU thYBx1qhOcHFQNSRXmvzmxVW3kL/c93Z/ky58bvL3R4cNX7Sq3yA80C+Xz2mtQO5 Bi9KS5v5Yk/88ZNQclgxKs8DGPlz+h8TeVxHNHUquCAh6xhgaAESMr/mx705kTGu AdtzAQtvtZKpGMRB02myXzKFI6ozIxW+VpvkVLiSTavSA8mutQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyr/W7xX/ICiDvB08rcxkmGJCwPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvYjU5MzRmN2MtNWI2NS0z ZWZhLTk5MWYtY2M4MjkwM2FhOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqsi8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGJlnZnc792zV8SEDgQimglntNaJiXc6zVFUHH+EzZeTojnTDd6oNsj XiFkK6MGYP72hyiJcNj0IqFnxVaqAoUwLtPKU8gAtJD6cgp3XzSVZ+FEjK+B8lnZ tPrrYRoPpoS4qyqBHAdY5+Hr+/Sp7fhXOyNrs5hm7b/OYfAyFSbTRMz/PifmlBgo jPm1UxaK/Tg50rIRetyq4qb/3UWyDnpO1rz+KB5BCz0yUEXEguYhgs+DEEfCi+PR EqPTkddrfVl//nW1TFp7H+iE5wl6HGGIT6yPZoRGIdhjVQGfnWK1DIlSqmW8K3NM ltNjozgnllQPUQce8TcEygN0j+6wbFY= -----END CERTIFICATE-----Generated at Wed May 13 10:33:26 2026 by rpki-client