$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/d097d779-d0f5-3dfb-b429-f39981788e91.roa File: d097d779-d0f5-3dfb-b429-f39981788e91.roa (raw, json) Hash identifier: CEUMtx4AgKAn2UJprfy9Ig98bvQQUY9fPpxUajvWVNQ= Subject key identifier: 9A:63:02:81:99:AE:C4:D8:84:90:51:2A:DE:FD:9E:CC:07:5C:65:CB Certificate issuer: /CN=21adcbb8-b500-460f-90cb-bca0525aabcb Certificate serial: 010D0C9F4328584D44FA32A03EFD66D85199A880 Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/d097d779-d0f5-3dfb-b429-f39981788e91.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16509 IP address blocks: 170.176.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:32:a0:3e:fd:66:d8:51:99:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=d3d34616-e5db-4a0a-8393-8672ba6b6a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0d:67:02:a3:0a:96:5d:19:e9:af:70:fb:5c: 64:e7:8a:98:9b:03:dc:96:40:bc:4c:be:ad:71:53: 5d:28:67:d7:2b:b3:85:d7:ad:7d:be:91:78:22:6d: 1a:4c:b7:2a:2a:73:ac:65:65:40:a9:99:32:8d:28: c3:27:eb:86:8b:62:4e:4e:d9:0e:fd:24:51:74:54: d2:7d:47:65:c7:d2:7e:b0:89:09:69:ad:dc:02:ec: ab:e8:a1:5d:ae:fe:32:27:34:66:3b:82:b9:a7:43: 70:bc:45:f1:b5:5c:57:ad:d8:6a:a1:b2:02:53:47: 7d:a2:76:2b:9c:ed:b9:16:eb:73:1c:25:38:f9:2c: f2:15:eb:54:69:aa:1e:b2:39:a2:2a:9e:bd:13:14: d1:28:a6:5e:5d:d4:21:87:b5:4a:cb:f5:08:e0:70: 80:db:a8:2b:c8:7b:43:e1:33:ed:ec:28:39:a5:52: a5:da:d7:8a:bb:7e:42:32:db:8e:91:da:d7:e5:1a: 73:e2:43:db:5c:6b:19:a9:0b:cb:72:e6:88:db:14: 75:c6:f1:af:21:65:09:69:10:72:07:76:f3:be:1e: e5:2f:c8:9f:d6:45:41:54:ae:35:a1:59:1b:d0:75: 31:4e:8e:10:6e:ed:0f:6e:82:af:8e:6d:4f:1f:8c: 59:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:63:02:81:99:AE:C4:D8:84:90:51:2A:DE:FD:9E:CC:07:5C:65:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/d097d779-d0f5-3dfb-b429-f39981788e91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl X509v3 Authority Key Identifier: keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer sbgp-ipAddrBlock: critical IPv4: 170.176.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:90:2c:92:87:2c:f6:3c:d2:02:20:4d:9f:94:3c:39:15:7c: c2:1d:3e:32:e2:0d:3b:fa:47:19:4a:12:e6:20:e1:a1:ff:8f: 77:20:d3:19:aa:03:d1:2d:ec:50:51:f1:00:70:5c:3d:93:6d: 64:2b:f5:17:ce:f8:18:e0:76:02:63:d1:14:ba:67:4c:3b:6c: 7c:9f:d2:1d:19:6e:a8:a9:b0:1f:45:97:bc:1e:2c:25:10:b6: 01:cc:4d:b8:b1:d7:51:d1:54:0d:af:f3:f8:2c:b7:97:49:31: 93:df:54:94:ea:19:fc:e1:84:05:8e:63:86:96:13:55:74:56: 58:2f:54:5d:fc:0b:2e:aa:81:de:e1:d6:07:40:27:d1:23:7b: d3:2c:de:a3:0d:94:d0:87:60:59:81:9d:39:55:cc:f1:ea:dc: e1:b8:bb:c3:b6:59:b8:66:2f:e8:cb:93:14:3d:ca:77:ab:07: a3:f4:28:f7:fa:28:93:23:6e:59:a1:04:5d:ab:27:22:a8:99: 5a:28:4d:d9:76:ba:ad:0c:7c:4f:da:94:45:a3:0c:e8:c3:3f: 64:fb:b2:59:8b:67:16:c3:a6:0a:7d:a7:1d:67:2a:86:a4:d0: 4d:3b:d7:fc:db:4b:9a:7f:37:ee:c3:88:78:c4:bf:9b:cd:8f: 29:3c:89:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+jKgPv1m2FGZqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhZGNiYjgtYjUwMC00NjBmLTkwY2ItYmNhMDUyNWFh YmNiMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZDNkMzQ2MTYtZTVkYi00YTBhLTgzOTMtODY3MmJhNmI2YTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhw1nAqMKll0Z6a9w+1xk54qYmwPclkC8TL6t cVNdKGfXK7OF1619vpF4Im0aTLcqKnOsZWVAqZkyjSjDJ+uGi2JOTtkO/SRRdFTS fUdlx9J+sIkJaa3cAuyr6KFdrv4yJzRmO4K5p0NwvEXxtVxXrdhqobICU0d9onYr nO25FutzHCU4+SzyFetUaaoesjmiKp69ExTRKKZeXdQhh7VKy/UI4HCA26gryHtD 4TPt7Cg5pVKl2teKu35CMtuOkdrX5Rpz4kPbXGsZqQvLcuaI2xR1xvGvIWUJaRBy B3bzvh7lL8if1kVBVK41oVkb0HUxTo4Qbu0PboKvjm1PH4xZ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpjAoGZrsTYhJBRKt79nswHXGXLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFk Y2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2EwNTI1YWFiY2IvZDA5N2Q3NzktZDBmNS0z ZGZiLWI0MjktZjM5OTgxNzg4ZTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjFhZGNiYjgtYjUwMC00NjBmLTkw Y2ItYmNhMDUyNWFhYmNiLzIxYWRjYmI4LWI1MDAtNDYwZi05MGNiLWJjYTA1MjVh YWJjYi5jcmwwHwYDVR0jBBgwFoAUYisKHntT0uIra1r/HcGq7QoGaT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFkY2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2Ew NTI1YWFiY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICQLJKHLPY80gIgTZ+UPDkVfMIdPjLiDTv6RxlKEuYg4aH/j3cg0xmq A9Et7FBR8QBwXD2TbWQr9RfO+BjgdgJj0RS6Z0w7bHyf0h0ZbqipsB9Fl7weLCUQ tgHMTbix11HRVA2v8/gst5dJMZPfVJTqGfzhhAWOY4aWE1V0VlgvVF38Cy6qgd7h 1gdAJ9Eje9Ms3qMNlNCHYFmBnTlVzPHq3OG4u8O2WbhmL+jLkxQ9ynerB6P0KPf6 KJMjblmhBF2rJyKomVooTdl2uq0MfE/alEWjDOjDP2T7slmLZxbDpgp9px1nKoak 0E071/zbS5p/N+7DiHjEv5vNjyk8iWE= -----END CERTIFICATE-----Generated at Thu Mar 26 02:08:26 2026 by rpki-client