$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa File: c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa (raw, json) Hash identifier: autt3z+Xs0RyDILAGDFuufEZLltPwbe1WdAm3VbuAik= Subject key identifier: CA:95:4A:CE:45:84:A3:E3:96:A5:0D:DD:E4:C2:E7:F5:F9:02:8E:B5 Certificate issuer: /CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Certificate serial: 010D0C9F4328584D4A8FAFC72B83D63F54F5FF00 Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 205627 IP address blocks: 170.2.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:af:c7:2b:83:d6:3f:54:f5:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=4dc05f47-7bfb-4118-bb0a-0c8c96b32f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c5:bf:d9:f8:b4:18:8b:40:2b:02:ba:c7:01: 97:5f:b8:34:3d:1f:4b:3d:7f:01:cc:58:b2:e7:60: 0d:4d:d0:17:89:6e:9c:be:f2:4b:c3:d1:96:03:9f: 6b:12:b5:b8:af:9e:06:11:1d:00:79:3b:ab:d2:8c: a5:28:0d:e3:e5:b3:38:89:12:26:d9:f6:fd:9e:2c: b0:fb:ed:ba:41:86:f6:68:f3:b1:0a:e6:2b:4c:ab: 41:bf:51:01:54:91:d5:41:e1:81:4f:bc:e9:39:d6: 25:69:a3:08:4f:91:bc:ff:0b:41:a5:11:bb:97:19: b1:9c:36:39:7e:e3:4a:f5:0d:af:c1:52:73:7f:05: 29:87:db:0e:f2:1c:c1:4a:71:49:c6:50:8c:80:74: 91:94:48:36:e6:1c:04:a3:04:f8:05:e0:78:e4:fd: e5:d0:c0:d2:71:7d:b6:c6:6d:98:27:8d:fb:a7:bc: 92:09:79:88:0c:a2:11:7a:4a:05:8b:e1:ca:72:f9: c2:13:31:ed:80:0f:54:03:0b:bb:01:2b:e4:95:40: fb:8e:20:c4:b2:e4:e8:d3:3b:45:76:ab:d0:24:0e: bf:44:ed:9d:de:4a:c5:e0:66:05:f2:5b:db:b6:b4: b8:ab:b0:95:25:35:69:dd:fa:b3:18:bf:57:f5:0a: b8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:95:4A:CE:45:84:A3:E3:96:A5:0D:DD:E4:C2:E7:F5:F9:02:8E:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl X509v3 Authority Key Identifier: keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer sbgp-ipAddrBlock: critical IPv4: 170.2.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:9c:28:0e:20:7f:02:57:fe:da:2f:5d:07:4f:57:77:1d:0d: b1:43:f0:a2:59:98:a8:88:8d:f9:30:32:0f:4e:7a:6d:da:fb: 1b:93:27:bc:55:82:32:e0:e6:0b:5a:ba:9c:88:f8:6a:aa:e6: 12:83:92:c9:03:6c:00:67:4b:49:1d:ae:e1:d0:12:46:9b:28: 0a:88:21:1b:16:23:ae:39:83:24:c4:dc:26:b2:37:e3:75:e1: fa:cf:31:a4:16:8a:4c:01:66:18:d5:01:76:c4:42:68:18:19: e2:16:f2:9f:60:a6:34:d4:84:a1:3c:4e:5b:d3:67:3e:66:fb: 82:25:8d:6c:9e:d7:4c:13:21:13:db:09:ca:db:38:9c:78:29: 36:76:87:17:56:46:b4:4c:7d:d0:75:6c:7d:9e:d2:88:5d:5b: ac:2d:86:4c:0f:0e:ed:84:93:dc:0e:1a:93:92:e5:76:83:e7: 02:da:2f:2c:d4:49:a5:7b:b4:13:b0:4b:81:68:fd:f5:69:0a: 98:85:7a:7f:b4:72:b2:ce:b1:de:75:2b:b6:85:86:82:db:f6: a2:62:4c:c5:0b:ca:1a:9d:8b:a7:db:73:a5:82:d6:3c:aa:55: e2:ed:ad:1a:fc:fa:2e:8c:2f:6b:e5:ff:32:74:ba:c3:d8:80: db:6d:01:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6/HK4PWP1T1/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMjljNDYtZTBmMS00ZWRjLTk4OGEtOTQyMGFmZmJj MzM5MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk NGRjMDVmNDctN2JmYi00MTE4LWJiMGEtMGM4Yzk2YjMyZjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMW/2fi0GItAKwK6xwGXX7g0PR9LPX8BzFiy 52ANTdAXiW6cvvJLw9GWA59rErW4r54GER0AeTur0oylKA3j5bM4iRIm2fb9niyw ++26QYb2aPOxCuYrTKtBv1EBVJHVQeGBT7zpOdYlaaMIT5G8/wtBpRG7lxmxnDY5 fuNK9Q2vwVJzfwUph9sO8hzBSnFJxlCMgHSRlEg25hwEowT4BeB45P3l0MDScX22 xm2YJ437p7ySCXmIDKIRekoFi+HKcvnCEzHtgA9UAwu7ASvklUD7jiDEsuTo0ztF dqvQJA6/RO2d3krF4GYF8lvbtrS4q7CVJTVp3fqzGL9X9Qq45QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqVSs5FhKPjlqUN3eTC5/X5Ao61MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOGEy OWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZmYmMzMzkvYzg2ZmNiOTItZTJhYy0z MGYzLWIzZjktNmViZmU4NmRkZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjhhMjljNDYtZTBmMS00ZWRjLTk4 OGEtOTQyMGFmZmJjMzM5L2I4YTI5YzQ2LWUwZjEtNGVkYy05ODhhLTk0MjBhZmZi YzMzOS5jcmwwHwYDVR0jBBgwFoAUrluRChr3agr5yGG6uSyArkHgeRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIw YWZmYmMzMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqgL4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJycKA4gfwJX/tovXQdPV3cdDbFD8KJZmKiIjfkwMg9Oem3a+xuTJ7xV gjLg5gtaupyI+Gqq5hKDkskDbABnS0kdruHQEkabKAqIIRsWI645gyTE3CayN+N1 4frPMaQWikwBZhjVAXbEQmgYGeIW8p9gpjTUhKE8TlvTZz5m+4IljWye10wTIRPb CcrbOJx4KTZ2hxdWRrRMfdB1bH2e0ohdW6wthkwPDu2Ek9wOGpOS5XaD5wLaLyzU SaV7tBOwS4Fo/fVpCpiFen+0crLOsd51K7aFhoLb9qJiTMULyhqdi6fbc6WC1jyq VeLtrRr8+i6ML2vl/zJ0usPYgNttAWQ= -----END CERTIFICATE-----Generated at Thu Mar 26 11:31:47 2026 by rpki-client