$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/9ed91600-ca1c-38ba-9e87-40a9de312fe9.roa File: 9ed91600-ca1c-38ba-9e87-40a9de312fe9.roa (raw, json) Hash identifier: Omjv8UOc3xQi/TsAEXhwFjRnSqIShXk5SG28l+8QDlc= Subject key identifier: AB:D7:48:F8:80:DE:37:EC:02:C6:52:EA:25:9D:98:DE:72:29:2C:66 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584D2A74E8433E7E4D70E99BD600 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/9ed91600-ca1c-38ba-9e87-40a9de312fe9.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 55293 IP address blocks: 170.0.4.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e8:43:3e:7e:4d:70:e9:9b:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=9bf988e5-6a08-45ed-b162-6ec904e826ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:da:e1:b6:54:33:f8:c4:9a:34:73:9a:35:ac: 50:20:20:e7:cb:61:35:a5:bb:81:6b:6f:14:9e:46: 26:66:c5:30:ad:10:69:c7:46:3d:7d:95:29:47:10: 53:d7:5b:92:fe:de:db:37:d9:aa:2c:2e:93:39:74: 3e:40:c6:ee:d6:9b:a5:ae:94:1f:d6:f0:70:b7:c4: a1:12:10:08:b4:33:db:b9:f9:d0:85:cb:5c:d2:17: 3e:47:d6:df:81:14:86:40:9b:e5:b4:49:48:b1:b4: b4:3d:f2:81:5b:5a:78:f4:7b:06:58:53:05:2e:f9: 10:80:3f:30:85:dc:d4:c3:de:44:f2:de:6d:0a:e9: 9c:c6:31:ea:9d:9a:30:b1:0d:08:68:a9:c1:95:ba: 8e:75:b6:8b:f6:96:98:65:0e:0f:9b:6f:95:5e:51: 6e:56:4f:cb:fb:af:79:47:43:49:c4:2f:5d:e2:cf: c2:c1:a8:4d:50:f4:a3:1d:3c:32:ed:df:55:f4:ec: a5:6e:66:f9:a4:97:ae:34:69:9c:20:77:80:62:b7: 8a:7c:c3:95:4a:54:f7:85:aa:96:72:31:2e:63:80: 14:52:68:9b:91:85:69:27:2e:08:c5:3e:3e:93:bf: 38:bd:99:e7:1c:70:ca:aa:43:69:95:ef:73:2c:c2: c0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D7:48:F8:80:DE:37:EC:02:C6:52:EA:25:9D:98:DE:72:29:2C:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/9ed91600-ca1c-38ba-9e87-40a9de312fe9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 170.0.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:fb:95:65:aa:56:94:f6:94:ab:2b:f1:99:0f:5d:13:a4:e7: d5:22:f7:0b:83:5c:c8:eb:29:91:72:1a:77:db:54:a4:35:b2: 53:6e:e8:10:1e:02:7c:75:5f:ad:99:78:26:2f:41:02:fd:09: c5:18:d5:8b:9a:94:f3:f6:2e:b3:4e:19:95:0b:e9:1e:80:fb: cb:92:ed:46:cd:b1:1c:d4:fc:a9:d8:8d:5a:e5:d3:96:5e:0f: c1:48:bc:b5:72:74:32:e4:a7:78:03:16:11:4e:5e:50:27:a5: e3:f5:1b:ac:cd:81:46:ed:41:b1:74:bc:0b:84:af:2d:23:60: 59:31:c5:e6:d0:40:23:3d:f5:7e:9f:a5:ef:0f:5a:1a:1e:12: 1b:6f:f3:f9:56:1d:8e:9d:3c:24:fc:de:f9:dc:56:22:cd:6f: 58:fe:be:85:1b:f1:42:5f:a8:93:11:12:2c:79:5e:5e:a6:51: b8:93:2a:2e:07:64:30:66:39:20:b8:fe:c3:df:c4:e6:50:76: ad:e4:d6:bd:ff:02:cd:33:31:3d:b8:17:e5:dd:de:66:c8:e2: d6:34:b1:3e:f4:bf:a6:da:e0:88:06:24:d4:c5:b1:7e:51:73: 6e:34:c6:ec:67:54:89:ba:85:2a:5a:92:7c:ca:bf:11:33:ca: ff:ec:78:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOhDPn5NcOmb1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk OWJmOTg4ZTUtNmEwOC00NWVkLWIxNjItNmVjOTA0ZTgyNmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtrhtlQz+MSaNHOaNaxQICDny2E1pbuBa28U nkYmZsUwrRBpx0Y9fZUpRxBT11uS/t7bN9mqLC6TOXQ+QMbu1pulrpQf1vBwt8Sh EhAItDPbufnQhctc0hc+R9bfgRSGQJvltElIsbS0PfKBW1p49HsGWFMFLvkQgD8w hdzUw95E8t5tCumcxjHqnZowsQ0IaKnBlbqOdbaL9paYZQ4Pm2+VXlFuVk/L+695 R0NJxC9d4s/CwahNUPSjHTwy7d9V9Oylbmb5pJeuNGmcIHeAYreKfMOVSlT3haqW cjEuY4AUUmibkYVpJy4IxT4+k784vZnnHHDKqkNple9zLMLAyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvXSPiA3jfsAsZS6iWdmN5yKSxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvOWVkOTE2MDAtY2ExYy0z OGJhLTllODctNDBhOWRlMzEyZmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqgAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABb7lWWqVpT2lKsr8ZkPXROk59Ui9wuDXMjrKZFyGnfbVKQ1slNu6BAe Anx1X62ZeCYvQQL9CcUY1YualPP2LrNOGZUL6R6A+8uS7UbNsRzU/KnYjVrl05Ze D8FIvLVydDLkp3gDFhFOXlAnpeP1G6zNgUbtQbF0vAuEry0jYFkxxebQQCM99X6f pe8PWhoeEhtv8/lWHY6dPCT83vncViLNb1j+voUb8UJfqJMREix5Xl6mUbiTKi4H ZDBmOSC4/sPfxOZQdq3k1r3/As0zMT24F+Xd3mbI4tY0sT70v6ba4IgGJNTFsX5R c240xuxnVIm6hSpaknzKvxEzyv/seAE= -----END CERTIFICATE-----Generated at Thu Mar 26 08:03:26 2026 by rpki-client