$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/ab42f21f-96f1-3ead-8d6f-fc1e57d8c54b.roa File: ab42f21f-96f1-3ead-8d6f-fc1e57d8c54b.roa (raw, json) Hash identifier: gxBTDsuwWMchlm17hNup8k7ouR960B9btPZkbvGLa84= Subject key identifier: 22:96:43:11:2F:CA:13:3F:EF:F4:CE:E2:9D:1C:24:B7:F6:B5:CF:C8 Certificate issuer: /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Certificate serial: 010D0C9F4328584D44FA3F344DE159D035243BC0 Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/ab42f21f-96f1-3ead-8d6f-fc1e57d8c54b.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 55178 IP address blocks: 192.230.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:3f:34:4d:e1:59:d0:35:24:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=a08667f3-1a13-4ebe-884f-7e6beca749a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:aa:73:14:82:a6:47:0b:32:df:65:eb:e5:23: bb:ff:d9:f5:19:5e:07:df:f0:76:97:d8:da:e6:d6: 03:db:b0:4a:d4:7f:2a:ce:ed:88:c6:73:b5:48:98: f0:57:a8:d5:c9:a7:eb:a5:5b:a9:fa:a4:34:60:9a: a7:54:14:d9:1f:db:0d:e3:23:b4:5d:df:a8:2f:c1: 0c:b0:63:fa:51:bf:ac:fc:88:3d:1e:99:b1:3e:f2: 1f:80:97:99:42:a3:1a:5c:7d:a5:6e:ec:b1:c9:2c: 9f:96:1c:ca:b2:7f:6f:1b:d2:cc:d2:e9:d4:9c:c5: 12:13:1b:14:69:ce:97:0d:b6:16:9f:10:df:4c:2b: 85:4e:56:bb:20:fb:cf:05:d8:d9:91:db:bb:7a:fa: 5d:fc:38:99:7f:42:2d:80:3e:96:f1:25:ec:af:f0: 57:b5:ae:cb:2b:78:08:c9:9b:b0:3e:b5:24:ec:8f: 3a:dd:fd:3d:12:6c:88:05:7a:02:d6:43:31:66:68: 70:78:7a:c6:b8:83:0c:8e:c1:e7:d9:d8:ba:8b:b4: a5:67:69:ae:5f:e1:40:df:5b:8d:67:85:e3:d6:9e: 47:88:4b:af:51:19:6a:6f:d1:ca:43:21:a0:39:6f: 0c:07:34:87:a8:8a:d8:d1:6c:7a:74:85:70:21:46: 47:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:96:43:11:2F:CA:13:3F:EF:F4:CE:E2:9D:1C:24:B7:F6:B5:CF:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/ab42f21f-96f1-3ead-8d6f-fc1e57d8c54b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl X509v3 Authority Key Identifier: keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer sbgp-ipAddrBlock: critical IPv4: 192.230.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:77:e0:cf:b5:e9:11:4a:db:ee:e5:93:14:17:a2:34:f8:ea: b4:c8:ac:be:41:66:44:74:e9:e3:5b:15:e4:5f:9a:e8:1c:7c: 5e:8a:cb:d3:71:09:83:bb:3d:f9:23:a4:c2:55:5f:8f:4f:a8: d3:4d:ba:bc:46:e1:39:5d:b3:93:73:03:01:00:f6:d5:4b:a7: 60:fb:27:a3:53:42:34:12:21:e4:1a:d6:2d:2b:e4:7c:39:4c: 17:a0:5f:0f:3f:35:f4:fe:0d:92:5c:23:f1:d5:e5:ea:bb:52: fd:82:93:d9:a5:73:a5:a3:00:bf:5c:97:41:66:d5:01:c3:0e: 0c:ce:e4:63:66:2f:c4:a7:fd:4a:ad:05:1c:cf:13:03:25:6b: da:ab:af:91:87:49:a6:0f:51:cd:c2:60:28:04:59:fa:99:9d: ff:70:26:39:9a:d1:05:fe:12:63:ed:18:1f:f9:01:75:fb:07: d6:3b:0c:0a:ef:98:59:2c:03:2c:77:72:3f:30:80:f4:d5:9c: 33:06:ce:9d:fe:0e:8b:d4:e2:d8:fa:ab:c8:7b:30:d8:1a:4c: 52:fc:28:bb:30:bc:cf:5f:fe:f5:07:56:c0:40:f3:7d:97:c5: 5f:50:92:82:2f:26:d4:37:3c:df:ee:da:a7:84:fe:41:57:8d: e1:0c:eb:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+j80TeFZ0DUkO8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg5MDNhMTQtZWY1Zi00MzEwLWI2OTQtNjBmNDliMWM2 MWE5MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YTA4NjY3ZjMtMWExMy00ZWJlLTg4NGYtN2U2YmVjYTc0OWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhapzFIKmRwsy32Xr5SO7/9n1GV4H3/B2l9ja 5tYD27BK1H8qzu2IxnO1SJjwV6jVyafrpVup+qQ0YJqnVBTZH9sN4yO0Xd+oL8EM sGP6Ub+s/Ig9HpmxPvIfgJeZQqMaXH2lbuyxySyflhzKsn9vG9LM0unUnMUSExsU ac6XDbYWnxDfTCuFTla7IPvPBdjZkdu7evpd/DiZf0ItgD6W8SXsr/BXta7LK3gI yZuwPrUk7I863f09EmyIBXoC1kMxZmhweHrGuIMMjsHn2di6i7SlZ2muX+FA31uN Z4Xj1p5HiEuvURlqb9HKQyGgOW8MBzSHqIrY0Wx6dIVwIUZHGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKWQxEvyhM/7/TO4p0cJLf2tc/IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkw M2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0OWIxYzYxYTkvYWI0MmYyMWYtOTZmMS0z ZWFkLThkNmYtZmMxZTU3ZDhjNTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg5MDNhMTQtZWY1Zi00MzEwLWI2 OTQtNjBmNDliMWM2MWE5L2E4OTAzYTE0LWVmNWYtNDMxMC1iNjk0LTYwZjQ5YjFj NjFhOS5jcmwwHwYDVR0jBBgwFoAUcjvjDDCo3dCu/FhWC6SEaIgkq2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkwM2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0 OWIxYzYxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV34M+16RFK2+7lkxQXojT46rTIrL5BZkR06eNbFeRfmugcfF6Ky9Nx CYO7PfkjpMJVX49PqNNNurxG4Tlds5NzAwEA9tVLp2D7J6NTQjQSIeQa1i0r5Hw5 TBegXw8/NfT+DZJcI/HV5eq7Uv2Ck9mlc6WjAL9cl0Fm1QHDDgzO5GNmL8Sn/Uqt BRzPEwMla9qrr5GHSaYPUc3CYCgEWfqZnf9wJjma0QX+EmPtGB/5AXX7B9Y7DArv mFksAyx3cj8wgPTVnDMGzp3+DovU4tj6q8h7MNgaTFL8KLswvM9f/vUHVsBA832X xV9QkoIvJtQ3PN/u2qeE/kFXjeEM6zQ= -----END CERTIFICATE-----Generated at Thu Mar 26 21:39:40 2026 by rpki-client