$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/5c3108b3-4900-35c3-86a1-e25092452588.roa File: 5c3108b3-4900-35c3-86a1-e25092452588.roa (raw, json) Hash identifier: m1FR73Yzl9+379zipItrSIaHKO9EABjajWRlL9WefAc= Subject key identifier: 3E:3A:91:0F:10:01:9A:49:FD:F2:09:19:0C:AA:9B:0B:63:67:61:21 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584D20AF56D25A11C832DBF5B8E0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/5c3108b3-4900-35c3-86a1-e25092452588.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 931 IP address blocks: 170.39.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:56:d2:5a:11:c8:32:db:f5:b8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=0fc24c54-0d68-438d-9491-476024c81b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a5:3f:5a:16:81:d4:68:68:2c:44:82:4f:d6: 1c:da:d7:7a:91:c4:ae:a2:b3:8c:cd:bf:17:fc:48: c9:37:8e:9b:d0:bb:23:d6:dd:a6:b6:49:cd:fd:30: b1:a0:1c:b4:aa:b4:1b:2a:13:83:cf:75:c8:37:18: e4:96:5b:28:f1:70:c1:ff:e4:05:2c:ad:2a:21:32: a9:d9:cb:4e:38:17:f0:97:6f:f0:8b:1c:c9:b8:fa: 9b:a9:e2:40:63:c5:a8:54:26:d6:76:04:7c:34:cd: 8c:bb:7a:11:67:0f:72:a2:a4:54:82:6d:fc:88:f4: 0b:ec:19:01:86:ec:1e:c0:2d:54:89:f5:73:0e:ae: 6d:31:79:da:c0:e1:ba:66:e5:e9:0d:ff:79:fe:54: 47:4b:53:1a:1c:8b:7a:c3:e3:ea:b5:d7:62:f3:36: 1d:b6:01:30:ad:16:26:c4:cc:57:ba:cb:cc:a9:c2: 6d:8b:4d:db:54:6a:b6:56:08:c7:cf:f1:9e:07:5e: 78:a9:24:66:ea:b8:0e:d9:6c:30:e5:24:bb:b4:51: dd:5b:87:54:32:9b:f3:68:38:03:24:27:32:d1:03: c2:90:32:d1:8a:39:4e:d8:34:a2:4a:49:ac:36:3c: 2b:13:12:20:c9:4e:7f:18:e2:34:be:b1:63:de:db: a5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3A:91:0F:10:01:9A:49:FD:F2:09:19:0C:AA:9B:0B:63:67:61:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/5c3108b3-4900-35c3-86a1-e25092452588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:9c:eb:10:d6:10:fd:6c:5d:b3:3c:4a:b7:9d:51:ac:42:ed: 39:7e:c4:90:01:74:aa:51:3e:b1:9c:a8:8e:dd:11:1f:c8:e8: f3:b3:b4:73:9c:a5:2e:62:c1:31:d6:2b:5f:cd:2d:ca:f3:35: ec:14:7d:69:78:d1:e8:86:ff:f0:de:f4:68:4c:ea:83:6d:53: 60:06:79:6e:d6:c3:12:c4:c8:e0:dd:45:00:10:c7:55:f1:fd: 34:a6:2a:8e:7f:37:95:9a:c2:34:f1:da:dc:4d:2e:fb:1a:67: 49:3e:3b:1b:5a:c4:8a:d9:e1:a6:49:a5:0a:cd:e6:ad:fe:91: 39:0f:f3:34:b5:75:8e:9c:bf:6d:73:de:43:cb:e3:35:f8:a6: 93:61:be:3a:fd:ed:89:2f:ba:94:1b:8a:6a:ba:fc:41:03:ab: ca:a5:86:b8:a8:3f:12:ad:12:8a:18:ba:c3:0c:62:21:1a:ba: cd:00:5d:90:58:c7:9a:91:33:43:cd:f9:f2:9b:81:3b:28:24: d9:41:c3:c3:3e:ed:87:ee:e5:7e:dc:f6:cf:cc:ab:cd:b6:84: de:e0:81:3b:ea:e4:a4:be:83:67:05:86:da:6a:3e:8f:5c:ae: 90:19:73:f9:3c:ea:a7:bb:85:da:c2:4c:d2:28:22:9d:93:fa: 0c:0d:61:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1bSWhHIMtv1uOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk MGZjMjRjNTQtMGQ2OC00MzhkLTk0OTEtNDc2MDI0YzgxYjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKU/WhaB1GhoLESCT9Yc2td6kcSuorOMzb8X /EjJN46b0Lsj1t2mtknN/TCxoBy0qrQbKhODz3XINxjkllso8XDB/+QFLK0qITKp 2ctOOBfwl2/wixzJuPqbqeJAY8WoVCbWdgR8NM2Mu3oRZw9yoqRUgm38iPQL7BkB huwewC1UifVzDq5tMXnawOG6ZuXpDf95/lRHS1MaHIt6w+Pqtddi8zYdtgEwrRYm xMxXusvMqcJti03bVGq2VgjHz/GeB154qSRm6rgO2Www5SS7tFHdW4dUMpvzaDgD JCcy0QPCkDLRijlO2DSiSkmsNjwrExIgyU5/GOI0vrFj3tulEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD46kQ8QAZpJ/fIJGQyqmwtjZ2EhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNWMzMTA4YjMtNDkwMC0z NWMzLTg2YTEtZTI1MDkyNDUyNTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAec6xDWEP1sXbM8SredUaxC7Tl+xJABdKpRPrGcqI7dER/I6POztHOc pS5iwTHWK1/NLcrzNewUfWl40eiG//De9GhM6oNtU2AGeW7WwxLEyODdRQAQx1Xx /TSmKo5/N5WawjTx2txNLvsaZ0k+OxtaxIrZ4aZJpQrN5q3+kTkP8zS1dY6cv21z 3kPL4zX4ppNhvjr97YkvupQbimq6/EEDq8qlhrioPxKtEooYusMMYiEaus0AXZBY x5qRM0PN+fKbgTsoJNlBw8M+7Yfu5X7c9s/Mq822hN7ggTvq5KS+g2cFhtpqPo9c rpAZc/k86qe7hdrCTNIoIp2T+gwNYcc= -----END CERTIFICATE-----Generated at Fri Mar 13 11:00:50 2026 by rpki-client