$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d6d8cee2-6301-3063-826d-b91ab0fc7577.roa File: d6d8cee2-6301-3063-826d-b91ab0fc7577.roa (raw, json) Hash identifier: 1KP4SwAl4rzvWOdsS3qg+Pn45QEZObfY3wjeTkId/ZM= Subject key identifier: 76:3A:27:A9:10:B7:EC:38:80:7F:5C:43:80:95:7E:EC:29:5F:7C:81 Certificate issuer: /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Certificate serial: 010D0C9F4328584D143D8081B28F14F8F00B04C0 Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d6d8cee2-6301-3063-826d-b91ab0fc7577.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 13332 IP address blocks: 172.84.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:80:81:b2:8f:14:f8:f0:0b:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=489ce68a-e476-433b-92a3-c1c94ae9dca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:84:a1:fd:91:e5:88:67:2d:40:81:03:2f:e1: 38:20:48:6d:1a:26:c9:10:0c:c2:56:fe:c3:ff:51: d2:b1:71:cc:b8:4a:8e:bd:15:18:5a:71:d6:d9:64: 4d:ef:50:bd:09:f4:42:92:d9:26:e2:8b:5d:50:61: 5b:80:86:30:f7:a2:c0:38:3a:10:c8:cb:2a:61:b7: f8:32:89:66:86:3e:50:d8:a4:6c:43:95:c7:67:5c: 35:a6:0c:db:12:bc:ec:5b:be:5c:6d:e7:9d:60:a6: e6:12:06:a3:1d:06:a5:f1:0f:a0:23:9e:f1:bc:df: 75:9f:e1:53:2e:dd:0c:8b:f4:67:9e:f9:1d:af:b7: 90:5b:8b:1e:d6:08:56:50:48:e7:a7:ef:7d:f4:27: 45:6c:41:d6:0a:61:59:2c:aa:57:de:95:70:5a:2f: f1:88:a7:e6:44:bf:82:3c:35:76:69:d5:aa:1f:5c: 57:26:2d:08:3e:c5:e0:19:ad:88:66:65:34:bb:b0: 3f:bf:f5:9f:60:bd:9b:7a:c5:8f:63:ab:e6:75:fe: 12:7c:22:fe:43:81:0d:6c:d3:ee:a5:09:f9:27:0f: 2d:5a:33:d9:1f:c4:59:cd:ac:cc:b4:06:2d:d6:98: 83:13:72:a3:70:b0:3b:80:7a:84:0e:37:73:e0:b6: 00:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3A:27:A9:10:B7:EC:38:80:7F:5C:43:80:95:7E:EC:29:5F:7C:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d6d8cee2-6301-3063-826d-b91ab0fc7577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl X509v3 Authority Key Identifier: keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer sbgp-ipAddrBlock: critical IPv4: 172.84.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:08:f2:93:5c:49:ab:6e:02:80:83:eb:a3:4d:d7:7a:43:45: 82:64:77:c9:c6:fd:76:7c:9c:3a:c2:23:fd:c0:11:1a:30:bb: 42:60:59:b9:ab:dc:ea:27:f5:55:42:f4:f8:2c:f5:45:81:e9: 67:a6:5d:96:dc:3f:f9:de:07:fe:43:d9:a0:7c:6e:76:b9:95: 13:31:46:85:e9:1d:6b:28:cb:ac:94:27:37:01:0f:16:14:ab: 3f:63:3b:e8:53:19:e6:f0:85:1c:8a:77:39:74:16:d4:9e:d5: 6f:ee:cd:23:bc:6a:d3:5a:52:94:f7:53:25:14:c5:d2:1c:dd: 9a:d8:a1:0b:b5:fb:dd:a6:02:52:fb:a0:b8:ea:44:98:aa:06: 80:df:2f:90:50:4f:4f:a6:1f:3c:e4:08:e0:4b:2d:0c:15:76: d6:58:9f:97:3b:87:9a:cf:01:1f:78:12:21:79:8b:9e:c1:93: 07:da:74:2d:82:42:6b:bd:f1:a4:7a:01:96:d6:68:fe:db:9b: 94:ed:07:48:e3:6a:90:b8:e2:c2:66:8a:4e:a3:40:ce:8d:9d: e2:89:49:f2:c7:af:7b:92:ee:08:d2:4d:4d:7d:5f:00:28:89: 25:d7:da:45:dc:ac:a7:38:12:58:27:34:0e:5d:97:5c:5d:99: 34:3b:f7:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYCBso8U+PALBMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz NGQ2MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NDg5Y2U2OGEtZTQ3Ni00MzNiLTkyYTMtYzFjOTRhZTlkY2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiISh/ZHliGctQIEDL+E4IEhtGibJEAzCVv7D /1HSsXHMuEqOvRUYWnHW2WRN71C9CfRCktkm4otdUGFbgIYw96LAODoQyMsqYbf4 Molmhj5Q2KRsQ5XHZ1w1pgzbErzsW75cbeedYKbmEgajHQal8Q+gI57xvN91n+FT Lt0Mi/Rnnvkdr7eQW4se1ghWUEjnp+999CdFbEHWCmFZLKpX3pVwWi/xiKfmRL+C PDV2adWqH1xXJi0IPsXgGa2IZmU0u7A/v/WfYL2besWPY6vmdf4SfCL+Q4ENbNPu pQn5Jw8tWjPZH8RZzazMtAYt1piDE3KjcLA7gHqEDjdz4LYAkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHY6J6kQt+w4gH9cQ4CVfuwpX3yBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvZDZkOGNlZTItNjMwMS0z MDYzLTgyNmQtYjkxYWIwZmM3NTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0 YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1 MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2 MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkI8pNcSatuAoCD66NN13pDRYJkd8nG/XZ8nDrCI/3AERowu0JgWbmr 3Oon9VVC9Pgs9UWB6WemXZbcP/neB/5D2aB8bna5lRMxRoXpHWsoy6yUJzcBDxYU qz9jO+hTGebwhRyKdzl0FtSe1W/uzSO8atNaUpT3UyUUxdIc3ZrYoQu1+92mAlL7 oLjqRJiqBoDfL5BQT0+mHzzkCOBLLQwVdtZYn5c7h5rPAR94EiF5i57BkwfadC2C Qmu98aR6AZbWaP7bm5TtB0jjapC44sJmik6jQM6NneKJSfLHr3uS7gjSTU19XwAo iSXX2kXcrKc4ElgnNA5dl1xdmTQ797A= -----END CERTIFICATE-----Generated at Thu Mar 26 17:07:33 2026 by rpki-client