$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/3a3ff72c-b732-3667-ade1-9d63c15074cb.roa File: 3a3ff72c-b732-3667-ade1-9d63c15074cb.roa (raw, json) Hash identifier: MRk9QJwKXDy40ULiXfOrzixBAigX3KVJlIxrsNFYjEk= Subject key identifier: DB:06:41:FD:82:BF:78:DC:EE:82:8B:A7:CB:49:00:A4:46:1E:7D:42 Certificate issuer: /CN=0b291a85-da3e-420d-8e7f-61b66b323402 Certificate serial: 010D0C9F4328584D2644C8F5CE034C53EAB65F80 Authority key identifier: 8A:94:63:90:8E:24:FB:33:72:32:FC:FA:B4:6C:C0:B7:AD:7C:4D:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/3a3ff72c-b732-3667-ade1-9d63c15074cb.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 13566 IP address blocks: 204.76.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:c8:f5:ce:03:4c:53:ea:b6:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b291a85-da3e-420d-8e7f-61b66b323402 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=0c57f733-aa3a-4979-8653-a706c599214c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b2:67:69:45:95:c7:8d:09:35:d4:69:00:e7: 33:0e:a4:e7:4a:98:c9:73:cc:2d:2f:67:7d:3d:90: 6d:21:4c:92:4f:55:da:11:34:ea:07:e2:46:64:94: 03:d8:7a:42:cc:88:52:d8:b9:ef:ce:06:7e:6d:05: f4:ed:b3:ab:e6:c8:27:3b:43:63:45:17:fb:ed:83: ce:13:3d:9d:31:e0:37:ca:fe:d5:ef:b5:74:8a:3a: 79:cf:b5:63:17:7a:e0:9b:ec:89:20:ff:d8:bf:73: a9:5d:94:53:36:74:47:07:97:fc:0b:f6:cd:51:08: 15:c6:21:15:84:a6:d4:3a:3d:5f:66:38:6c:4c:dd: b5:48:0b:ad:d1:41:dc:97:f4:ae:ba:99:0e:94:65: 9c:16:96:8d:cc:52:2e:6a:06:87:cb:80:b8:e4:19: 9d:98:1d:3d:72:4f:1d:30:a9:89:de:f1:4a:bf:02: 53:27:68:b0:bd:92:61:68:ae:2b:b2:13:14:48:a0: 37:0f:40:d7:74:e8:f9:0d:14:59:c0:c5:ee:ef:ba: 8b:72:7b:18:3e:00:ba:4f:fa:d1:d3:de:dc:0f:da: 85:c6:3a:b5:df:6b:e7:3a:eb:e8:0f:2f:08:83:b2: 13:d7:c3:f1:b1:04:99:c0:81:d1:92:08:c7:11:87: 83:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:06:41:FD:82:BF:78:DC:EE:82:8B:A7:CB:49:00:A4:46:1E:7D:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/3a3ff72c-b732-3667-ade1-9d63c15074cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.crl X509v3 Authority Key Identifier: keyid:8A:94:63:90:8E:24:FB:33:72:32:FC:FA:B4:6C:C0:B7:AD:7C:4D:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer sbgp-ipAddrBlock: critical IPv4: 204.76.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:33:f6:3a:a9:cf:be:44:8a:ac:ed:b1:b7:6b:b1:9d:38:39: b5:af:58:b1:c3:51:71:41:bd:29:02:d0:e8:97:cc:b3:d7:28: 69:4a:8d:76:1e:f0:0e:f5:6b:27:d9:93:70:d8:d5:e0:34:3a: 07:8d:db:f3:a1:1e:f1:40:7d:67:4f:91:7b:a7:4a:88:89:62: 3d:17:01:0d:f1:51:61:01:4c:e7:ec:f5:c9:6e:21:9b:7f:66: 9a:0b:2d:ec:1a:21:9d:b4:7c:fb:47:73:de:86:d2:07:33:76: 86:a1:e5:69:e3:f8:ee:3e:4b:10:ec:f9:e5:71:91:1c:4f:d4: 71:96:18:7c:de:9d:b6:29:a8:e2:1e:f6:82:b1:f1:94:f5:47: 02:ee:32:58:6c:96:68:29:ab:60:d9:83:d7:c6:5d:83:4f:71: 32:3d:bc:9d:3b:fc:3e:2f:17:4c:7d:59:84:a8:af:c4:92:f8: f8:70:61:dc:04:8d:e2:e5:85:71:95:46:a8:08:c5:2c:18:bb: cb:3e:ba:4b:08:95:04:ca:c0:07:c1:e7:6c:45:e3:b3:26:0b: f2:1c:96:ca:44:35:a9:1d:8d:7d:0c:d5:55:1e:bd:83:7f:5c: 72:9c:45:57:d1:a4:02:40:4d:d5:d0:35:55:db:dd:24:79:23: 1a:77:ed:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRMj1zgNMU+q2X4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIyOTFhODUtZGEzZS00MjBkLThlN2YtNjFiNjZiMzIz NDAyMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk MGM1N2Y3MzMtYWEzYS00OTc5LTg2NTMtYTcwNmM1OTkyMTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirJnaUWVx40JNdRpAOczDqTnSpjJc8wtL2d9 PZBtIUyST1XaETTqB+JGZJQD2HpCzIhS2LnvzgZ+bQX07bOr5sgnO0NjRRf77YPO Ez2dMeA3yv7V77V0ijp5z7VjF3rgm+yJIP/Yv3OpXZRTNnRHB5f8C/bNUQgVxiEV hKbUOj1fZjhsTN21SAut0UHcl/SuupkOlGWcFpaNzFIuagaHy4C45BmdmB09ck8d MKmJ3vFKvwJTJ2iwvZJhaK4rshMUSKA3D0DXdOj5DRRZwMXu77qLcnsYPgC6T/rR 097cD9qFxjq132vnOuvoDy8Ig7IT18PxsQSZwIHRkgjHEYeD1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsGQf2Cv3jc7oKLp8tJAKRGHn1CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYjI5 MWE4NS1kYTNlLTQyMGQtOGU3Zi02MWI2NmIzMjM0MDIvM2EzZmY3MmMtYjczMi0z NjY3LWFkZTEtOWQ2M2MxNTA3NGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGIyOTFhODUtZGEzZS00MjBkLThl N2YtNjFiNjZiMzIzNDAyLzBiMjkxYTg1LWRhM2UtNDIwZC04ZTdmLTYxYjY2YjMy MzQwMi5jcmwwHwYDVR0jBBgwFoAUipRjkI4k+zNyMvz6tGzAt618TWwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYjI5MWE4NS1kYTNlLTQyMGQtOGU3Zi02MWI2 NmIzMjM0MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzEyuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgz9jqpz75EiqztsbdrsZ04ObWvWLHDUXFBvSkC0OiXzLPXKGlKjXYe 8A71ayfZk3DY1eA0OgeN2/OhHvFAfWdPkXunSoiJYj0XAQ3xUWEBTOfs9cluIZt/ ZpoLLewaIZ20fPtHc96G0gczdoah5Wnj+O4+SxDs+eVxkRxP1HGWGHzenbYpqOIe 9oKx8ZT1RwLuMlhslmgpq2DZg9fGXYNPcTI9vJ07/D4vF0x9WYSor8SS+PhwYdwE jeLlhXGVRqgIxSwYu8s+uksIlQTKwAfB52xF47MmC/IclspENakdjX0M1VUevYN/ XHKcRVfRpAJATdXQNVXb3SR5Ixp37eU= -----END CERTIFICATE-----Generated at Fri Mar 13 13:23:08 2026 by rpki-client