$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa File: f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa (raw, json) Hash identifier: a8drSuLAn8MEmEwf5smRHman6Pvqsos36kttmCdzgQo= Subject key identifier: 8E:FC:FB:FC:FD:8D:F7:42:79:70:4E:52:63:99:C4:2F:93:2A:C9:05 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584D20AF586DD1F9CA9B49DE1140 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 213122 IP address blocks: 170.39.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:58:6d:d1:f9:ca:9b:49:de:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=8df8acb8-08c7-4080-b054-3da4cd1e7b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e3:19:af:f7:83:54:34:cc:b0:9f:71:2f:cc: 16:88:95:7d:5f:3b:15:14:4b:4b:c1:4e:3d:95:d4: c8:d7:a5:0e:55:e6:99:2d:77:5b:62:7b:e5:6d:2a: 54:0f:32:11:bb:0c:bd:7f:75:24:d9:e5:62:68:25: 80:f5:60:90:b0:88:08:41:e6:e9:12:c5:1d:f7:05: e3:e4:12:e0:5a:b0:49:4d:31:be:7f:4d:77:23:d7: f4:0a:e1:d7:a6:e1:b4:b0:a9:5e:77:9c:d1:75:84: 03:02:88:65:ef:b8:93:aa:02:e7:c3:ed:a3:e6:f4: 28:d9:7b:4d:6b:8b:26:02:4f:73:b4:de:4f:9e:dd: 55:cd:e6:cc:8f:9f:18:f2:3a:39:bb:45:eb:ec:68: dc:e3:d8:4e:a9:d8:19:af:56:f9:ee:eb:1e:72:6d: 74:fd:36:eb:fc:30:79:d2:b2:81:03:89:50:af:53: de:0c:9f:98:34:d9:2d:79:f7:f5:c5:20:da:5c:4e: 6b:34:73:d7:42:24:4d:8a:56:9f:09:80:cc:64:90: 76:91:c5:6f:6e:76:42:8f:6c:0c:31:8f:db:88:ee: 5e:cc:b0:88:6a:c2:e3:8f:be:4b:6e:e2:01:fe:2f: 2a:54:56:87:78:12:39:a9:96:9d:28:02:1c:b5:01: ee:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FC:FB:FC:FD:8D:F7:42:79:70:4E:52:63:99:C4:2F:93:2A:C9:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:e0:33:33:1f:ee:05:3d:07:0b:fa:f2:df:27:52:51:17:af: 18:ab:ee:aa:aa:d5:bf:eb:7c:e3:4d:c4:93:a5:de:5a:15:05: 35:be:4f:b3:6e:d2:86:76:a6:9e:12:34:01:50:29:4c:fe:d2: fd:7b:68:a6:4d:4a:36:cc:05:eb:01:ce:20:4b:9b:f3:e1:f7: f7:cb:30:12:0e:1d:65:5c:91:48:79:83:33:2d:2c:8a:3d:a5: 13:10:7f:30:97:a0:a2:e6:fd:ca:f8:64:a3:b4:ec:a3:b8:7c: 6c:46:d0:16:a3:28:57:37:42:29:94:a0:ca:78:9b:78:9e:d1: b9:3a:b8:d8:3a:a3:bf:f7:e9:eb:79:91:4a:9e:1f:68:75:db: 42:5c:fd:2b:9c:4b:e3:cc:fd:66:95:df:84:ef:58:ad:bd:9a: 94:0d:7b:02:d3:9b:af:5a:e8:50:b2:d0:27:b8:45:4c:29:b0: 91:ec:3d:e4:51:73:8f:67:51:8a:9b:35:7b:7c:18:16:09:90: 15:b1:88:15:c7:42:4b:f6:73:f8:da:b1:b4:13:95:fb:0f:e4: 29:12:cd:d6:1d:d3:a8:08:2f:4c:1f:8d:48:fa:62:39:35:1a: ad:d9:2c:dd:70:a1:4f:b4:de:4f:87:83:c9:e6:f3:72:5c:7e: 3d:35:ae:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1ht0fnKm0neEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk OGRmOGFjYjgtMDhjNy00MDgwLWIwNTQtM2RhNGNkMWU3Yjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuMZr/eDVDTMsJ9xL8wWiJV9XzsVFEtLwU49 ldTI16UOVeaZLXdbYnvlbSpUDzIRuwy9f3Uk2eViaCWA9WCQsIgIQebpEsUd9wXj 5BLgWrBJTTG+f013I9f0CuHXpuG0sKled5zRdYQDAohl77iTqgLnw+2j5vQo2XtN a4smAk9ztN5Pnt1VzebMj58Y8jo5u0Xr7Gjc49hOqdgZr1b57usecm10/Tbr/DB5 0rKBA4lQr1PeDJ+YNNkteff1xSDaXE5rNHPXQiRNilafCYDMZJB2kcVvbnZCj2wM MY/biO5ezLCIasLjj75LbuIB/i8qVFaHeBI5qZadKAIctQHuFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI78+/z9jfdCeXBOUmOZxC+TKskFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvZjFlMGViOGMtYTNhMC0z YjQ0LTkxNTktZjAwYmQyYjRkZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHgMzMf7gU9Bwv68t8nUlEXrxir7qqq1b/rfONNxJOl3loVBTW+T7Nu 0oZ2pp4SNAFQKUz+0v17aKZNSjbMBesBziBLm/Ph9/fLMBIOHWVckUh5gzMtLIo9 pRMQfzCXoKLm/cr4ZKO07KO4fGxG0BajKFc3QimUoMp4m3ie0bk6uNg6o7/36et5 kUqeH2h120Jc/SucS+PM/WaV34TvWK29mpQNewLTm69a6FCy0Ce4RUwpsJHsPeRR c49nUYqbNXt8GBYJkBWxiBXHQkv2c/jasbQTlfsP5CkSzdYd06gIL0wfjUj6Yjk1 Gq3ZLN1woU+03k+Hg8nm83Jcfj01rvM= -----END CERTIFICATE-----Generated at Fri Mar 13 13:32:16 2026 by rpki-client