$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a3e55cbd-876e-36e8-91ef-1bd971886b83.roa File: a3e55cbd-876e-36e8-91ef-1bd971886b83.roa (raw, json) Hash identifier: 5s6vO+1vizSY/ZAuM4WR09DyO7VYR1IhvulLXH/XLv8= Subject key identifier: DB:49:4A:5C:BA:5A:26:72:64:7C:73:6B:3F:C3:43:D9:33:A8:1E:72 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D2A74C5964DB55D58667BACE0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a3e55cbd-876e-36e8-91ef-1bd971886b83.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 31898 IP address blocks: 173.199.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:c5:96:4d:b5:5d:58:66:7b:ac:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=6ad3179d-4111-4285-8069-cf140e216797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:75:85:ee:20:a7:cb:8a:8b:dc:61:81:69:74: 40:29:07:37:ca:16:06:2d:14:ea:ce:a3:53:12:22: e6:02:bb:41:68:36:be:89:ac:9e:4b:a7:1e:c8:60: d2:9d:b5:65:15:53:90:17:14:5c:80:11:bd:2e:c1: d5:d5:4e:61:26:d4:7b:63:71:33:f0:e7:86:de:c2: 5c:12:8d:fc:1c:b5:f4:c6:1f:41:a8:70:13:9d:33: dc:ab:e0:d3:83:3a:0f:a5:1a:ec:64:97:70:6d:79: 6e:b1:19:ac:da:69:25:03:cb:60:fd:10:1f:06:2b: cd:47:71:42:9e:1c:76:0b:91:da:83:6c:b8:ea:62: 03:ee:a9:e3:43:7f:c0:17:a3:c1:a1:08:a7:f8:46: eb:fb:25:7d:f7:4b:ec:18:10:57:f7:cd:af:12:ca: 59:35:52:cd:00:73:6e:79:72:4d:45:fb:39:b8:a5: 38:e3:05:6a:31:7b:e8:e8:2c:51:fd:ee:fa:b3:1b: 07:f2:9c:02:c0:a1:4e:55:7f:0e:ad:5f:2a:c8:51: 5e:5a:d0:7f:ab:19:cf:31:93:74:b0:8d:7c:6c:44: 4b:5d:ca:84:36:c9:43:42:34:3f:f7:dc:8f:cb:8e: 9c:d9:67:76:ff:1c:e4:43:5c:25:75:0e:89:92:12: f6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:49:4A:5C:BA:5A:26:72:64:7C:73:6B:3F:C3:43:D9:33:A8:1E:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a3e55cbd-876e-36e8-91ef-1bd971886b83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:48:ee:18:bc:2d:01:67:e6:a5:b1:8b:05:c1:03:9a:f9:76: 83:07:d9:d3:d4:ca:3e:16:fb:9d:41:38:c5:3e:b2:f9:89:73: 1b:a4:cc:cb:09:aa:d9:5e:64:4b:53:ba:ab:60:94:fa:7f:a4: 85:1e:84:00:8c:41:e6:05:8f:fd:24:2c:5b:49:72:6f:24:0f: 27:89:2f:3b:f4:20:8e:d1:6c:d0:e6:06:79:a2:17:da:ff:a1: 50:ff:de:ea:40:db:ab:4b:ed:2a:67:a8:7f:43:f0:8c:16:00: e8:cb:27:22:00:2c:b5:48:88:6e:bd:80:47:44:2b:99:9d:58: f0:ba:bc:d2:a5:1e:df:bb:89:c9:ef:98:ca:22:e5:f0:07:0f: 20:c1:6b:47:a9:8f:b1:0b:9f:1b:58:f1:db:5f:b2:c8:cb:cd: 19:b5:a9:88:67:4b:43:03:17:67:0b:ba:44:bf:3a:f0:47:32: 40:fa:2e:6b:00:3a:4d:75:b6:42:11:e1:ae:8e:c5:5c:76:64: 6f:bb:1c:b0:fa:71:00:4e:f6:ed:d3:3c:f2:29:75:77:a3:f2: c3:78:8d:eb:5a:0a:1f:16:78:7f:46:3e:8d:f4:f0:f5:2e:fa: 4b:02:7d:83:03:72:4b:29:f9:78:e1:54:1a:16:67:3a:19:d6: ff:26:60:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdMWWTbVdWGZ7rOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NmFkMzE3OWQtNDExMS00Mjg1LTgwNjktY2YxNDBlMjE2Nzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnWF7iCny4qL3GGBaXRAKQc3yhYGLRTqzqNT EiLmArtBaDa+iayeS6ceyGDSnbVlFVOQFxRcgBG9LsHV1U5hJtR7Y3Ez8OeG3sJc Eo38HLX0xh9BqHATnTPcq+DTgzoPpRrsZJdwbXlusRms2mklA8tg/RAfBivNR3FC nhx2C5Hag2y46mID7qnjQ3/AF6PBoQin+Ebr+yV990vsGBBX982vEspZNVLNAHNu eXJNRfs5uKU44wVqMXvo6CxR/e76sxsH8pwCwKFOVX8OrV8qyFFeWtB/qxnPMZN0 sI18bERLXcqENslDQjQ/99yPy46c2Wd2/xzkQ1wldQ6JkhL2hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtJSly6WiZyZHxzaz/DQ9kzqB5yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYTNlNTVjYmQtODc2ZS0z NmU4LTkxZWYtMWJkOTcxODg2YjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArccLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlI7hi8LQFn5qWxiwXBA5r5doMH2dPUyj4W+51BOMU+svmJcxukzMsJ qtleZEtTuqtglPp/pIUehACMQeYFj/0kLFtJcm8kDyeJLzv0II7RbNDmBnmiF9r/ oVD/3upA26tL7SpnqH9D8IwWAOjLJyIALLVIiG69gEdEK5mdWPC6vNKlHt+7icnv mMoi5fAHDyDBa0epj7ELnxtY8dtfssjLzRm1qYhnS0MDF2cLukS/OvBHMkD6LmsA Ok11tkIR4a6OxVx2ZG+7HLD6cQBO9u3TPPIpdXej8sN4jetaCh8WeH9GPo308PUu +ksCfYMDcksp+XjhVBoWZzoZ1v8mYCc= -----END CERTIFICATE-----Generated at Thu Mar 26 03:46:49 2026 by rpki-client