$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/da3393ae-5314-32d5-9f93-6336f62a4e00.roa File: da3393ae-5314-32d5-9f93-6336f62a4e00.roa (raw, json) Hash identifier: CpSIb2391l0UpAP4Q2jNCy4TiNlwlxOReYLDElXlPZk= Subject key identifier: B8:74:ED:8C:29:9D:24:A2:2D:BC:CF:29:F6:3B:25:48:AA:B6:2B:A1 Certificate issuer: /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Certificate serial: 010D0C9F4328584D3337152CC5ACF1386C616600 Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/da3393ae-5314-32d5-9f93-6336f62a4e00.roa Signing time: Tue 17 Mar 2026 16:18:47 +0000 ROA not before: Tue 17 Mar 2026 16:18:47 +0000 ROA not after: Mon 15 Jun 2026 16:18:47 +0000 asID: 6079 IP address blocks: 146.88.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:33:37:15:2c:c5:ac:f1:38:6c:61:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Validity Not Before: Mar 17 16:18:47 2026 GMT Not After : Jun 15 16:18:47 2026 GMT Subject: CN=aa5c9ff5-a6f6-430c-a1be-1f6b44d4a516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:53:89:d1:9e:41:cd:ec:25:14:36:8d:dc:5c: dc:f4:d9:ba:04:91:81:f3:49:26:aa:f2:d7:62:b6: 77:fc:4f:85:dd:d3:9e:ad:7c:02:e4:f4:a3:6e:27: b7:aa:7d:53:a0:08:1d:69:75:28:0e:bd:20:bd:88: 7e:ea:13:88:cc:7f:44:79:45:30:7d:a1:fd:1f:d9: 93:30:27:d2:49:c9:80:ea:01:ce:0b:10:16:c8:18: 35:7d:a5:59:3e:11:17:2c:af:4d:74:d9:2a:c3:d8: c1:11:0c:66:34:53:ac:07:80:6e:4e:0d:8b:5b:1b: e9:13:99:90:7a:4c:68:88:6f:8f:7b:2b:f4:78:35: fb:aa:48:ef:b3:c3:14:d4:a0:b6:ba:ce:b8:fb:1a: ee:35:09:c6:d6:ad:78:6c:84:37:41:07:f0:48:00: 65:92:4d:dc:c4:f8:fe:5f:dd:86:ec:f7:78:90:50: cc:b7:be:59:b1:55:a6:80:f4:05:60:85:ce:26:0f: 84:a2:ae:f8:0a:ca:28:be:1a:7d:cb:11:09:38:79: 00:14:cf:99:ec:29:ba:d4:b2:2b:38:68:57:04:3a: 71:ab:28:df:19:23:95:69:0f:a2:27:04:f0:a0:cc: 7d:f6:51:88:5d:17:8a:90:9c:b4:ea:4c:2f:bc:c2: de:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:74:ED:8C:29:9D:24:A2:2D:BC:CF:29:F6:3B:25:48:AA:B6:2B:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/da3393ae-5314-32d5-9f93-6336f62a4e00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl X509v3 Authority Key Identifier: keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer sbgp-ipAddrBlock: critical IPv4: 146.88.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b3:7b:71:cf:05:ef:41:db:7a:78:c0:e6:99:01:16:03:ed: 4a:24:b9:ae:2c:33:e5:fb:d1:82:97:cc:55:05:70:27:6d:fa: ec:a9:ee:15:29:33:3a:72:ae:9e:36:c1:a2:75:1b:0f:78:a4: 92:c6:b3:7e:6a:a1:a9:7d:02:da:93:18:6b:0f:7d:b3:19:ea: 7a:b5:2c:74:80:c4:0e:d0:c5:5b:1e:6a:ca:20:9a:cc:f1:94: 78:fb:b8:f1:ba:8e:25:5a:b8:1e:02:cf:96:92:91:36:40:98: 33:6f:15:f4:a5:8e:50:6c:f5:ab:66:ea:21:11:ff:16:c9:cc: 2e:2c:51:8b:81:22:17:28:26:4e:09:b3:61:3a:6b:56:bc:f8: 55:5e:05:c9:82:92:f5:9c:a8:8e:da:b4:0c:eb:0b:7f:03:7c: b7:61:7b:26:d0:8a:8e:d7:81:b6:e9:52:5b:4c:64:6a:50:6d: c4:f3:47:08:13:91:d2:c5:78:ed:71:69:7d:44:a8:da:cc:b7: da:22:29:9d:c1:55:15:1b:0e:d1:8e:ee:ec:fb:5c:aa:82:0a: 33:bd:3a:7b:bd:92:1c:26:55:ba:f8:ea:74:af:2e:37:6f:06: 8a:0e:52:41:af:c2:1e:c4:fe:63:54:85:80:47:78:a8:8b:8a: 31:dd:b5:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0zNxUsxazxOGxhZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJiOTAzYTItNGM4My00YmZhLTk1NzItMzZmYmFmYjg0 YTIzMB4XDTI2MDMxNzE2MTg0N1oXDTI2MDYxNTE2MTg0N1owLzEtMCsGA1UEAxMk YWE1YzlmZjUtYTZmNi00MzBjLWExYmUtMWY2YjQ0ZDRhNTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFOJ0Z5BzewlFDaN3Fzc9Nm6BJGB80kmqvLX YrZ3/E+F3dOerXwC5PSjbie3qn1ToAgdaXUoDr0gvYh+6hOIzH9EeUUwfaH9H9mT MCfSScmA6gHOCxAWyBg1faVZPhEXLK9NdNkqw9jBEQxmNFOsB4BuTg2LWxvpE5mQ ekxoiG+Peyv0eDX7qkjvs8MU1KC2us64+xruNQnG1q14bIQ3QQfwSABlkk3cxPj+ X92G7Pd4kFDMt75ZsVWmgPQFYIXOJg+Eoq74Csoovhp9yxEJOHkAFM+Z7Cm61LIr OGhXBDpxqyjfGSOVaQ+iJwTwoMx99lGIXReKkJy06kwvvMLeMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLh07YwpnSSiLbzPKfY7JUiqtiuhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5 MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZiYWZiODRhMjMvZGEzMzkzYWUtNTMxNC0z MmQ1LTlmOTMtNjMzNmY2MmE0ZTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmJiOTAzYTItNGM4My00YmZhLTk1 NzItMzZmYmFmYjg0YTIzL2ZiYjkwM2EyLTRjODMtNGJmYS05NTcyLTM2ZmJhZmI4 NGEyMy5jcmwwHwYDVR0jBBgwFoAUzusqfornrD1acybne0mkRJaEkYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZi YWZiODRhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkljAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCze3HPBe9B23p4wOaZARYD7Uokua4sM+X70YKXzFUFcCdt+uyp7hUp Mzpyrp42waJ1Gw94pJLGs35qoal9AtqTGGsPfbMZ6nq1LHSAxA7QxVseasogmszx lHj7uPG6jiVauB4Cz5aSkTZAmDNvFfSljlBs9atm6iER/xbJzC4sUYuBIhcoJk4J s2E6a1a8+FVeBcmCkvWcqI7atAzrC38DfLdheybQio7XgbbpUltMZGpQbcTzRwgT kdLFeO1xaX1EqNrMt9oiKZ3BVRUbDtGO7uz7XKqCCjO9Onu9khwmVbr46nSvLjdv BooOUkGvwh7E/mNUhYBHeKiLijHdtcQ= -----END CERTIFICATE-----Generated at Thu Mar 26 04:07:10 2026 by rpki-client