$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/25988580-4265-3e67-b9da-0bcc5b7a589f.roa File: 25988580-4265-3e67-b9da-0bcc5b7a589f.roa (raw, json) Hash identifier: tiExiuss6lsRbWa2GeLX8YjNW0sXr2gUtpZwQvNhhbs= Subject key identifier: 56:F0:76:C4:AC:3D:F5:02:95:E3:0D:4F:DE:FA:51:80:CE:3D:8C:C5 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D4D5A5E2A8377E0DB62099480 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/25988580-4265-3e67-b9da-0bcc5b7a589f.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 14618 IP address blocks: 173.199.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:5e:2a:83:77:e0:db:62:09:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=e5a61486-6e63-4149-9727-04e9e6f54c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:41:7d:64:12:1b:80:9f:ae:b9:c1:1e:f2:b6: a0:b2:7f:92:93:ae:e5:27:49:bc:0e:63:36:40:3c: 26:17:47:fb:8d:87:0b:60:f7:8e:e1:19:04:35:21: 61:61:76:a9:24:20:b2:08:0b:9b:50:f1:10:aa:33: 8b:88:81:22:09:7f:a7:55:ef:98:c0:84:cc:3d:ef: 22:e3:01:27:ff:f2:f0:ec:a1:34:d2:00:0b:d0:30: f0:f0:bf:96:46:f3:16:43:38:9b:bc:d3:24:98:7f: 48:15:c8:e7:71:3e:9a:39:16:3a:9c:50:bd:1c:a6: 9a:92:51:cc:bd:0a:a8:7c:67:9d:32:b1:e1:8c:e4: a5:83:6f:33:45:86:8a:d5:0d:b3:23:90:ae:e1:2b: 59:f2:1e:8e:80:09:be:62:cf:af:1e:c3:53:9e:77: 39:40:08:4a:b8:48:e5:e8:30:5d:2f:0b:3b:02:55: 9c:b2:2a:06:4a:74:de:c9:04:23:82:c9:fd:66:9c: 54:1d:80:c7:1c:95:6f:bf:92:cf:4e:17:42:c8:11: f1:e3:75:57:06:ec:d8:8e:f2:b3:05:3e:c8:32:fe: aa:ca:b0:f1:e9:19:8c:bd:12:ad:70:16:50:4d:4c: d2:31:5d:cc:c3:4f:d4:28:4b:b7:c8:fd:18:02:28: 5f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F0:76:C4:AC:3D:F5:02:95:E3:0D:4F:DE:FA:51:80:CE:3D:8C:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/25988580-4265-3e67-b9da-0bcc5b7a589f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:e5:0f:83:b0:ce:2f:9a:b5:b8:9e:16:ce:8f:e1:e7:79:35: ec:35:9b:b1:43:f4:11:12:02:5b:67:c1:1b:b4:ee:da:d3:16: ff:19:0d:bb:f8:10:94:aa:f3:2e:9c:32:c9:dc:5a:46:5a:a2: a4:1f:12:24:43:8f:e9:9b:4f:43:32:9d:c9:8c:66:fa:96:aa: a0:ae:9e:2a:d1:31:ae:18:9e:7a:91:f1:0e:12:1a:d1:83:dd: 02:a9:30:a3:d7:f5:63:3c:4a:0a:09:81:c5:3c:07:e1:ce:fa: 79:19:ff:fb:ce:4c:94:2d:6c:08:c5:ec:a1:23:9d:8d:a9:4e: 95:bd:a4:14:8c:ee:99:37:18:59:e7:a6:fa:b7:3a:fa:1a:15: b5:51:af:12:99:ca:b8:b8:be:1d:a1:f5:bd:2e:ef:54:ad:bc: f7:80:20:80:72:95:43:82:41:24:9b:09:fb:be:5f:11:94:d5: 43:21:b9:77:d2:a2:c6:b7:d8:b6:bd:fc:29:ca:16:84:71:47: c9:81:da:19:09:e2:8f:43:13:89:32:52:8c:eb:67:ba:76:00: 87:cb:74:68:7d:af:3a:91:b0:1f:59:53:b9:e3:a8:cc:df:e0: 32:b3:bb:b5:02:11:94:4d:50:31:62:7a:de:99:be:4b:e8:ba: a6:f0:98:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWl4qg3fg22IJlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZTVhNjE0ODYtNmU2My00MTQ5LTk3MjctMDRlOWU2ZjU0YzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0F9ZBIbgJ+uucEe8ragsn+Sk67lJ0m8DmM2 QDwmF0f7jYcLYPeO4RkENSFhYXapJCCyCAubUPEQqjOLiIEiCX+nVe+YwITMPe8i 4wEn//Lw7KE00gAL0DDw8L+WRvMWQzibvNMkmH9IFcjncT6aORY6nFC9HKaaklHM vQqofGedMrHhjOSlg28zRYaK1Q2zI5Cu4StZ8h6OgAm+Ys+vHsNTnnc5QAhKuEjl 6DBdLws7AlWcsioGSnTeyQQjgsn9ZpxUHYDHHJVvv5LPThdCyBHx43VXBuzYjvKz BT7IMv6qyrDx6RmMvRKtcBZQTUzSMV3Mw0/UKEu3yP0YAihf5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbwdsSsPfUCleMNT976UYDOPYzFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMjU5ODg1ODAtNDI2NS0z ZTY3LWI5ZGEtMGJjYzViN2E1ODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArccQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM3lD4Owzi+atbieFs6P4ed5New1m7FD9BESAltnwRu07trTFv8ZDbv4 EJSq8y6cMsncWkZaoqQfEiRDj+mbT0MyncmMZvqWqqCunirRMa4YnnqR8Q4SGtGD 3QKpMKPX9WM8SgoJgcU8B+HO+nkZ//vOTJQtbAjF7KEjnY2pTpW9pBSM7pk3GFnn pvq3OvoaFbVRrxKZyri4vh2h9b0u71StvPeAIIBylUOCQSSbCfu+XxGU1UMhuXfS osa32La9/CnKFoRxR8mB2hkJ4o9DE4kyUozrZ7p2AIfLdGh9rzqRsB9ZU7njqMzf 4DKzu7UCEZRNUDFiet6ZvkvouqbwmGE= -----END CERTIFICATE-----Generated at Tue Apr 7 12:09:04 2026 by rpki-client