$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/07de814a-beb6-317d-8375-1d752252375e.roa File: 07de814a-beb6-317d-8375-1d752252375e.roa (raw, json) Hash identifier: 1NIGlw6hQlDbQmu8yjnsMe5stxY5YIG+WyqQGHY6hBY= Subject key identifier: 5E:0F:6C:C5:A6:64:8A:47:FF:65:F9:C5:B1:51:E9:D3:B3:06:69:7C Certificate issuer: /CN=fc35b16c-01db-45a7-859c-93dd80a44805 Certificate serial: 010D0C9F4328584D1707F321DD6E0BDCBEEC5DA0 Authority key identifier: 0D:A5:89:D3:B2:5F:09:29:8B:4A:47:DD:A2:B0:1D:82:4D:5D:D5:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/07de814a-beb6-317d-8375-1d752252375e.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 16509 IP address blocks: 192.170.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/fc35b16c-01db-45a7-859c-93dd80a44805.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/fc35b16c-01db-45a7-859c-93dd80a44805.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:f3:21:dd:6e:0b:dc:be:ec:5d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc35b16c-01db-45a7-859c-93dd80a44805 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=93360c0b-6e34-42ea-b817-7c0b1b1ccbd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:ce:bf:0c:f3:cf:7d:3a:fb:e9:76:99:8d: 95:54:a6:62:46:00:a1:15:52:c0:78:b9:6e:b4:a2: 2c:fb:2c:b3:43:6c:b9:50:aa:47:7b:aa:5f:e6:8c: d6:74:1d:30:e1:b5:5d:b2:48:c8:32:05:87:0c:14: b0:a7:76:d8:c4:46:3f:06:cc:19:18:35:19:c5:e4: 42:5c:18:66:f6:8c:28:e3:99:93:c5:49:2c:a9:12: 9f:89:96:4b:f1:c3:6d:1c:67:58:8b:44:b6:2e:dc: dd:3b:68:09:09:96:fb:95:a1:69:f8:a9:fb:70:f7: 79:5f:76:c7:33:2c:f6:bb:7f:7e:5a:a2:2a:d5:c1: 08:c0:97:da:ee:01:c0:dd:95:1f:c4:dc:e5:6f:81: 5e:be:4a:89:13:47:98:5a:ab:da:78:15:2e:56:0d: ba:39:5a:4e:b0:6b:04:81:ff:d1:33:cb:a7:4c:c1: da:7c:28:f0:1d:a2:53:a6:ec:44:16:2c:c2:97:81: 79:46:0c:1a:35:17:aa:cd:db:ba:a6:65:03:a5:8c: 46:96:bb:28:4c:f0:54:2e:41:09:52:e9:b1:2c:be: 7f:f0:8c:ee:db:63:c3:e2:3e:35:24:b4:f1:48:47: 0b:40:f2:aa:61:03:9a:cd:18:18:26:6f:b2:7f:7e: e5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0F:6C:C5:A6:64:8A:47:FF:65:F9:C5:B1:51:E9:D3:B3:06:69:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/07de814a-beb6-317d-8375-1d752252375e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/fc35b16c-01db-45a7-859c-93dd80a44805.crl X509v3 Authority Key Identifier: keyid:0D:A5:89:D3:B2:5F:09:29:8B:4A:47:DD:A2:B0:1D:82:4D:5D:D5:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805.cer sbgp-ipAddrBlock: critical IPv4: 192.170.