$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/afbebce4-9985-368e-9ee2-c9d9882efa72.roa File: afbebce4-9985-368e-9ee2-c9d9882efa72.roa (raw, json) Hash identifier: PXSO5ZBgexDxba8OSXdOaDNZjOkuhByQCGuEUCaM4eg= Subject key identifier: 0C:77:83:27:E8:E1:4A:72:DE:D6:69:00:02:96:D0:5C:D8:4E:D8:A1 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584D100D01CFBBB6209C764AD900 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/afbebce4-9985-368e-9ee2-c9d9882efa72.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 15164 IP address blocks: 173.244.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0d:01:cf:bb:b6:20:9c:76:4a:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=3a3ac602-dc43-4210-a3d4-63269fb9425d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f3:0c:b6:8e:38:df:e2:b2:8c:71:04:96:08: 88:ee:77:30:64:a2:e5:c3:23:88:f5:d3:fc:d0:87: e0:49:57:c9:08:50:47:fe:93:14:19:a8:e8:e1:ae: e9:ff:10:54:02:a0:93:83:60:c0:77:5a:e3:d3:f7: 70:0b:dd:e8:cb:ba:97:8d:0f:3e:15:1a:fc:82:9a: 34:85:55:b0:35:d8:6c:1a:11:d3:5e:5d:f1:a6:a1: 1c:fa:13:2c:cf:2a:92:07:a0:52:fa:82:c8:bd:d3: eb:0f:ad:fd:55:2a:3e:76:d3:85:92:1e:2b:cd:91: 3a:b6:f5:4d:d7:d2:c2:cc:58:f4:28:f0:b5:17:c6: bf:0b:9e:3b:2d:85:dc:8e:53:d5:37:29:78:59:1d: 24:8f:3c:56:34:49:93:22:69:1a:d8:c9:0a:4a:95: 45:77:b6:06:dc:50:cd:b9:a6:f2:a3:ef:bb:0d:5f: 1f:a2:dc:dc:66:0f:3f:2d:a7:b5:17:a8:c3:bc:e3: 09:42:51:42:2b:5b:f8:05:e1:c3:33:ef:de:42:b8: 35:11:0b:ac:92:a1:11:a1:aa:35:83:61:7b:84:0f: 66:af:d5:65:fe:83:95:18:02:67:29:08:e1:51:02: 48:1e:8a:2f:cf:51:61:2a:25:2b:db:f2:c9:16:ba: 03:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:77:83:27:E8:E1:4A:72:DE:D6:69:00:02:96:D0:5C:D8:4E:D8:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/afbebce4-9985-368e-9ee2-c9d9882efa72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 173.244.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:c2:49:9d:3d:a4:88:59:8c:b5:56:7d:71:11:2f:ba:d1:50: 79:03:a4:ac:5d:2e:16:08:bd:b3:f5:bb:8a:98:bf:16:7e:18: b3:70:45:03:0f:4d:2e:a1:51:b7:ee:6e:56:fa:05:41:26:f7: a6:03:4c:74:ab:a3:4f:f0:ef:0d:a9:0f:c3:7a:a3:0d:38:ab: 70:98:86:e5:10:6f:4b:ea:da:61:c2:3e:b4:e9:4d:6c:09:53: 6a:56:7f:30:24:cb:b8:8a:a8:1f:04:6d:cd:94:30:5c:b9:54: 18:e0:d3:e4:09:23:73:09:c9:7e:95:6d:a8:4a:31:af:6d:b5: aa:d6:7c:20:20:83:56:32:3e:92:04:19:65:54:72:f1:d7:5c: 6e:49:26:c8:3f:bc:f5:44:8e:cc:5b:a4:c2:a1:9d:5b:cd:57: 7b:cc:b5:d9:04:a8:13:1a:a8:28:e5:fa:bc:bb:f8:16:42:f9: d1:fc:0e:f1:65:c6:6d:01:7b:0a:e0:55:1d:6b:ea:ca:4f:21: ae:58:15:3a:8e:fe:16:70:4c:a3:af:c5:ad:c3:23:e9:dc:2b: 83:ba:c2:ed:88:34:bd:10:79:dc:c2:5a:f4:ab:78:ed:fb:13: 94:be:dc:51:57:1f:5c:d2:95:a5:37:98:09:80:16:ca:a4:12: ea:aa:6e:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDQHPu7YgnHZK2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk M2EzYWM2MDItZGM0My00MjEwLWEzZDQtNjMyNjlmYjk0MjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvMMto443+KyjHEElgiI7ncwZKLlwyOI9dP8 0IfgSVfJCFBH/pMUGajo4a7p/xBUAqCTg2DAd1rj0/dwC93oy7qXjQ8+FRr8gpo0 hVWwNdhsGhHTXl3xpqEc+hMszyqSB6BS+oLIvdPrD639VSo+dtOFkh4rzZE6tvVN 19LCzFj0KPC1F8a/C547LYXcjlPVNyl4WR0kjzxWNEmTImka2MkKSpVFd7YG3FDN uabyo++7DV8fotzcZg8/Lae1F6jDvOMJQlFCK1v4BeHDM+/eQrg1EQuskqERoao1 g2F7hA9mr9Vl/oOVGAJnKQjhUQJIHoovz1FhKiUr2/LJFroDKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAx3gyfo4Upy3tZpAAKW0FzYTtihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYWZiZWJjZTQtOTk4NS0z NjhlLTllZTItYzlkOTg4MmVmYTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzCSZ09pIhZjLVWfXERL7rRUHkDpKxdLhYIvbP1u4qYvxZ+GLNwRQMP TS6hUbfublb6BUEm96YDTHSro0/w7w2pD8N6ow04q3CYhuUQb0vq2mHCPrTpTWwJ U2pWfzAky7iKqB8Ebc2UMFy5VBjg0+QJI3MJyX6VbahKMa9ttarWfCAgg1YyPpIE GWVUcvHXXG5JJsg/vPVEjsxbpMKhnVvNV3vMtdkEqBMaqCjl+ry7+BZC+dH8DvFl xm0BewrgVR1r6spPIa5YFTqO/hZwTKOvxa3DI+ncK4O6wu2INL0QedzCWvSreO37 E5S+3FFXH1zSlaU3mAmAFsqkEuqqbpg= -----END CERTIFICATE-----Generated at Fri Mar 13 13:32:50 2026 by rpki-client