$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/871747a9-a8a9-3210-938c-b2f4e50362f3.roa File: 871747a9-a8a9-3210-938c-b2f4e50362f3.roa (raw, json) Hash identifier: T9cqAlKHWFzh3xI0juUjVgZidG5lt0JmHLtoWUQOtXU= Subject key identifier: FA:4F:A5:08:CB:CF:CA:F2:C1:9E:F6:B5:2F:8E:3D:1E:EB:72:F5:F9 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584DAC458E996E90A7199A897A80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/871747a9-a8a9-3210-938c-b2f4e50362f3.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 11404 IP address blocks: 162.222.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:8e:99:6e:90:a7:19:9a:89:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=d4f4a04a-8bc8-48cb-9e55-7d9f0478c0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f8:69:e3:3c:6d:9e:66:92:fc:77:c0:ae:69: 48:1d:f0:2a:18:c8:0f:4a:83:ed:8f:f7:2e:59:e4: 7c:ec:f3:42:b5:2b:52:a3:f2:b5:ff:50:26:9b:74: 5b:ab:f6:9f:c5:50:61:c1:a9:1b:69:46:4b:84:6f: c8:9e:39:0d:03:08:23:d8:c8:a1:3d:56:e2:29:ce: 50:91:b9:3d:d6:0a:83:69:76:19:49:a7:cd:42:57: af:6c:7f:d6:f9:94:e8:4e:63:a6:a6:21:ed:9f:68: 62:53:d1:60:49:ef:27:f1:41:ef:09:e0:c8:44:36: 5d:08:d2:cd:98:73:1c:f1:e9:9a:75:49:d6:fe:e2: b9:fc:b9:92:19:d7:b3:b0:25:21:b6:4a:b3:d8:17: ea:2f:f3:24:98:33:02:5b:dc:f3:ff:b9:49:79:cd: 59:4f:d1:0f:ae:88:9e:5b:64:e0:da:ad:a6:46:b7: 3a:fa:ef:12:81:3e:26:77:ee:f9:6f:fa:56:16:cf: eb:63:98:31:5f:f5:1c:d6:c6:41:f5:ab:c3:6f:6a: fa:aa:0c:5c:c1:fe:db:dc:4d:08:76:13:bd:7a:a0: 42:50:d9:ea:6a:11:fe:08:75:4c:ac:a6:0f:df:9c: 0d:9e:bf:aa:ba:ef:24:11:83:fe:7f:fb:6c:22:90: e9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4F:A5:08:CB:CF:CA:F2:C1:9E:F6:B5:2F:8E:3D:1E:EB:72:F5:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/871747a9-a8a9-3210-938c-b2f4e50362f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 162.222.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:3e:16:31:83:71:13:6f:4d:4f:7b:9a:12:09:38:38:70:1e: 49:aa:36:59:57:89:1b:75:13:d5:15:4e:58:2a:7e:e7:42:3c: c6:71:19:90:8f:48:9f:72:3e:55:43:e6:75:84:08:f9:20:12: 16:5a:94:df:6e:ff:80:ee:17:a1:e4:67:83:49:7b:6d:14:44: 1e:bf:b1:16:f4:80:df:9f:8b:5a:e3:d6:0c:5d:67:45:bc:b2: 90:dd:e9:45:fa:24:9c:a4:70:e3:32:fd:9a:af:3e:3f:fd:a9: b2:c8:69:57:95:84:de:d2:1c:52:2e:5c:3f:87:3a:f9:9f:ab: 81:23:48:fd:f5:2e:71:7c:4e:18:67:49:b5:40:45:be:b5:84: 98:63:99:fc:ad:00:41:6f:54:e1:1f:84:b3:2e:36:c7:07:ea: 80:a5:7b:42:8f:60:b3:bf:18:a8:4a:43:70:c3:6f:65:3e:27: 09:51:42:b9:44:a7:f2:a9:40:12:79:33:96:43:e2:3b:06:75: 31:57:92:a3:a4:29:82:25:8f:b7:29:22:51:1e:78:1e:06:3b: 55:67:86:b9:b6:33:23:7b:29:0e:d2:4c:fc:01:48:6a:91:38: aa:c0:fe:2e:09:0b:bc:5d:67:e7:77:0b:71:9e:22:a1:5a:4c: d4:33:f9:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRY6ZbpCnGZqJeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk ZDRmNGEwNGEtOGJjOC00OGNiLTllNTUtN2Q5ZjA0NzhjMGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/hp4zxtnmaS/HfArmlIHfAqGMgPSoPtj/cu WeR87PNCtStSo/K1/1Amm3Rbq/afxVBhwakbaUZLhG/InjkNAwgj2MihPVbiKc5Q kbk91gqDaXYZSafNQlevbH/W+ZToTmOmpiHtn2hiU9FgSe8n8UHvCeDIRDZdCNLN mHMc8emadUnW/uK5/LmSGdezsCUhtkqz2BfqL/MkmDMCW9zz/7lJec1ZT9EProie W2Tg2q2mRrc6+u8SgT4md+75b/pWFs/rY5gxX/Uc1sZB9avDb2r6qgxcwf7b3E0I dhO9eqBCUNnqahH+CHVMrKYP35wNnr+quu8kEYP+f/tsIpDpZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpPpQjLz8rywZ72tS+OPR7rcvX5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvODcxNzQ3YTktYThhOS0z MjEwLTkzOGMtYjJmNGU1MDM2MmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw+FjGDcRNvTU97mhIJODhwHkmqNllXiRt1E9UVTlgqfudCPMZxGZCP SJ9yPlVD5nWECPkgEhZalN9u/4DuF6HkZ4NJe20URB6/sRb0gN+fi1rj1gxdZ0W8 spDd6UX6JJykcOMy/ZqvPj/9qbLIaVeVhN7SHFIuXD+HOvmfq4EjSP31LnF8Thhn SbVARb61hJhjmfytAEFvVOEfhLMuNscH6oCle0KPYLO/GKhKQ3DDb2U+JwlRQrlE p/KpQBJ5M5ZD4jsGdTFXkqOkKYIlj7cpIlEeeB4GO1Vnhrm2MyN7KQ7STPwBSGqR OKrA/i4JC7xdZ+d3C3GeIqFaTNQz+T0= -----END CERTIFICATE-----Generated at Wed May 13 03:29:41 2026 by rpki-client