$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/eb949189-8271-3567-ac4e-0031c3fec821.roa File: eb949189-8271-3567-ac4e-0031c3fec821.roa (raw, json) Hash identifier: RG484jLCuipVPJUNVwI0xAAQ6Ik2jlGF2hzkjbpgfTs= Subject key identifier: DC:9F:4A:45:15:33:6D:02:ED:E0:88:13:AC:3E:77:17:E8:6C:8B:E9 Certificate issuer: /CN=4b9027e9-0517-4775-a6c4-35522e65e4ad Certificate serial: 010D0C9F4328584D359FAA935F1FC9E74F639600 Authority key identifier: 68:06:97:CC:C1:0B:6F:31:4E:DB:31:35:FA:2D:07:F3:30:69:4F:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/eb949189-8271-3567-ac4e-0031c3fec821.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 398697 IP address blocks: 161.199.203.0/24 maxlen: 24 161.199.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:aa:93:5f:1f:c9:e7:4f:63:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b9027e9-0517-4775-a6c4-35522e65e4ad Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=d490e0b6-1771-4398-979b-edf2de5c6cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4b:f0:5f:e5:a8:0a:68:e6:8b:37:3d:54:9e: e0:09:40:48:dc:78:52:28:58:42:86:15:eb:4e:07: 33:7d:7c:12:10:38:fd:a4:7b:3b:3d:bc:ae:42:28: 0b:1f:63:9b:14:cd:ac:74:b4:09:b4:24:22:e6:04: a9:e7:b9:20:18:08:07:45:9d:fa:2a:ce:78:80:59: 0f:5f:f7:fc:72:61:40:ba:2c:8d:f8:3a:66:70:57: 56:af:e3:51:4e:45:60:14:e7:27:99:25:6a:1e:e6: ab:fc:07:38:73:e4:b0:ab:56:84:7d:e1:43:29:01: a6:ea:43:0d:69:de:7c:67:b1:f1:98:a5:f3:9e:26: 61:10:9a:9e:82:3f:57:14:8d:20:d4:d6:45:ab:7e: e2:24:47:84:6b:f3:39:79:1a:c8:1e:06:72:36:48: 53:ca:e9:4f:d9:b6:d5:83:ea:c8:f6:42:99:b2:40: 24:77:ca:17:bf:a9:4d:cb:62:9a:da:70:90:8d:7b: 7f:c0:cd:fc:eb:ed:d4:53:55:28:c5:bb:64:66:55: 76:51:5f:d3:79:b2:70:08:02:e9:87:9e:cb:4c:33: 70:23:cd:d9:ca:57:8d:ae:dd:71:12:a9:a0:3d:97: d3:9f:dc:e6:bb:2c:0e:85:54:52:23:6e:fe:cf:a1: 4f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9F:4A:45:15:33:6D:02:ED:E0:88:13:AC:3E:77:17:E8:6C:8B:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/eb949189-8271-3567-ac4e-0031c3fec821.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.crl X509v3 Authority Key Identifier: keyid:68:06:97:CC:C1:0B:6F:31:4E:DB:31:35:FA:2D:07:F3:30:69:4F:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer sbgp-ipAddrBlock: critical IPv4: 161.199.203.0/24 161.199.