$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/173a8ff8-778b-3b5c-b3b5-b204941d7853.roa File: 173a8ff8-778b-3b5c-b3b5-b204941d7853.roa (raw, json) Hash identifier: xUXxOBTxhpM5/Lid42Iy93ZnYbsEhNszRapI6jyrFDI= Subject key identifier: C4:CB:FC:53:56:01:20:CE:50:2B:91:41:06:B0:EE:F8:55:41:DC:D1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D30CD0590C7024C8354177480 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/173a8ff8-778b-3b5c-b3b5-b204941d7853.roa Signing time: Mon 16 Mar 2026 19:33:28 +0000 ROA not before: Mon 16 Mar 2026 19:33:28 +0000 ROA not after: Sun 14 Jun 2026 19:33:28 +0000 asID: 54253 IP address blocks: 167.126.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:cd:05:90:c7:02:4c:83:54:17:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Mar 16 19:33:28 2026 GMT Not After : Jun 14 19:33:28 2026 GMT Subject: CN=311ff66f-24fd-4569-96c3-4dedea2a293a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cf:91:bf:fb:41:92:00:92:b1:99:bf:8a:4a: d2:34:02:d9:08:34:e0:cd:b8:d2:df:11:5f:3e:26: b4:9e:44:5a:20:d7:50:fe:4b:a8:9b:e1:62:fa:c4: 6e:bf:40:33:4e:b5:e7:6c:9a:f8:bf:c5:c6:7e:dd: 88:f1:b8:d8:9d:60:95:2e:50:d4:4e:bc:a6:8c:76: d0:4a:a1:26:08:a8:bc:94:dc:9b:2f:6b:3b:53:27: 52:9c:fa:6c:9b:76:6e:91:97:b8:d1:82:33:84:9c: f2:6e:13:3c:da:2e:2a:46:a7:41:2e:b5:45:70:11: ef:4f:1e:29:af:44:ef:97:a2:4a:ad:2e:c0:30:b6: fb:15:99:23:0d:44:a9:d8:82:4d:fe:1e:19:e6:a8: 3e:9d:26:50:97:2c:a0:8f:89:a7:27:18:a2:c1:34: c0:b0:a2:52:8c:40:79:7c:2a:52:55:1d:f5:57:68: 2f:fc:d9:4b:c5:4b:3b:f6:43:69:4b:77:70:93:9b: 2c:1b:13:f9:2b:a4:bf:25:61:bf:ed:91:72:b6:7e: 01:72:92:80:24:ea:8f:5d:e3:9c:40:ba:11:3d:e4: 90:dc:a4:22:d4:8c:17:86:02:02:e2:0f:7e:e2:5a: 63:fd:af:96:e9:4d:bc:05:76:72:ff:11:a6:c3:8e: 6f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CB:FC:53:56:01:20:CE:50:2B:91:41:06:B0:EE:F8:55:41:DC:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/173a8ff8-778b-3b5c-b3b5-b204941d7853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 167.126.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:42:10:8b:63:b0:2f:2c:5d:78:f6:e4:5b:54:7c:4f:b5:24: bb:2c:f2:18:ea:cc:04:b3:44:2d:57:74:21:20:3c:e0:7b:0b: 55:24:21:6e:57:50:f5:91:27:35:9a:b8:fb:6a:95:c7:45:39: 6e:ad:b5:62:f5:d9:36:55:00:c8:e9:68:72:47:13:55:c2:21: 12:90:12:0b:fa:12:9d:fa:47:49:1e:89:b2:70:d7:a9:92:bc: c0:4b:99:fd:5c:be:17:94:6f:f5:f1:84:4a:20:86:d3:a5:c6: ec:ae:fa:ef:82:84:9e:74:26:d9:07:bc:c1:4b:e1:a6:ce:dd: 9e:6b:b3:41:87:fe:d0:60:1e:97:11:c1:13:fd:9b:e3:eb:c2: 7e:b5:0c:e1:d0:9d:d9:37:f9:41:69:ed:89:44:f5:ee:68:67: c0:69:dc:01:6b:ae:9e:b8:62:6e:31:48:dc:7d:69:ba:b6:32: 82:28:60:62:bc:f3:4a:54:da:10:a4:62:3e:b5:09:37:10:2d: 96:4c:41:0d:ed:f9:1b:8a:1f:85:be:61:7f:10:ba:e6:fc:61: 25:40:3e:9f:74:6b:23:b8:33:85:45:68:d4:6f:76:60:c3:3a: 55:ee:31:44:40:4a:40:e4:ff:03:17:03:ec:a4:3e:ab:3e:3d: 77:73:5d:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wzQWQxwJMg1QXdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDMxNjE5MzMyOFoXDTI2MDYxNDE5MzMyOFowLzEtMCsGA1UEAxMk MzExZmY2NmYtMjRmZC00NTY5LTk2YzMtNGRlZGVhMmEyOTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc+Rv/tBkgCSsZm/ikrSNALZCDTgzbjS3xFf Pia0nkRaINdQ/kuom+Fi+sRuv0AzTrXnbJr4v8XGft2I8bjYnWCVLlDUTrymjHbQ SqEmCKi8lNybL2s7UydSnPpsm3ZukZe40YIzhJzybhM82i4qRqdBLrVFcBHvTx4p r0Tvl6JKrS7AMLb7FZkjDUSp2IJN/h4Z5qg+nSZQlyygj4mnJxiiwTTAsKJSjEB5 fCpSVR31V2gv/NlLxUs79kNpS3dwk5ssGxP5K6S/JWG/7ZFytn4BcpKAJOqPXeOc QLoRPeSQ3KQi1IwXhgIC4g9+4lpj/a+W6U28BXZy/xGmw45vLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTL/FNWASDOUCuRQQaw7vhVQdzRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTczYThmZjgtNzc4Yi0z YjVjLWIzYjUtYjIwNDk0MWQ3ODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBp37EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpCEItjsC8sXXj25FtUfE+1JLss8hjqzASzRC1XdCEgPOB7C1UkIW5X UPWRJzWauPtqlcdFOW6ttWL12TZVAMjpaHJHE1XCIRKQEgv6Ep36R0keibJw16mS vMBLmf1cvheUb/XxhEoghtOlxuyu+u+ChJ50JtkHvMFL4abO3Z5rs0GH/tBgHpcR wRP9m+Prwn61DOHQndk3+UFp7YlE9e5oZ8Bp3AFrrp64Ym4xSNx9abq2MoIoYGK8 80pU2hCkYj61CTcQLZZMQQ3t+RuKH4W+YX8Quub8YSVAPp90ayO4M4VFaNRvdmDD OlXuMURASkDk/wMXA+ykPqs+PXdzXek= -----END CERTIFICATE-----Generated at Fri Mar 27 01:52:48 2026 by rpki-client