$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/4a3559bb-abec-3940-a565-ccc20c2855b0.roa File: 4a3559bb-abec-3940-a565-ccc20c2855b0.roa (raw, json) Hash identifier: F3erJ9uEFHXCrK0/ljZrvd4xhlB7OkHQWZVMtYJH3WI= Subject key identifier: BC:49:D5:2C:32:0A:36:AB:48:C9:0C:0E:8D:20:AA:BB:D1:94:3A:CF Certificate issuer: /CN=1126b6ac-3585-401f-b2a8-1c0c1dbe489a Certificate serial: 010D0C9F4328584D40CA5574A0DFC9CB0D3D1380 Authority key identifier: F1:69:9E:0E:11:E6:9C:30:DF:7F:B4:BE:D1:37:14:4F:B9:D5:D7:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/4a3559bb-abec-3940-a565-ccc20c2855b0.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 36352 IP address blocks: 167.253.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:55:74:a0:df:c9:cb:0d:3d:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1126b6ac-3585-401f-b2a8-1c0c1dbe489a Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=ebaf8497-a07f-426b-8872-cedf00d81dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d0:0f:27:23:39:7d:86:18:0b:b5:7f:99:7d: dc:2c:f5:8d:b7:a1:aa:db:cd:64:5d:77:dc:b8:9e: 3b:23:0a:75:00:55:a7:7b:e2:26:7a:6b:2c:4c:ec: d2:66:13:6f:00:93:dc:9f:5c:21:cb:20:5f:e5:96: 53:2c:ec:19:39:a6:1c:9c:08:93:f2:d9:bb:fa:25: 8e:45:d0:f3:6c:2e:0d:d8:db:10:de:30:6d:a4:eb: 68:cf:11:c5:3f:03:5e:52:c6:01:1d:fe:90:0e:2b: 26:df:7b:29:bc:92:71:27:54:e3:15:7e:55:43:97: fc:99:7d:95:53:29:5e:75:4c:44:15:82:68:9a:c7: 33:50:95:60:fc:94:f5:e9:e9:1d:04:b4:68:4f:40: 94:45:4e:7d:28:48:c3:a9:dd:ed:c5:47:1f:3a:4e: 48:3e:a2:3c:1c:ba:66:ac:03:53:c3:2c:ea:1d:31: 40:b3:7a:de:6f:db:0f:2f:4d:f9:c2:01:f1:81:8c: 96:e3:99:34:a0:81:3b:59:9d:1f:b0:27:5f:28:90: 89:20:1d:86:95:37:d5:d8:f0:9c:14:c0:26:ed:03: 33:fb:0d:69:db:53:52:f0:ff:a7:52:22:5b:60:74: cf:39:42:0f:88:6e:49:b1:19:81:60:1d:aa:cc:d1: c2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:49:D5:2C:32:0A:36:AB:48:C9:0C:0E:8D:20:AA:BB:D1:94:3A:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/4a3559bb-abec-3940-a565-ccc20c2855b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.crl X509v3 Authority Key Identifier: keyid:F1:69:9E:0E:11:E6:9C:30:DF:7F:B4:BE:D1:37:14:4F:B9:D5:D7:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.cer sbgp-ipAddrBlock: critical IPv4: 167.253.