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:6b:65:ed:a6:9b:47:f1:17:bd:9c:49:8c:d5:d9:12:b4:e0: 92:25:7b:79:06:27:78:d3:f2:b0:2e:67:85:ac:55:93:94:72: 5a:ac:64:87:d1:bc:9b:dc:0b:94:dd:1c:08:36:b3:8f:21:40: fa:ff:f6:28:8e:09:cd:7d:b1:e9:fd:71:10:55:9d:8f:c9:bc: 80:bc:db:7d:7a:8e:9f:46:48:d3:07:52:5d:96:b3:42:ac:ff: 2a:22:42:7e:c8:4b:74:cc:dc:dc:10:88:fa:f9:16:c8:dc:47: 64:66:28:bc:ab:5d:91:3d:36:e4:fb:d1:2e:56:60:eb:ab:5e: 44:89:b1:89:bf:17:27:90:83:36:17:2d:08:33:86:37:76:5d: de:78:8a:1e:ee:43:e5:91:46:0c:b2:e6:3e:ca:7a:34:f1:f9: 6c:9c:a4:de:4f:3d:bf:84:2e:69:47:b7:e1:0a:14:45:14:b9: e1:50:03:14:ab:1e:10:fd:df:5b:db:a2:2d:f0:ea:03:cc:68: 91:c1:e1:6d:51:ac:73:fc:11:c6:45:7d:55:6e:e5:25:6b:7d: fb:94:71:f1:f3:d3:42:31:11:f2:bf:88:1f:a1:d4:a7:03:dc: a1:08:e0:30:69:fc:59:64:d7:d4:9c:c2:b1:35:05:78:94:da: 4d:db:1b:cf -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE01n6qTXx/J509jlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI5MDI3ZTktMDUxNy00Nzc1LWE2YzQtMzU1MjJlNjVl NGFkMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZDQ5MGUwYjYtMTc3MS00Mzk4LTk3OWItZWRmMmRlNWM2Y2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UvwX+WoCmjmizc9VJ7gCUBI3HhSKFhChhXr TgczfXwSEDj9pHs7PbyuQigLH2ObFM2sdLQJtCQi5gSp57kgGAgHRZ36Ks54gFkP X/f8cmFAuiyN+DpmcFdWr+NRTkVgFOcnmSVqHuar/Ac4c+Swq1aEfeFDKQGm6kMN ad58Z7HxmKXzniZhEJqegj9XFI0g1NZFq37iJEeEa/M5eRrIHgZyNkhTyulP2bbV g+rI9kKZskAkd8oXv6lNy2Ka2nCQjXt/wM386+3UU1UoxbtkZlV2UV/TebJwCALp h57LTDNwI83ZyleNrt1xEqmgPZfTn9zmuywOhVRSI27+z6FPXQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNyfSkUVM20C7eCIE6w+dxfobIvpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80Yjkw MjdlOS0wNTE3LTQ3NzUtYTZjNC0zNTUyMmU2NWU0YWQvZWI5NDkxODktODI3MS0z NTY3LWFjNGUtMDAzMWMzZmVjODIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGI5MDI3ZTktMDUxNy00Nzc1LWE2 YzQtMzU1MjJlNjVlNGFkLzRiOTAyN2U5LTA1MTctNDc3NS1hNmM0LTM1NTIyZTY1 ZTRhZC5jcmwwHwYDVR0jBBgwFoAUaAaXzMELbzFO2zE1+i0H8zBpTwowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80YjkwMjdlOS0wNTE3LTQ3NzUtYTZjNC0zNTUy MmU2NWU0YWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAocfLAwQA ocfmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFBrZe2mm0fxF72cSYzV2RK04JIle3kGJ3jT8rAuZ4WsVZOU clqsZIfRvJvcC5TdHAg2s48hQPr/9iiOCc19sen9cRBVnY/JvIC82316jp9GSNMH Ul2Ws0Ks/yoiQn7IS3TM3NwQiPr5FsjcR2RmKLyrXZE9NuT70S5WYOurXkSJsYm/ FyeQgzYXLQgzhjd2Xd54ih7uQ+WRRgyy5j7KejTx+WycpN5PPb+ELmlHt+EKFEUU ueFQAxSrHhD931vboi3w6gPMaJHB4W1RrHP8EcZFfVVu5SVrffuUcfHz00IxEfK/ iB+h1KcD3KEI4DBp/Flk19ScwrE1BXiU2k3bG88= -----END CERTIFICATE-----Generated at Thu Mar 26 22:08:13 2026 by rpki-client