$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/904cd0dc-6bbb-3f23-81a0-5bed7246840d.roa File: 904cd0dc-6bbb-3f23-81a0-5bed7246840d.roa (raw, json) Hash identifier: 6YNTPx162/Zik9gJBg3GtVQ2ULRgI/6/tLIFK/fbJZU= Subject key identifier: 07:81:B1:F5:75:8E:95:CE:7E:4E:71:F4:3C:93:80:32:C5:53:29:98 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584DAC4584133037D34A68743680 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/904cd0dc-6bbb-3f23-81a0-5bed7246840d.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 11404 IP address blocks: 172.92.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:84:13:30:37:d3:4a:68:74:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=48ba1385-f473-4060-aaaf-efec777654c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:73:66:3e:43:80:4b:d6:63:e1:c2:c2:48:28: 17:c4:f1:c3:89:24:66:42:9d:7f:c9:80:a8:16:2e: 3d:c0:d9:21:51:a7:2a:0e:8a:87:47:8d:60:50:2f: 15:f0:49:6b:a2:fa:21:f3:1f:79:90:b4:55:b3:18: 9f:91:5e:05:6b:61:21:1f:97:cf:05:a1:d9:28:f3: c1:56:d2:ac:7a:4a:82:3c:2a:d5:f5:b8:e0:31:9f: 1c:d5:40:17:7c:9f:19:0f:07:33:9f:46:98:c6:1f: 7e:85:8b:d6:03:af:83:10:6d:69:7a:7b:a6:ad:f9: 58:a9:80:75:89:fe:fb:34:a0:7b:b1:f4:46:10:79: 2c:77:76:58:38:d1:d6:d0:9d:44:51:d2:7a:56:82: 7f:11:46:10:f6:26:6d:b4:30:90:f3:da:1e:22:fc: e2:ab:00:d3:a7:ba:f6:86:fc:ad:c0:28:4c:5d:a2: 65:72:9a:52:d5:b1:50:16:dc:f8:b8:a3:aa:46:67: a9:fc:c5:d9:03:09:bc:fe:5e:0c:f3:a5:f9:1d:c7: 96:52:7c:63:ee:33:cd:9b:eb:d4:98:5a:1b:51:8c: 6c:5a:20:1e:bb:d6:93:95:80:54:9e:66:4c:9a:68: 9a:a6:c5:cd:b6:c2:4c:09:0d:39:47:ad:31:3d:83: e0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:81:B1:F5:75:8E:95:CE:7E:4E:71:F4:3C:93:80:32:C5:53:29:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/904cd0dc-6bbb-3f23-81a0-5bed7246840d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 172.92.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:47:a2:4b:ec:03:ce:1c:d9:e5:f3:1f:08:cb:97:ee:8b:a4: fc:8b:ab:d7:95:17:8a:9b:47:05:00:c4:e9:a1:fb:16:06:c1: 24:58:87:e7:a4:04:8f:d0:7c:4b:c4:d0:04:24:44:b6:3e:e4: dd:fb:db:0e:c2:83:11:9e:06:9c:97:9b:c9:ec:7c:3d:b8:c8: 2f:30:e4:e7:d4:57:20:2f:56:77:19:6d:56:dc:35:0e:00:e3: ac:bf:fd:2b:30:69:ce:f4:8d:75:ce:ae:c6:6b:8b:5f:8f:ca: e1:80:bb:8b:5f:6c:3b:f4:78:75:7d:1a:ab:00:61:74:5f:6e: 3c:a2:7e:1f:74:b8:4e:e8:74:1b:cf:d5:17:01:7f:26:ca:f2: d6:35:63:59:a6:ff:ae:a4:a3:ed:80:e4:42:a7:ed:6e:03:3e: ef:bf:05:27:bc:58:e7:fb:cf:cd:60:e5:62:0c:33:1c:08:01: 48:7f:99:1b:86:fe:81:2e:e7:c5:b6:38:7c:f8:26:ec:b0:bc: fd:1e:54:b6:72:d7:61:72:c3:38:a1:fd:54:7d:c8:b8:26:57: 0b:e0:be:44:99:f4:97:3a:0a:b0:82:7d:db:85:a3:22:da:9b: 1c:36:8a:f4:93:c0:27:11:cf:61:a9:aa:f6:77:17:9b:73:a5: 69:ce:bc:ff -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2sRYQTMDfTSmh0NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk NDhiYTEzODUtZjQ3My00MDYwLWFhYWYtZWZlYzc3NzY1NGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXNmPkOAS9Zj4cLCSCgXxPHDiSRmQp1/yYCo Fi49wNkhUacqDoqHR41gUC8V8Elrovoh8x95kLRVsxifkV4Fa2EhH5fPBaHZKPPB VtKsekqCPCrV9bjgMZ8c1UAXfJ8ZDwczn0aYxh9+hYvWA6+DEG1penumrflYqYB1 if77NKB7sfRGEHksd3ZYONHW0J1EUdJ6VoJ/EUYQ9iZttDCQ89oeIvziqwDTp7r2 hvytwChMXaJlcppS1bFQFtz4uKOqRmep/MXZAwm8/l4M86X5HceWUnxj7jPNm+vU mFobUYxsWiAeu9aTlYBUnmZMmmiapsXNtsJMCQ05R60xPYPg6QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAeBsfV1jpXOfk5x9DyTgDLFUymYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOTA0Y2QwZGMtNmJiYi0z ZjIzLTgxYTAtNWJlZDcyNDY4NDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArFwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAiUeiS+wDzhzZ5fMfCMuX7ouk/Iur15UXiptHBQDE6aH7FgbBJFiH56QE j9B8S8TQBCREtj7k3fvbDsKDEZ4GnJebyex8PbjILzDk59RXIC9WdxltVtw1DgDj rL/9KzBpzvSNdc6uxmuLX4/K4YC7i19sO/R4dX0aqwBhdF9uPKJ+H3S4Tuh0G8/V FwF/Jsry1jVjWab/rqSj7YDkQqftbgM+778FJ7xY5/vPzWDlYgwzHAgBSH+ZG4b+ gS7nxbY4fPgm7LC8/R5UtnLXYXLDOKH9VH3IuCZXC+C+RJn0lzoKsIJ924WjItqb HDaK9JPAJxHPYamq9ncXm3Olac68/w== -----END CERTIFICATE-----Generated at Wed May 13 04:36:14 2026 by rpki-client