$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/b792fa7e-9f6a-3c82-aed4-622aa2bfcb21.roa File: b792fa7e-9f6a-3c82-aed4-622aa2bfcb21.roa (raw, json) Hash identifier: wjOVpnnfkxwMH9GaXzFKUoTaX2W+OG48/VRSlMiNDjY= Subject key identifier: 47:D9:28:A8:F3:B8:A3:2C:3D:C8:95:75:3A:30:21:79:4A:2A:BB:8E Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F4328584C969C4642E8FE313B6B8960C0 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/b792fa7e-9f6a-3c82-aed4-622aa2bfcb21.roa Signing time: Tue 20 Jan 2026 14:00:39 +0000 ROA not before: Tue 20 Jan 2026 14:00:39 +0000 ROA not after: Mon 20 Apr 2026 13:00:39 +0000 asID: 16509 IP address blocks: 170.200.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:96:9c:46:42:e8:fe:31:3b:6b:89:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: Jan 20 14:00:39 2026 GMT Not After : Apr 20 13:00:39 2026 GMT Subject: CN=fd19275f-3835-4f75-9497-bc91e8d4ac2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f9:74:e5:99:dc:fb:a0:5c:3c:23:9b:dc:ca: c1:fb:3e:42:38:cc:a7:33:f5:0d:e9:ca:e2:0f:cc: 1f:50:3a:69:bb:27:8b:0e:c5:84:b3:31:77:60:2e: 2e:88:87:db:6e:bd:00:3e:cc:71:45:fd:7b:9c:07: 77:3d:ff:55:a6:1d:af:e4:95:b0:1a:82:6e:0e:0b: 42:47:5d:3b:12:6a:e1:71:88:45:06:fd:fd:3e:e4: 69:f1:a4:e7:85:c1:00:85:e8:0a:31:fb:40:b1:9b: b1:11:52:b0:da:26:ea:5b:34:ff:d6:9c:8b:76:6c: 2e:08:77:0c:bb:f2:13:ea:68:ea:06:ea:8a:3b:9c: 95:30:44:08:2b:1f:07:9b:83:ae:13:b7:cd:59:35: 21:79:bf:de:cc:aa:ab:cf:2f:1e:8f:07:a9:13:d2: 7c:1c:5f:8c:27:19:27:ed:0c:58:72:be:d2:e7:4c: 4f:0d:af:06:8c:e1:eb:53:85:6a:91:0c:9a:bb:3f: 9e:fc:87:61:0c:03:f3:b5:1a:85:94:f9:c1:3f:05: b9:34:86:c8:2b:cc:09:2a:a1:ad:7f:4a:91:b3:a0: af:45:14:9c:a8:20:26:48:76:ef:f7:50:93:da:4d: f7:f2:aa:f7:40:19:f2:63:44:75:e6:07:fa:22:30: be:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D9:28:A8:F3:B8:A3:2C:3D:C8:95:75:3A:30:21:79:4A:2A:BB:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/b792fa7e-9f6a-3c82-aed4-622aa2bfcb21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ca:1f:66:b1:1e:76:c5:80:d7:b4:bd:95:aa:25:d2:33:f5: eb:43:2d:55:9a:17:9c:e8:cf:9b:2d:37:86:b9:93:f3:c2:52: ca:2b:24:f7:23:90:c8:c1:40:05:88:d7:b0:33:1a:29:0b:c8: fb:be:77:7e:59:41:65:8c:2f:e3:7c:71:1f:c0:e9:29:28:73: 16:7a:d3:2d:e9:bc:57:e6:c6:a8:98:73:39:c6:20:84:ed:de: 3a:35:66:32:10:d1:c7:bc:54:f3:a4:51:42:40:71:3d:6f:1a: b1:94:07:f9:4c:5e:40:7a:88:35:ed:e2:0b:9d:2d:c8:7f:4c: c2:51:a9:7d:e2:df:78:af:d6:68:37:3a:d8:06:bd:db:ed:61: 61:06:03:33:24:3b:92:9b:67:da:16:12:28:a0:95:bc:12:43: 8c:a9:31:21:cd:46:5c:ca:3f:fe:91:43:43:23:ca:88:43:01: 20:1d:2f:61:ed:43:da:2b:7d:c1:0e:3e:60:d9:2d:4a:a5:4d: 0f:14:19:c7:5b:2b:6c:a6:cb:0e:4d:08:d4:e2:ee:b9:ef:b1: a8:3c:c2:35:36:19:f7:3b:11:bb:10:73:bb:53:2c:93:cc:d1: 33:b3:93:c0:17:33:2f:3b:8b:52:60:fc:56:68:48:23:b8:cb: 8d:60:8e:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyWnEZC6P4xO2uJYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI2MDEyMDE0MDAzOVoXDTI2MDQyMDEzMDAzOVowLzEtMCsGA1UEAxMk ZmQxOTI3NWYtMzgzNS00Zjc1LTk0OTctYmM5MWU4ZDRhYzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/l05Znc+6BcPCOb3MrB+z5COMynM/UN6cri D8wfUDppuyeLDsWEszF3YC4uiIfbbr0APsxxRf17nAd3Pf9Vph2v5JWwGoJuDgtC R107EmrhcYhFBv39PuRp8aTnhcEAhegKMftAsZuxEVKw2ibqWzT/1pyLdmwuCHcM u/IT6mjqBuqKO5yVMEQIKx8Hm4OuE7fNWTUheb/ezKqrzy8ejwepE9J8HF+MJxkn 7QxYcr7S50xPDa8GjOHrU4VqkQyauz+e/IdhDAPztRqFlPnBPwW5NIbIK8wJKqGt f0qRs6CvRRScqCAmSHbv91CT2k338qr3QBnyY0R15gf6IjC+2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfZKKjzuKMsPciVdTowIXlKKruOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvYjc5MmZhN2UtOWY2YS0z YzgyLWFlZDQtNjIyYWEyYmZjYjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqsiUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7KH2axHnbFgNe0vZWqJdIz9etDLVWaF5zoz5stN4a5k/PCUsorJPcj kMjBQAWI17AzGikLyPu+d35ZQWWML+N8cR/A6SkocxZ60y3pvFfmxqiYcznGIITt 3jo1ZjIQ0ce8VPOkUUJAcT1vGrGUB/lMXkB6iDXt4gudLch/TMJRqX3i33iv1mg3 OtgGvdvtYWEGAzMkO5KbZ9oWEiiglbwSQ4ypMSHNRlzKP/6RQ0MjyohDASAdL2Ht Q9orfcEOPmDZLUqlTQ8UGcdbK2ymyw5NCNTi7rnvsag8wjU2Gfc7EbsQc7tTLJPM 0TOzk8AXMy87i1Jg/FZoSCO4y41gjqI= -----END CERTIFICATE-----Generated at Mon Mar 2 05:58:05 2026 by rpki-client