$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/f04fa8ab-3894-36e6-9343-e11c41b48098.roa File: f04fa8ab-3894-36e6-9343-e11c41b48098.roa (raw, json) Hash identifier: hY6hK29SWG9Fz/i7yK4qT4s/7XjDKK6Q8S7zZTZ0Jsc= Subject key identifier: A9:41:4B:E3:0E:9E:E0:60:08:32:13:02:02:50:B6:3D:F9:DE:99:34 Certificate issuer: /CN=97cac0b7-abb7-43b2-8435-2db8edb2a015 Certificate serial: 010D0C9F4328584DFA707DD994104D897F9A7900 Authority key identifier: 25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/f04fa8ab-3894-36e6-9343-e11c41b48098.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 62802 IP address blocks: 170.4.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:7d:d9:94:10:4d:89:7f:9a:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97cac0b7-abb7-43b2-8435-2db8edb2a015 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=83dd59cb-d247-4d25-9cd5-b1ec5d080f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2f:d1:52:87:f9:29:1d:ac:20:ed:9e:1d:ed: b7:19:53:aa:57:6a:46:b7:c1:c8:63:75:85:b1:1a: 87:aa:0b:2e:14:07:16:45:90:b1:11:88:17:ac:51: da:91:3a:6b:84:77:4f:57:43:65:03:46:0d:11:c1: 90:fe:4e:94:68:2f:5e:73:9d:57:a9:7c:30:57:8a: 0e:3c:ec:72:5a:44:da:c0:df:6a:1b:58:34:23:ae: 69:58:6d:b2:90:16:07:d3:a3:54:8a:20:72:25:a6: ba:be:36:36:43:79:d4:76:29:dd:2b:54:46:c5:f3: f7:8f:28:f2:5a:d0:bb:70:50:59:4a:93:5e:b2:2a: 29:bb:76:fc:c7:56:48:64:ce:a9:d2:8c:6d:24:c4: 17:b8:80:bf:96:d5:fa:ea:7a:2b:f7:63:a1:b8:7b: e7:b4:71:c0:11:38:4e:86:88:d4:1e:ea:92:c7:a6: 33:6f:47:6b:ab:7b:1d:b0:69:3d:a3:a2:bd:a5:10: 29:22:d0:03:52:9c:ad:1f:2b:69:10:8c:b9:ad:5b: 73:3d:f5:03:93:f6:ff:c9:54:fd:bb:0d:ad:03:d6: dd:87:f8:d7:52:81:b8:30:e5:04:59:0d:98:1a:5d: 7e:03:9e:b0:12:1d:8d:74:ae:ba:be:9d:14:2b:bd: 19:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:41:4B:E3:0E:9E:E0:60:08:32:13:02:02:50:B6:3D:F9:DE:99:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/f04fa8ab-3894-36e6-9343-e11c41b48098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.crl X509v3 Authority Key Identifier: keyid:25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer sbgp-ipAddrBlock: critical IPv4: 170.4.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:15:ad:94:07:12:20:f4:14:8d:88:91:61:ab:c9:6c:61:1f: 1e:98:10:dd:d8:77:3b:c9:73:81:9b:31:4d:84:c3:74:fa:d4: 1d:44:2e:d8:e7:1f:c2:0c:e2:96:06:b0:ac:34:45:d5:69:4b: fe:31:bb:e8:3a:f4:fc:5e:93:30:dd:e8:72:6d:e3:38:90:75: 67:e8:75:a3:6d:e9:d5:56:13:e3:70:12:77:00:64:7d:83:e3: 89:94:29:fc:32:3f:c1:96:50:5f:d5:a7:b2:41:e6:c2:26:33: 84:95:ee:62:c0:55:07:29:85:26:cd:3a:a2:b7:08:a8:29:44: 73:3b:12:69:14:16:f2:d1:a0:2f:9a:0f:9c:c3:f6:1a:95:de: da:74:5e:fe:eb:f4:ca:42:6a:b3:d9:16:cc:67:61:8a:21:69: 99:fb:c0:38:cb:40:ce:86:90:7f:77:1c:7d:96:9f:e7:16:86: 6f:1c:4a:7c:8c:4f:6e:a8:6b:86:ea:67:19:3a:35:ca:36:26: 2e:22:8a:93:39:65:6a:45:1b:52:b4:65:53:1c:5c:ef:55:3d: 3a:cb:95:f6:ae:2e:74:b4:e4:1e:6b:32:36:a0:7a:c1:79:7c: 58:4e:ab:0d:eb:d2:10:0e:37:2c:54:16:97:49:a5:2b:30:72: d7:7f:25:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cH3ZlBBNiX+aeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTdjYWMwYjctYWJiNy00M2IyLTg0MzUtMmRiOGVkYjJh MDE1MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk ODNkZDU5Y2ItZDI0Ny00ZDI1LTljZDUtYjFlYzVkMDgwZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC/RUof5KR2sIO2eHe23GVOqV2pGt8HIY3WF sRqHqgsuFAcWRZCxEYgXrFHakTprhHdPV0NlA0YNEcGQ/k6UaC9ec51XqXwwV4oO POxyWkTawN9qG1g0I65pWG2ykBYH06NUiiByJaa6vjY2Q3nUdindK1RGxfP3jyjy WtC7cFBZSpNesiopu3b8x1ZIZM6p0oxtJMQXuIC/ltX66nor92OhuHvntHHAEThO hojUHuqSx6Yzb0drq3sdsGk9o6K9pRApItADUpytHytpEIy5rVtzPfUDk/b/yVT9 uw2tA9bdh/jXUoG4MOUEWQ2YGl1+A56wEh2NdK66vp0UK70ZkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlBS+MOnuBgCDITAgJQtj353pk0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85N2Nh YzBiNy1hYmI3LTQzYjItODQzNS0yZGI4ZWRiMmEwMTUvZjA0ZmE4YWItMzg5NC0z NmU2LTkzNDMtZTExYzQxYjQ4MDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTdjYWMwYjctYWJiNy00M2IyLTg0 MzUtMmRiOGVkYjJhMDE1Lzk3Y2FjMGI3LWFiYjctNDNiMi04NDM1LTJkYjhlZGIy YTAxNS5jcmwwHwYDVR0jBBgwFoAUJUy8tEr1tRoG1M3jo5+1B+97YukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85N2NhYzBiNy1hYmI3LTQzYjItODQzNS0yZGI4 ZWRiMmEwMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQVrZQHEiD0FI2IkWGryWxhHx6YEN3YdzvJc4GbMU2Ew3T61B1ELtjn H8IM4pYGsKw0RdVpS/4xu+g69PxekzDd6HJt4ziQdWfodaNt6dVWE+NwEncAZH2D 44mUKfwyP8GWUF/Vp7JB5sImM4SV7mLAVQcphSbNOqK3CKgpRHM7EmkUFvLRoC+a D5zD9hqV3tp0Xv7r9MpCarPZFsxnYYohaZn7wDjLQM6GkH93HH2Wn+cWhm8cSnyM T26oa4bqZxk6Nco2Ji4iipM5ZWpFG1K0ZVMcXO9VPTrLlfauLnS05B5rMjagesF5 fFhOqw3r0hAONyxUFpdJpSswctd/JQc= -----END CERTIFICATE-----Generated at Sat Jun 6 17:08:35 2026 by rpki-client