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:bc:84:7c:46:85:90:fb:5d:85:64:d6:6b:07:bd:0f:75:00: a2:4f:3c:da:06:9f:75:0f:98:0a:cf:f2:2b:69:04:a3:42:e0: 35:51:a4:e8:e5:5c:98:86:61:54:b6:dc:19:d0:56:d5:84:96: fe:12:ce:6b:54:e1:db:33:da:4a:00:5e:85:01:4f:60:89:e8: e6:a0:fb:a6:03:56:4e:46:6b:f4:25:19:13:0b:eb:01:66:eb: ff:15:c3:d9:d6:51:b1:c4:fd:0f:9c:77:36:ac:f9:4b:61:86: 72:88:bf:3f:6a:67:c5:1e:a4:5f:29:f9:6d:37:3b:9a:4d:52: 6a:a1:45:b3:26:dd:cf:ec:e2:2c:0f:0e:54:86:98:a0:f4:ba: da:54:08:e7:73:c7:b7:f3:44:cc:ec:09:f7:c3:10:29:94:c1: 9b:53:4b:72:20:57:56:21:a4:65:89:ff:11:28:fc:9f:f9:7a: c3:49:b1:7b:da:28:06:02:21:3e:db:61:97:4d:7e:56:05:f4: 36:55:42:71:f4:41:7d:ea:0b:eb:c8:a4:59:7c:06:6d:4a:27: f3:56:bf:83:a6:78:08:21:1f:a6:d2:5b:4a:b1:8f:ee:45:21: 6d:ca:64:20:79:96:bd:59:91:d8:8f:01:4c:43:3f:f9:ad:ad: a3:28:0f:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB/Mh3W4L3L7sXaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMzNWIxNmMtMDFkYi00NWE3LTg1OWMtOTNkZDgwYTQ0 ODA1MB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk OTMzNjBjMGItNmUzNC00MmVhLWI4MTctN2MwYjFiMWNjYmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw3Ovwzzz306++l2mY2VVKZiRgChFVLAeLlu tKIs+yyzQ2y5UKpHe6pf5ozWdB0w4bVdskjIMgWHDBSwp3bYxEY/BswZGDUZxeRC XBhm9owo45mTxUksqRKfiZZL8cNtHGdYi0S2LtzdO2gJCZb7laFp+Kn7cPd5X3bH Myz2u39+WqIq1cEIwJfa7gHA3ZUfxNzlb4FevkqJE0eYWqvaeBUuVg26OVpOsGsE gf/RM8unTMHafCjwHaJTpuxEFizCl4F5RgwaNReqzdu6pmUDpYxGlrsoTPBULkEJ UumxLL5/8Izu22PD4j41JLTxSEcLQPKqYQOazRgYJm+yf37lfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4PbMWmZIpH/2X5xbFR6dOzBml8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mYzM1 YjE2Yy0wMWRiLTQ1YTctODU5Yy05M2RkODBhNDQ4MDUvMDdkZTgxNGEtYmViNi0z MTdkLTgzNzUtMWQ3NTIyNTIzNzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmMzNWIxNmMtMDFkYi00NWE3LTg1 OWMtOTNkZDgwYTQ0ODA1L2ZjMzViMTZjLTAxZGItNDVhNy04NTljLTkzZGQ4MGE0 NDgwNS5jcmwwHwYDVR0jBBgwFoAUDaWJ07JfCSmLSkfdorAdgk1d1VgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mYzM1YjE2Yy0wMWRiLTQ1YTctODU5Yy05M2Rk ODBhNDQ4MDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwKowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALW8hHxGhZD7XYVk1msHvQ91AKJPPNoGn3UPmArP8itpBKNC4DVRpOjl XJiGYVS23BnQVtWElv4SzmtU4dsz2koAXoUBT2CJ6Oag+6YDVk5Ga/QlGRML6wFm 6/8Vw9nWUbHE/Q+cdzas+UthhnKIvz9qZ8UepF8p+W03O5pNUmqhRbMm3c/s4iwP DlSGmKD0utpUCOdzx7fzRMzsCffDECmUwZtTS3IgV1YhpGWJ/xEo/J/5esNJsXva KAYCIT7bYZdNflYF9DZVQnH0QX3qC+vIpFl8Bm1KJ/NWv4OmeAghH6bSW0qxj+5F IW3KZCB5lr1ZkdiPAUxDP/mtraMoD1Q= -----END CERTIFICATE-----Generated at Thu Mar 19 12:33:35 2026 by rpki-client