$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/832e9cf3-7676-3b39-af93-a7eb74275a8e.roa File: 832e9cf3-7676-3b39-af93-a7eb74275a8e.roa (raw, json) Hash identifier: YfV9Z1ou/+ZjHL4S1X9eCat1FYzpddVcn0zqjwrODLM= Subject key identifier: 90:19:66:53:4E:3D:FF:AE:2C:94:39:99:BA:90:0D:19:19:7D:FC:E8 Certificate issuer: /CN=44e39417-e931-4514-89dc-a42b5b458fb5 Certificate serial: 010D0C9F4328584CBAE73A0C10318D4E0ED4AB80 Authority key identifier: 44:9D:B2:B5:1C:CA:4C:8C:77:44:9C:66:77:47:66:84:A2:C6:5F:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/832e9cf3-7676-3b39-af93-a7eb74275a8e.roa Signing time: Mon 02 Feb 2026 14:00:40 +0000 ROA not before: Mon 02 Feb 2026 14:00:40 +0000 ROA not after: Sun 03 May 2026 13:00:40 +0000 asID: 8075 IP address blocks: 168.137.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ba:e7:3a:0c:10:31:8d:4e:0e:d4:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44e39417-e931-4514-89dc-a42b5b458fb5 Validity Not Before: Feb 2 14:00:40 2026 GMT Not After : May 3 13:00:40 2026 GMT Subject: CN=b11ae1e8-f01b-4682-ba48-d3dd34805132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cf:09:fe:99:f5:3e:d5:6d:c7:53:85:ab:38: a7:92:b5:af:91:1f:b5:87:cc:59:92:3c:44:f9:29: ae:4b:50:4a:11:f2:20:ae:f5:30:5d:67:c1:69:57: d4:1b:3e:97:df:20:72:1a:63:dc:9e:e8:cb:3f:23: ee:45:4c:90:c6:19:7b:d6:5d:9f:2e:65:10:b0:b5: 35:7a:34:7e:d2:2b:65:02:59:ce:f3:93:bc:95:23: 62:93:ea:a7:66:75:84:2c:2f:93:26:0b:16:58:db: ff:9a:ba:38:81:05:e4:c8:b5:5c:5e:42:c8:fd:74: d7:34:9e:9d:a3:8f:dd:07:a0:f0:2c:ec:3f:87:b7: 25:77:ef:fb:70:58:bb:38:dc:6f:ab:98:03:b0:fd: f8:b7:d9:f9:4d:a2:11:36:0b:b5:5d:d9:ce:b6:bf: e8:ed:7e:cd:f7:5d:81:de:e6:91:7a:4b:50:72:a5: 47:56:6c:74:00:68:7b:60:77:92:96:84:78:e2:9f: 8d:85:38:a4:52:37:08:1b:50:80:c9:fa:75:5d:11: 8b:82:f4:99:d7:41:1e:11:9c:79:fa:de:a2:0f:d1: 6f:dc:45:de:7b:5b:43:fa:1c:35:a2:74:9e:ff:f0: 87:0a:c2:13:1b:3d:ab:a8:41:02:ba:47:5e:16:fd: f2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:19:66:53:4E:3D:FF:AE:2C:94:39:99:BA:90:0D:19:19:7D:FC:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/832e9cf3-7676-3b39-af93-a7eb74275a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.crl X509v3 Authority Key Identifier: keyid:44:9D:B2:B5:1C:CA:4C:8C:77:44:9C:66:77:47:66:84:A2:C6:5F:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer sbgp-ipAddrBlock: critical IPv4: 168.137.