$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/a73e168d-7b30-3863-a850-c6259591b98c.roa File: a73e168d-7b30-3863-a850-c6259591b98c.roa (raw, json) Hash identifier: ZaoHneG8TQe0NCGTCCPPaVpIuoYU2QO0bQCHlaJvP9s= Subject key identifier: 00:33:95:EA:64:E1:87:C1:38:4B:0E:ED:8E:6D:96:0D:A1:59:21:B3 Certificate issuer: /CN=0f24aff1-87f5-4ba7-be1d-e6e87e0a6605 Certificate serial: 010D0C9F4328584D3F64D9095FB6BDD2A5FE5380 Authority key identifier: 9C:8A:68:F5:7C:D3:47:5B:14:F0:63:E0:7E:00:C0:10:B6:BB:01:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/a73e168d-7b30-3863-a850-c6259591b98c.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 46890 IP address blocks: 164.163.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d9:09:5f:b6:bd:d2:a5:fe:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f24aff1-87f5-4ba7-be1d-e6e87e0a6605 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=4b1291d3-bc0c-40ef-bcf0-1eaf7b058a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:14:3d:63:4f:82:b9:f1:ed:e1:2c:28:51:76: 92:0e:11:bf:c6:88:83:63:e4:ac:36:94:56:e3:cb: 7b:85:d6:bb:ef:2c:82:cf:7a:2d:f9:dc:09:49:0e: 1d:a4:ab:32:a7:5b:ec:9b:ff:c3:41:97:92:25:38: c7:ae:05:31:84:69:15:ed:fa:94:2c:60:7a:87:0b: 90:da:6c:4b:24:f1:35:5e:6c:74:f3:93:ef:63:e3: 07:64:8b:a1:0b:4b:9c:89:f1:95:6b:f5:ea:f9:2b: 98:dd:9b:95:ad:a1:15:44:f4:47:21:91:12:62:ca: 82:47:87:a8:c1:e6:7b:35:47:c9:fa:29:d5:0a:28: 43:b7:a8:5f:78:5d:04:0d:b2:bf:b8:13:3a:da:d1: d7:be:96:1c:b4:30:2e:bc:a6:fd:39:05:83:44:7d: e1:c8:1b:6a:28:d6:f6:21:f7:32:4c:11:a0:9a:ea: c9:40:35:1b:08:a3:e1:90:05:54:96:d1:c8:0f:cf: 2b:0c:8d:ee:62:07:c6:da:76:44:cd:02:f1:18:18: 9e:a7:cf:a6:ff:07:34:a5:28:82:0e:74:db:d3:bb: 56:3e:29:50:89:02:34:c9:50:af:62:00:1f:50:52: 17:76:a8:49:4c:44:c1:53:9a:5a:e6:56:a2:20:b5: e0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:33:95:EA:64:E1:87:C1:38:4B:0E:ED:8E:6D:96:0D:A1:59:21:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/a73e168d-7b30-3863-a850-c6259591b98c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.crl X509v3 Authority Key Identifier: keyid:9C:8A:68:F5:7C:D3:47:5B:14:F0:63:E0:7E:00:C0:10:B6:BB:01:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.cer sbgp-ipAddrBlock: critical IPv4: 164.163.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:2e:b5:12:d5:d4:51:17:58:b2:a0:dd:7f:65:6c:03:32:44: e3:a5:c1:2d:c3:d9:c0:cb:94:a4:70:a6:f2:bc:5c:25:82:77: 0a:6f:20:f6:1d:90:b3:ca:f5:f8:b6:f8:1c:ef:7d:eb:df:59: 44:7b:a3:8c:fa:23:a3:c0:29:ac:c3:c6:07:7f:47:a7:99:66: 7c:a4:e6:c1:55:38:da:3b:57:48:73:d3:ca:9d:9e:89:43:89: be:9f:18:70:0e:ab:01:57:45:9c:04:64:e4:25:4e:1e:8b:b4: a5:5d:a5:50:f3:fd:36:cb:b6:4a:52:a2:6f:fc:9b:ec:b0:4e: 25:e1:02:0f:ce:ef:61:92:22:ce:dd:fc:bb:c7:2b:b6:3c:73: be:a7:8e:f0:4a:41:fc:3e:75:5f:cd:82:0b:4c:53:de:fc:2f: 40:b0:00:bb:ef:f8:81:2b:c1:ba:1e:fb:99:92:3d:ab:30:70: 2b:8b:69:3b:61:66:b1:8c:fc:d1:9f:b5:68:5a:c4:a3:d6:9b: 7c:32:eb:c5:be:bc:2f:7b:3f:89:ca:ed:dc:5f:f6:6c:31:b2: ea:f1:8e:6e:6a:5c:e3:4d:32:89:eb:d5:7c:4b:99:94:7e:69: 26:a9:d0:ea:75:73:de:b2:e7:fe:43:2c:a5:b4:36:32:36:98: 0f:d9:61:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNkJX7a90qX+U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYyNGFmZjEtODdmNS00YmE3LWJlMWQtZTZlODdlMGE2 NjA1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NGIxMjkxZDMtYmMwYy00MGVmLWJjZjAtMWVhZjdiMDU4YTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxQ9Y0+CufHt4SwoUXaSDhG/xoiDY+SsNpRW 48t7hda77yyCz3ot+dwJSQ4dpKsyp1vsm//DQZeSJTjHrgUxhGkV7fqULGB6hwuQ 2mxLJPE1Xmx085PvY+MHZIuhC0ucifGVa/Xq+SuY3ZuVraEVRPRHIZESYsqCR4eo weZ7NUfJ+inVCihDt6hfeF0EDbK/uBM62tHXvpYctDAuvKb9OQWDRH3hyBtqKNb2 IfcyTBGgmurJQDUbCKPhkAVUltHID88rDI3uYgfG2nZEzQLxGBiep8+m/wc0pSiC DnTb07tWPilQiQI0yVCvYgAfUFIXdqhJTETBU5pa5laiILXgpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAzlepk4YfBOEsO7Y5tlg2hWSGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZjI0 YWZmMS04N2Y1LTRiYTctYmUxZC1lNmU4N2UwYTY2MDUvYTczZTE2OGQtN2IzMC0z ODYzLWE4NTAtYzYyNTk1OTFiOThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGYyNGFmZjEtODdmNS00YmE3LWJl MWQtZTZlODdlMGE2NjA1LzBmMjRhZmYxLTg3ZjUtNGJhNy1iZTFkLWU2ZTg3ZTBh NjYwNS5jcmwwHwYDVR0jBBgwFoAUnIpo9XzTR1sU8GPgfgDAELa7AS0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZjI0YWZmMS04N2Y1LTRiYTctYmUxZC1lNmU4 N2UwYTY2MDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpKNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8utRLV1FEXWLKg3X9lbAMyROOlwS3D2cDLlKRwpvK8XCWCdwpvIPYd kLPK9fi2+BzvfevfWUR7o4z6I6PAKazDxgd/R6eZZnyk5sFVONo7V0hz08qdnolD ib6fGHAOqwFXRZwEZOQlTh6LtKVdpVDz/TbLtkpSom/8m+ywTiXhAg/O72GSIs7d /LvHK7Y8c76njvBKQfw+dV/NggtMU978L0CwALvv+IErwboe+5mSPaswcCuLaTth ZrGM/NGftWhaxKPWm3wy68W+vC97P4nK7dxf9mwxsurxjm5qXONNMonr1XxLmZR+ aSap0Op1c96y5/5DLKW0NjI2mA/ZYcc= -----END CERTIFICATE-----Generated at Thu Mar 26 18:52:16 2026 by rpki-client