$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/673f8401-eb52-442b-a559-532444ba5bc8/ec64be0c-4474-3944-858a-7162ae4afde0.roa File: ec64be0c-4474-3944-858a-7162ae4afde0.roa (raw, json) Hash identifier: ZagW/wk+FV56fqURslK0uQi34g3hEOGY+0MKzXlfdf4= Subject key identifier: 6F:C6:8E:46:07:66:73:6C:AF:4A:86:7F:A5:BD:9E:40:5A:4A:2A:E7 Certificate issuer: /CN=673f8401-eb52-442b-a559-532444ba5bc8 Certificate serial: 010D0C9F4328584D3B5BAA6D3EE86104C9F726C0 Authority key identifier: 78:E5:B2:D1:20:DE:A6:DC:62:1F:F3:E0:81:93:2F:4D:11:4C:02:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/673f8401-eb52-442b-a559-532444ba5bc8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/673f8401-eb52-442b-a559-532444ba5bc8/ec64be0c-4474-3944-858a-7162ae4afde0.roa Signing time: Fri 20 Mar 2026 14:18:58 +0000 ROA not before: Fri 20 Mar 2026 14:18:58 +0000 ROA not after: Thu 18 Jun 2026 14:18:58 +0000 asID: 401462 IP address blocks: 172.87.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/673f8401-eb52-442b-a559-532444ba5bc8/673f8401-eb52-442b-a559-532444ba5bc8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/673f8401-eb52-442b-a559-532444ba5bc8/673f8401-eb52-442b-a559-532444ba5bc8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/673f8401-eb52-442b-a559-532444ba5bc8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:5b:aa:6d:3e:e8:61:04:c9:f7:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=673f8401-eb52-442b-a559-532444ba5bc8 Validity Not Before: Mar 20 14:18:58 2026 GMT Not After : Jun 18 14:18:58 2026 GMT Subject: CN=fa247a7f-a351-4a42-bfd5-b5077a6e7336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:42:2b:7e:fa:17:9c:90:b7:26:36:50:43:d7: a0:84:0e:c5:68:8d:33:04:1a:29:21:a5:b5:a5:c1: 9a:81:5a:9e:af:b8:97:63:dc:b5:fc:91:1b:a9:91: 7b:25:7e:d9:1f:91:34:ad:85:6f:da:92:39:1c:9d: 3a:9f:5e:ee:82:d8:11:17:92:96:7d:75:06:e4:44: 64:34:21:97:62:d9:cb:33:42:d4:f2:4d:0d:59:16: 08:61:40:24:6a:23:bd:de:ae:f0:44:4b:56:5a:db: 12:a8:37:6b:67:a6:1e:e2:78:02:19:38:86:16:4c: 5b:9f:0a:23:1f:59:ee:2c:72:fc:49:56:8b:8f:d7: 9b:4b:52:0b:c4:3b:f5:c2:54:ef:7f:04:25:c7:d6: ea:6c:c8:03:97:d4:93:39:4c:c5:d5:3a:e3:3e:19: 43:6c:88:ee:a4:35:ed:e8:98:bb:ce:0e:76:12:6d: ab:a1:ab:e8:7b:47:7d:a1:02:3f:80:ad:75:2f:34: a8:7a:39:a4:67:10:82:fb:aa:f9:cc:02:1e:5d:87: 9a:45:d8:a7:93:86:07:af:ab:d5:68:13:65:0f:01: 5f:1c:26:69:f7:94:6e:09:c9:cf:81:e9:2a:ea:ea: 36:1b:53:90:30:d1:c2:e8:61:62:99:ee:4b:a0:ad: 50:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C6:8E:46:07:66:73:6C:AF:4A:86:7F:A5:BD:9E:40:5A:4A:2A:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/673f8401-eb52-442b-a559-532444ba5bc8/ec64be0c-4474-3944-858a-7162ae4afde0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/673f8401-eb52-442b-a559-532444ba5bc8/673f8401-eb52-442b-a559-532444ba5bc8.crl X509v3 Authority Key Identifier: keyid:78:E5:B2:D1:20:DE:A6:DC:62:1F:F3:E0:81:93:2F:4D:11:4C:02:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/673f8401-eb52-442b-a559-532444ba5bc8.cer sbgp-ipAddrBlock: critical IPv4: 172.87.