$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b/4747c1fb-9de7-3421-894c-5135a55b7418.roa File: 4747c1fb-9de7-3421-894c-5135a55b7418.roa (raw, json) Hash identifier: vMKv6cozXtLIdxcHFJYPejTxgFMbRC5I6WzuKmZrxB8= Subject key identifier: CB:4A:56:CB:9A:E9:1B:E0:5B:5C:F2:50:66:7E:53:64:96:F8:20:7C Certificate issuer: /CN=aaba9944-aefa-4b3b-b8aa-19fe7bdf295b Certificate serial: 010D0C9F4328584D60E4F5A1EC6E635DAE059B00 Authority key identifier: CD:3F:C8:11:7E:D4:66:E1:34:D4:55:6F:D2:7C:64:D8:21:82:5C:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b/4747c1fb-9de7-3421-894c-5135a55b7418.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 20080 IP address blocks: 170.39.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:f5:a1:ec:6e:63:5d:ae:05:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaba9944-aefa-4b3b-b8aa-19fe7bdf295b Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=bf3d1786-a2d5-4a3c-be20-9ddbadcaadf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c0:f7:d9:ad:f4:6c:8c:b9:87:c5:94:1c:a0: fd:01:4b:75:91:04:e4:19:7f:c2:d5:f7:03:00:81: e4:e4:db:d6:38:7c:b7:e8:26:15:b9:37:5b:df:7d: 52:5c:d1:ae:e7:6e:4b:7c:03:71:25:78:33:38:70: b3:4c:59:0b:2b:de:07:a5:77:b8:95:5e:ab:7e:59: 4e:fd:93:13:c6:85:56:7f:77:df:c7:28:d3:6a:d6: 54:ea:d7:81:4e:29:7f:c3:ac:85:0d:42:6e:e4:20: 14:8d:95:bc:5b:25:b2:34:7f:5f:c4:f2:cf:91:3c: b0:df:d0:3e:c7:e6:02:73:99:e6:c8:12:7e:2b:f2: 7e:c8:a9:15:ab:db:a4:b0:6a:42:2b:c8:e9:27:53: 0b:3a:48:bf:bd:ec:8d:c8:b5:36:7a:c0:b1:ee:ad: a3:2b:7a:7c:35:1b:57:97:77:9c:e6:fc:b9:50:e7: 4b:23:cf:db:40:5a:2b:23:81:fd:75:2a:a7:56:cd: 63:f4:ec:b6:66:5f:ed:01:2a:cf:94:8c:55:74:03: 47:43:f9:51:66:45:dd:3b:54:5a:5c:3c:db:d2:e8: 41:9b:6d:18:58:b4:ce:28:a3:80:17:d9:ee:59:4a: 88:60:1d:4f:17:68:e8:2d:a7:a1:2d:77:0c:97:02: b9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4A:56:CB:9A:E9:1B:E0:5B:5C:F2:50:66:7E:53:64:96:F8:20:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b/4747c1fb-9de7-3421-894c-5135a55b7418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b.crl X509v3 Authority Key Identifier: keyid:CD:3F:C8:11:7E:D4:66:E1:34:D4:55:6F:D2:7C:64:D8:21:82:5C:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaba9944-aefa-4b3b-b8aa-19fe7bdf295b.cer sbgp-ipAddrBlock: critical IPv4: 170.39.