$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/42ac1941-2b50-38c6-acee-89f1dd91689c.roa File: 42ac1941-2b50-38c6-acee-89f1dd91689c.roa (raw, json) Hash identifier: Mz9wh1LMhfCLLUkEvxM67vyXsd1YvEWmAPyVVJ7S8OA= Subject key identifier: C0:EE:94:7F:8E:B0:65:33:E1:76:61:31:09:1A:87:6D:E8:05:9F:A7 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584E41AC56E54F4E311D49FCD500 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/42ac1941-2b50-38c6-acee-89f1dd91689c.roa Signing time: Mon 22 Jun 2026 13:23:18 +0000 ROA not before: Mon 22 Jun 2026 13:23:18 +0000 ROA not after: Sun 20 Sep 2026 13:23:18 +0000 asID: 62651 IP address blocks: 173.255.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:ac:56:e5:4f:4e:31:1d:49:fc:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jun 22 13:23:18 2026 GMT Not After : Sep 20 13:23:18 2026 GMT Subject: CN=95a05724-6cad-4f32-bd44-eb60177c8a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5a:c1:35:9f:f7:f0:07:63:00:63:7f:a3:52: c4:40:2a:e5:4a:11:4b:0c:ab:7c:fd:07:a9:31:46: 02:e7:8e:75:66:a2:44:7a:b1:bc:1b:0c:c1:8c:ec: 20:90:4e:47:ed:44:dd:c4:dd:5b:16:f5:c0:99:c8: 12:45:4d:f2:af:26:78:e7:d2:0e:ac:88:96:aa:00: 62:71:e5:b4:25:61:f3:85:15:44:c0:ef:c6:7f:7b: 03:31:77:31:07:01:0b:d9:33:46:b8:75:51:f6:8e: 3d:22:80:03:a3:ad:af:65:28:2f:fc:37:09:16:4e: 90:ce:02:c8:b3:af:68:b8:bd:c5:26:75:42:f6:53: bc:e8:e7:3a:65:5c:9e:1b:97:8b:2a:44:32:cd:4f: 90:85:86:c8:95:73:6b:7d:2a:7b:c4:f9:df:ca:d6: 48:26:2f:fb:a1:91:01:a2:c8:f7:ce:c1:cf:92:00: af:78:a2:44:ac:78:12:1c:22:64:4f:65:93:dc:4d: d4:f0:e5:12:b5:4e:6a:65:fe:42:68:2b:06:db:42: 6b:76:16:31:f7:50:06:67:85:71:66:87:8d:c9:6a: bd:c6:e9:a8:4c:74:b5:b5:8f:47:9a:57:d4:e4:73: b2:d2:87:75:ac:16:6f:b0:a9:36:d2:2e:d1:e3:e6: ef:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EE:94:7F:8E:B0:65:33:E1:76:61:31:09:1A:87:6D:E8:05:9F:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/42ac1941-2b50-38c6-acee-89f1dd91689c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 173.255.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:81:03:5f:60:9f:d2:06:65:2f:da:61:01:ff:30:6f:ca:41: 30:c9:c5:bb:0f:a7:05:a4:20:f8:e9:31:52:f2:33:80:7e:f4: a5:77:50:3e:c5:3a:bb:5f:c8:ab:fa:0f:1b:53:85:b8:31:bf: 5d:86:a5:ed:ab:35:86:72:73:dd:78:98:ae:6a:3e:8f:18:d7: 49:a3:e6:65:08:2c:a1:69:6c:3b:96:91:cd:52:7a:10:c9:bf: 47:e7:2b:85:95:7e:15:32:71:36:38:73:16:27:73:17:cd:0b: 9d:58:e9:ef:a1:7b:a8:08:dd:5e:06:42:73:05:db:02:01:ad: 91:f0:b3:03:e0:02:1b:46:f4:c6:d1:b9:f7:aa:ff:22:20:3a: 82:97:d6:02:af:fa:99:93:ca:72:3a:94:ee:88:05:00:ff:85: 98:e6:d4:8f:7c:99:08:20:66:14:fc:24:e0:f6:c5:b7:85:8e: 19:64:aa:7d:4a:55:1c:dc:9a:90:15:25:e3:c9:ec:12:76:83: 2f:8d:11:eb:e7:14:c7:eb:4c:0c:2c:1b:b9:5c:ab:a3:90:34: a1:a7:87:26:85:19:3a:05:8f:68:2d:5d:6a:76:73:06:3b:47: 01:6a:de:3e:1f:91:49:2d:3b:cc:e1:43:8e:de:4e:42:db:9a: 0d:01:72:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BrFblT04xHUn81QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDYyMjEzMjMxOFoXDTI2MDkyMDEzMjMxOFowLzEtMCsGA1UEAxMk OTVhMDU3MjQtNmNhZC00ZjMyLWJkNDQtZWI2MDE3N2M4YTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFrBNZ/38AdjAGN/o1LEQCrlShFLDKt8/Qep MUYC5451ZqJEerG8GwzBjOwgkE5H7UTdxN1bFvXAmcgSRU3yryZ459IOrIiWqgBi ceW0JWHzhRVEwO/Gf3sDMXcxBwEL2TNGuHVR9o49IoADo62vZSgv/DcJFk6QzgLI s69ouL3FJnVC9lO86Oc6ZVyeG5eLKkQyzU+QhYbIlXNrfSp7xPnfytZIJi/7oZEB osj3zsHPkgCveKJErHgSHCJkT2WT3E3U8OUStU5qZf5CaCsG20JrdhYx91AGZ4Vx ZoeNyWq9xumoTHS1tY9HmlfU5HOy0od1rBZvsKk20i7R4+bv4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDulH+OsGUz4XZhMQkah23oBZ+nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNDJhYzE5NDEtMmI1MC0z OGM2LWFjZWUtODlmMWRkOTE2ODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrf+qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaBA19gn9IGZS/aYQH/MG/KQTDJxbsPpwWkIPjpMVLyM4B+9KV3UD7F OrtfyKv6DxtThbgxv12Gpe2rNYZyc914mK5qPo8Y10mj5mUILKFpbDuWkc1SehDJ v0fnK4WVfhUycTY4cxYncxfNC51Y6e+he6gI3V4GQnMF2wIBrZHwswPgAhtG9MbR ufeq/yIgOoKX1gKv+pmTynI6lO6IBQD/hZjm1I98mQggZhT8JOD2xbeFjhlkqn1K VRzcmpAVJePJ7BJ2gy+NEevnFMfrTAwsG7lcq6OQNKGnhyaFGToFj2gtXWp2cwY7 RwFq3j4fkUktO8zhQ47eTkLbmg0BciM= -----END CERTIFICATE-----Generated at Tue Jul 21 22:32:44 2026 by rpki-client