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:16:da:57:16:b1:ce:61:fb:dc:b7:19:4b:dd:13:d6:24:ff: 0b:e2:9d:41:ab:8c:f2:8c:ea:c9:97:84:66:be:af:47:ef:93: d2:88:85:e6:9a:2d:99:34:cc:d0:dc:41:d6:7c:a8:1a:3a:c0: ac:ab:15:22:06:0a:a0:2a:74:f7:b9:b6:9f:9c:65:49:d3:6b: 9e:d4:9a:cb:8b:61:80:ae:c1:bf:59:71:17:58:1d:83:69:5d: bb:6e:f8:9f:5e:e7:8c:8c:7f:4b:b3:c6:06:16:ca:c4:be:6f: 9e:f5:93:dc:6c:15:54:a8:e2:0f:1c:b5:e9:b5:a3:a5:1d:f4: bd:c8:b0:d4:88:5b:3b:74:29:da:f3:7d:e9:a9:27:46:6b:3f: e6:f7:1d:85:2c:a0:62:08:33:af:3f:af:bd:f3:e4:2a:41:0e: ab:5f:9a:fe:8e:80:68:a3:b1:9f:04:87:f4:98:bb:d1:7c:c1: b0:9a:97:ff:7f:d1:5a:6f:42:47:c2:c5:95:e8:d0:64:9c:3d: 57:28:06:c4:07:de:0a:52:a3:8b:35:b3:8f:41:1b:b8:3c:06: 60:16:c4:9a:46:b8:72:fe:85:81:5d:1c:29:46:0d:e4:d4:29: 5d:52:2f:2f:3d:14:54:a4:82:02:2c:06:47:7b:3e:06:09:28: 1b:43:44:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AylV0oN/Jyw09E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTEyNmI2YWMtMzU4NS00MDFmLWIyYTgtMWMwYzFkYmU0 ODlhMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk ZWJhZjg0OTctYTA3Zi00MjZiLTg4NzItY2VkZjAwZDgxZGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtAPJyM5fYYYC7V/mX3cLPWNt6Gq281kXXfc uJ47Iwp1AFWne+ImemssTOzSZhNvAJPcn1whyyBf5ZZTLOwZOaYcnAiT8tm7+iWO RdDzbC4N2NsQ3jBtpOtozxHFPwNeUsYBHf6QDism33spvJJxJ1TjFX5VQ5f8mX2V UyledUxEFYJomsczUJVg/JT16ekdBLRoT0CURU59KEjDqd3txUcfOk5IPqI8HLpm rANTwyzqHTFAs3reb9sPL035wgHxgYyW45k0oIE7WZ0fsCdfKJCJIB2GlTfV2PCc FMAm7QMz+w1p21NS8P+nUiJbYHTPOUIPiG5JsRmBYB2qzNHCDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxJ1SwyCjarSMkMDo0gqrvRlDrPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMTI2 YjZhYy0zNTg1LTQwMWYtYjJhOC0xYzBjMWRiZTQ4OWEvNGEzNTU5YmItYWJlYy0z OTQwLWE1NjUtY2NjMjBjMjg1NWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTEyNmI2YWMtMzU4NS00MDFmLWIy YTgtMWMwYzFkYmU0ODlhLzExMjZiNmFjLTM1ODUtNDAxZi1iMmE4LTFjMGMxZGJl NDg5YS5jcmwwHwYDVR0jBBgwFoAU8WmeDhHmnDDff7S+0TcUT7nV1yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMTI2YjZhYy0zNTg1LTQwMWYtYjJhOC0xYzBj MWRiZTQ4OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBp/1sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcW2lcWsc5h+9y3GUvdE9Yk/wvinUGrjPKM6smXhGa+r0fvk9KIheaa LZk0zNDcQdZ8qBo6wKyrFSIGCqAqdPe5tp+cZUnTa57UmsuLYYCuwb9ZcRdYHYNp Xbtu+J9e54yMf0uzxgYWysS+b571k9xsFVSo4g8ctem1o6Ud9L3IsNSIWzt0Kdrz fempJ0ZrP+b3HYUsoGIIM68/r73z5CpBDqtfmv6OgGijsZ8Eh/SYu9F8wbCal/9/ 0VpvQkfCxZXo0GScPVcoBsQH3gpSo4s1s49BG7g8BmAWxJpGuHL+hYFdHClGDeTU KV1SLy89FFSkggIsBkd7PgYJKBtDRHI= -----END CERTIFICATE-----Generated at Thu Mar 26 21:54:31 2026 by rpki-client