$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/4ea04189-4ae3-3ef2-9a84-c224ec9a1c6a.roa File: 4ea04189-4ae3-3ef2-9a84-c224ec9a1c6a.roa (raw, json) Hash identifier: /uQIh5XRV8vS/3WOqOR4pUs8QB3Kh3A4G6KHEA9H56o= Subject key identifier: A1:F9:48:CB:1C:C0:E4:12:2F:69:F2:5A:E8:B1:AA:07:09:23:2A:0C Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584D4A8FA35CD571B45A949BEF80 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/4ea04189-4ae3-3ef2-9a84-c224ec9a1c6a.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 40948 IP address blocks: 162.210.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:a3:5c:d5:71:b4:5a:94:9b:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=37e35eb6-3525-4199-a118-aa09c7dd899b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a8:93:38:69:ea:3f:25:17:7e:38:b5:5b:0e: e6:70:71:59:11:b5:8f:21:a4:57:d5:79:05:d3:7e: 75:fe:13:fe:8f:ad:b5:04:a3:56:ed:d2:9a:85:bf: 9a:0b:d3:8e:07:4e:e2:e8:76:2d:9f:6b:ec:d0:b5: 30:2a:44:8f:a1:67:5c:06:e7:90:bc:50:48:30:74: 8c:88:55:70:fb:43:93:83:70:c0:fe:47:b3:d6:82: 0b:b0:a0:b2:6c:56:66:6f:03:e2:b9:7b:b4:97:e7: d5:07:17:3a:2f:7d:c4:5b:13:7e:7e:51:b8:d4:67: 77:30:92:a1:4f:dc:d1:be:e8:e3:d8:68:0d:76:d8: 0b:4c:07:f9:a7:09:3d:e7:4f:29:a7:1b:7b:a6:e8: 11:47:26:89:3b:c4:76:44:5c:14:75:02:25:89:ce: 73:8a:9e:61:46:65:dd:e2:f5:bd:a6:97:c4:97:33: 57:4e:7b:a8:81:54:c5:e4:36:e0:0d:54:b8:5b:f9: 0a:a5:ba:91:87:c7:a4:05:eb:b4:ee:e0:61:34:2b: e7:36:9f:31:6d:88:75:6a:cf:b1:69:37:d3:b7:8c: 48:67:4d:2d:e1:d3:39:01:56:92:16:ba:dc:69:7c: 12:34:3a:06:e5:55:3c:a2:d9:a5:d3:5f:b8:80:17: ad:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F9:48:CB:1C:C0:E4:12:2F:69:F2:5A:E8:B1:AA:07:09:23:2A:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/4ea04189-4ae3-3ef2-9a84-c224ec9a1c6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 162.210.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:39:30:04:da:47:5b:01:04:f3:7f:a3:3a:bc:30:6f:1f:4a: b8:ec:b2:78:aa:92:df:7c:d0:6e:fb:da:26:23:34:58:ef:67: 80:f1:80:82:93:9e:39:a7:9e:72:31:2c:fa:0e:7c:17:05:0a: 40:2f:56:6a:c1:f7:b7:a4:e0:d9:ff:2d:15:e2:5a:42:2f:15: 08:08:4e:95:3b:fd:88:45:91:6d:a4:2f:a6:9c:cf:48:9f:88: 6f:d2:74:07:b5:8b:53:43:10:4f:ce:7a:a5:59:7b:03:bd:91: d9:03:e2:71:77:f3:ba:02:bb:28:e2:d4:ce:06:d4:00:42:aa: 5d:a2:f8:20:de:5d:bf:8e:ca:b2:11:38:54:2a:0f:cd:11:bd: 36:2f:58:fc:92:b2:f3:79:25:bd:26:c9:49:65:58:be:ab:7d: 94:fd:1e:f0:51:67:27:bd:b1:67:a4:9a:1a:30:cc:ca:6f:2e: 2d:2a:fb:0c:d3:66:5e:bb:ec:2f:de:37:bc:d0:bd:fe:cd:4a: fc:0d:8f:56:c7:30:76:6a:8d:2a:72:e8:91:ea:2f:be:9b:8d: 66:23:74:bd:73:c0:28:dc:f7:b4:58:96:2f:81:a8:e8:41:d0: 77:cd:97:8e:05:8e:54:d1:fc:97:e6:f0:7a:1d:71:29:64:91: 8f:c2:cc:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6Nc1XG0WpSb74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk MzdlMzVlYjYtMzUyNS00MTk5LWExMTgtYWEwOWM3ZGQ4OTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6iTOGnqPyUXfji1Ww7mcHFZEbWPIaRX1XkF 0351/hP+j621BKNW7dKahb+aC9OOB07i6HYtn2vs0LUwKkSPoWdcBueQvFBIMHSM iFVw+0OTg3DA/kez1oILsKCybFZmbwPiuXu0l+fVBxc6L33EWxN+flG41Gd3MJKh T9zRvujj2GgNdtgLTAf5pwk9508ppxt7pugRRyaJO8R2RFwUdQIlic5zip5hRmXd 4vW9ppfElzNXTnuogVTF5DbgDVS4W/kKpbqRh8ekBeu07uBhNCvnNp8xbYh1as+x aTfTt4xIZ00t4dM5AVaSFrrcaXwSNDoG5VU8otml01+4gBet4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKH5SMscwOQSL2nyWuixqgcJIyoMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvNGVhMDQxODktNGFlMy0z ZWYyLTlhODQtYzIyNGVjOWExYzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHc5MATaR1sBBPN/ozq8MG8fSrjssniqkt980G772iYjNFjvZ4DxgIKT njmnnnIxLPoOfBcFCkAvVmrB97ek4Nn/LRXiWkIvFQgITpU7/YhFkW2kL6acz0if iG/SdAe1i1NDEE/OeqVZewO9kdkD4nF387oCuyji1M4G1ABCql2i+CDeXb+OyrIR OFQqD80RvTYvWPySsvN5Jb0myUllWL6rfZT9HvBRZye9sWekmhowzMpvLi0q+wzT Zl677C/eN7zQvf7NSvwNj1bHMHZqjSpy6JHqL76bjWYjdL1zwCjc97RYli+BqOhB 0HfNl44FjlTR/Jfm8HodcSlkkY/CzCY= -----END CERTIFICATE-----Generated at Thu Mar 26 13:24:27 2026 by rpki-client