$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/0874ffbc-1b44-301a-95a8-805459504f59.roa File: 0874ffbc-1b44-301a-95a8-805459504f59.roa (raw, json) Hash identifier: DDwIYNh1TEO90RiB7nFKNqPdpr+ARpjfaXJ5gctPG5M= Subject key identifier: D7:37:BC:EF:C6:E7:CF:96:09:2D:11:B8:D4:3A:24:51:27:D0:E8:C0 Certificate issuer: /CN=02df9026-5ea2-4718-a55c-d46da7505348 Certificate serial: 010D0C9F4328584D15A24B8AC6FE922939F27680 Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/0874ffbc-1b44-301a-95a8-805459504f59.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 14291 IP address blocks: 24.170.224.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:4b:8a:c6:fe:92:29:39:f2:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=0d8c2bc0-2b17-45cb-859e-0ef426141fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:49:e9:29:d7:8b:78:17:66:0d:c8:f2:91:44: 7d:b6:5f:d3:af:e1:5e:02:74:59:a3:23:3d:e4:06: 61:58:f8:ce:09:d6:18:b1:9f:cf:90:83:9d:30:0d: 5c:d0:73:6b:7f:01:3b:9d:9c:00:dd:39:86:e2:76: f5:6a:96:c5:5c:e0:01:15:05:69:94:00:3b:cf:c1: 87:68:98:d3:94:1f:5f:e1:86:30:6e:5b:44:70:fb: 54:81:06:40:71:cf:37:b1:7f:2c:2d:aa:1b:8c:e7: 93:e2:b0:78:6c:8d:45:80:89:46:d2:e9:e5:fa:4d: 82:41:05:84:b6:82:0f:34:52:4c:39:94:d0:72:fb: a2:f6:38:e6:77:79:e0:c7:c7:95:99:08:2e:8d:1e: 5b:fc:91:25:35:f3:bb:b6:be:4b:e6:e4:91:b2:21: 87:59:08:38:22:7a:b5:18:38:bb:4e:c1:1b:c0:5d: 27:47:f3:50:40:60:aa:00:18:64:e9:bd:6f:83:05: 79:be:24:12:d0:8e:71:be:6e:7f:cf:a6:e9:90:91: 4a:4c:aa:84:53:08:c2:66:7a:89:fe:80:82:e1:64: 66:6b:0a:f0:17:b5:a4:15:e4:45:87:68:49:69:af: 06:3c:95:65:e3:6d:fd:20:49:70:2c:92:2a:49:57: a9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:37:BC:EF:C6:E7:CF:96:09:2D:11:B8:D4:3A:24:51:27:D0:E8:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/0874ffbc-1b44-301a-95a8-805459504f59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl X509v3 Authority Key Identifier: keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer sbgp-ipAddrBlock: critical IPv4: 24.170.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:c1:43:24:5f:23:dc:55:2d:01:b4:7b:82:89:10:17:75:2c: 6d:37:ff:2e:cd:20:86:32:9d:0e:45:10:f6:8d:51:29:15:be: 93:c7:e2:13:e7:0f:aa:8a:79:ab:f6:d0:25:d6:6f:32:91:fc: 28:8c:3d:e9:1d:c0:bb:2b:f4:dc:13:02:0e:a1:0a:66:a7:70: 0c:b0:3c:4a:38:c7:0e:86:4f:e6:47:87:da:a7:b2:0b:f9:11: 37:49:a6:3d:ab:b9:4c:ea:bd:d4:70:23:d0:be:51:fb:d6:9f: 7a:de:f0:89:b3:ec:22:8b:51:96:fe:df:bc:74:d8:20:bd:99: 13:12:80:36:a4:ce:58:90:d1:0b:c9:a4:11:9a:34:75:30:58: ee:0e:d1:c4:a3:84:31:78:35:de:2b:c2:9f:53:76:73:72:b1: 5d:ad:1f:7b:4f:32:87:12:72:c9:10:7b:92:d7:c3:85:2f:98: 96:b6:84:17:df:9e:ef:24:3c:c6:03:20:e8:0c:d3:1d:4c:d6: fc:36:79:cb:ca:d7:ce:12:da:72:6e:e7:a8:60:7d:78:21:3a: e1:fd:c6:44:0d:80:04:c3:ec:3f:48:28:33:06:2f:4d:c9:70: 0d:c9:e6:6d:eb:3d:9f:b7:66:43:c3:b1:ae:bf:90:c8:59:eb: 12:79:df:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VokuKxv6SKTnydoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJkZjkwMjYtNWVhMi00NzE4LWE1NWMtZDQ2ZGE3NTA1 MzQ4MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk MGQ4YzJiYzAtMmIxNy00NWNiLTg1OWUtMGVmNDI2MTQxZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmknpKdeLeBdmDcjykUR9tl/Tr+FeAnRZoyM9 5AZhWPjOCdYYsZ/PkIOdMA1c0HNrfwE7nZwA3TmG4nb1apbFXOABFQVplAA7z8GH aJjTlB9f4YYwbltEcPtUgQZAcc83sX8sLaobjOeT4rB4bI1FgIlG0unl+k2CQQWE toIPNFJMOZTQcvui9jjmd3ngx8eVmQgujR5b/JElNfO7tr5L5uSRsiGHWQg4Inq1 GDi7TsEbwF0nR/NQQGCqABhk6b1vgwV5viQS0I5xvm5/z6bpkJFKTKqEUwjCZnqJ /oCC4WRmawrwF7WkFeRFh2hJaa8GPJVl4239IElwLJIqSVepHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNc3vO/G58+WCS0RuNQ6JFEn0OjAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRm OTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZkYTc1MDUzNDgvMDg3NGZmYmMtMWI0NC0z MDFhLTk1YTgtODA1NDU5NTA0ZjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDJkZjkwMjYtNWVhMi00NzE4LWE1 NWMtZDQ2ZGE3NTA1MzQ4LzAyZGY5MDI2LTVlYTItNDcxOC1hNTVjLWQ0NmRhNzUw NTM0OC5jcmwwHwYDVR0jBBgwFoAUyBt2Ol6lM34AGtjZ+ZDa9s1kXqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRmOTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZk YTc1MDUzNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGKrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzBQyRfI9xVLQG0e4KJEBd1LG03/y7NIIYynQ5FEPaNUSkVvpPH4hPn D6qKeav20CXWbzKR/CiMPekdwLsr9NwTAg6hCmancAywPEo4xw6GT+ZHh9qnsgv5 ETdJpj2ruUzqvdRwI9C+UfvWn3re8Imz7CKLUZb+37x02CC9mRMSgDakzliQ0QvJ pBGaNHUwWO4O0cSjhDF4Nd4rwp9TdnNysV2tH3tPMocScskQe5LXw4UvmJa2hBff nu8kPMYDIOgM0x1M1vw2ecvK184S2nJu56hgfXghOuH9xkQNgATD7D9IKDMGL03J cA3J5m3rPZ+3ZkPDsa6/kMhZ6xJ53wc= -----END CERTIFICATE-----Generated at Thu Mar 26 07:33:47 2026 by rpki-client