$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/31087add-e607-36b0-8d31-ad7c14d91fbb.roa File: 31087add-e607-36b0-8d31-ad7c14d91fbb.roa (raw, json) Hash identifier: kx/KXgQWyTyXuqWEOk2yM9DCFdDUaC4xcu0+Z8PppUk= Subject key identifier: B9:09:1A:84:11:37:AD:5F:1C:33:4D:B2:D3:56:E6:84:A9:27:46:7F Certificate issuer: /CN=1fe8849b-66cd-4afe-9b0b-970eafad1175 Certificate serial: 010D0C9F4328584D44FA43C36DC68B732D18D100 Authority key identifier: BE:A8:20:9C:13:5E:FC:F9:EE:69:98:CE:84:4E:B8:E8:DC:83:F4:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/31087add-e607-36b0-8d31-ad7c14d91fbb.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 1008 IP address blocks: 170.205.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:43:c3:6d:c6:8b:73:2d:18:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe8849b-66cd-4afe-9b0b-970eafad1175 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=39217ba8-1b07-4b31-b03d-11f2fffd4e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:49:e5:11:04:49:ba:aa:34:5c:6d:55:d5:81: 4a:1b:54:6c:a0:c9:c6:94:1b:bb:1f:78:d6:61:7a: 5b:08:6e:df:e8:96:35:27:e5:91:3f:58:c7:49:85: e2:94:d8:f2:07:5d:5f:08:5d:bd:1a:e7:52:d3:58: cf:17:7f:ca:b8:e4:71:cc:1a:82:70:b7:41:d1:2f: 31:0a:36:99:eb:bc:5d:1a:f3:55:03:d2:c2:d3:cb: 8f:7f:cb:a3:0d:b1:3f:d4:2d:70:e6:81:e0:50:45: f2:f4:8c:27:76:df:5a:5c:be:cc:99:b6:1a:82:38: 9d:e3:db:41:da:1e:31:fc:f0:a2:a2:32:4c:df:3c: d4:fd:a9:b3:3b:d3:9f:0f:cb:d9:44:25:37:30:53: 41:a6:c4:88:6d:08:ec:76:e3:cd:b2:9c:da:8e:19: 0b:6d:3f:8c:eb:87:8a:07:96:45:fc:b9:05:e6:53: 9d:99:72:0a:83:83:c7:33:f4:08:76:fc:d3:50:9f: 59:d0:d4:d6:bc:b6:8a:ad:b0:b7:54:6e:9e:37:ca: b8:1a:df:f0:13:ea:86:73:2a:3e:e0:6b:20:43:55: be:62:b7:06:34:77:72:2a:d8:cc:73:28:7a:2a:c7: 33:07:8b:1c:d0:10:85:fd:6e:48:f8:bc:bf:41:88: ce:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:09:1A:84:11:37:AD:5F:1C:33:4D:B2:D3:56:E6:84:A9:27:46:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/31087add-e607-36b0-8d31-ad7c14d91fbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.crl X509v3 Authority Key Identifier: keyid:BE:A8:20:9C:13:5E:FC:F9:EE:69:98:CE:84:4E:B8:E8:DC:83:F4:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer sbgp-ipAddrBlock: critical IPv4: 170.205.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ca:c6:5d:e2:e7:db:dd:79:7d:5e:c2:6e:a5:1a:ad:d7:ed: 5c:f9:82:ea:6d:bd:58:ef:cc:12:66:48:57:09:3e:d7:06:16: bf:6b:aa:d5:ad:8f:8b:54:5f:19:06:2e:ef:28:a2:d0:e3:f7: 5d:ae:31:8b:79:51:0f:97:19:4d:57:82:72:f8:ff:9a:2e:c8: c6:1e:11:09:90:56:8e:5c:07:95:6a:1a:0c:55:78:6e:fc:0a: 18:65:31:45:b9:8e:df:d2:50:bc:9e:af:3f:64:ed:56:ed:c5: 56:30:6e:75:7e:73:ae:83:77:48:9a:b9:8c:2b:b7:6b:0e:98: 82:6b:0b:76:9d:60:b9:23:8a:39:d8:5d:65:22:f7:79:b3:a2: 6f:da:c2:d5:88:47:fd:2c:24:e8:56:41:9e:eb:56:2e:e7:68: 29:e7:f5:a0:70:2f:0c:09:1d:2d:0b:b7:28:26:f0:a2:af:ed: 2b:b5:a0:96:9c:e5:d5:c5:5c:5f:ea:ba:5d:84:6c:73:54:d1: 49:a7:f7:84:fb:df:5a:bd:9d:61:37:c9:6d:78:bd:6a:38:52: d4:c1:d5:cb:fc:0b:0c:b9:5b:de:56:93:fd:da:e6:56:7e:d7: b6:73:45:d3:df:eb:43:97:b1:ca:1f:59:37:7f:87:17:c0:7a: 67:4a:13:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kPDbcaLcy0Y0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlODg0OWItNjZjZC00YWZlLTliMGItOTcwZWFmYWQx MTc1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MzkyMTdiYTgtMWIwNy00YjMxLWIwM2QtMTFmMmZmZmQ0ZThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0nlEQRJuqo0XG1V1YFKG1RsoMnGlBu7H3jW YXpbCG7f6JY1J+WRP1jHSYXilNjyB11fCF29GudS01jPF3/KuORxzBqCcLdB0S8x CjaZ67xdGvNVA9LC08uPf8ujDbE/1C1w5oHgUEXy9Iwndt9aXL7MmbYagjid49tB 2h4x/PCiojJM3zzU/amzO9OfD8vZRCU3MFNBpsSIbQjsduPNspzajhkLbT+M64eK B5ZF/LkF5lOdmXIKg4PHM/QIdvzTUJ9Z0NTWvLaKrbC3VG6eN8q4Gt/wE+qGcyo+ 4GsgQ1W+YrcGNHdyKtjMcyh6KsczB4sc0BCF/W5I+Ly/QYjOUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkJGoQRN61fHDNNstNW5oSpJ0Z/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZmU4 ODQ5Yi02NmNkLTRhZmUtOWIwYi05NzBlYWZhZDExNzUvMzEwODdhZGQtZTYwNy0z NmIwLThkMzEtYWQ3YzE0ZDkxZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWZlODg0OWItNjZjZC00YWZlLTli MGItOTcwZWFmYWQxMTc1LzFmZTg4NDliLTY2Y2QtNGFmZS05YjBiLTk3MGVhZmFk MTE3NS5jcmwwHwYDVR0jBBgwFoAUvqggnBNe/PnuaZjOhE646NyD9JUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZmU4ODQ5Yi02NmNkLTRhZmUtOWIwYi05NzBl YWZhZDExNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqs0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7Kxl3i59vdeX1ewm6lGq3X7Vz5guptvVjvzBJmSFcJPtcGFr9rqtWt j4tUXxkGLu8ootDj912uMYt5UQ+XGU1XgnL4/5ouyMYeEQmQVo5cB5VqGgxVeG78 ChhlMUW5jt/SULyerz9k7VbtxVYwbnV+c66Dd0iauYwrt2sOmIJrC3adYLkjijnY XWUi93mzom/awtWIR/0sJOhWQZ7rVi7naCnn9aBwLwwJHS0Ltygm8KKv7Su1oJac 5dXFXF/qul2EbHNU0Umn94T731q9nWE3yW14vWo4UtTB1cv8Cwy5W95Wk/3a5lZ+ 17ZzRdPf60OXscofWTd/hxfAemdKEyE= -----END CERTIFICATE-----Generated at Tue Mar 24 11:20:20 2026 by rpki-client