$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/229e87d4-47a8-3f43-b4ff-059cc7140be1.roa File: 229e87d4-47a8-3f43-b4ff-059cc7140be1.roa (raw, json) Hash identifier: cvzgIdMB5XwX+B/ME05kKK8SGd9tcbG19Mp5ZRr+j8w= Subject key identifier: 72:39:FB:8B:A3:AE:59:2B:1E:01:97:81:A5:C4:9C:83:7A:CB:9E:E0 Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F4328584D55BA3B03433D9D410BE00600 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/229e87d4-47a8-3f43-b4ff-059cc7140be1.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 13984 IP address blocks: 162.217.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:3b:03:43:3d:9d:41:0b:e0:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=677710c0-9db0-441e-97a1-767680f2bc95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d7:00:24:7e:a9:e1:02:90:6f:c4:f1:87:da: 0d:c6:de:4f:c5:6a:df:bc:8b:5e:50:10:ed:8b:eb: 1b:87:22:d2:68:5c:2f:24:5e:e3:89:9c:bd:33:d5: 25:7c:80:dc:bd:34:6f:1b:e4:f2:4c:02:1e:52:42: 79:c7:81:14:cf:67:56:34:05:75:bc:45:51:47:ec: 76:3f:c6:f3:40:9b:ad:53:c6:73:29:26:9d:71:2c: 0d:9f:c1:af:ed:da:84:aa:05:f9:e0:75:a5:78:84: 70:77:80:cc:7f:c8:26:13:29:f8:34:f7:34:98:83: 8c:8a:07:96:2d:82:2f:59:76:68:26:42:86:2f:a0: 06:8f:f6:29:29:4c:2d:0d:c6:de:0b:19:aa:15:b7: 6d:27:fe:7c:bd:57:84:ee:46:12:d9:96:a3:87:a7: 88:1e:d9:8e:6f:28:17:b2:0d:aa:13:34:fe:dc:9e: 22:2d:ad:47:a4:e5:90:22:7d:93:39:52:bd:51:1e: df:c8:59:a8:0b:d2:2b:78:3f:48:07:21:4d:a6:15: bf:50:d9:bb:b3:60:1c:be:42:c2:bf:b9:28:22:60: fb:3d:a4:85:2d:d6:b6:cc:61:48:67:41:0e:2b:f3: 46:e6:0a:2b:37:92:38:ac:4f:b8:6f:a9:ce:c6:a6: 19:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:39:FB:8B:A3:AE:59:2B:1E:01:97:81:A5:C4:9C:83:7A:CB:9E:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/229e87d4-47a8-3f43-b4ff-059cc7140be1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 162.217.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:9c:07:15:e1:f1:5a:41:b6:60:09:6f:53:e9:2a:84:94:81: 0e:3a:ee:da:74:79:46:01:fb:d6:6f:dd:e1:39:4a:3e:bf:51: b0:01:cb:36:4c:84:9c:19:cb:37:b8:11:97:ab:60:1a:04:43: b8:1d:95:fb:8e:6d:f5:01:ec:d7:c6:1c:96:59:23:1e:e9:24: 9f:29:aa:37:cb:74:d7:b6:f7:02:35:e8:e7:8f:b2:b2:9a:4a: 7a:40:eb:f3:75:0d:ba:2d:fa:d9:27:7b:1d:df:db:de:ff:63: 53:bd:00:28:33:9f:b8:e5:22:86:2a:1c:c6:c9:41:96:c7:4d: 03:98:dd:fb:dc:22:52:0b:85:cb:24:77:b1:62:c7:93:be:51: 9d:96:3d:f1:20:64:4f:a3:83:a4:95:0b:81:8d:13:97:31:e4: 3f:27:a0:c7:9b:21:72:5a:bc:c6:0a:86:d1:59:35:97:e6:7d: d4:18:96:82:cb:93:56:f5:f7:f1:2b:3f:fd:9c:92:1a:38:7b: 5c:fc:ee:00:59:63:b5:33:2c:33:21:96:ae:ec:53:b3:ab:c7: ad:96:13:0c:8a:8e:bc:25:d8:9f:73:fb:44:23:c6:2a:39:28: a3:cc:3c:8d:21:c2:7d:8b:ea:db:d6:87:99:3b:b3:ed:e3:14: 4e:42:88:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VujsDQz2dQQvgBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Njc3NzEwYzAtOWRiMC00NDFlLTk3YTEtNzY3NjgwZjJiYzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdcAJH6p4QKQb8Txh9oNxt5PxWrfvIteUBDt i+sbhyLSaFwvJF7jiZy9M9UlfIDcvTRvG+TyTAIeUkJ5x4EUz2dWNAV1vEVRR+x2 P8bzQJutU8ZzKSadcSwNn8Gv7dqEqgX54HWleIRwd4DMf8gmEyn4NPc0mIOMigeW LYIvWXZoJkKGL6AGj/YpKUwtDcbeCxmqFbdtJ/58vVeE7kYS2Zajh6eIHtmObygX sg2qEzT+3J4iLa1HpOWQIn2TOVK9UR7fyFmoC9IreD9IByFNphW/UNm7s2AcvkLC v7koImD7PaSFLda2zGFIZ0EOK/NG5gorN5I4rE+4b6nOxqYZlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHI5+4ujrlkrHgGXgaXEnIN6y57gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvMjI5ZTg3ZDQtNDdhOC0z ZjQzLWI0ZmYtMDU5Y2M3MTQwYmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotmUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGacBxXh8VpBtmAJb1PpKoSUgQ467tp0eUYB+9Zv3eE5Sj6/UbAByzZM hJwZyze4EZerYBoEQ7gdlfuObfUB7NfGHJZZIx7pJJ8pqjfLdNe29wI16OePsrKa SnpA6/N1Dbot+tknex3f297/Y1O9ACgzn7jlIoYqHMbJQZbHTQOY3fvcIlILhcsk d7Fix5O+UZ2WPfEgZE+jg6SVC4GNE5cx5D8noMebIXJavMYKhtFZNZfmfdQYloLL k1b19/ErP/2ckho4e1z87gBZY7UzLDMhlq7sU7Orx62WEwyKjrwl2J9z+0Qjxio5 KKPMPI0hwn2L6tvWh5k7s+3jFE5CiBg= -----END CERTIFICATE-----Generated at Fri Apr 17 18:15:56 2026 by rpki-client