$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0f2276f1-accb-3185-a03a-5e496f167ba7.roa File: 0f2276f1-accb-3185-a03a-5e496f167ba7.roa (raw, json) Hash identifier: 8dvNql9sfgPdCmuF/HaE1hMR2xcar1Hj9fj9UYcLk2E= Subject key identifier: E4:F9:06:51:3E:9F:A0:0A:7E:7D:60:76:AA:52:3D:A8:FC:94:D5:CF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D30CC65E4282947893330F5F0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0f2276f1-accb-3185-a03a-5e496f167ba7.roa Signing time: Mon 16 Mar 2026 19:32:13 +0000 ROA not before: Mon 16 Mar 2026 19:32:13 +0000 ROA not after: Sun 14 Jun 2026 19:32:13 +0000 asID: 54253 IP address blocks: 167.126.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:cc:65:e4:28:29:47:89:33:30:f5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Mar 16 19:32:13 2026 GMT Not After : Jun 14 19:32:13 2026 GMT Subject: CN=b0174c4a-34f6-498f-8193-2a5c774a65f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:90:0a:dc:3e:57:50:fa:1f:82:8c:78:38:29: c2:da:41:f8:fb:76:97:91:23:5c:2c:f6:d3:ec:ab: f8:06:23:a4:a9:6f:aa:41:4c:4b:50:2d:98:15:12: fe:41:83:82:01:06:50:9b:29:8b:ab:c9:97:ca:bb: 4d:92:4e:26:da:df:65:50:85:85:37:29:cd:e0:15: ba:e9:10:f2:a2:55:32:b7:76:04:84:c1:80:ce:48: bd:86:51:47:19:fb:3a:f3:e2:05:fe:d7:19:40:60: f4:22:21:37:2c:9d:45:0b:83:00:20:b6:05:b6:92: ed:fd:e6:91:c3:e0:c2:6c:11:f8:6d:4f:1e:09:8a: ea:45:ed:18:cd:82:81:82:00:ae:ae:46:9e:ce:5b: 0b:4b:d0:3c:4d:f0:77:9e:9f:57:dc:40:2f:19:0c: cf:f7:be:78:f0:b6:9c:f2:e7:f4:64:fb:14:3f:45: ee:03:3b:df:34:d6:68:f0:26:82:db:6b:63:13:9e: e6:e8:1f:2b:1c:9b:f0:ce:9c:95:8c:59:19:e5:25: 36:69:12:61:b2:47:79:5b:8d:6b:9e:f2:6d:04:60: 45:9f:3d:84:56:c8:9d:de:78:ba:bb:b1:6f:31:56: e3:21:c3:2f:14:f6:c8:cc:3e:9e:8a:a4:c8:b5:f9: 9e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F9:06:51:3E:9F:A0:0A:7E:7D:60:76:AA:52:3D:A8:FC:94:D5:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0f2276f1-accb-3185-a03a-5e496f167ba7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 167.126.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:21:bf:1b:f6:e0:4d:53:2e:42:76:07:54:17:53:27:d4:ac: 7f:6f:b9:e1:2f:20:a5:93:52:21:ec:11:21:ba:a3:4e:4c:ae: 48:cc:43:a6:58:13:3c:30:d0:b7:88:bd:9c:5f:8c:e0:e5:e6: 07:12:05:00:a1:e7:0c:89:f1:bc:9d:59:8d:41:36:d0:95:ee: 6f:d4:da:cb:10:f4:b4:1e:f0:76:26:18:b6:09:f0:58:17:1d: 43:50:4f:6e:96:86:10:00:a4:bb:37:69:30:f4:f1:0e:01:b0: 05:a2:fc:d6:92:80:13:c0:70:fc:10:dd:04:f3:dc:59:f7:33: b7:50:74:84:a8:a8:c2:ce:f6:89:f3:bb:79:1d:c3:47:c6:b1: dd:bd:86:da:ad:22:e9:ea:16:d7:e3:1f:d7:0d:10:2d:35:29: 46:d2:c1:6b:61:f3:e3:5e:40:4a:8e:5a:3d:e8:b7:84:75:1e: f1:7a:eb:7e:86:76:f5:ac:ab:c3:b2:77:1d:85:6e:0b:5e:0e: 64:30:a7:a0:8e:fc:a1:81:4c:07:0f:3c:77:8c:8a:c8:7f:a5: 08:cf:06:2e:ca:3e:55:95:1e:6b:6c:73:f9:cb:d8:c1:53:f1: 4f:48:20:63:73:a0:2a:74:0f:05:eb:e3:cf:90:b7:6e:f4:a2: 61:97:ae:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wzGXkKClHiTMw9fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDMxNjE5MzIxM1oXDTI2MDYxNDE5MzIxM1owLzEtMCsGA1UEAxMk YjAxNzRjNGEtMzRmNi00OThmLTgxOTMtMmE1Yzc3NGE2NWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJAK3D5XUPofgox4OCnC2kH4+3aXkSNcLPbT 7Kv4BiOkqW+qQUxLUC2YFRL+QYOCAQZQmymLq8mXyrtNkk4m2t9lUIWFNynN4BW6 6RDyolUyt3YEhMGAzki9hlFHGfs68+IF/tcZQGD0IiE3LJ1FC4MAILYFtpLt/eaR w+DCbBH4bU8eCYrqRe0YzYKBggCurkaezlsLS9A8TfB3np9X3EAvGQzP97548Lac 8uf0ZPsUP0XuAzvfNNZo8CaC22tjE57m6B8rHJvwzpyVjFkZ5SU2aRJhskd5W41r nvJtBGBFnz2EVsid3ni6u7FvMVbjIcMvFPbIzD6eiqTItfmeWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOT5BlE+n6AKfn1gdqpSPaj8lNXPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGYyMjc2ZjEtYWNjYi0z MTg1LWEwM2EtNWU0OTZmMTY3YmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp37AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEghvxv24E1TLkJ2B1QXUyfUrH9vueEvIKWTUiHsESG6o05MrkjMQ6ZY Ezww0LeIvZxfjODl5gcSBQCh5wyJ8bydWY1BNtCV7m/U2ssQ9LQe8HYmGLYJ8FgX HUNQT26WhhAApLs3aTD08Q4BsAWi/NaSgBPAcPwQ3QTz3Fn3M7dQdISoqMLO9onz u3kdw0fGsd29htqtIunqFtfjH9cNEC01KUbSwWth8+NeQEqOWj3ot4R1HvF6636G dvWsq8Oydx2FbgteDmQwp6CO/KGBTAcPPHeMish/pQjPBi7KPlWVHmtsc/nL2MFT 8U9IIGNzoCp0DwXr48+Qt270omGXrnM= -----END CERTIFICATE-----Generated at Fri Mar 27 01:52:50 2026 by rpki-client