$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/0b8a1e80-257b-3d3b-a454-55c527409f72.roa File: 0b8a1e80-257b-3d3b-a454-55c527409f72.roa (raw, json) Hash identifier: kYo2G2CWyd2rFokYjnvXgVfYBLKcPOE5zpE6/WfG4Lg= Subject key identifier: 23:76:07:C3:4F:86:0A:73:5E:FB:E2:4A:B1:3D:2C:39:0A:13:A0:97 Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F4328584D316F6F934A2630288DFD5800 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/0b8a1e80-257b-3d3b-a454-55c527409f72.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 136787 IP address blocks: 172.103.32.0/24 maxlen: 24 172.103.33.0/24 maxlen: 24 172.103.34.0/24 maxlen: 24 172.103.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:6f:93:4a:26:30:28:8d:fd:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=7bdfcfff-62a2-4397-8c99-4dabd7a2977e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f1:86:c2:ed:8e:f5:89:98:1d:e8:7f:d5:d5: 21:84:14:62:33:31:42:79:dd:8d:44:60:bd:d4:07: 41:44:15:2d:2e:75:2f:c5:28:82:93:15:15:01:e8: 38:bc:30:3a:e2:d9:9d:d4:cb:61:86:3a:82:4f:94: 44:b0:8f:05:3e:0c:ba:09:6d:98:de:93:41:44:95: 90:4e:34:97:ac:2e:b7:bb:3e:ef:12:03:3a:5a:2d: 2a:14:e4:de:27:48:60:09:1f:81:8b:e0:ad:81:15: 25:b1:03:2a:9f:76:fb:e4:b7:01:6c:2f:d3:91:0d: 11:7a:3b:91:35:44:33:2f:2b:37:b0:39:41:42:89: 87:9b:12:0c:65:5d:d1:ee:6f:51:98:36:31:cc:fa: c3:a4:f0:26:82:3c:31:ff:32:f3:eb:40:df:59:36: 59:8a:be:d5:46:1a:f7:a6:7a:cd:23:36:a9:8d:85: 71:6a:c4:57:1b:99:42:d9:fe:cc:6f:9d:b0:1e:92: 2b:eb:a8:4e:19:24:98:4f:3b:71:e3:0a:0d:97:9d: f4:13:18:69:2d:69:47:d0:46:1b:42:39:89:63:0e: 8c:a4:ce:b1:7f:16:04:cb:f1:5a:f5:b7:9c:db:f6: 94:02:96:8b:3f:c1:99:69:8b:11:db:3c:7b:5d:84: a0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:76:07:C3:4F:86:0A:73:5E:FB:E2:4A:B1:3D:2C:39:0A:13:A0:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/0b8a1e80-257b-3d3b-a454-55c527409f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv4: 172.103.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:48:d6:a2:d2:a4:01:79:ac:78:ee:32:a0:21:5a:a0:0d:78: 96:75:fa:91:19:59:2d:97:64:68:78:fd:6d:51:27:b7:b8:a5: 1e:95:1d:f7:a0:9f:24:46:fa:d3:27:e9:ac:50:ea:6d:8b:3a: 94:99:55:95:10:f5:58:9c:32:3f:7d:b0:e0:42:af:ee:52:18: 29:e0:89:44:26:29:ff:48:bf:fa:c7:45:a2:f1:52:ef:15:e5: 87:e6:bd:09:9a:e7:66:82:a9:70:8b:e1:e7:54:27:31:14:7e: 13:e7:f0:ea:db:66:94:8a:70:94:33:5b:01:1e:94:7e:da:ce: 6d:23:0a:09:50:d2:4c:51:be:e7:bf:7c:4a:de:a8:7c:61:31: a9:8b:8b:ad:be:2a:58:2c:ab:41:a9:c7:94:dc:3d:0f:2e:c6: 10:0f:bb:12:96:03:7f:1c:41:c8:0c:c5:3e:f9:2c:86:8b:96: 13:dc:d5:ef:04:90:8d:70:1d:f2:cb:0c:2d:66:2f:ec:4b:93: 57:21:52:00:3b:6e:54:84:fd:2e:18:50:9b:d0:de:80:65:76: 72:a8:ef:ca:eb:22:b8:db:c1:97:a7:98:ec:02:d0:8f:42:d8: 33:d9:74:17:97:b5:c0:06:e2:05:1f:a0:5e:60:8e:67:40:4d: 10:00:1c:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb2+TSiYwKI39WAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk N2JkZmNmZmYtNjJhMi00Mzk3LThjOTktNGRhYmQ3YTI5NzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PGGwu2O9YmYHeh/1dUhhBRiMzFCed2NRGC9 1AdBRBUtLnUvxSiCkxUVAeg4vDA64tmd1MthhjqCT5REsI8FPgy6CW2Y3pNBRJWQ TjSXrC63uz7vEgM6Wi0qFOTeJ0hgCR+Bi+CtgRUlsQMqn3b75LcBbC/TkQ0RejuR NUQzLys3sDlBQomHmxIMZV3R7m9RmDYxzPrDpPAmgjwx/zLz60DfWTZZir7VRhr3 pnrNIzapjYVxasRXG5lC2f7Mb52wHpIr66hOGSSYTztx4woNl530ExhpLWlH0EYb QjmJYw6MpM6xfxYEy/Fa9bec2/aUApaLP8GZaYsR2zx7XYSgSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCN2B8NPhgpzXvviSrE9LDkKE6CXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvMGI4YTFlODAtMjU3Yi0z ZDNiLWE0NTQtNTVjNTI3NDA5ZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlI1qLSpAF5rHjuMqAhWqANeJZ1+pEZWS2XZGh4/W1RJ7e4pR6VHfeg nyRG+tMn6axQ6m2LOpSZVZUQ9VicMj99sOBCr+5SGCngiUQmKf9Iv/rHRaLxUu8V 5YfmvQma52aCqXCL4edUJzEUfhPn8OrbZpSKcJQzWwEelH7azm0jCglQ0kxRvue/ fEreqHxhMamLi62+Klgsq0Gpx5TcPQ8uxhAPuxKWA38cQcgMxT75LIaLlhPc1e8E kI1wHfLLDC1mL+xLk1chUgA7blSE/S4YUJvQ3oBldnKo78rrIrjbwZenmOwC0I9C 2DPZdBeXtcAG4gUfoF5gjmdATRAAHJ4= -----END CERTIFICATE-----Generated at Thu Mar 26 18:31:11 2026 by rpki-client