$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/9176efd8-78f9-3781-8516-78117c3c3326.roa File: 9176efd8-78f9-3781-8516-78117c3c3326.roa (raw, json) Hash identifier: 1JCgryCWjwCDLp4qeQHyFp6ua/KIhu7YOn4m8hzKh90= Subject key identifier: FB:4B:55:C4:EB:5C:6D:BA:21:F3:7D:61:AF:79:63:1E:E5:08:FD:3C Certificate issuer: /CN=3ce5ae55-06df-4120-8c12-2f433ba85d4e Certificate serial: 010D0C9F4328584CFB1CDFE255260280F9E69DC0 Authority key identifier: 85:74:1E:A9:02:9B:74:DC:DC:6B:9A:67:89:1A:E7:5A:F3:32:32:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/9176efd8-78f9-3781-8516-78117c3c3326.roa Signing time: Wed 25 Feb 2026 14:00:39 +0000 ROA not before: Wed 25 Feb 2026 14:00:39 +0000 ROA not after: Tue 26 May 2026 13:00:39 +0000 asID: 14618 IP address blocks: 167.88.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/3ce5ae55-06df-4120-8c12-2f433ba85d4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/3ce5ae55-06df-4120-8c12-2f433ba85d4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fb:1c:df:e2:55:26:02:80:f9:e6:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ce5ae55-06df-4120-8c12-2f433ba85d4e Validity Not Before: Feb 25 14:00:39 2026 GMT Not After : May 26 13:00:39 2026 GMT Subject: CN=c28e11c2-f46b-4a60-af9b-504685fda33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:48:fa:71:44:c3:ed:75:89:fc:ba:cb:3c:b6: d6:5d:92:dc:42:95:ae:fd:67:64:96:3e:64:ad:e8: a3:30:79:d1:a0:b3:09:a6:ed:2a:d4:71:c3:41:8f: c1:6d:02:e7:1b:15:c8:60:44:7d:e1:9e:f9:05:76: 73:7c:be:d4:ce:ec:24:4e:c7:e7:6b:b6:07:32:55: d0:6b:d8:f9:be:6c:69:2b:c0:12:46:0c:cd:68:44: 80:fa:55:df:70:19:5f:a4:8f:16:05:a6:e6:17:7d: 9d:0b:59:d3:f9:ee:50:87:75:0c:fc:a0:91:b2:7c: 15:14:ef:1c:17:94:a2:93:5b:32:91:54:94:03:58: 7d:48:5b:bb:2e:5a:f7:85:97:29:9b:49:c1:22:35: 86:f9:0a:82:aa:7f:1f:24:63:b7:96:33:67:c9:11: 68:1a:81:38:d6:d8:12:30:02:96:0c:50:59:ff:df: 1f:2e:3e:00:22:44:96:10:d2:aa:c2:02:91:98:94: d4:66:15:26:55:90:af:6f:76:14:8d:1f:c1:27:9a: 5d:18:88:62:67:9e:c6:34:95:81:ca:9c:cb:a5:88: ea:16:cd:c1:3d:b4:36:1d:e1:08:c1:10:3d:46:ba: 61:e9:62:70:2a:0a:d6:b6:5c:4f:c2:48:c3:67:c6: 58:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4B:55:C4:EB:5C:6D:BA:21:F3:7D:61:AF:79:63:1E:E5:08:FD:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/9176efd8-78f9-3781-8516-78117c3c3326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/3ce5ae55-06df-4120-8c12-2f433ba85d4e.crl X509v3 Authority Key Identifier: keyid:85:74:1E:A9:02:9B:74:DC:DC:6B:9A:67:89:1A:E7:5A:F3:32:32:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e.cer sbgp-ipAddrBlock: critical IPv4: 167.88.