$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/b131168b-bc99-34b1-a223-b4ae6928d4b5.roa File: b131168b-bc99-34b1-a223-b4ae6928d4b5.roa (raw, json) Hash identifier: 4uVFo76z6haQLKCyCDetV28IHMC/fZcayJDe+XbAOqg= Subject key identifier: 32:27:A3:50:BE:B8:D7:C4:2B:0A:99:20:5F:61:0B:DE:2B:49:AD:1F Certificate issuer: /CN=3c7b6e18-00da-4da1-9f2c-19421fa6a575 Certificate serial: 010D0C9F4328584D105915165050935CA3904AE0 Authority key identifier: DF:7B:54:60:4D:B4:E0:CA:A8:46:C2:52:D4:AB:B5:22:2B:8F:29:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/b131168b-bc99-34b1-a223-b4ae6928d4b5.roa Signing time: Thu 05 Mar 2026 04:34:00 +0000 ROA not before: Thu 05 Mar 2026 04:34:00 +0000 ROA not after: Wed 03 Jun 2026 03:34:00 +0000 asID: 20012 IP address blocks: 168.158.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/3c7b6e18-00da-4da1-9f2c-19421fa6a575.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/3c7b6e18-00da-4da1-9f2c-19421fa6a575.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:59:15:16:50:50:93:5c:a3:90:4a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c7b6e18-00da-4da1-9f2c-19421fa6a575 Validity Not Before: Mar 5 04:34:00 2026 GMT Not After : Jun 3 03:34:00 2026 GMT Subject: CN=93d77d7e-ef19-4e47-9e38-be8a23f57719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:c0:fc:cf:49:ce:3c:be:cc:42:39:fb:8a: 5d:f1:ed:56:9d:30:a0:1e:a7:6a:d0:48:23:a0:9b: b9:1d:12:43:dc:31:fe:3b:9b:e7:4c:7b:01:55:19: fd:42:06:c2:f2:dc:cb:a1:86:c1:08:ec:ad:26:24: 63:a2:ea:c3:e3:2c:12:e4:62:76:0c:9b:43:d0:f0: 8f:bf:36:fa:19:d7:5b:10:72:48:2f:7f:0c:e2:f4: 9d:85:ae:cc:b5:f6:dc:d8:de:c9:11:cf:57:ae:51: 23:b1:61:3c:a1:37:99:a5:eb:50:56:db:bd:9d:ad: 48:98:cc:50:ed:18:98:25:05:10:ce:5a:ce:fb:af: 85:2b:0d:e3:06:d6:41:5a:93:1d:90:29:db:84:4a: 96:35:56:68:27:de:c9:9d:75:34:d1:23:db:75:af: 86:4e:d9:c3:96:f1:2d:62:e7:88:d0:51:e2:1b:0e: bb:ba:b9:bd:10:2e:71:68:f0:c5:31:6f:30:90:31: b2:f7:5f:80:84:f1:ec:ec:1d:f8:66:b5:6a:a4:51: 97:93:ab:93:d3:01:7e:af:5c:c8:8a:b8:41:f8:c5: ab:02:cf:2a:73:88:df:c1:2c:d8:d8:d5:54:41:2b: 94:27:c3:2c:a9:2d:fd:e7:50:c2:8e:fb:9c:de:62: 04:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:27:A3:50:BE:B8:D7:C4:2B:0A:99:20:5F:61:0B:DE:2B:49:AD:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/b131168b-bc99-34b1-a223-b4ae6928d4b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/3c7b6e18-00da-4da1-9f2c-19421fa6a575.crl X509v3 Authority Key Identifier: keyid:DF:7B:54:60:4D:B4:E0:CA:A8:46:C2:52:D4:AB:B5:22:2B:8F:29:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575.cer sbgp-ipAddrBlock: critical IPv4: 168.158.