$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/332842c5-1a21-3e55-9351-5007e5fd1d35.roa File: 332842c5-1a21-3e55-9351-5007e5fd1d35.roa (raw, json) Hash identifier: JMNlDCRwhL8oegLz9vxvpKZ9UUF0TZBR+FFPU4bWEO8= Subject key identifier: FB:C5:BE:C7:65:DB:FB:1C:AD:E6:8B:E0:08:96:82:22:A9:9F:CE:A8 Certificate issuer: /CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a Certificate serial: 010D0C9F4328584CB81C835A09A4D8BAFB07E200 Authority key identifier: 3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/332842c5-1a21-3e55-9351-5007e5fd1d35.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 399899 IP address blocks: 172.98.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:83:5a:09:a4:d8:ba:fb:07:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=8efc549c-09ae-43ea-978d-a9f085c9e461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:49:b4:b5:8f:44:95:90:04:85:f4:df:cf:ae: e5:ad:dd:2f:f8:19:9d:74:83:86:2a:4a:34:39:b5: fa:c5:f3:81:d3:95:cd:08:bd:ea:b3:9c:71:1b:82: 1f:a0:0a:bc:47:4c:af:16:e7:33:ad:41:c3:b3:b3: 4a:00:6e:cc:52:61:ad:31:d5:43:39:bc:9b:dc:8d: 68:42:d6:af:18:3f:82:fd:92:f9:18:2f:93:9c:de: 47:3c:d4:33:b3:f0:3a:d6:93:0b:ec:e6:4d:87:3d: 93:65:ca:b4:49:de:e0:04:f0:62:50:7a:1a:bc:ff: df:3d:b3:c5:0a:d1:2e:83:ee:f0:c1:df:a1:bb:fd: 8a:a9:bf:e7:b7:05:b0:7e:ed:86:40:84:47:a3:b0: d3:88:7b:41:68:48:3f:1e:7a:73:83:85:22:b3:c9: 80:79:79:b6:1a:6a:1a:b2:b9:98:8a:6f:96:d4:25: 45:50:ef:3f:c0:62:b2:49:7f:d7:e0:3a:36:92:36: 14:09:e8:29:9a:cf:40:2c:92:42:fa:3b:3b:9f:ca: bb:bc:7e:94:77:c6:94:bc:3f:c4:0f:28:60:ad:ff: 80:79:55:38:f6:db:c8:79:4f:a3:b5:11:65:7c:b0: db:bd:09:11:70:23:c3:9c:a9:01:64:6b:33:16:ca: 6b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C5:BE:C7:65:DB:FB:1C:AD:E6:8B:E0:08:96:82:22:A9:9F:CE:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/332842c5-1a21-3e55-9351-5007e5fd1d35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl X509v3 Authority Key Identifier: keyid:3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer sbgp-ipAddrBlock: critical IPv4: 172.98.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:eb:58:f1:fe:1f:1f:2b:2a:75:fc:b2:c4:18:fa:1a:2a:dd: 06:dd:96:b7:2b:7a:cd:38:87:3b:44:e4:72:5c:6f:52:1e:c4: ab:9e:71:1e:f6:f7:e7:a8:1b:cc:2b:e9:99:50:e8:64:a5:6d: ae:4a:98:36:08:87:dc:26:f8:bd:a6:81:fd:3c:12:b9:7b:15: 58:78:95:e0:c5:70:7f:a3:ba:5b:76:7f:40:7f:d0:6d:d7:b3: 6e:d2:fb:76:98:99:9f:49:36:f2:a0:1c:3b:ee:bd:38:a3:63: 6c:b1:07:6f:25:e2:e3:ea:ec:2c:f9:74:26:65:98:01:5b:4d: f5:ad:f6:7d:c9:a3:6c:85:07:9b:8e:c2:bb:98:5b:b5:7d:8b: c8:db:46:76:a9:7e:d2:7e:63:b3:33:e5:af:b8:82:0c:a0:f0: 1a:16:47:be:5b:41:e7:2d:3c:3c:6a:e6:46:68:91:53:91:86: be:7e:e6:f4:23:90:85:77:cd:ff:ce:95:08:c0:5b:64:a4:4a: 2e:5b:a4:7a:71:0e:3b:f7:83:0f:d2:9c:b9:c0:a0:62:7d:20: 32:4e:eb:45:9a:e7:b0:e4:97:f8:24:9f:3f:41:37:36:17:2b: e8:4c:8a:c0:93:ca:c3:86:76:06:a0:cf:37:db:b6:ca:5d:1c: 0f:5f:f0:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HINaCaTYuvsH4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM3Yzg1M2QtZjYxNC00MTdhLTg3ZDktZmVkOWNmOWI2 ZTRhMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk OGVmYzU0OWMtMDlhZS00M2VhLTk3OGQtYTlmMDg1YzllNDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUm0tY9ElZAEhfTfz67lrd0v+BmddIOGKko0 ObX6xfOB05XNCL3qs5xxG4IfoAq8R0yvFuczrUHDs7NKAG7MUmGtMdVDObyb3I1o QtavGD+C/ZL5GC+TnN5HPNQzs/A61pML7OZNhz2TZcq0Sd7gBPBiUHoavP/fPbPF CtEug+7wwd+hu/2Kqb/ntwWwfu2GQIRHo7DTiHtBaEg/Hnpzg4Uis8mAeXm2Gmoa srmYim+W1CVFUO8/wGKySX/X4Do2kjYUCegpms9ALJJC+js7n8q7vH6Ud8aUvD/E Dyhgrf+AeVU49tvIeU+jtRFlfLDbvQkRcCPDnKkBZGszFsprEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvFvsdl2/screaL4AiWgiKpn86oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzdj ODUzZC1mNjE0LTQxN2EtODdkOS1mZWQ5Y2Y5YjZlNGEvMzMyODQyYzUtMWEyMS0z ZTU1LTkzNTEtNTAwN2U1ZmQxZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjM3Yzg1M2QtZjYxNC00MTdhLTg3 ZDktZmVkOWNmOWI2ZTRhL2IzN2M4NTNkLWY2MTQtNDE3YS04N2Q5LWZlZDljZjli NmU0YS5jcmwwHwYDVR0jBBgwFoAUPqf5ASNhrB95WSP0kVHBkLMAaaowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzdjODUzZC1mNjE0LTQxN2EtODdkOS1mZWQ5 Y2Y5YjZlNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGI2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjrWPH+Hx8rKnX8ssQY+hoq3Qbdlrcres04hztE5HJcb1IexKuecR72 9+eoG8wr6ZlQ6GSlba5KmDYIh9wm+L2mgf08Erl7FVh4leDFcH+jult2f0B/0G3X s27S+3aYmZ9JNvKgHDvuvTijY2yxB28l4uPq7Cz5dCZlmAFbTfWt9n3Jo2yFB5uO wruYW7V9i8jbRnapftJ+Y7Mz5a+4ggyg8BoWR75bQectPDxq5kZokVORhr5+5vQj kIV3zf/OlQjAW2SkSi5bpHpxDjv3gw/SnLnAoGJ9IDJO60Wa57Dkl/gknz9BNzYX K+hMisCTysOGdgagzzfbtspdHA9f8Ik= -----END CERTIFICATE-----Generated at Mon Mar 2 18:08:46 2026 by rpki-client