$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/6a21bb8a-e0d6-3b5d-a628-7e1e9c246864.roa File: 6a21bb8a-e0d6-3b5d-a628-7e1e9c246864.roa (raw, json) Hash identifier: mnkRBe8LJ8x8xHgbcAhBDKd+1FAmh1GTxNTCAIOvbCs= Subject key identifier: A3:3A:33:3A:FF:B4:D3:B7:A9:88:62:D9:64:17:AE:14:F1:6C:79:11 Certificate issuer: /CN=43dfd777-de1f-43d4-839f-074c5f3bd298 Certificate serial: 010D0C9F4328584D44FA637FE7935682D21CF320 Authority key identifier: AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/6a21bb8a-e0d6-3b5d-a628-7e1e9c246864.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 400110 IP address blocks: 184.169.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:63:7f:e7:93:56:82:d2:1c:f3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43dfd777-de1f-43d4-839f-074c5f3bd298 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=8ec4ef37-bacf-4568-aea5-5e3e69529774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a8:e3:f4:2a:4b:ac:3e:08:56:d1:01:96:f3: 3e:e3:12:09:06:4d:49:ec:2a:5b:f4:70:1a:b1:a0: ae:ef:1e:f4:44:79:0a:e0:c8:3b:68:76:df:0f:0d: 0f:84:ef:5c:bc:4c:de:77:c0:e3:73:c0:ff:db:e9: 2e:08:0b:de:54:4d:17:21:8d:36:78:07:ad:a2:ad: 7c:5f:83:25:f0:cc:f9:45:79:7d:82:1c:42:38:63: 26:6a:55:7c:90:57:10:77:dd:35:22:44:71:97:dd: d9:b1:f3:97:14:38:af:8f:a4:f2:f0:31:9a:2b:a6: da:fe:f5:fc:cd:a8:1f:86:f7:e5:62:f5:43:d5:ae: 03:43:be:e6:61:70:7b:24:b0:50:39:e4:cf:2f:7c: e7:4b:fc:3c:f8:36:46:1a:6f:c4:5e:b0:64:a1:74: 02:65:46:22:f9:26:bd:8b:67:a3:f3:2e:b6:6b:a8: 26:05:3c:e1:a9:86:47:9c:53:77:50:3e:cd:3a:53: 72:ea:88:0f:ec:44:bd:5e:38:b6:ef:57:35:44:ad: 51:a5:a0:b0:49:44:88:81:3a:ba:60:ea:8f:77:c5: 92:fc:99:4a:74:5f:7e:1d:2b:3c:75:a6:24:cb:7b: 1f:05:27:50:fb:6e:eb:15:95:0b:6a:e1:f3:48:62: d7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3A:33:3A:FF:B4:D3:B7:A9:88:62:D9:64:17:AE:14:F1:6C:79:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/6a21bb8a-e0d6-3b5d-a628-7e1e9c246864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl X509v3 Authority Key Identifier: keyid:AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer sbgp-ipAddrBlock: critical IPv4: 184.169.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:12:bc:95:a1:46:28:01:07:33:3c:fc:45:ad:0f:45:68:91: 9e:0f:53:f8:a1:0a:81:47:e0:3c:61:42:af:9b:26:eb:b2:2e: 89:b7:ba:0c:c3:73:32:bb:8a:97:cb:e7:3d:94:fd:f6:21:a4: 33:23:42:c2:9e:c8:09:98:59:01:58:0e:55:29:fa:a9:9b:4c: 49:9a:ad:31:6c:8c:cc:0c:ab:a1:3b:c6:ad:bd:c3:87:1f:7e: 45:2f:d8:0a:02:a8:7e:9f:cc:42:15:bc:54:5a:a0:9b:d6:46: cf:10:0b:90:e5:9f:f0:d4:6f:0b:29:7c:ed:08:f4:e8:06:b3: 0a:42:90:55:9c:33:83:0f:ac:07:e6:1b:25:2e:c4:ff:c0:8a: 32:ee:5f:51:5d:8f:cc:38:82:d4:c5:92:5c:9b:41:12:d6:a2: 77:77:f3:7e:23:98:ac:ad:d7:8c:57:8c:36:d9:a0:b3:20:7a: 22:d1:a7:0c:79:03:b7:5f:d8:93:b2:af:b1:e5:68:62:a8:9b: e4:3f:c5:a6:d0:0c:1c:5d:06:94:50:96:e6:48:f4:fe:1a:11: 29:b6:c0:17:bb:9b:8a:72:8d:bc:5e:c6:0b:6d:f0:79:88:13: ed:e0:fb:5b:98:1e:1d:05:69:01:2f:9c:06:c7:dc:bf:b8:1f: ec:79:44:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mN/55NWgtIc8yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNkZmQ3NzctZGUxZi00M2Q0LTgzOWYtMDc0YzVmM2Jk Mjk4MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OGVjNGVmMzctYmFjZi00NTY4LWFlYTUtNWUzZTY5NTI5Nzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtajj9CpLrD4IVtEBlvM+4xIJBk1J7Cpb9HAa saCu7x70RHkK4Mg7aHbfDw0PhO9cvEzed8Djc8D/2+kuCAveVE0XIY02eAetoq18 X4Ml8Mz5RXl9ghxCOGMmalV8kFcQd901IkRxl93ZsfOXFDivj6Ty8DGaK6ba/vX8 zagfhvflYvVD1a4DQ77mYXB7JLBQOeTPL3znS/w8+DZGGm/EXrBkoXQCZUYi+Sa9 i2ej8y62a6gmBTzhqYZHnFN3UD7NOlNy6ogP7ES9Xji271c1RK1RpaCwSUSIgTq6 YOqPd8WS/JlKdF9+HSs8daYky3sfBSdQ+27rFZULauHzSGLX8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKM6Mzr/tNO3qYhi2WQXrhTxbHkRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80M2Rm ZDc3Ny1kZTFmLTQzZDQtODM5Zi0wNzRjNWYzYmQyOTgvNmEyMWJiOGEtZTBkNi0z YjVkLWE2MjgtN2UxZTljMjQ2ODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDNkZmQ3NzctZGUxZi00M2Q0LTgz OWYtMDc0YzVmM2JkMjk4LzQzZGZkNzc3LWRlMWYtNDNkNC04MzlmLTA3NGM1ZjNi ZDI5OC5jcmwwHwYDVR0jBBgwFoAUr/l6foWPAPqyZCoge4JiOKxPflAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80M2RmZDc3Ny1kZTFmLTQzZDQtODM5Zi0wNzRj NWYzYmQyOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuKkqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkSvJWhRigBBzM8/EWtD0VokZ4PU/ihCoFH4DxhQq+bJuuyLom3ugzD czK7ipfL5z2U/fYhpDMjQsKeyAmYWQFYDlUp+qmbTEmarTFsjMwMq6E7xq29w4cf fkUv2AoCqH6fzEIVvFRaoJvWRs8QC5Dln/DUbwspfO0I9OgGswpCkFWcM4MPrAfm GyUuxP/AijLuX1Fdj8w4gtTFklybQRLWond3834jmKyt14xXjDbZoLMgeiLRpwx5 A7df2JOyr7HlaGKom+Q/xabQDBxdBpRQluZI9P4aESm2wBe7m4pyjbxexgtt8HmI E+3g+1uYHh0FaQEvnAbH3L+4H+x5RI0= -----END CERTIFICATE-----Generated at Thu Mar 26 09:08:36 2026 by rpki-client