$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/ff8cd06d-d6c1-320e-bf42-39ba327f60a7.roa File: ff8cd06d-d6c1-320e-bf42-39ba327f60a7.roa (raw, json) Hash identifier: 8sQI6WC3+PnuGKA6icyesV+I9BFjWiXPzhhCsY+M/Es= Subject key identifier: D3:C2:75:0D:23:5F:7E:3F:35:17:8D:1F:59:3A:A4:79:85:A8:82:27 Certificate issuer: /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Certificate serial: 010D0C9F4328584D55BA473A1230F7AE8A7E0000 Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/ff8cd06d-d6c1-320e-bf42-39ba327f60a7.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 22504 IP address blocks: 162.118.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:47:3a:12:30:f7:ae:8a:7e:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=af67f114-efe0-46c4-ae95-af9b2751daa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a1:64:a8:9f:71:7c:dd:8c:c9:46:33:21:fc: 0c:b0:cc:74:5a:b5:f5:76:2c:f7:7e:10:6a:b4:1d: e1:c1:00:39:76:a6:65:71:fa:3a:17:a7:b1:e9:91: 2c:f5:48:75:ff:8a:1b:9a:78:45:96:e7:07:5d:25: 3d:16:e0:59:04:b1:84:12:4d:e3:0e:f6:a4:2e:52: 79:cf:53:83:70:6d:9a:8f:8f:af:ee:ed:fe:ac:63: d6:e1:a9:39:d5:c9:41:61:16:25:97:39:3b:9c:ae: 39:c7:9b:1e:dd:ab:9f:88:23:d4:4e:7b:db:28:22: 92:6f:fe:52:e4:78:53:1a:5f:95:ab:95:b4:01:50: 24:8b:f4:e7:61:1e:cd:31:62:24:d6:cf:c6:13:09: 16:06:25:b8:5f:c0:12:3b:8e:f2:a9:e0:a4:eb:11: 00:aa:dc:fd:35:39:e7:9c:4b:47:31:03:d3:5a:85: 5c:46:04:1f:8f:32:95:8b:d8:78:58:7b:11:a0:fc: 19:6f:d3:81:b9:7a:31:49:81:e6:4c:df:51:d8:89: 17:8a:9a:33:78:ed:b8:34:2a:cc:4b:fa:8d:6e:82: 5c:9f:ef:2a:b7:63:5f:2e:fd:51:c7:1b:ac:a2:a9: 3b:a4:0b:f6:65:d9:89:c3:75:5a:29:f9:56:19:98: ed:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C2:75:0D:23:5F:7E:3F:35:17:8D:1F:59:3A:A4:79:85:A8:82:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/ff8cd06d-d6c1-320e-bf42-39ba327f60a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl X509v3 Authority Key Identifier: keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer sbgp-ipAddrBlock: critical IPv4: 162.118.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:34:e8:59:48:3a:d1:ea:08:f1:da:ef:0d:e9:db:fc:f0:2e: 5b:c2:59:68:e3:ce:5e:53:d2:8b:32:07:06:70:d7:41:bb:9d: de:a7:ab:e1:c6:7b:94:9e:0a:c4:6b:71:60:c8:c9:cd:77:cc: 0a:20:e4:f9:d7:60:93:ad:61:ee:1c:9c:20:1c:dd:8d:c8:07: c5:82:b9:af:41:56:1f:0c:13:88:ac:0d:06:0d:31:c5:13:b1: cb:be:d2:7b:18:c8:86:4b:03:30:d0:a9:1d:dc:19:68:33:22: d5:26:78:b5:cf:2e:2d:87:b2:17:0e:db:41:12:54:19:52:29: b1:09:7d:f3:39:79:42:c4:20:08:bc:cb:a5:fe:c4:48:19:bc: 8e:45:bd:7b:52:fc:01:98:e8:4d:57:8a:d2:17:ee:dc:3f:5f: 36:15:45:bf:c3:aa:fa:98:bb:cf:58:64:0e:71:bf:13:96:7a: ec:37:50:e1:6b:43:a1:3c:5e:c1:37:0b:75:9d:8a:00:71:7f: fe:bf:22:36:75:dc:0e:14:f2:25:21:e3:2e:2e:50:71:7f:2e: 28:a8:28:c1:44:0b:ac:e6:43:a1:e7:72:97:d0:85:ad:b4:dd: 59:b6:27:31:90:0d:fc:60:46:12:eb:e3:b4:b3:35:b6:05:a0: 68:ce:f0:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vukc6EjD3rop+AAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWEzZmUzYTktZDlmNy00YjhlLWEwMzctODc3MzYzYzUz MTEzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YWY2N2YxMTQtZWZlMC00NmM0LWFlOTUtYWY5YjI3NTFkYWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqFkqJ9xfN2MyUYzIfwMsMx0WrX1diz3fhBq tB3hwQA5dqZlcfo6F6ex6ZEs9Uh1/4obmnhFlucHXSU9FuBZBLGEEk3jDvakLlJ5 z1ODcG2aj4+v7u3+rGPW4ak51clBYRYllzk7nK45x5se3aufiCPUTnvbKCKSb/5S 5HhTGl+Vq5W0AVAki/TnYR7NMWIk1s/GEwkWBiW4X8ASO47yqeCk6xEAqtz9NTnn nEtHMQPTWoVcRgQfjzKVi9h4WHsRoPwZb9OBuXoxSYHmTN9R2IkXipozeO24NCrM S/qNboJcn+8qt2NfLv1Rxxusoqk7pAv2ZdmJw3VaKflWGZjtCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPCdQ0jX34/NReNH1k6pHmFqIInMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNm ZTNhOS1kOWY3LTRiOGUtYTAzNy04NzczNjNjNTMxMTMvZmY4Y2QwNmQtZDZjMS0z MjBlLWJmNDItMzliYTMyN2Y2MGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWEzZmUzYTktZDlmNy00YjhlLWEw MzctODc3MzYzYzUzMTEzLzVhM2ZlM2E5LWQ5ZjctNGI4ZS1hMDM3LTg3NzM2M2M1 MzExMy5jcmwwHwYDVR0jBBgwFoAUqMFLPdFSbDWZZINgLfzwTAq87N4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNmZTNhOS1kOWY3LTRiOGUtYTAzNy04Nzcz NjNjNTMxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAonYiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAII06FlIOtHqCPHa7w3p2/zwLlvCWWjjzl5T0osyBwZw10G7nd6nq+HG e5SeCsRrcWDIyc13zAog5PnXYJOtYe4cnCAc3Y3IB8WCua9BVh8ME4isDQYNMcUT scu+0nsYyIZLAzDQqR3cGWgzItUmeLXPLi2HshcO20ESVBlSKbEJffM5eULEIAi8 y6X+xEgZvI5FvXtS/AGY6E1XitIX7tw/XzYVRb/DqvqYu89YZA5xvxOWeuw3UOFr Q6E8XsE3C3WdigBxf/6/IjZ13A4U8iUh4y4uUHF/LiioKMFEC6zmQ6HncpfQha20 3Vm2JzGQDfxgRhLr47SzNbYFoGjO8B8= -----END CERTIFICATE-----Generated at Wed Apr 15 13:00:22 2026 by rpki-client