$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/ec596c97-4aa0-3907-9a93-ca179f8ef492.roa File: ec596c97-4aa0-3907-9a93-ca179f8ef492.roa (raw, json) Hash identifier: U5hPToYBtOnrnkUFitHmlWlQmYEYrjpztbNbhNZuuz0= Subject key identifier: C0:6C:4A:A0:2D:D8:86:35:59:C3:4A:F5:63:65:88:87:1D:04:CD:6A Certificate issuer: /CN=43dfd777-de1f-43d4-839f-074c5f3bd298 Certificate serial: 010D0C9F4328584D1B1A675F3508C14B2E1599E0 Authority key identifier: AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/ec596c97-4aa0-3907-9a93-ca179f8ef492.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 400110 IP address blocks: 184.169.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:67:5f:35:08:c1:4b:2e:15:99:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43dfd777-de1f-43d4-839f-074c5f3bd298 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=ce8fd788-69c4-4ccc-b7e7-76b91562a2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:de:ac:b6:cc:9f:d0:77:1c:4e:26:31:43:9d: 2a:c0:c7:16:6e:31:fc:0a:a2:44:9f:b3:a1:c7:ca: 21:57:99:a0:b1:f8:64:05:9f:d4:af:a2:8d:76:ae: 66:41:a5:34:e5:e1:da:ae:6a:6b:46:a6:97:6f:37: 8d:4a:91:eb:30:f1:c6:f7:a8:30:e8:ff:5c:f1:d4: b3:1f:26:50:88:03:51:08:5c:a6:6b:fa:b5:9b:5d: ff:e9:ac:b2:6f:c5:de:81:ba:7c:8a:eb:58:90:7b: a4:4b:5c:af:c3:9b:44:51:27:c4:f2:ba:82:4a:69: 3d:91:8c:f6:e2:cd:c9:d8:13:28:bc:f2:f4:17:df: d5:7a:b6:8d:95:9f:76:ce:c0:bc:2d:22:ff:99:83: da:06:ee:99:32:67:aa:d4:c2:27:25:5d:d0:87:d6: 06:5a:60:66:53:52:14:e9:c9:5f:02:56:c9:6d:09: a6:f8:43:4d:ef:e8:10:a5:de:1e:0b:f3:65:1e:9f: c4:4c:d8:d1:f8:af:72:c5:ec:de:ec:b5:00:fd:69: 0e:19:fc:e2:4b:16:41:6e:1e:5c:f5:8e:73:75:7e: d5:15:ff:ab:3b:f1:15:67:be:0f:68:47:14:6c:07: 83:62:de:14:25:47:7d:9d:7b:84:4d:f6:f0:f9:c7: 43:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6C:4A:A0:2D:D8:86:35:59:C3:4A:F5:63:65:88:87:1D:04:CD:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/ec596c97-4aa0-3907-9a93-ca179f8ef492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl X509v3 Authority Key Identifier: keyid:AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer sbgp-ipAddrBlock: critical IPv4: 184.169.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e3:3f:4c:8e:c6:35:9b:1f:c0:dd:30:dc:47:2c:7e:0a:da: 9e:cf:80:5b:c6:48:c4:77:1c:c8:2e:1e:1f:83:44:a3:36:63: 81:09:f7:3a:ef:ed:1c:b7:ec:19:84:49:6a:e9:97:19:02:fc: 05:f4:74:52:2f:28:e9:1b:e0:31:bf:59:da:22:45:2a:74:86: 08:39:b2:41:8d:88:76:4c:76:2e:18:ff:66:9f:42:07:9c:01: 6d:74:10:dd:bf:48:a9:01:49:e0:8c:0a:57:28:b4:5e:44:d2: 22:96:d3:8c:f9:2d:2d:91:72:7d:e8:49:64:78:91:06:6e:73: 70:e8:ca:40:3d:16:4b:5b:85:d0:38:f3:67:7c:b1:6a:fc:2c: a9:40:d7:59:b3:71:6e:1d:5e:19:57:30:49:9a:c1:75:8e:08: 66:16:6b:18:19:6b:c0:76:f5:0d:a1:81:09:d5:5d:d8:b7:c6: 5b:8e:c7:38:9f:97:2b:9f:9f:22:b3:04:93:21:8b:ae:20:88: 7a:a2:bf:dd:4f:16:e9:87:dd:1c:f7:8b:c1:34:b0:da:4c:d4: b8:2a:cd:b2:f8:9f:d1:a8:90:43:11:0a:f3:e7:35:5b:02:66: 02:9c:81:5f:e4:84:06:c1:cf:56:8a:85:18:50:84:12:99:c3: 54:8a:1d:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGmdfNQjBSy4VmeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNkZmQ3NzctZGUxZi00M2Q0LTgzOWYtMDc0YzVmM2Jk Mjk4MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk Y2U4ZmQ3ODgtNjljNC00Y2NjLWI3ZTctNzZiOTE1NjJhMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd6stsyf0HccTiYxQ50qwMcWbjH8CqJEn7Oh x8ohV5mgsfhkBZ/Ur6KNdq5mQaU05eHarmprRqaXbzeNSpHrMPHG96gw6P9c8dSz HyZQiANRCFyma/q1m13/6ayyb8Xegbp8iutYkHukS1yvw5tEUSfE8rqCSmk9kYz2 4s3J2BMovPL0F9/VeraNlZ92zsC8LSL/mYPaBu6ZMmeq1MInJV3Qh9YGWmBmU1IU 6clfAlbJbQmm+ENN7+gQpd4eC/NlHp/ETNjR+K9yxeze7LUA/WkOGfziSxZBbh5c 9Y5zdX7VFf+rO/EVZ74PaEcUbAeDYt4UJUd9nXuETfbw+cdDswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBsSqAt2IY1WcNK9WNliIcdBM1qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80M2Rm ZDc3Ny1kZTFmLTQzZDQtODM5Zi0wNzRjNWYzYmQyOTgvZWM1OTZjOTctNGFhMC0z OTA3LTlhOTMtY2ExNzlmOGVmNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDNkZmQ3NzctZGUxZi00M2Q0LTgz OWYtMDc0YzVmM2JkMjk4LzQzZGZkNzc3LWRlMWYtNDNkNC04MzlmLTA3NGM1ZjNi ZDI5OC5jcmwwHwYDVR0jBBgwFoAUr/l6foWPAPqyZCoge4JiOKxPflAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80M2RmZDc3Ny1kZTFmLTQzZDQtODM5Zi0wNzRj NWYzYmQyOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuKkqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELjP0yOxjWbH8DdMNxHLH4K2p7PgFvGSMR3HMguHh+DRKM2Y4EJ9zrv 7Ry37BmESWrplxkC/AX0dFIvKOkb4DG/WdoiRSp0hgg5skGNiHZMdi4Y/2afQgec AW10EN2/SKkBSeCMClcotF5E0iKW04z5LS2Rcn3oSWR4kQZuc3DoykA9FktbhdA4 82d8sWr8LKlA11mzcW4dXhlXMEmawXWOCGYWaxgZa8B29Q2hgQnVXdi3xluOxzif lyufnyKzBJMhi64giHqiv91PFumH3Rz3i8E0sNpM1LgqzbL4n9GokEMRCvPnNVsC ZgKcgV/khAbBz1aKhRhQhBKZw1SKHTY= -----END CERTIFICATE-----Generated at Thu Mar 26 19:26:35 2026 by rpki-client