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:a4:ff:be:8e:24:c5:16:0b:59:07:50:e7:e5:4a:48:b5:d9: 8d:d2:24:56:a0:8e:94:4e:46:00:4f:f0:6a:be:d0:a3:0c:64: ad:71:7c:fc:1e:c5:fb:58:9d:83:0f:6e:09:d1:21:61:b5:b9: 56:6f:83:21:9c:f5:21:bc:d4:21:f9:31:fb:ae:b4:c3:c0:d3: 5d:ed:7a:e8:a4:91:06:c9:a6:0e:d8:a8:82:6d:1b:0e:2f:1e: e1:59:4b:96:67:6a:39:42:e3:13:44:1a:70:62:2a:7a:1d:9f: 19:2b:be:41:b6:07:5c:74:96:2d:47:ee:38:7a:ee:19:1e:5d: fb:b3:eb:df:f5:50:92:6e:82:b0:f0:96:7a:1a:c7:a3:0b:a5: b2:2b:75:1e:df:0f:d6:26:c8:3e:76:2a:6c:c1:ce:9b:64:c8: ad:8c:a8:5f:3e:62:82:ac:3b:52:1c:e3:a6:67:7e:3f:00:86: cb:4d:ca:9b:e3:55:ee:e1:b5:13:82:e1:46:34:bb:fc:83:5f: 47:d9:1d:e0:b5:96:91:4b:03:7a:44:90:e8:2e:31:ab:71:a7: e7:77:b8:4f:d6:c5:39:66:35:eb:85:e7:93:df:08:35:9c:30: 29:2d:d6:af:39:4d:e5:ad:02:cd:90:1a:a1:28:66:2a:87:5c: 0a:c5:aa:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy65zoMEDGNTg7Uq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRlMzk0MTctZTkzMS00NTE0LTg5ZGMtYTQyYjViNDU4 ZmI1MB4XDTI2MDIwMjE0MDA0MFoXDTI2MDUwMzEzMDA0MFowLzEtMCsGA1UEAxMk YjExYWUxZTgtZjAxYi00NjgyLWJhNDgtZDNkZDM0ODA1MTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs8J/pn1PtVtx1OFqzinkrWvkR+1h8xZkjxE +SmuS1BKEfIgrvUwXWfBaVfUGz6X3yByGmPcnujLPyPuRUyQxhl71l2fLmUQsLU1 ejR+0itlAlnO85O8lSNik+qnZnWELC+TJgsWWNv/mro4gQXkyLVcXkLI/XTXNJ6d o4/dB6DwLOw/h7cld+/7cFi7ONxvq5gDsP34t9n5TaIRNgu1XdnOtr/o7X7N912B 3uaRektQcqVHVmx0AGh7YHeSloR44p+NhTikUjcIG1CAyfp1XRGLgvSZ10EeEZx5 +t6iD9Fv3EXee1tD+hw1onSe//CHCsITGz2rqEECukdeFv3y0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAZZlNOPf+uLJQ5mbqQDRkZffzoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80NGUz OTQxNy1lOTMxLTQ1MTQtODlkYy1hNDJiNWI0NThmYjUvODMyZTljZjMtNzY3Ni0z YjM5LWFmOTMtYTdlYjc0Mjc1YThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDRlMzk0MTctZTkzMS00NTE0LTg5 ZGMtYTQyYjViNDU4ZmI1LzQ0ZTM5NDE3LWU5MzEtNDUxNC04OWRjLWE0MmI1YjQ1 OGZiNS5jcmwwHwYDVR0jBBgwFoAURJ2ytRzKTIx3RJxmd0dmhKLGX/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80NGUzOTQxNy1lOTMxLTQ1MTQtODlkYy1hNDJi NWI0NThmYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqIlIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2k/76OJMUWC1kHUOflSki12Y3SJFagjpRORgBP8Gq+0KMMZK1xfPwe xftYnYMPbgnRIWG1uVZvgyGc9SG81CH5MfuutMPA013teuikkQbJpg7YqIJtGw4v HuFZS5ZnajlC4xNEGnBiKnodnxkrvkG2B1x0li1H7jh67hkeXfuz69/1UJJugrDw lnoax6MLpbIrdR7fD9YmyD52KmzBzptkyK2MqF8+YoKsO1Ic46Znfj8AhstNypvj Ve7htROC4UY0u/yDX0fZHeC1lpFLA3pEkOguMatxp+d3uE/WxTlmNeuF55PfCDWc MCkt1q85TeWtAs2QGqEoZiqHXArFqpw= -----END CERTIFICATE-----Generated at Mon Mar 2 13:40:57 2026 by rpki-client