$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa File: 17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa (raw, json) Hash identifier: Oh7Dx/VnWr/SvBkuDdMwrGFKCdmZu7RBybzR/fnfSws= Subject key identifier: 0E:70:D7:96:DA:05:18:5C:19:4F:58:2D:37:8A:54:36:77:88:43:66 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584CCBA75BF508D6C109BE847F80 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 394285 IP address blocks: 174.137.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:5b:f5:08:d6:c1:09:be:84:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=f21810fe-89b2-4be5-8fba-dc235df09118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7c:68:12:b2:52:4d:c5:4a:15:ca:ee:89:58: 73:75:fa:20:ee:b6:45:c3:87:34:c1:06:4e:01:7d: 9a:49:2e:9c:ec:3b:f9:c4:b0:c1:94:b2:1b:78:3f: 6f:7b:e5:9d:69:0a:47:6a:d8:e2:03:71:ba:74:aa: d3:0c:86:8c:69:45:11:6c:c0:bf:95:f6:72:f5:ba: 7c:d1:37:4e:cc:bd:6a:45:9f:91:14:8f:3b:b1:c5: aa:c8:5e:1e:a4:1f:f0:5b:88:a2:14:f4:36:9a:1f: a5:ef:8b:da:7c:9d:74:50:b8:86:2b:45:69:b4:e9: c9:b6:a3:3b:f9:e5:a6:9d:40:c1:1c:12:5b:4c:b2: 45:76:71:88:ba:21:b7:03:2f:80:33:e5:78:30:ed: 5b:c8:c2:8f:f7:42:63:2d:67:0c:50:9d:7d:2f:01: 4d:01:12:25:0e:e4:40:d9:43:06:d2:8a:e3:b6:12: d0:33:18:56:85:86:f1:5b:7c:19:c1:76:26:5f:f3: 56:44:52:90:87:ba:2d:d4:e2:52:98:54:69:7d:98: 5f:d2:3a:59:a1:31:41:bc:bd:9f:c4:81:ae:b9:f4: 21:fa:c4:47:6c:c4:1e:6b:b1:2e:7e:94:84:e4:87: 11:32:30:e6:23:b2:a9:3b:7b:15:c9:b8:45:84:f0: 23:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:70:D7:96:DA:05:18:5C:19:4F:58:2D:37:8A:54:36:77:88:43:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 174.137.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:9d:37:dc:b2:0d:e7:2a:3a:37:44:cb:bd:ad:84:98:57:f3: d6:26:ca:e4:6e:69:df:2d:23:87:07:f9:c2:27:d9:4d:8d:44: 65:14:be:19:91:e3:09:a7:26:57:67:e2:1b:8f:62:40:65:e3: dd:e0:aa:df:73:c7:12:49:39:6b:67:0a:dc:03:bb:a3:0f:10: ed:18:8c:ed:81:4d:71:7e:4d:86:37:ba:ae:b4:f4:f7:4f:f0: 38:a1:57:e2:b9:ee:9a:54:c8:65:95:b7:52:cb:3c:64:9d:dc: bc:05:7c:a1:2c:22:80:8b:bc:98:6f:2d:c9:75:a0:cf:ad:e6: dc:36:ff:64:52:45:f3:6d:fc:00:4a:40:bd:01:fa:21:30:42: 11:b1:e8:ab:0f:dc:ae:2f:98:13:e3:ad:13:c5:42:2f:f2:8e: 41:a8:07:b6:e9:5b:99:cf:2e:81:64:fa:e9:b6:bb:8e:3d:2b: fa:2a:59:35:dd:35:05:7f:b5:3d:89:f1:90:f6:61:a8:81:58: 59:3c:0e:c6:24:8b:aa:4c:4e:42:c3:f3:2e:a6:d0:19:26:ed: d5:b3:34:e4:1f:5b:34:ff:28:83:b1:eb:89:b0:29:6f:6a:3d: b6:08:d1:fd:5b:e0:0a:15:8c:b8:ee:5d:35:1f:b6:8e:74:8e: 78:cb:bb:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp1v1CNbBCb6Ef4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk ZjIxODEwZmUtODliMi00YmU1LThmYmEtZGMyMzVkZjA5MTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHxoErJSTcVKFcruiVhzdfog7rZFw4c0wQZO AX2aSS6c7Dv5xLDBlLIbeD9ve+WdaQpHatjiA3G6dKrTDIaMaUURbMC/lfZy9bp8 0TdOzL1qRZ+RFI87scWqyF4epB/wW4iiFPQ2mh+l74vafJ10ULiGK0VptOnJtqM7 +eWmnUDBHBJbTLJFdnGIuiG3Ay+AM+V4MO1byMKP90JjLWcMUJ19LwFNARIlDuRA 2UMG0orjthLQMxhWhYbxW3wZwXYmX/NWRFKQh7ot1OJSmFRpfZhf0jpZoTFBvL2f xIGuufQh+sRHbMQea7EufpSE5IcRMjDmI7KpO3sVybhFhPAjDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5w15baBRhcGU9YLTeKVDZ3iENmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvMTdkM2E0ZTMtNzFmOC0z ODJjLTgzYTQtMzQ3NWFkNjMwMWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrolmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADydN9yyDecqOjdEy72thJhX89YmyuRuad8tI4cH+cIn2U2NRGUUvhmR 4wmnJldn4huPYkBl493gqt9zxxJJOWtnCtwDu6MPEO0YjO2BTXF+TYY3uq609PdP 8DihV+K57ppUyGWVt1LLPGSd3LwFfKEsIoCLvJhvLcl1oM+t5tw2/2RSRfNt/ABK QL0B+iEwQhGx6KsP3K4vmBPjrRPFQi/yjkGoB7bpW5nPLoFk+um2u449K/oqWTXd NQV/tT2J8ZD2YaiBWFk8DsYki6pMTkLD8y6m0Bkm7dWzNOQfWzT/KIOx64mwKW9q PbYI0f1b4AoVjLjuXTUfto50jnjLu6M= -----END CERTIFICATE-----Generated at Mon Mar 2 02:19:29 2026 by rpki-client