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:34:3a:29:25:bf:67:b6:5a:22:e9:7d:07:a3:db:1f:c4:45: f9:57:48:f2:e0:90:01:6e:b3:de:cb:6d:de:9f:19:a5:1d:de: ab:45:43:d9:ee:a9:f5:c7:e9:4c:46:4b:f0:50:5f:67:72:86: 5b:4b:cd:74:4c:47:52:37:83:de:1d:6f:6f:23:a2:86:f4:a4: df:4d:b1:9a:64:a3:7a:18:b4:0e:f7:94:63:95:65:b6:7e:9a: 31:4d:c6:d9:e8:e0:7c:03:51:bf:9b:33:40:a4:a6:a7:4c:5b: ae:8a:9a:d8:18:ba:b4:bf:f5:b5:9c:44:c8:dc:00:c9:e1:16: a5:b6:0b:e9:e1:a9:88:0d:a1:b4:c8:d5:e3:1b:35:89:11:b0: 4a:63:d5:52:66:db:ba:66:f3:5d:13:53:e6:98:61:9f:60:8b: 53:a8:40:85:8b:40:e3:cb:80:ac:f4:54:25:82:6c:0b:17:97: 10:1a:81:22:c7:40:b9:23:5c:90:ce:2c:bf:44:ec:5e:54:5b: ae:72:74:50:e6:51:c0:71:a4:1a:6d:72:09:2a:c1:c5:8f:a9: 94:25:8c:0b:72:b4:a4:09:9d:e3:7f:38:36:95:f2:6a:81:a0: 5f:bb:6c:76:fa:00:f8:76:df:a9:2f:d3:f7:27:52:e4:87:c7: 9e:0a:07:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07W6ptPuhhBMn3JsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjczZjg0MDEtZWI1Mi00NDJiLWE1NTktNTMyNDQ0YmE1 YmM4MB4XDTI2MDMyMDE0MTg1OFoXDTI2MDYxODE0MTg1OFowLzEtMCsGA1UEAxMk ZmEyNDdhN2YtYTM1MS00YTQyLWJmZDUtYjUwNzdhNmU3MzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUIrfvoXnJC3JjZQQ9eghA7FaI0zBBopIaW1 pcGagVqer7iXY9y1/JEbqZF7JX7ZH5E0rYVv2pI5HJ06n17ugtgRF5KWfXUG5ERk NCGXYtnLM0LU8k0NWRYIYUAkaiO93q7wREtWWtsSqDdrZ6Ye4ngCGTiGFkxbnwoj H1nuLHL8SVaLj9ebS1ILxDv1wlTvfwQlx9bqbMgDl9STOUzF1TrjPhlDbIjupDXt 6Ji7zg52Em2roavoe0d9oQI/gK11LzSoejmkZxCC+6r5zAIeXYeaRdink4YHr6vV aBNlDwFfHCZp95RuCcnPgekq6uo2G1OQMNHC6GFime5LoK1QuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/GjkYHZnNsr0qGf6W9nkBaSirnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS82NzNm ODQwMS1lYjUyLTQ0MmItYTU1OS01MzI0NDRiYTViYzgvZWM2NGJlMGMtNDQ3NC0z OTQ0LTg1OGEtNzE2MmFlNGFmZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNjczZjg0MDEtZWI1Mi00NDJiLWE1 NTktNTMyNDQ0YmE1YmM4LzY3M2Y4NDAxLWViNTItNDQyYi1hNTU5LTUzMjQ0NGJh NWJjOC5jcmwwHwYDVR0jBBgwFoAUeOWy0SDeptxiH/PggZMvTRFMAi4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS82NzNmODQwMS1lYjUyLTQ0MmItYTU1OS01MzI0 NDRiYTViYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrFcsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKo0Oiklv2e2WiLpfQej2x/ERflXSPLgkAFus97Lbd6fGaUd3qtFQ9nu qfXH6UxGS/BQX2dyhltLzXRMR1I3g94db28joob0pN9NsZpko3oYtA73lGOVZbZ+ mjFNxtno4HwDUb+bM0CkpqdMW66KmtgYurS/9bWcRMjcAMnhFqW2C+nhqYgNobTI 1eMbNYkRsEpj1VJm27pm810TU+aYYZ9gi1OoQIWLQOPLgKz0VCWCbAsXlxAagSLH QLkjXJDOLL9E7F5UW65ydFDmUcBxpBptcgkqwcWPqZQljAtytKQJneN/ODaV8mqB oF+7bHb6APh236kv0/cnUuSHx54KB+c= -----END CERTIFICATE-----Generated at Thu Mar 26 05:03:04 2026 by rpki-client