$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a36891e5-8973-313b-a68a-6ede44be3f67.roa File: a36891e5-8973-313b-a68a-6ede44be3f67.roa (raw, json) Hash identifier: UWVwpzKtaYIeoZ5QLiYHUgP4yAYcyRGpzJNGCslSgdY= Subject key identifier: 78:60:1B:FC:3D:5E:19:48:51:84:0F:5D:BE:E9:DC:F5:1C:79:4A:04 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584E016B30F18E014B4C6428E720 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a36891e5-8973-313b-a68a-6ede44be3f67.roa Signing time: Sat 30 May 2026 13:00:10 +0000 ROA not before: Sat 30 May 2026 13:00:10 +0000 ROA not after: Fri 28 Aug 2026 13:00:10 +0000 asID: 931 IP address blocks: 170.39.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:01:6b:30:f1:8e:01:4b:4c:64:28:e7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: May 30 13:00:10 2026 GMT Not After : Aug 28 13:00:10 2026 GMT Subject: CN=5479dcd5-4dc7-4b6a-b424-604207d50df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8f:cc:5a:92:56:b2:14:6c:3d:2a:26:95:a3: e4:21:71:f7:74:89:f3:dd:8f:ce:da:b7:a2:d8:40: 43:e6:43:3d:a4:5c:51:da:3a:da:55:24:c6:72:4a: b3:e1:ec:28:b5:56:b8:ad:ee:a9:bd:a3:8b:57:6b: d1:bf:d9:ad:ee:ed:ac:cf:3d:ea:91:dc:2a:ec:a6: cf:08:39:24:21:43:f8:f8:05:4d:4f:c9:f4:5d:a4: c0:34:7d:9a:fb:07:76:94:36:d5:a8:d4:33:3f:35: 68:cc:74:77:a7:af:46:9a:bd:b0:bd:a8:24:e4:fa: ab:2c:8a:8f:05:a9:75:9c:39:d0:46:30:9d:06:56: 28:fe:b8:f8:3b:db:28:84:81:e1:0b:2c:6d:e7:27: 9a:fb:64:37:73:e9:e2:b6:5e:51:9a:a9:aa:0a:3d: 48:03:be:19:0d:09:8f:8b:e8:85:e3:6f:96:97:14: 3b:58:b3:15:c6:4a:c8:85:53:cb:31:0b:7b:45:b0: b3:9d:9f:3b:92:db:d1:fd:c0:ab:fa:f8:a6:00:ba: 62:2f:8e:dc:7e:54:c5:0e:7e:b4:ca:05:ca:d8:3b: d2:3f:fc:ca:81:3e:88:bc:a5:9d:2b:32:da:4d:a9: 41:c9:da:65:08:ba:8a:46:60:49:2d:1f:3a:75:b8: c4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:60:1B:FC:3D:5E:19:48:51:84:0F:5D:BE:E9:DC:F5:1C:79:4A:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a36891e5-8973-313b-a68a-6ede44be3f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ac:c0:1d:a7:88:e6:5f:be:32:e0:5e:34:27:90:3c:a0:86: 17:83:48:28:1c:13:c9:77:2e:17:ee:60:84:27:2b:bb:46:26: 6c:a8:83:73:a9:ad:c9:89:08:67:cd:a5:9e:27:24:7d:05:cf: c7:16:44:e8:82:53:78:02:0f:a8:f3:8d:14:af:61:9f:7f:0b: 50:a1:77:7f:4b:3b:cc:26:42:17:41:f6:a7:ab:a1:0c:5c:83: e6:76:6b:f4:65:af:14:44:1e:db:bc:9b:c3:8f:68:bf:e1:71: 52:4c:59:89:51:50:74:90:b8:d3:be:63:5b:cf:9e:4f:6e:c0: cf:5e:6c:e0:a7:b6:3c:54:29:c6:be:c5:90:8d:66:77:02:f0: 23:f7:ed:e7:4e:31:d5:a1:04:e7:af:66:b9:20:ef:90:7f:4d: 12:cb:0f:50:84:2b:90:42:be:c9:2d:86:62:5b:c5:3a:4b:81: 91:60:7d:24:a1:61:b4:bb:50:99:0d:32:0b:45:f4:63:4d:7c: 83:62:b9:c0:af:61:66:66:ca:8d:16:ea:24:ad:96:49:93:10: 29:0b:2d:03:eb:49:f5:fa:20:ce:49:72:13:ca:07:a1:a6:15: fb:7b:4a:a8:8e:62:8f:0f:b3:02:51:20:2b:6d:a9:b7:06:76: cc:9c:4e:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4BazDxjgFLTGQo5yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDUzMDEzMDAxMFoXDTI2MDgyODEzMDAxMFowLzEtMCsGA1UEAxMk NTQ3OWRjZDUtNGRjNy00YjZhLWI0MjQtNjA0MjA3ZDUwZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI/MWpJWshRsPSomlaPkIXH3dInz3Y/O2rei 2EBD5kM9pFxR2jraVSTGckqz4ewotVa4re6pvaOLV2vRv9mt7u2szz3qkdwq7KbP CDkkIUP4+AVNT8n0XaTANH2a+wd2lDbVqNQzPzVozHR3p69Gmr2wvagk5PqrLIqP Bal1nDnQRjCdBlYo/rj4O9sohIHhCyxt5yea+2Q3c+nitl5RmqmqCj1IA74ZDQmP i+iF42+WlxQ7WLMVxkrIhVPLMQt7RbCznZ87ktvR/cCr+vimALpiL47cflTFDn60 ygXK2DvSP/zKgT6IvKWdKzLaTalBydplCLqKRmBJLR86dbjEDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhgG/w9XhlIUYQPXb7p3PUceUoEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYTM2ODkxZTUtODk3My0z MTNiLWE2OGEtNmVkZTQ0YmUzZjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeswB2niOZfvjLgXjQnkDyghheDSCgcE8l3LhfuYIQnK7tGJmyog3Op rcmJCGfNpZ4nJH0Fz8cWROiCU3gCD6jzjRSvYZ9/C1Chd39LO8wmQhdB9qeroQxc g+Z2a/RlrxREHtu8m8OPaL/hcVJMWYlRUHSQuNO+Y1vPnk9uwM9ebOCntjxUKca+ xZCNZncC8CP37edOMdWhBOevZrkg75B/TRLLD1CEK5BCvskthmJbxTpLgZFgfSSh YbS7UJkNMgtF9GNNfINiucCvYWZmyo0W6iStlkmTECkLLQPrSfX6IM5JchPKB6Gm Fft7SqiOYo8PswJRICttqbcGdsycTvM= -----END CERTIFICATE-----Generated at Sat Jun 13 22:56:59 2026 by rpki-client