$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/7faa0d30-0e2f-3a0b-80c9-29459d80136d.roa File: 7faa0d30-0e2f-3a0b-80c9-29459d80136d.roa (raw, json) Hash identifier: ISiDiUypRDcceWql64oZRP5zIl1ttvs+P6LHPD17TT8= Subject key identifier: 85:48:46:62:8D:17:3C:26:AD:01:8C:31:BB:7B:31:2E:9E:FA:2D:62 Certificate issuer: /CN=0cbd7d11-5d6b-43e8-95af-8f22df70ae10 Certificate serial: 010D0C9F4328584D0EA7B6E6C285013B4C0F1000 Authority key identifier: 5F:E8:42:A0:DC:43:05:81:66:46:2E:57:CD:B6:54:7B:19:F5:65:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/7faa0d30-0e2f-3a0b-80c9-29459d80136d.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 168.100.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:b6:e6:c2:85:01:3b:4c:0f:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cbd7d11-5d6b-43e8-95af-8f22df70ae10 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=d014ca8c-eab2-4a03-82f6-5387a3fd75d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:39:4d:75:be:1b:33:7d:10:e4:98:dd:01:f9: f2:b4:7c:3d:bc:cf:ed:53:2e:36:be:0b:a2:15:13: ae:64:4f:b1:62:bd:9f:4d:9d:1c:de:40:b2:b9:96: 95:f6:8c:43:9c:3c:e8:16:41:7b:bc:0a:dc:21:d0: 21:d9:76:c8:ee:1f:e1:31:35:9a:88:52:89:72:b9: f0:9e:21:bf:11:e6:3d:e8:45:b8:05:7b:f8:79:84: 90:a4:39:f1:63:3c:44:bd:57:9d:ed:06:98:05:b1: 52:55:e3:02:52:ce:b1:18:a4:56:61:40:d1:4d:85: e9:78:42:af:4f:43:47:79:27:be:47:a1:a8:6e:b5: 5a:fb:28:09:d7:6b:b3:b6:81:e3:a5:56:c0:42:2a: b0:09:43:46:82:8f:be:6c:99:12:40:58:8e:93:82: 43:2a:41:77:49:97:60:b3:58:fc:a1:69:61:e2:6b: 09:ff:54:46:23:c4:2c:85:2a:82:00:0a:73:c5:37: 2e:f5:40:79:b9:6f:4e:db:ba:61:2e:9c:5d:46:8c: ad:17:8d:3b:15:a6:1a:f4:e8:d3:76:0d:4d:45:be: 5f:02:5b:86:79:96:fb:cd:8b:9a:69:b7:d7:89:1f: 1c:2e:96:1c:aa:5d:50:72:9e:d0:bc:8a:a7:50:9d: 56:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:48:46:62:8D:17:3C:26:AD:01:8C:31:BB:7B:31:2E:9E:FA:2D:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/7faa0d30-0e2f-3a0b-80c9-29459d80136d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.crl X509v3 Authority Key Identifier: keyid:5F:E8:42:A0:DC:43:05:81:66:46:2E:57:CD:B6:54:7B:19:F5:65:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.cer sbgp-ipAddrBlock: critical IPv4: 168.100.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:6d:c2:0f:f7:ef:92:45:71:f4:66:85:89:ee:91:62:da:13: 8a:25:8f:5a:6d:4d:3d:16:72:fa:c8:4f:d7:53:6b:c8:08:c2: 50:42:f7:f4:31:d7:6a:dc:64:c3:61:27:55:1d:a0:56:09:75: 05:9d:92:88:f3:98:f4:d4:31:de:83:e8:8d:17:f4:e4:16:03: 47:57:7c:76:38:eb:93:2b:78:2f:70:88:6d:69:15:54:85:9c: 63:8e:66:19:fb:3a:3c:29:2e:10:0e:1c:81:11:56:c0:16:c9: b3:f1:b2:69:08:04:b3:a6:16:e4:44:09:87:fb:00:8f:17:23: c5:80:cd:0f:45:a1:ea:25:b9:b5:c6:89:2f:41:90:7c:95:38: 50:61:41:0c:5c:14:8a:f7:00:6c:42:57:fd:f6:93:5e:39:b2: e2:a3:26:58:e6:4f:1c:fd:96:1d:49:81:a5:c7:01:e0:1c:99: bd:94:9c:f0:86:97:c9:9b:20:13:9a:80:a1:55:17:61:22:fc: 27:c8:6e:23:c6:9e:3e:20:04:f0:66:cb:5b:7a:c2:81:63:75: d1:3d:27:4e:9a:25:b1:0b:5a:a0:92:9a:45:73:25:05:31:6b: 9c:d9:f0:44:9b:65:a7:15:ec:e0:27:9c:de:00:eb:95:4d:d8: ec:e0:23:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op7bmwoUBO0wPEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGNiZDdkMTEtNWQ2Yi00M2U4LTk1YWYtOGYyMmRmNzBh ZTEwMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk ZDAxNGNhOGMtZWFiMi00YTAzLTgyZjYtNTM4N2EzZmQ3NWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTlNdb4bM30Q5JjdAfnytHw9vM/tUy42vgui FROuZE+xYr2fTZ0c3kCyuZaV9oxDnDzoFkF7vArcIdAh2XbI7h/hMTWaiFKJcrnw niG/EeY96EW4BXv4eYSQpDnxYzxEvVed7QaYBbFSVeMCUs6xGKRWYUDRTYXpeEKv T0NHeSe+R6GobrVa+ygJ12uztoHjpVbAQiqwCUNGgo++bJkSQFiOk4JDKkF3SZdg s1j8oWlh4msJ/1RGI8QshSqCAApzxTcu9UB5uW9O27phLpxdRoytF407FaYa9OjT dg1NRb5fAluGeZb7zYuaabfXiR8cLpYcql1Qcp7QvIqnUJ1WxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVIRmKNFzwmrQGMMbt7MS6e+i1iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wY2Jk N2QxMS01ZDZiLTQzZTgtOTVhZi04ZjIyZGY3MGFlMTAvN2ZhYTBkMzAtMGUyZi0z YTBiLTgwYzktMjk0NTlkODAxMzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGNiZDdkMTEtNWQ2Yi00M2U4LTk1 YWYtOGYyMmRmNzBhZTEwLzBjYmQ3ZDExLTVkNmItNDNlOC05NWFmLThmMjJkZjcw YWUxMC5jcmwwHwYDVR0jBBgwFoAUX+hCoNxDBYFmRi5XzbZUexn1ZU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wY2JkN2QxMS01ZDZiLTQzZTgtOTVhZi04ZjIy ZGY3MGFlMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqGQGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFtwg/375JFcfRmhYnukWLaE4olj1ptTT0WcvrIT9dTa8gIwlBC9/Qx 12rcZMNhJ1UdoFYJdQWdkojzmPTUMd6D6I0X9OQWA0dXfHY465MreC9wiG1pFVSF nGOOZhn7OjwpLhAOHIERVsAWybPxsmkIBLOmFuRECYf7AI8XI8WAzQ9FoeolubXG iS9BkHyVOFBhQQxcFIr3AGxCV/32k145suKjJljmTxz9lh1JgaXHAeAcmb2UnPCG l8mbIBOagKFVF2Ei/CfIbiPGnj4gBPBmy1t6woFjddE9J06aJbELWqCSmkVzJQUx a5zZ8ESbZacV7OAnnN4A65VN2OzgI8c= -----END CERTIFICATE-----Generated at Thu Mar 19 15:32:06 2026 by rpki-client