$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/822853fc-bf78-34dd-9c87-72112ff8471a.roa File: 822853fc-bf78-34dd-9c87-72112ff8471a.roa (raw, json) Hash identifier: ifVBuI8XPzO4RxxY8PaUgm7Ph89et2wSvDOkpIt5OWs= Subject key identifier: 06:51:82:8E:C0:00:EF:12:B2:B3:13:BA:C1:33:26:D5:E2:7F:78:52 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D1B1A5EB68D4EBC05CD6F8640 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/822853fc-bf78-34dd-9c87-72112ff8471a.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 32043 IP address blocks: 170.130.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:5e:b6:8d:4e:bc:05:cd:6f:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=68c9c21f-4543-48a9-b01c-25cc978bada5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:11:cd:64:e4:26:8b:e3:ea:2f:17:bd:a7:a8: 2d:2e:b5:4f:52:7b:a9:20:24:9d:35:98:1e:d3:f6: 7e:33:26:6d:3d:2b:3f:69:40:f2:12:a7:34:c9:69: eb:8f:e1:a3:70:41:e8:fd:00:54:58:bd:7a:c6:33: f0:9c:25:91:4d:9d:5d:2a:5f:da:fd:27:01:7f:d7: f2:3e:4a:0b:c3:b4:ae:59:1e:71:f5:f4:06:a8:cd: f9:20:cf:c9:f6:cf:53:e9:b0:d1:fb:d7:dd:c1:3e: ea:7a:60:d2:42:d2:aa:f0:25:1c:5e:bf:e2:4a:29: 54:4b:06:a1:79:fd:25:ca:e5:03:39:72:8d:1d:bd: a6:0c:ec:f9:97:93:a9:ce:f9:ec:e5:7c:51:02:72: 0c:e5:17:4b:51:e5:57:0c:fa:e4:3b:fa:38:3a:c9: a7:d9:29:5e:d5:9c:ac:b9:78:50:42:86:b3:e6:90: 99:15:a6:67:38:a8:13:4f:38:71:33:d9:6d:7b:22: f6:12:ea:a8:5a:63:f9:42:68:5d:f8:e9:47:36:82: 00:47:a3:c4:f1:e4:91:ce:a9:a2:2e:52:94:91:70: c0:65:74:7b:ec:b4:16:58:3b:83:72:44:c1:4a:11: 3f:9b:16:e5:84:6e:45:19:5c:21:a2:13:41:2d:26: a0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:51:82:8E:C0:00:EF:12:B2:B3:13:BA:C1:33:26:D5:E2:7F:78:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/822853fc-bf78-34dd-9c87-72112ff8471a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 170.130.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:85:05:b2:f7:7d:ec:c9:c0:56:3b:4f:18:88:49:18:56:62: ab:e5:43:7a:07:b9:ed:17:35:1c:de:f5:4e:bf:bd:9d:ff:e6: 63:5e:f1:b3:f8:68:c9:36:8d:cb:c2:67:5a:60:da:7e:e5:77: a1:ea:5f:e6:a2:ff:57:76:d8:ed:60:8f:4d:6b:92:77:b6:d5: 7c:12:7c:00:43:43:27:bf:d6:2e:57:c3:58:fd:ec:1f:12:f0: f2:ba:f3:29:ca:2e:f5:33:33:cd:0d:9e:b1:4f:b7:5e:82:ac: a1:8d:68:88:b6:93:a8:a0:23:c1:1a:ec:0a:0f:64:00:3a:a2: c3:00:f6:ce:13:3b:1f:cd:dd:11:cb:15:89:fd:db:48:4e:ed: 0b:a0:22:e8:4d:cf:9b:f6:44:4a:1b:6b:12:1b:95:5b:6e:ff: 7c:d3:fb:18:a5:aa:5d:17:2a:18:af:bc:4d:44:bd:0d:c6:87: 43:b7:8b:ad:9e:72:65:cb:94:84:ec:d0:ec:61:f2:9a:d0:bd: 60:f1:fd:c6:e9:67:ce:72:53:b4:46:34:9e:a3:ba:38:3f:fc: 58:a2:07:f6:b5:f5:9f:50:08:78:15:26:13:7c:67:9e:f5:78: d2:26:61:d0:de:b0:6d:10:94:33:50:9f:8e:98:50:8e:38:e2: 69:dc:dc:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGl62jU68Bc1vhkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk NjhjOWMyMWYtNDU0My00OGE5LWIwMWMtMjVjYzk3OGJhZGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxHNZOQmi+PqLxe9p6gtLrVPUnupICSdNZge 0/Z+MyZtPSs/aUDyEqc0yWnrj+GjcEHo/QBUWL16xjPwnCWRTZ1dKl/a/ScBf9fy PkoLw7SuWR5x9fQGqM35IM/J9s9T6bDR+9fdwT7qemDSQtKq8CUcXr/iSilUSwah ef0lyuUDOXKNHb2mDOz5l5Opzvns5XxRAnIM5RdLUeVXDPrkO/o4Osmn2Sle1Zys uXhQQoaz5pCZFaZnOKgTTzhxM9lteyL2EuqoWmP5Qmhd+OlHNoIAR6PE8eSRzqmi LlKUkXDAZXR77LQWWDuDckTBShE/mxblhG5FGVwhohNBLSagdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZRgo7AAO8SsrMTusEzJtXif3hSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvODIyODUzZmMtYmY3OC0z NGRkLTljODctNzIxMTJmZjg0NzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqoI4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiFBbL3fezJwFY7TxiISRhWYqvlQ3oHue0XNRze9U6/vZ3/5mNe8bP4 aMk2jcvCZ1pg2n7ld6HqX+ai/1d22O1gj01rkne21XwSfABDQye/1i5Xw1j97B8S 8PK68ynKLvUzM80NnrFPt16CrKGNaIi2k6igI8Ea7AoPZAA6osMA9s4TOx/N3RHL FYn920hO7QugIuhNz5v2REobaxIblVtu/3zT+xilql0XKhivvE1EvQ3Gh0O3i62e cmXLlITs0Oxh8prQvWDx/cbpZ85yU7RGNJ6jujg//FiiB/a19Z9QCHgVJhN8Z571 eNImYdDesG0QlDNQn46YUI444mnc3Ik= -----END CERTIFICATE-----Generated at Tue Mar 10 12:00:56 2026 by rpki-client