$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa File: 3337e7f1-99bd-35db-a708-aa0072ca0d31.roa (raw, json) Hash identifier: UmnWYzhcF7dcy3kWjCUx1NLTsJ3KhkTWKbFAb1UhOkw= Subject key identifier: AD:20:A4:2A:29:72:0E:32:E7:EB:4B:21:4D:CF:EE:FC:EB:73:0F:00 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584D237A68498AFAD8836F98D1C0 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 2153 IP address blocks: 137.164.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:68:49:8a:fa:d8:83:6f:98:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=fd3b46a2-e9b2-4535-ad1d-d17f47ce236f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0b:3f:0e:69:20:3f:37:64:6f:57:9b:fd:7a: f5:7e:9d:bf:bb:bc:fe:65:8a:f2:a3:be:bf:02:54: b6:d2:c6:76:ef:6d:b7:18:71:93:6a:4e:42:01:a9: 30:e2:76:a5:8d:4d:3a:92:d7:8a:4d:2b:f8:80:4f: aa:a5:01:1f:4d:83:e5:8e:bb:3d:c4:a1:9b:73:ec: f5:6d:a6:21:3e:8e:2c:c2:6b:6f:f3:c2:6c:2e:ab: c1:19:17:73:ec:11:0e:a4:ed:bf:de:81:0d:b2:33: 6b:32:71:14:f1:fe:cc:cb:c0:7b:4c:39:0d:b9:ed: 07:ac:b5:8a:83:2e:dd:21:a7:53:d1:00:d9:d0:84: fd:e3:fa:ab:a2:5b:35:46:14:12:0f:f0:db:14:8a: 78:70:d0:fd:5b:a8:17:ad:48:39:58:be:cf:c5:b1: 8f:a5:1f:d2:f8:aa:1d:4a:19:0b:ee:bb:c1:7c:ac: ff:8e:65:57:eb:59:8b:9a:88:3a:72:20:a7:6a:16: 20:ae:96:a2:a9:dd:7d:34:3b:55:72:cf:4d:77:da: a3:6b:59:e5:d4:13:c6:99:7f:ea:5e:b8:a5:ef:68: 54:34:b0:54:a1:69:6b:e6:23:42:1c:f2:fc:1c:66: 97:75:ff:8d:78:6a:87:a5:93:5a:6e:3f:20:62:7e: d2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:20:A4:2A:29:72:0E:32:E7:EB:4B:21:4D:CF:EE:FC:EB:73:0F:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a6:da:a3:db:55:65:ec:3a:d8:bc:77:41:78:60:66:f8:e3: 04:84:5f:a1:59:7f:0b:71:c2:18:02:6d:f8:ff:99:e4:41:a6: 2f:5d:1d:0c:53:e4:dd:87:50:ac:f5:19:73:af:10:87:a3:e6: d2:9a:a4:74:92:09:98:40:b3:e5:85:cc:40:b0:59:ac:24:3b: e6:43:f4:fe:16:3e:95:70:a6:58:a7:5c:25:43:50:5d:e2:40: 58:f1:90:1c:61:a5:c5:2c:a0:7c:05:04:5f:9b:38:d0:ba:34: 6e:87:e8:f7:16:8a:a0:7f:ce:84:1d:98:8f:13:38:5b:23:55: 2d:37:32:36:41:80:15:a4:51:00:19:17:dd:ed:92:43:1c:db: 30:58:b9:35:51:32:96:a4:62:6b:1a:16:42:a9:f5:f2:ac:96: 1e:73:73:db:64:4d:b2:dc:d9:c1:1a:34:d7:5e:15:d7:9a:29: 53:66:2e:37:c2:f3:3a:2f:38:18:c4:03:69:cb:3c:c4:53:35: 97:02:41:99:28:c3:d0:1e:46:49:1c:2a:76:45:f6:5c:2f:1e: e5:6a:ef:60:0d:73:e9:05:f0:73:66:2a:90:35:f1:ba:66:0c: 89:0f:7f:3f:ed:48:d5:39:70:58:f6:fa:f3:4b:17:3b:ce:8e: e5:29:f2:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jemhJivrYg2+Y0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZmQzYjQ2YTItZTliMi00NTM1LWFkMWQtZDE3ZjQ3Y2UyMzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQs/DmkgPzdkb1eb/Xr1fp2/u7z+ZYryo76/ AlS20sZ27223GHGTak5CAakw4naljU06kteKTSv4gE+qpQEfTYPljrs9xKGbc+z1 baYhPo4swmtv88JsLqvBGRdz7BEOpO2/3oENsjNrMnEU8f7My8B7TDkNue0HrLWK gy7dIadT0QDZ0IT94/qrols1RhQSD/DbFIp4cND9W6gXrUg5WL7PxbGPpR/S+Kod ShkL7rvBfKz/jmVX61mLmog6ciCnahYgrpaiqd19NDtVcs9Nd9qja1nl1BPGmX/q Xril72hUNLBUoWlr5iNCHPL8HGaXdf+NeGqHpZNabj8gYn7SJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0gpCopcg4y5+tLIU3P7vzrcw8AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvMzMzN2U3ZjEtOTliZC0z NWRiLWE3MDgtYWEwMDcyY2EwZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaQRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6m2qPbVWXsOti8d0F4YGb44wSEX6FZfwtxwhgCbfj/meRBpi9dHQxT 5N2HUKz1GXOvEIej5tKapHSSCZhAs+WFzECwWawkO+ZD9P4WPpVwplinXCVDUF3i QFjxkBxhpcUsoHwFBF+bONC6NG6H6PcWiqB/zoQdmI8TOFsjVS03MjZBgBWkUQAZ F93tkkMc2zBYuTVRMpakYmsaFkKp9fKslh5zc9tkTbLc2cEaNNdeFdeaKVNmLjfC 8zovOBjEA2nLPMRTNZcCQZkow9AeRkkcKnZF9lwvHuVq72ANc+kF8HNmKpA18bpm DIkPfz/tSNU5cFj2+vNLFzvOjuUp8po= -----END CERTIFICATE-----Generated at Thu Mar 26 08:05:48 2026 by rpki-client