$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/a7d20787-ab53-329d-990c-d091714ed0e7.roa File: a7d20787-ab53-329d-990c-d091714ed0e7.roa (raw, json) Hash identifier: OA9z4+TdcOaI5OMn8oLxqUYWSai3MF/qXjKk8/IszD4= Subject key identifier: 06:EA:6F:6F:90:F0:31:FC:15:64:A2:AA:6C:4E:C2:78:7C:90:74:A4 Certificate issuer: /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62 Certificate serial: 010D0C9F4328584D571F9AEB2559D5DC7E4FCD00 Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/a7d20787-ab53-329d-990c-d091714ed0e7.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 25655 IP address blocks: 173.241.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:9a:eb:25:59:d5:dc:7e:4f:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=a4817eba-ca21-44cb-8275-78b0d8b9f0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:29:93:43:de:26:dd:37:4e:64:b0:3a:eb: d9:20:73:8b:39:01:35:df:3c:bc:0d:2d:4a:24:87: db:1e:90:b5:1b:1f:07:85:18:dd:d9:26:47:04:02: 04:d5:03:48:f2:19:28:00:ba:02:bf:0f:86:eb:0a: f2:6c:e7:3b:96:5f:39:b4:65:b3:9c:fd:18:c4:92: 9a:1e:58:26:95:f1:41:2d:b1:34:3d:bf:34:b7:e9: 7e:93:b6:ab:41:bd:41:f0:00:db:02:70:fb:51:b0: cc:af:63:3d:c6:38:8e:7c:bf:8f:3b:60:fd:72:a6: 5d:7d:37:8b:2d:e9:73:9e:00:01:45:93:58:94:3a: 1a:0a:41:e5:e0:0b:76:9c:67:0b:ab:a8:70:9e:f9: c8:11:eb:89:08:1d:09:b9:13:c3:17:12:bd:d3:02: ab:7a:be:67:9c:db:d1:76:41:42:7e:c2:48:1e:81: 57:9c:a1:a1:27:fa:cd:16:6a:07:10:f8:af:d3:35: 31:45:bf:3c:3c:55:4d:3e:62:a3:6b:a4:97:16:09: 51:7c:46:e8:18:20:ed:bf:44:c0:d6:13:d3:fa:cb: cb:c6:79:c7:b4:36:ef:c6:4f:89:a9:85:11:91:43: 4e:61:13:5e:a6:a3:35:c7:58:a6:5d:93:b6:eb:b9: a9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:EA:6F:6F:90:F0:31:FC:15:64:A2:AA:6C:4E:C2:78:7C:90:74:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/a7d20787-ab53-329d-990c-d091714ed0e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl X509v3 Authority Key Identifier: keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer sbgp-ipAddrBlock: critical IPv4: 173.241.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:df:56:cb:ff:12:bc:39:16:90:8d:06:03:03:e1:6d:5d:75: d6:c7:ee:94:3b:87:67:05:0f:53:e5:df:03:4d:0b:39:5d:a5: 16:f5:53:45:8e:42:ed:11:54:a7:70:c0:d5:b1:28:b8:16:9b: b6:ca:d2:ab:ee:d1:70:60:f4:f7:99:9a:de:59:f0:f5:0f:e6: ec:dc:71:ff:3d:bc:0d:d7:f8:9a:38:61:39:8a:9d:28:ba:d6: 9a:50:58:a9:d7:bc:56:8e:dd:1f:9c:66:07:3d:09:a9:ab:7b: 5f:39:b2:8f:6d:fc:34:1c:b9:7f:a5:d4:9f:db:f7:a5:d0:95: cc:9a:44:8c:1f:c5:22:19:0e:93:be:b7:d0:9f:da:6a:46:7d: fd:f9:26:3b:65:32:16:50:a1:c2:a3:ce:86:88:9d:76:d1:37: 4f:88:ec:02:a4:bd:49:f7:5f:5b:9e:a4:bd:10:6b:e2:7e:86: ad:de:e4:41:ea:de:76:e9:b1:a5:e4:5a:f3:f9:26:5b:04:97: 56:65:e8:70:47:e8:bc:b1:54:fd:23:27:4c:43:e5:4a:6d:a0: 41:eb:d0:79:20:5b:dd:8a:f0:ef:04:a3:22:d8:db:0e:fb:04: 86:03:7c:df:f6:42:30:c8:13:96:e1:80:01:90:bb:42:b5:30: 4b:cc:a6:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH5rrJVnV3H5PzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNhOTQ0Y2QtNTFhOC00ZDEwLWFlNTctNzI0ZGUyNmEx ZDYyMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk YTQ4MTdlYmEtY2EyMS00NGNiLTgyNzUtNzhiMGQ4YjlmMGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTUpk0PeJt03TmSwOuvZIHOLOQE13zy8DS1K JIfbHpC1Gx8HhRjd2SZHBAIE1QNI8hkoALoCvw+G6wrybOc7ll85tGWznP0YxJKa HlgmlfFBLbE0Pb80t+l+k7arQb1B8ADbAnD7UbDMr2M9xjiOfL+PO2D9cqZdfTeL LelzngABRZNYlDoaCkHl4At2nGcLq6hwnvnIEeuJCB0JuRPDFxK90wKrer5nnNvR dkFCfsJIHoFXnKGhJ/rNFmoHEPiv0zUxRb88PFVNPmKja6SXFglRfEboGCDtv0TA 1hPT+svLxnnHtDbvxk+JqYURkUNOYRNepqM1x1imXZO267mp+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbqb2+Q8DH8FWSiqmxOwnh8kHSkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jM2E5 NDRjZC01MWE4LTRkMTAtYWU1Ny03MjRkZTI2YTFkNjIvYTdkMjA3ODctYWI1My0z MjlkLTk5MGMtZDA5MTcxNGVkMGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzNhOTQ0Y2QtNTFhOC00ZDEwLWFl NTctNzI0ZGUyNmExZDYyL2MzYTk0NGNkLTUxYTgtNGQxMC1hZTU3LTcyNGRlMjZh MWQ2Mi5jcmwwHwYDVR0jBBgwFoAUqGCfuRfF6i7M/i9bQ1PRwl+tfbUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jM2E5NDRjZC01MWE4LTRkMTAtYWU1Ny03MjRk ZTI2YTFkNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrfGaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/fVsv/Erw5FpCNBgMD4W1dddbH7pQ7h2cFD1Pl3wNNCzldpRb1U0WO Qu0RVKdwwNWxKLgWm7bK0qvu0XBg9PeZmt5Z8PUP5uzccf89vA3X+Jo4YTmKnSi6 1ppQWKnXvFaO3R+cZgc9Camre185so9t/DQcuX+l1J/b96XQlcyaRIwfxSIZDpO+ t9Cf2mpGff35JjtlMhZQocKjzoaInXbRN0+I7AKkvUn3X1uepL0Qa+J+hq3e5EHq 3nbpsaXkWvP5JlsEl1Zl6HBH6LyxVP0jJ0xD5UptoEHr0HkgW92K8O8EoyLY2w77 BIYDfN/2QjDIE5bhgAGQu0K1MEvMpgo= -----END CERTIFICATE-----Generated at Wed Apr 15 16:13:52 2026 by rpki-client