$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/886d27bf-cb97-3238-8156-8de94bc20e4a.roa File: 886d27bf-cb97-3238-8156-8de94bc20e4a.roa (raw, json) Hash identifier: jgWreZ/hCBqjwbkry/KLpEPySL/qhJqohPWFr647YMo= Subject key identifier: 33:3F:2F:E1:21:2B:70:46:13:5D:B4:DF:FA:FB:6A:9C:6E:00:2E:AC Certificate issuer: /CN=aac421ae-305b-4a29-aacc-176ba3fca213 Certificate serial: 010D0C9F4328584D65151C0310C9C1B3A1698F80 Authority key identifier: 5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/886d27bf-cb97-3238-8156-8de94bc20e4a.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 14618 IP address blocks: 168.100.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:1c:03:10:c9:c1:b3:a1:69:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac421ae-305b-4a29-aacc-176ba3fca213 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=7a6bea4e-cc00-4237-9df8-6ba3f7c8b9ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6d:45:70:54:cd:a4:ce:46:4b:2f:f9:c0:f7: 38:a8:cf:dd:14:e5:fa:f0:cb:e9:2c:66:30:22:f5: da:59:e0:1e:3b:da:22:dc:0c:e6:a8:0d:05:b2:9b: 3a:4f:72:df:6b:06:d4:9f:5b:4f:e3:87:0b:06:ab: 02:4c:95:4c:00:ff:54:b4:4c:a7:82:8d:23:fa:de: b1:90:d1:16:16:f8:71:7e:85:4d:d6:60:dd:54:bc: f8:23:8a:f2:86:da:3f:75:dd:b5:40:d6:2c:64:bb: 23:b9:5b:ea:3c:99:da:38:af:bf:86:83:38:9f:94: 9e:9a:fd:3c:dc:8e:95:3f:2a:5d:09:26:71:72:14: 66:7d:96:8a:83:38:7d:bc:2d:ab:20:57:9f:3b:4a: 8a:cb:0c:5d:05:6f:71:e9:ff:27:b6:83:c2:0d:aa: 91:cd:41:94:1c:ae:f4:65:78:5c:5a:0c:a0:d4:66: 42:98:2d:8e:4a:18:2f:56:7c:bd:58:09:15:42:22: fa:8b:9c:2e:f7:c6:56:e6:1e:ac:69:68:5d:63:2c: 30:ec:39:45:3e:8c:d0:67:18:79:36:7b:55:c0:0f: 48:35:96:1b:22:23:9e:a2:29:59:03:92:f4:00:cc: d9:b0:ee:e1:89:09:9c:8f:2d:cb:c7:55:be:1a:cd: 3a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3F:2F:E1:21:2B:70:46:13:5D:B4:DF:FA:FB:6A:9C:6E:00:2E:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/886d27bf-cb97-3238-8156-8de94bc20e4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl X509v3 Authority Key Identifier: keyid:5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer sbgp-ipAddrBlock: critical IPv4: 168.100.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f1:d0:78:5c:ba:18:4d:5d:38:85:3b:03:67:25:92:47:e3: 17:dd:17:cc:66:88:91:e7:71:be:cd:65:70:1c:9f:e3:b5:ec: fa:fd:4b:dc:30:5a:85:b6:54:70:61:09:ae:6e:d7:68:e5:ae: 41:90:5c:a2:06:df:20:8e:f7:5d:2b:1d:e9:ac:f6:52:0d:69: 5d:2e:ba:27:f1:b6:21:59:6d:b5:a7:28:c0:43:17:2d:db:67: 47:a0:79:fc:04:2d:3b:7b:45:86:c8:be:a4:e3:08:85:aa:5b: 1c:de:14:b4:49:6b:c6:55:c0:ab:6d:0a:30:61:77:05:f2:08: 1b:6d:af:71:f6:2b:58:20:4f:6d:ee:76:a3:6f:df:c4:64:b8: 41:f9:b2:18:32:c7:c3:a9:d7:b9:6d:aa:35:16:f4:de:03:d9: 51:fc:ec:cb:42:c5:ba:99:cd:5c:a2:e2:1f:1c:fd:3d:74:80: 62:8d:ba:25:98:20:4e:e7:2b:06:7d:f9:5e:a5:47:ed:e1:b7: 0b:43:b4:6d:87:28:da:8d:b1:d9:a2:d1:fc:6f:fc:5e:4a:c0: 86:a1:dc:12:61:f2:9f:e5:29:21:0a:83:07:af:14:a8:6f:d8: 6d:ca:56:ed:67:a8:bd:7c:78:45:76:f4:c0:f8:f3:65:40:9e: 1a:4c:05:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFRwDEMnBs6Fpj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNDIxYWUtMzA1Yi00YTI5LWFhY2MtMTc2YmEzZmNh MjEzMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk N2E2YmVhNGUtY2MwMC00MjM3LTlkZjgtNmJhM2Y3YzhiOWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjG1FcFTNpM5GSy/5wPc4qM/dFOX68MvpLGYw IvXaWeAeO9oi3AzmqA0Fsps6T3LfawbUn1tP44cLBqsCTJVMAP9UtEyngo0j+t6x kNEWFvhxfoVN1mDdVLz4I4ryhto/dd21QNYsZLsjuVvqPJnaOK+/hoM4n5Semv08 3I6VPypdCSZxchRmfZaKgzh9vC2rIFefO0qKywxdBW9x6f8ntoPCDaqRzUGUHK70 ZXhcWgyg1GZCmC2OShgvVny9WAkVQiL6i5wu98ZW5h6saWhdYyww7DlFPozQZxh5 NntVwA9INZYbIiOeoilZA5L0AMzZsO7hiQmcjy3Lx1W+Gs064QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDM/L+EhK3BGE1203/r7apxuAC6sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWM0 MjFhZS0zMDViLTRhMjktYWFjYy0xNzZiYTNmY2EyMTMvODg2ZDI3YmYtY2I5Ny0z MjM4LTgxNTYtOGRlOTRiYzIwZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFjNDIxYWUtMzA1Yi00YTI5LWFh Y2MtMTc2YmEzZmNhMjEzL2FhYzQyMWFlLTMwNWItNGEyOS1hYWNjLTE3NmJhM2Zj YTIxMy5jcmwwHwYDVR0jBBgwFoAUXPhSV2pX13aToH/2eTD0JVpyHogwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWM0MjFhZS0zMDViLTRhMjktYWFjYy0xNzZi YTNmY2EyMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvx0HhcuhhNXTiFOwNnJZJH4xfdF8xmiJHncb7NZXAcn+O17Pr9S9ww WoW2VHBhCa5u12jlrkGQXKIG3yCO910rHems9lINaV0uuifxtiFZbbWnKMBDFy3b Z0egefwELTt7RYbIvqTjCIWqWxzeFLRJa8ZVwKttCjBhdwXyCBttr3H2K1ggT23u dqNv38RkuEH5shgyx8Op17ltqjUW9N4D2VH87MtCxbqZzVyi4h8c/T10gGKNuiWY IE7nKwZ9+V6lR+3htwtDtG2HKNqNsdmi0fxv/F5KwIah3BJh8p/lKSEKgwevFKhv 2G3KVu1nqL18eEV29MD482VAnhpMBao= -----END CERTIFICATE-----Generated at Sat Apr 18 00:05:03 2026 by rpki-client