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:6d:9a:b9:9d:44:97:22:41:3b:7a:a6:87:0b:d4:9c:62:87: 3a:13:10:e8:b9:de:48:71:cb:9c:51:7a:9b:ac:ec:ff:49:09: 5d:0f:66:c0:cb:dc:eb:c4:b7:86:ba:a3:ea:e1:6b:01:7c:13: 86:ef:e9:c0:28:14:19:6f:42:e0:05:fa:2f:63:88:16:b3:a3: 19:7e:ec:cf:6f:d0:9c:ee:05:8f:c6:f2:90:3e:70:d6:71:b1: 89:ad:fd:4a:cc:c6:ad:7b:a2:34:b2:8f:36:ce:7d:66:7a:64: dd:d5:82:85:bb:8e:61:00:e1:c4:d2:04:5c:13:88:7d:98:7b: eb:da:32:36:59:10:c4:d3:f4:ab:ab:19:38:95:e0:7f:77:a1: 59:a8:d0:f3:87:83:01:02:3c:fd:61:67:1b:b6:11:95:98:0e: 9f:31:32:97:a9:e3:56:37:c2:84:ba:45:ea:b3:86:ff:56:a5: ca:28:75:ea:2f:6f:55:26:d3:d6:f0:c7:34:e8:53:bf:64:bd: ed:4a:a3:b5:e4:a8:0b:28:1e:91:e3:95:33:6a:3a:7a:48:29: 0a:3a:cb:48:ce:aa:f2:61:0f:32:95:ef:29:d7:cd:d4:64:64: 05:12:91:84:24:72:f2:47:37:75:79:db:d1:46:dd:c7:a3:66: a7:dc:b8:84 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0QWRUWUFCTXKOQSuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M3YjZlMTgtMDBkYS00ZGExLTlmMmMtMTk0MjFmYTZh NTc1MB4XDTI2MDMwNTA0MzQwMFoXDTI2MDYwMzAzMzQwMFowLzEtMCsGA1UEAxMk OTNkNzdkN2UtZWYxOS00ZTQ3LTllMzgtYmU4YTIzZjU3NzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJfA/M9Jzjy+zEI5+4pd8e1WnTCgHqdq0Egj oJu5HRJD3DH+O5vnTHsBVRn9QgbC8tzLoYbBCOytJiRjourD4ywS5GJ2DJtD0PCP vzb6GddbEHJIL38M4vSdha7Mtfbc2N7JEc9XrlEjsWE8oTeZpetQVtu9na1ImMxQ 7RiYJQUQzlrO+6+FKw3jBtZBWpMdkCnbhEqWNVZoJ97JnXU00SPbda+GTtnDlvEt YueI0FHiGw67urm9EC5xaPDFMW8wkDGy91+AhPHs7B34ZrVqpFGXk6uT0wF+r1zI irhB+MWrAs8qc4jfwSzY2NVUQSuUJ8MsqS3951DCjvuc3mIEkQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDIno1C+uNfEKwqZIF9hC94rSa0fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zYzdi NmUxOC0wMGRhLTRkYTEtOWYyYy0xOTQyMWZhNmE1NzUvYjEzMTE2OGItYmM5OS0z NGIxLWEyMjMtYjRhZTY5MjhkNGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvM2M3YjZlMTgtMDBkYS00ZGExLTlm MmMtMTk0MjFmYTZhNTc1LzNjN2I2ZTE4LTAwZGEtNGRhMS05ZjJjLTE5NDIxZmE2 YTU3NS5jcmwwHwYDVR0jBBgwFoAU33tUYE204MqoRsJS1Ku1IiuPKeUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zYzdiNmUxOC0wMGRhLTRkYTEtOWYyYy0xOTQy MWZhNmE1NzUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqJ4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAJW2auZ1ElyJBO3qmhwvUnGKHOhMQ6LneSHHLnFF6m6zs/0kJXQ9mwMvc 68S3hrqj6uFrAXwThu/pwCgUGW9C4AX6L2OIFrOjGX7sz2/QnO4Fj8bykD5w1nGx ia39SszGrXuiNLKPNs59Znpk3dWChbuOYQDhxNIEXBOIfZh769oyNlkQxNP0q6sZ OJXgf3ehWajQ84eDAQI8/WFnG7YRlZgOnzEyl6njVjfChLpF6rOG/1alyih16i9v VSbT1vDHNOhTv2S97UqjteSoCygekeOVM2o6ekgpCjrLSM6q8mEPMpXvKdfN1GRk BRKRhCRy8kc3dXnb0Ubdx6Nmp9y4hA== -----END CERTIFICATE-----Generated at Fri Mar 20 09:04:32 2026 by rpki-client