$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/10192187-defa-3548-b6c6-237adcf28f84.roa File: 10192187-defa-3548-b6c6-237adcf28f84.roa (raw, json) Hash identifier: xXIO1nsMYMOapFM1kLFXUU4o+6v9kL77DqymnHa7hCc= Subject key identifier: 98:D8:06:76:07:D4:44:C2:B6:98:D9:1A:15:9C:6C:55:BD:C7:A5:B7 Certificate issuer: /CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Certificate serial: 010D0C9F4328584D300A4D6B9DA5FDB92700CD00 Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/10192187-defa-3548-b6c6-237adcf28f84.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 205627 IP address blocks: 170.2.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:4d:6b:9d:a5:fd:b9:27:00:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=2459b4da-06d2-4ecc-935a-63b3d9fe09aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c6:5c:1b:9b:eb:71:7a:d0:90:8c:8e:81:1e: 5a:2f:33:00:8f:17:9c:b5:7d:4f:3e:b8:af:3b:ab: 8f:bf:4a:07:f6:62:1a:75:9a:7d:28:02:f3:ca:e4: 71:e8:eb:75:5e:a4:86:76:db:14:5e:05:af:93:9f: f0:f9:e9:2e:bb:dd:59:82:0b:41:77:80:3b:64:8a: c1:fa:ab:6e:87:ce:b0:0e:af:b9:0e:d1:14:0e:fb: ac:8e:07:a9:2a:8c:78:e5:17:c5:48:45:86:bb:da: c6:ef:e4:3a:37:4d:2b:48:70:00:44:66:65:d2:af: 49:4a:7e:9c:a2:83:20:c3:fd:89:cf:70:5a:35:3b: 07:82:25:13:4d:05:a6:8e:c2:59:22:cd:d2:91:10: 18:36:80:40:e3:1d:db:31:6e:2b:6a:67:70:94:92: 17:7d:1e:ad:7f:40:41:c3:ef:4d:f3:30:8b:41:3d: f1:21:2d:b0:f7:4c:b0:0c:6d:53:87:c2:95:d7:f1: 7c:cf:8d:ed:e7:ac:8c:61:a5:5d:28:73:cf:79:06: 2b:e0:cd:28:33:d4:c4:07:81:68:b0:ac:e2:bd:6e: e6:9e:6d:38:81:dc:c3:54:a3:76:1c:cc:51:65:fd: 47:1b:0a:fe:41:50:62:27:46:a7:17:ed:56:ed:3c: aa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D8:06:76:07:D4:44:C2:B6:98:D9:1A:15:9C:6C:55:BD:C7:A5:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/10192187-defa-3548-b6c6-237adcf28f84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl X509v3 Authority Key Identifier: keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer sbgp-ipAddrBlock: critical IPv4: 170.2.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:32:ce:05:c9:cd:36:e1:8e:5b:2c:ee:ac:a2:64:c6:f0:5f: e7:eb:8e:dd:86:7a:a2:f9:f8:85:ae:fc:b3:2d:82:7e:0d:f1: e6:6f:47:3e:aa:73:1b:fd:fd:4e:68:4c:aa:66:70:a1:fb:bd: e1:df:c8:ae:28:c9:bc:17:97:fe:8f:7d:a3:66:6f:c8:27:be: ed:4b:13:b3:3a:cc:72:bb:5f:db:14:db:bf:4a:78:cc:b8:77: 76:c7:7d:56:dd:69:34:95:d5:ff:6d:f6:c1:06:e1:a4:27:44: 85:4e:08:42:22:b2:47:5a:c4:9b:a4:4d:2a:08:36:ea:8b:60: bd:c2:b1:b5:e2:9f:86:3a:2a:8c:13:52:cc:1e:e1:0e:f4:a7: fc:14:58:66:f6:cc:b5:6b:69:92:8e:2f:1c:99:f4:6a:a3:18: eb:1d:e3:f6:56:cb:25:7a:57:06:c4:49:c4:5f:39:9f:33:5b: d6:54:f1:71:cb:d0:d5:42:87:75:1a:9f:7c:56:db:9a:4a:73: 2e:aa:ff:6a:83:90:eb:f9:6c:8c:94:83:03:98:21:d2:43:c4: 77:57:07:d5:6b:87:53:fd:bf:84:32:2b:a4:7b:0b:72:ef:cf: 01:74:d3:a9:0a:c7:df:cc:2e:23:96:ee:3b:7c:65:dc:e7:1d: 11:de:20:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCk1rnaX9uScAzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMjljNDYtZTBmMS00ZWRjLTk4OGEtOTQyMGFmZmJj MzM5MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MjQ1OWI0ZGEtMDZkMi00ZWNjLTkzNWEtNjNiM2Q5ZmUwOWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8ZcG5vrcXrQkIyOgR5aLzMAjxectX1PPriv O6uPv0oH9mIadZp9KALzyuRx6Ot1XqSGdtsUXgWvk5/w+ekuu91ZggtBd4A7ZIrB +qtuh86wDq+5DtEUDvusjgepKox45RfFSEWGu9rG7+Q6N00rSHAARGZl0q9JSn6c ooMgw/2Jz3BaNTsHgiUTTQWmjsJZIs3SkRAYNoBA4x3bMW4ramdwlJIXfR6tf0BB w+9N8zCLQT3xIS2w90ywDG1Th8KV1/F8z43t56yMYaVdKHPPeQYr4M0oM9TEB4Fo sKzivW7mnm04gdzDVKN2HMxRZf1HGwr+QVBiJ0anF+1W7TyqqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjYBnYH1ETCtpjZGhWcbFW9x6W3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOGEy OWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZmYmMzMzkvMTAxOTIxODctZGVmYS0z NTQ4LWI2YzYtMjM3YWRjZjI4Zjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjhhMjljNDYtZTBmMS00ZWRjLTk4 OGEtOTQyMGFmZmJjMzM5L2I4YTI5YzQ2LWUwZjEtNGVkYy05ODhhLTk0MjBhZmZi YzMzOS5jcmwwHwYDVR0jBBgwFoAUrluRChr3agr5yGG6uSyArkHgeRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIw YWZmYmMzMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqgKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkyzgXJzTbhjlss7qyiZMbwX+frjt2GeqL5+IWu/LMtgn4N8eZvRz6q cxv9/U5oTKpmcKH7veHfyK4oybwXl/6PfaNmb8gnvu1LE7M6zHK7X9sU279KeMy4 d3bHfVbdaTSV1f9t9sEG4aQnRIVOCEIiskdaxJukTSoINuqLYL3CsbXin4Y6KowT Uswe4Q70p/wUWGb2zLVraZKOLxyZ9GqjGOsd4/ZWyyV6VwbEScRfOZ8zW9ZU8XHL 0NVCh3Uan3xW25pKcy6q/2qDkOv5bIyUgwOYIdJDxHdXB9Vrh1P9v4QyK6R7C3Lv zwF006kKx9/MLiOW7jt8ZdznHRHeIHU= -----END CERTIFICATE-----Generated at Thu Mar 26 12:42:42 2026 by rpki-client