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:a9:c0:03:c4:31:93:bf:93:79:7b:a1:b4:77:37:ab:cb:70: 3d:ab:ac:f3:04:40:32:fc:e5:4a:52:a4:5c:a6:76:a4:37:16: ce:a1:3d:84:99:45:2d:93:cb:a6:8d:7e:a1:63:e7:62:cc:1a: 43:2f:f6:75:b1:d6:4f:a7:7d:5b:97:1b:7d:0e:7e:22:52:1d: fc:82:0e:8f:6f:48:97:25:af:ad:c5:45:60:db:c2:77:6f:7f: bb:63:e2:b1:e1:bf:c7:39:68:00:c9:f5:81:75:18:6d:4b:65: 9e:0d:95:5c:bf:93:e4:7f:6a:4d:96:63:fe:ca:ea:92:19:fc: 88:31:c0:2d:bf:12:10:25:28:76:b5:26:4f:27:7f:78:0b:37: 1b:cc:83:4a:9a:76:28:30:f2:89:90:4d:6d:c2:a6:13:34:c2: 36:5e:f7:cc:63:e4:68:29:57:87:5e:1d:6a:ba:d8:3f:b4:ba: 14:5c:ec:88:03:b4:c1:9e:5e:86:0a:f8:2b:1a:48:e9:ab:a6: 28:fb:27:5a:65:88:79:77:24:87:d5:6b:02:5a:ed:58:21:fe: 35:cb:de:a5:70:14:2d:c1:58:72:53:1e:77:65:7f:36:98:41: 07:86:4a:18:b5:9a:88:a9:2e:a4:d9:dd:da:ef:92:a7:21:30: f7:ef:4f:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5PWh7G5jXa4FmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFiYTk5NDQtYWVmYS00YjNiLWI4YWEtMTlmZTdiZGYy OTViMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk YmYzZDE3ODYtYTJkNS00YTNjLWJlMjAtOWRkYmFkY2FhZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8D32a30bIy5h8WUHKD9AUt1kQTkGX/C1fcD AIHk5NvWOHy36CYVuTdb331SXNGu525LfANxJXgzOHCzTFkLK94HpXe4lV6rfllO /ZMTxoVWf3ffxyjTatZU6teBTil/w6yFDUJu5CAUjZW8WyWyNH9fxPLPkTyw39A+ x+YCc5nmyBJ+K/J+yKkVq9uksGpCK8jpJ1MLOki/veyNyLU2esCx7q2jK3p8NRtX l3ec5vy5UOdLI8/bQForI4H9dSqnVs1j9Oy2Zl/tASrPlIxVdANHQ/lRZkXdO1Ra XDzb0uhBm20YWLTOKKOAF9nuWUqIYB1PF2joLaehLXcMlwK5tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtKVsua6RvgW1zyUGZ+U2SW+CB8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWJh OTk0NC1hZWZhLTRiM2ItYjhhYS0xOWZlN2JkZjI5NWIvNDc0N2MxZmItOWRlNy0z NDIxLTg5NGMtNTEzNWE1NWI3NDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFiYTk5NDQtYWVmYS00YjNiLWI4 YWEtMTlmZTdiZGYyOTViL2FhYmE5OTQ0LWFlZmEtNGIzYi1iOGFhLTE5ZmU3YmRm Mjk1Yi5jcmwwHwYDVR0jBBgwFoAUzT/IEX7UZuE01FVv0nxk2CGCXJkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWJhOTk0NC1hZWZhLTRiM2ItYjhhYS0xOWZl N2JkZjI5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqicIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+pwAPEMZO/k3l7obR3N6vLcD2rrPMEQDL85UpSpFymdqQ3Fs6hPYSZ RS2Ty6aNfqFj52LMGkMv9nWx1k+nfVuXG30OfiJSHfyCDo9vSJclr63FRWDbwndv f7tj4rHhv8c5aADJ9YF1GG1LZZ4NlVy/k+R/ak2WY/7K6pIZ/IgxwC2/EhAlKHa1 Jk8nf3gLNxvMg0qadigw8omQTW3CphM0wjZe98xj5GgpV4deHWq62D+0uhRc7IgD tMGeXoYK+CsaSOmrpij7J1pliHl3JIfVawJa7Vgh/jXL3qVwFC3BWHJTHndlfzaY QQeGShi1moipLqTZ3drvkqchMPfvT+Q= -----END CERTIFICATE-----Generated at Wed Apr 8 09:17:03 2026 by rpki-client