$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/16840a19-090a-35bc-a4ec-32766552ae5e.roa File: 16840a19-090a-35bc-a4ec-32766552ae5e.roa (raw, json) Hash identifier: 6d87WwFqVT3FPJZuFtdRLCNzMz9MGPp8ouDMzbw/oyQ= Subject key identifier: 33:63:7F:33:CA:F0:50:DE:93:37:FE:8C:67:DD:58:B5:8E:7F:84:D4 Certificate issuer: /CN=02df9026-5ea2-4718-a55c-d46da7505348 Certificate serial: 010D0C9F4328584D15A24D72ADDB3AF1358A5680 Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/16840a19-090a-35bc-a4ec-32766552ae5e.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 14291 IP address blocks: 147.185.192.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:4d:72:ad:db:3a:f1:35:8a:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=4f8c1e56-d1ad-43c6-99b7-343c7ff53507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a5:58:20:cf:9c:9b:dd:aa:e0:e0:06:80:72: ba:76:ce:76:cb:38:14:54:16:67:c8:ac:7e:33:32: b6:53:50:ed:ee:81:46:63:cd:01:4d:d3:0a:39:8b: 24:92:1f:05:33:cf:57:c4:25:c2:08:00:08:82:ed: d5:74:6d:d4:c2:e8:e5:7d:e5:39:8e:5c:7c:46:43: 1c:45:ef:3d:31:5b:3c:61:72:4c:dd:02:7d:eb:8b: ee:39:cf:18:39:bc:1e:4d:03:b7:d6:d6:1e:d6:4b: 54:63:12:38:38:a2:41:95:2c:d0:06:cc:cc:44:5a: e0:50:98:7d:43:30:3a:03:41:d6:2b:dd:5c:d0:4f: 96:35:2f:a2:c4:30:f8:f0:33:b7:c6:2d:b9:0e:a2: cf:7c:e8:f2:4a:0c:8f:f7:06:81:39:d4:9a:db:6b: 8b:a4:36:77:c9:8a:16:3b:47:81:f7:f8:bf:73:b2: 56:c4:89:8f:d9:0a:c5:3a:01:72:33:80:ad:f2:b2: 48:d6:27:f3:44:03:82:eb:98:c7:9e:ac:cc:a4:0d: 26:2b:24:2b:26:72:69:3a:c5:46:a6:3d:fc:57:9e: 54:e6:51:54:2a:04:8e:7e:69:66:d3:ee:42:19:2d: e8:00:2c:c0:71:4f:e7:f0:f9:55:45:f8:17:09:a0: 19:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:63:7F:33:CA:F0:50:DE:93:37:FE:8C:67:DD:58:B5:8E:7F:84:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/16840a19-090a-35bc-a4ec-32766552ae5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl X509v3 Authority Key Identifier: keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer sbgp-ipAddrBlock: critical IPv4: 147.185.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:75:22:29:1c:c7:df:d5:f8:1e:72:f9:73:5d:a6:d4:db:52: 9a:1e:9e:bc:0e:90:88:ad:cd:a5:4f:9a:fa:d2:f9:f2:24:7a: e1:60:f4:b3:05:7f:5e:e9:29:86:4d:fd:9c:2c:2f:02:b7:16: 32:7a:77:c0:dc:39:e2:28:26:17:0c:ae:76:da:c7:b8:9f:70: ce:4b:b6:e6:bc:e8:ac:b3:d9:4e:f6:60:05:c9:9b:e4:e0:0e: 16:71:d0:af:45:5a:53:68:d1:b2:7d:b3:8c:7c:8e:6b:59:01: 3e:c6:9c:3c:7b:09:fc:46:28:1a:4e:a4:5c:5b:50:31:45:8f: 3d:22:16:ef:ae:0f:0e:c0:94:bd:a9:44:6b:90:2c:ca:ff:cf: 65:bb:b4:f0:04:38:d2:51:f1:99:11:72:58:cb:1f:87:40:e2: 9f:7c:bb:1e:4c:87:60:6c:4b:5d:92:22:df:f0:fa:96:2a:26: ea:77:ed:f1:05:47:fa:72:60:8b:9e:34:9b:83:3d:f4:96:6f: 58:6a:f1:08:c5:89:2e:2e:76:8e:4e:be:7f:3c:f2:35:82:7e: c4:e8:7a:fd:46:10:16:50:f0:08:08:28:50:24:06:be:16:a6: 70:fa:84:e0:7e:86:82:41:76:69:d8:85:1e:a2:36:29:30:6c: 1f:7d:79:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Vok1yrds68TWKVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJkZjkwMjYtNWVhMi00NzE4LWE1NWMtZDQ2ZGE3NTA1 MzQ4MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk NGY4YzFlNTYtZDFhZC00M2M2LTk5YjctMzQzYzdmZjUzNTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaVYIM+cm92q4OAGgHK6ds52yzgUVBZnyKx+ MzK2U1Dt7oFGY80BTdMKOYskkh8FM89XxCXCCAAIgu3VdG3UwujlfeU5jlx8RkMc Re89MVs8YXJM3QJ964vuOc8YObweTQO31tYe1ktUYxI4OKJBlSzQBszMRFrgUJh9 QzA6A0HWK91c0E+WNS+ixDD48DO3xi25DqLPfOjySgyP9waBOdSa22uLpDZ3yYoW O0eB9/i/c7JWxImP2QrFOgFyM4Ct8rJI1ifzRAOC65jHnqzMpA0mKyQrJnJpOsVG pj38V55U5lFUKgSOfmlm0+5CGS3oACzAcU/n8PlVRfgXCaAZXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNjfzPK8FDekzf+jGfdWLWOf4TUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRm OTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZkYTc1MDUzNDgvMTY4NDBhMTktMDkwYS0z NWJjLWE0ZWMtMzI3NjY1NTJhZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDJkZjkwMjYtNWVhMi00NzE4LWE1 NWMtZDQ2ZGE3NTA1MzQ4LzAyZGY5MDI2LTVlYTItNDcxOC1hNTVjLWQ0NmRhNzUw NTM0OC5jcmwwHwYDVR0jBBgwFoAUyBt2Ol6lM34AGtjZ+ZDa9s1kXqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRmOTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZk YTc1MDUzNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk7nAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV1Iikcx9/V+B5y+XNdptTbUpoenrwOkIitzaVPmvrS+fIkeuFg9LMF f17pKYZN/ZwsLwK3FjJ6d8DcOeIoJhcMrnbax7ifcM5Ltua86Kyz2U72YAXJm+Tg DhZx0K9FWlNo0bJ9s4x8jmtZAT7GnDx7CfxGKBpOpFxbUDFFjz0iFu+uDw7AlL2p RGuQLMr/z2W7tPAEONJR8ZkRcljLH4dA4p98ux5Mh2BsS12SIt/w+pYqJup37fEF R/pyYIueNJuDPfSWb1hq8QjFiS4udo5Ovn888jWCfsToev1GEBZQ8AgIKFAkBr4W pnD6hOB+hoJBdmnYhR6iNikwbB99eWs= -----END CERTIFICATE-----Generated at Thu Mar 26 12:29:21 2026 by rpki-client