$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/34b601af-0371-3c34-8026-bac59fa418af.roa File: 34b601af-0371-3c34-8026-bac59fa418af.roa (raw, json) Hash identifier: HdfbvewP2vZSmTSs5tpVXmRgNlgbdvm6WVziPkizdx8= Subject key identifier: 4F:23:CF:3C:21:98:D2:25:78:D7:50:13:ED:2C:7B:5A:57:FB:F4:E0 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584D773A6C68E1FB284731789040 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/34b601af-0371-3c34-8026-bac59fa418af.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 19886 IP address blocks: 171.162.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:6c:68:e1:fb:28:47:31:78:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=2c9a8b9b-205e-4f05-9c53-50d833a6e877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:88:0e:8c:18:12:a9:30:65:b5:9d:2a:49:0f: ee:d7:a0:49:15:eb:1b:a2:f3:50:c7:e6:ad:ee:27: 8c:ac:56:82:07:1a:e9:a7:0f:38:8b:e4:e9:51:df: 5d:00:7d:56:98:ba:28:00:be:6a:07:5c:7c:07:1f: 53:ef:1a:ca:54:3c:6a:0e:b7:9f:80:f1:3d:1b:a1: dd:66:71:f5:bb:47:41:65:c0:28:18:96:33:59:26: db:66:68:15:f9:5e:d6:45:b7:45:26:1b:3d:0d:34: f0:29:11:8e:0a:73:ce:15:c0:e1:6d:05:df:b3:48: f4:7b:aa:ea:de:6c:f9:47:b2:fa:1f:7e:51:26:36: 4d:d8:01:1e:33:a2:6c:62:61:6b:37:67:50:4c:4e: 41:a8:55:6a:b0:49:0c:62:fc:8c:31:cf:c5:9b:5f: b5:7e:ca:5e:fa:ca:f7:88:14:fc:4f:bb:f4:7b:56: bf:8b:20:96:63:b6:b4:20:a4:99:84:53:a8:20:98: 94:a8:2d:58:6f:ca:af:7a:7e:01:c1:26:44:ad:59: 35:e7:90:99:42:d6:ce:e2:b2:14:20:81:5d:18:76: a2:74:1f:8e:f5:3f:4e:fe:af:38:2d:2f:d6:45:97: ac:7f:ad:7c:53:5d:f9:9b:6f:e4:64:ea:39:96:03: 48:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:23:CF:3C:21:98:D2:25:78:D7:50:13:ED:2C:7B:5A:57:FB:F4:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/34b601af-0371-3c34-8026-bac59fa418af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ba:43:88:4a:9d:3e:11:6c:b7:99:ee:b1:e7:4e:1c:af:03: eb:d4:cb:64:f9:6c:6a:f8:42:c5:03:c3:bd:83:e2:02:58:de: ec:97:3d:1d:95:20:30:12:cb:de:d7:e0:8b:c1:41:6f:f6:e9: 5d:d1:b7:c6:4c:94:f2:9e:73:35:c0:3d:05:50:b9:c4:2b:46: 6f:9f:ca:72:1c:c5:44:04:3e:bc:45:9f:b9:f0:32:cd:b8:62: ef:f2:6d:be:3e:11:37:5d:a5:21:b4:f1:c8:d5:52:68:be:e3: eb:eb:8b:cc:48:6f:f9:a8:24:64:5d:c8:99:bd:22:09:56:8a: a9:87:d4:79:27:37:58:ec:57:9b:01:3a:05:32:21:b6:54:83: e5:0c:44:20:04:9c:08:3e:20:d4:d1:20:d4:c1:c7:e2:8b:9e: b0:1c:96:fb:df:52:0b:cb:4c:30:09:bf:61:34:8c:2b:44:27: 6f:1e:ed:54:e9:e7:06:64:83:9e:33:ad:5c:24:7a:25:a7:c3: 97:b2:31:6d:6c:e7:35:0f:2c:dc:83:f4:9d:58:01:e8:36:5d: 3a:88:c5:8e:94:77:26:11:0d:63:0b:f5:1c:c7:30:1d:84:79: 18:50:4f:ca:00:be:29:5d:32:89:f6:6e:52:8e:59:d2:84:23: 5f:ff:91:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13Omxo4fsoRzF4kEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk MmM5YThiOWItMjA1ZS00ZjA1LTljNTMtNTBkODMzYTZlODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIgOjBgSqTBltZ0qSQ/u16BJFesbovNQx+at 7ieMrFaCBxrppw84i+TpUd9dAH1WmLooAL5qB1x8Bx9T7xrKVDxqDrefgPE9G6Hd ZnH1u0dBZcAoGJYzWSbbZmgV+V7WRbdFJhs9DTTwKRGOCnPOFcDhbQXfs0j0e6rq 3mz5R7L6H35RJjZN2AEeM6JsYmFrN2dQTE5BqFVqsEkMYvyMMc/Fm1+1fspe+sr3 iBT8T7v0e1a/iyCWY7a0IKSZhFOoIJiUqC1Yb8qven4BwSZErVk155CZQtbO4rIU IIFdGHaidB+O9T9O/q84LS/WRZesf618U135m2/kZOo5lgNIaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8jzzwhmNIleNdQE+0se1pX+/TgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMzRiNjAxYWYtMDM3MS0z YzM0LTgwMjYtYmFjNTlmYTQxOGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6JtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABW6Q4hKnT4RbLeZ7rHnThyvA+vUy2T5bGr4QsUDw72D4gJY3uyXPR2V IDASy97X4IvBQW/26V3Rt8ZMlPKeczXAPQVQucQrRm+fynIcxUQEPrxFn7nwMs24 Yu/ybb4+ETddpSG08cjVUmi+4+vri8xIb/moJGRdyJm9IglWiqmH1HknN1jsV5sB OgUyIbZUg+UMRCAEnAg+INTRINTBx+KLnrAclvvfUgvLTDAJv2E0jCtEJ28e7VTp 5wZkg54zrVwkeiWnw5eyMW1s5zUPLNyD9J1YAeg2XTqIxY6UdyYRDWML9RzHMB2E eRhQT8oAvildMon2blKOWdKEI1//kWk= -----END CERTIFICATE-----Generated at Fri Apr 17 15:49:34 2026 by rpki-client