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:86:90:93:fc:0d:45:f2:bf:04:66:06:3c:9a:65:2a:b1:a6: 3e:43:b8:3b:4b:15:11:0d:34:bc:64:c7:1a:f3:43:33:88:b0: 07:74:1d:ab:c5:48:b5:05:7a:1e:35:70:90:06:1c:08:f9:d0: 00:c9:db:61:de:fe:9a:20:94:fa:77:d6:ee:4e:11:be:6e:3c: 51:43:e2:4f:85:88:19:3b:cb:f1:b1:24:18:4f:41:60:80:0b: cb:af:c0:bd:5e:fd:87:59:e5:50:31:44:65:f1:83:cb:c4:e1: 61:f4:18:24:dd:c4:3f:e0:ac:a7:5f:ce:de:af:67:9b:05:13: 3f:54:75:36:6d:58:db:8c:88:05:c1:80:78:24:68:92:bd:65: ce:e6:80:dd:b8:cb:40:8a:5f:bf:2f:e7:2d:92:b0:00:ff:20: da:4d:fc:45:f9:50:0e:fc:c6:37:c5:24:24:e4:4b:13:23:32: db:db:13:4b:d1:ba:88:90:c8:b6:af:08:dc:d6:5e:9e:d7:a9: 21:a3:5d:66:b1:ff:02:95:04:a6:6e:b3:95:0c:de:ee:d8:24: 9c:00:27:07:f0:d8:54:29:68:1d:8f:1a:9e:78:ae:79:0f:70: b3:d3:a2:d3:d8:31:c6:f8:fe:4d:f2:ed:ce:1d:f0:13:d3:af: 92:c0:77:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz7HN/iVSYCgPnmncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NlNWFlNTUtMDZkZi00MTIwLThjMTItMmY0MzNiYTg1 ZDRlMB4XDTI2MDIyNTE0MDAzOVoXDTI2MDUyNjEzMDAzOVowLzEtMCsGA1UEAxMk YzI4ZTExYzItZjQ2Yi00YTYwLWFmOWItNTA0Njg1ZmRhMzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUj6cUTD7XWJ/LrLPLbWXZLcQpWu/Wdklj5k reijMHnRoLMJpu0q1HHDQY/BbQLnGxXIYER94Z75BXZzfL7UzuwkTsfna7YHMlXQ a9j5vmxpK8ASRgzNaESA+lXfcBlfpI8WBabmF32dC1nT+e5Qh3UM/KCRsnwVFO8c F5Sik1sykVSUA1h9SFu7Llr3hZcpm0nBIjWG+QqCqn8fJGO3ljNnyRFoGoE41tgS MAKWDFBZ/98fLj4AIkSWENKqwgKRmJTUZhUmVZCvb3YUjR/BJ5pdGIhiZ57GNJWB ypzLpYjqFs3BPbQ2HeEIwRA9Rrph6WJwKgrWtlxPwkjDZ8ZYjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtLVcTrXG26IfN9Ya95Yx7lCP08MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zY2U1 YWU1NS0wNmRmLTQxMjAtOGMxMi0yZjQzM2JhODVkNGUvOTE3NmVmZDgtNzhmOS0z NzgxLTg1MTYtNzgxMTdjM2MzMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2NlNWFlNTUtMDZkZi00MTIwLThj MTItMmY0MzNiYTg1ZDRlLzNjZTVhZTU1LTA2ZGYtNDEyMC04YzEyLTJmNDMzYmE4 NWQ0ZS5jcmwwHwYDVR0jBBgwFoAUhXQeqQKbdNzca5pniRrnWvMyMggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zY2U1YWU1NS0wNmRmLTQxMjAtOGMxMi0yZjQz M2JhODVkNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp1g6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqGkJP8DUXyvwRmBjyaZSqxpj5DuDtLFRENNLxkxxrzQzOIsAd0HavF SLUFeh41cJAGHAj50ADJ22He/poglPp31u5OEb5uPFFD4k+FiBk7y/GxJBhPQWCA C8uvwL1e/YdZ5VAxRGXxg8vE4WH0GCTdxD/grKdfzt6vZ5sFEz9UdTZtWNuMiAXB gHgkaJK9Zc7mgN24y0CKX78v5y2SsAD/INpN/EX5UA78xjfFJCTkSxMjMtvbE0vR uoiQyLavCNzWXp7XqSGjXWax/wKVBKZus5UM3u7YJJwAJwfw2FQpaB2PGp54rnkP cLPTotPYMcb4/k3y7c4d8BPTr5LAdxc= -----END CERTIFICATE-----Generated at Mon Mar 2 11:47:40 2026 by rpki-client