$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/aea63acb-037d-3e18-9b17-e44e4031484e.roa File: aea63acb-037d-3e18-9b17-e44e4031484e.roa (raw, json) Hash identifier: LoLReBlgLbWnFoi4w6fjAmfj/xVKlwgudgL2anRERmQ= Subject key identifier: 0A:C2:D7:B4:3D:D6:86:53:5A:8B:A8:BA:D8:B0:22:70:38:A4:34:A3 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584D492A6AA14688C117B3AB2200 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/aea63acb-037d-3e18-9b17-e44e4031484e.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 2152 IP address blocks: 137.164.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:6a:a1:46:88:c1:17:b3:ab:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=8d2c3196-3eed-470f-919b-e3e9023e0393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:68:09:fc:d9:c6:51:01:99:2d:ed:7e:58:d4: e5:ff:31:3c:51:0c:c6:26:a6:e3:a4:c5:ff:43:75: f9:40:33:49:27:94:45:6b:6f:19:a0:a4:4c:38:4b: 3a:23:de:9c:60:3d:21:6c:bf:f8:a2:fc:d6:67:8c: b9:44:25:53:1c:24:f7:40:23:04:8a:03:50:a2:75: c8:4a:a0:2e:28:b5:73:c4:6c:a4:20:15:ae:a0:8a: db:8e:c9:c0:69:49:d7:b9:9b:0b:00:77:78:56:ad: 88:72:f7:65:0c:27:9c:8d:ff:33:18:b7:f3:a4:1c: 7e:95:15:1c:2f:12:68:d1:25:84:4d:79:14:0e:88: 4d:54:37:a0:80:ca:f1:02:45:a2:b7:c3:9c:1f:91: 52:3e:35:44:10:96:33:db:16:16:8b:7b:12:6c:82: cb:71:e0:1b:9b:48:37:84:41:8a:88:6d:64:65:47: aa:f3:76:ad:32:69:f5:c4:c7:b8:63:d5:46:5a:38: 61:bc:a7:8b:5f:02:1a:4e:8e:72:8a:52:d0:f8:3f: 3d:d8:7c:cf:94:13:7c:a2:40:69:fb:c7:42:c6:75: f0:a9:85:af:c0:16:14:b4:51:a5:ab:9c:3a:fc:bf: d3:b6:6b:99:60:a6:e9:a5:21:f9:33:71:3b:58:d0: c3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C2:D7:B4:3D:D6:86:53:5A:8B:A8:BA:D8:B0:22:70:38:A4:34:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/aea63acb-037d-3e18-9b17-e44e4031484e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a5:d7:c0:75:ef:6f:d2:9e:68:b2:0f:b3:f3:e5:9f:83:2a: 6c:91:b9:2c:a5:f9:c9:b8:73:64:69:1d:d1:a7:e1:0f:2b:d5: d4:7f:ca:69:b3:a6:27:94:39:06:04:0f:22:7d:28:d4:b5:0b: ad:3f:3a:98:bf:05:3c:26:02:98:d5:89:88:aa:35:2c:7f:0c: 63:3b:01:86:82:32:7a:c1:e0:ad:29:1f:2a:6e:4f:0a:04:cb: 5a:ba:7e:7a:42:3e:d5:7b:ac:da:a2:e7:83:f0:cd:70:96:a1: fe:17:a2:5e:e1:7d:5d:77:54:cf:fa:12:94:d6:32:36:3a:bc: 14:21:72:1d:31:0e:42:f9:7a:d4:a8:c6:ea:b8:f4:7a:35:bb: 64:4b:19:c9:48:6c:75:cb:a4:0b:ea:2e:0f:cc:45:08:29:52: 2b:73:12:7f:36:df:95:19:c7:9c:ab:43:45:f2:31:72:49:68: 38:63:e4:66:3e:40:ec:db:3a:ab:45:aa:c7:83:bb:57:45:79: 02:22:d9:86:00:63:30:96:fc:5e:bc:76:9f:37:65:1f:2f:c2: c5:a0:d5:b1:8e:d7:90:cc:6d:03:7a:89:f3:85:e1:21:06:d0: 51:bb:73:78:b3:80:61:2e:75:75:30:0c:72:6e:39:39:d9:75: 1a:1d:8a:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmqhRojBF7OrIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk OGQyYzMxOTYtM2VlZC00NzBmLTkxOWItZTNlOTAyM2UwMzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGgJ/NnGUQGZLe1+WNTl/zE8UQzGJqbjpMX/ Q3X5QDNJJ5RFa28ZoKRMOEs6I96cYD0hbL/4ovzWZ4y5RCVTHCT3QCMEigNQonXI SqAuKLVzxGykIBWuoIrbjsnAaUnXuZsLAHd4Vq2IcvdlDCecjf8zGLfzpBx+lRUc LxJo0SWETXkUDohNVDeggMrxAkWit8OcH5FSPjVEEJYz2xYWi3sSbILLceAbm0g3 hEGKiG1kZUeq83atMmn1xMe4Y9VGWjhhvKeLXwIaTo5yilLQ+D892HzPlBN8okBp +8dCxnXwqYWvwBYUtFGlq5w6/L/TtmuZYKbppSH5M3E7WNDDvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArC17Q91oZTWououtiwInA4pDSjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvYWVhNjNhY2ItMDM3ZC0z ZTE4LTliMTctZTQ0ZTQwMzE0ODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICl18B172/SnmiyD7Pz5Z+DKmyRuSyl+cm4c2RpHdGn4Q8r1dR/ymmz pieUOQYEDyJ9KNS1C60/Opi/BTwmApjViYiqNSx/DGM7AYaCMnrB4K0pHypuTwoE y1q6fnpCPtV7rNqi54PwzXCWof4Xol7hfV13VM/6EpTWMjY6vBQhch0xDkL5etSo xuq49Ho1u2RLGclIbHXLpAvqLg/MRQgpUitzEn8235UZx5yrQ0XyMXJJaDhj5GY+ QOzbOqtFqseDu1dFeQIi2YYAYzCW/F68dp83ZR8vwsWg1bGO15DMbQN6ifOF4SEG 0FG7c3izgGEudXUwDHJuOTnZdRodius= -----END CERTIFICATE-----Generated at Thu Mar 26 07:38:04 2026 by rpki-client