$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/d71bbd3c-8123-325c-9ffa-0f41d20134e6.roa File: d71bbd3c-8123-325c-9ffa-0f41d20134e6.roa (raw, json) Hash identifier: v1+wcuzookB3uEabYZlxpUf4hMYBrz5d57QGrxRIYvg= Subject key identifier: 27:47:67:38:5A:56:E5:FC:04:84:A4:E6:4C:68:D4:F2:63:50:EE:FF Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce Certificate serial: 010D0C9F4328584D55BA465C61D8406BB0D5FC80 Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/d71bbd3c-8123-325c-9ffa-0f41d20134e6.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 8560 IP address blocks: 162.255.84.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:46:5c:61:d8:40:6b:b0:d5:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=05cf1cc8-490b-4f3a-af33-9f0c114ae101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7c:ad:45:bf:dd:c4:4d:38:73:ef:c2:95:01: 65:fe:f3:78:63:3b:aa:91:74:44:f0:59:8e:6c:dd: 3e:ee:df:bf:00:37:26:05:5d:26:a5:9b:76:71:0e: 85:c3:9f:be:ed:60:6a:db:f8:45:e4:91:1c:19:60: 5e:6f:63:a2:69:2b:1a:85:28:e7:80:d3:1e:8f:27: 28:43:e3:07:0b:26:d7:e8:d9:0c:69:75:39:ae:73: a4:55:de:91:6b:c9:71:05:ac:c5:9a:02:83:ba:46: 21:68:4e:42:5a:6f:cb:a9:50:c2:a5:fd:03:24:e9: 61:00:6c:7d:d0:b9:33:0b:83:b0:c8:1e:83:09:36: 51:cb:7a:ad:1b:37:50:ca:1e:5a:7f:98:1b:0b:d5: eb:9c:d7:03:3d:df:cf:b8:bc:8e:df:e6:29:46:52: f3:d5:ee:b7:07:de:36:3c:be:74:8e:3e:9f:b5:76: b1:93:0e:95:da:92:e5:9e:04:8e:6a:44:06:3a:c4: 9a:8a:27:93:38:2a:dd:80:ef:31:7b:27:5e:01:5c: b6:c3:64:2c:63:9a:7c:6f:cf:05:48:65:f0:cc:64: 10:f2:90:66:05:b5:8c:5b:bd:fd:f3:b6:2c:ab:70: 86:4a:51:a7:be:d1:10:6a:8f:9f:eb:02:6c:df:22: 94:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:47:67:38:5A:56:E5:FC:04:84:A4:E6:4C:68:D4:F2:63:50:EE:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/d71bbd3c-8123-325c-9ffa-0f41d20134e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl X509v3 Authority Key Identifier: keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer sbgp-ipAddrBlock: critical IPv4: 162.255.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d6:89:c2:36:3f:89:f5:b3:fb:bb:4f:42:f4:22:cc:bc:57: e3:5f:b3:03:c6:06:b9:eb:22:14:29:fd:41:69:18:36:41:40: 65:32:0f:68:20:57:e4:71:a4:92:3a:22:d1:a4:ea:75:32:db: 4b:39:21:ce:3f:c0:93:a6:03:69:70:01:e3:15:bb:16:10:ec: 15:23:f7:ed:f0:16:5b:c6:f3:e1:e8:00:2e:98:a9:8d:45:e3: 2d:73:aa:27:94:2a:42:62:85:f2:e4:c7:af:68:49:1b:cf:7c: a1:87:4a:89:26:f2:10:43:00:fd:94:01:f7:94:c2:82:65:a1: 3e:c0:eb:64:d4:63:b6:5d:9d:cc:22:b6:9a:60:98:38:ab:e1: 9f:9a:58:1a:a4:3f:bb:f5:18:d0:c4:b1:42:6a:27:59:07:c0: a2:cc:bf:fd:c2:67:13:e5:0a:6f:4e:6d:d2:d1:5b:c8:03:1a: a8:4a:f7:ba:61:74:38:91:77:4d:5f:52:65:1d:95:69:f9:51: b6:09:bb:9f:06:2b:82:31:89:bc:15:4e:0b:d6:c3:1e:d1:ac: dd:be:cc:cb:9d:3d:1b:8d:cc:3d:31:6c:18:f9:ff:6f:db:49: ce:8f:58:6d:77:f1:6a:ff:ad:e1:11:dc:97:9c:f0:be:45:62: 3b:fc:84:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukZcYdhAa7DV/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JhNzk5ODgtODBiYy00ZmNiLThmYWYtNjI0NDAwZDVm MWNlMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MDVjZjFjYzgtNDkwYi00ZjNhLWFmMzMtOWYwYzExNGFlMTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHytRb/dxE04c+/ClQFl/vN4YzuqkXRE8FmO bN0+7t+/ADcmBV0mpZt2cQ6Fw5++7WBq2/hF5JEcGWBeb2OiaSsahSjngNMejyco Q+MHCybX6NkMaXU5rnOkVd6Ra8lxBazFmgKDukYhaE5CWm/LqVDCpf0DJOlhAGx9 0LkzC4OwyB6DCTZRy3qtGzdQyh5af5gbC9XrnNcDPd/PuLyO3+YpRlLz1e63B942 PL50jj6ftXaxkw6V2pLlngSOakQGOsSaiieTOCrdgO8xeydeAVy2w2QsY5p8b88F SGXwzGQQ8pBmBbWMW73987Ysq3CGSlGnvtEQao+f6wJs3yKUkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdHZzhaVuX8BISk5kxo1PJjUO7/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3 OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0MDBkNWYxY2UvZDcxYmJkM2MtODEyMy0z MjVjLTlmZmEtMGY0MWQyMDEzNGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2JhNzk5ODgtODBiYy00ZmNiLThm YWYtNjI0NDAwZDVmMWNlLzdiYTc5OTg4LTgwYmMtNGZjYi04ZmFmLTYyNDQwMGQ1 ZjFjZS5jcmwwHwYDVR0jBBgwFoAUNBe8v2tKYwrKo8WIvEUP5ZR5xFowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0 MDBkNWYxY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCov9UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATWicI2P4n1s/u7T0L0Isy8V+NfswPGBrnrIhQp/UFpGDZBQGUyD2gg V+RxpJI6ItGk6nUy20s5Ic4/wJOmA2lwAeMVuxYQ7BUj9+3wFlvG8+HoAC6YqY1F 4y1zqieUKkJihfLkx69oSRvPfKGHSokm8hBDAP2UAfeUwoJloT7A62TUY7Zdncwi tppgmDir4Z+aWBqkP7v1GNDEsUJqJ1kHwKLMv/3CZxPlCm9ObdLRW8gDGqhK97ph dDiRd01fUmUdlWn5UbYJu58GK4IxibwVTgvWwx7RrN2+zMudPRuNzD0xbBj5/2/b Sc6PWG138Wr/reER3Jec8L5FYjv8hNc= -----END CERTIFICATE-----Generated at Fri Apr 17 21:27:41 2026 by rpki-client