$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce/175be9fb-183f-35ce-9616-0b9802cbde2c.roa File: 175be9fb-183f-35ce-9616-0b9802cbde2c.roa (raw, json) Hash identifier: cs3IxL6rf8bRkThICrXHKW0SDuSwZT3zZl9VCx6XF5s= Subject key identifier: 7A:96:C3:6A:44:FD:53:A4:33:5E:60:53:FE:16:9D:2F:B8:2A:75:14 Certificate issuer: /CN=170886d5-062a-4c5d-a01f-02088ff038ce Certificate serial: 010D0C9F4328584D00B27A75362335A039DF75C0 Authority key identifier: 83:31:23:A3:70:72:ED:85:53:E3:94:29:45:80:11:D6:76:97:26:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce/175be9fb-183f-35ce-9616-0b9802cbde2c.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 271 IP address blocks: 104.128.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce/170886d5-062a-4c5d-a01f-02088ff038ce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce/170886d5-062a-4c5d-a01f-02088ff038ce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:7a:75:36:23:35:a0:39:df:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=170886d5-062a-4c5d-a01f-02088ff038ce Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=6cce6612-0fe5-4550-8504-75785dcbfd83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1f:5c:67:d1:3d:a4:f4:32:6d:36:6c:ad:72: 6d:0e:40:dd:57:80:b2:08:35:2a:8f:73:82:45:80: 40:24:32:0e:de:2f:89:87:54:9a:36:7c:c9:f6:10: f7:e6:b7:8b:07:d9:cb:96:7c:f8:32:6f:e1:69:d4: 9b:f2:42:47:68:c3:8a:a5:62:73:a9:76:11:5b:d8: e4:66:c8:7f:7d:e4:08:04:16:a8:e3:9e:d1:89:40: 4c:22:6d:41:cb:44:2e:7a:04:af:1f:d0:60:76:02: 7f:eb:d3:94:47:3a:06:88:ab:63:1c:b1:4e:06:04: d7:70:24:af:b9:71:6d:f3:89:50:17:26:d2:3d:0a: c2:ec:92:43:3b:31:7a:45:d1:72:52:1d:81:df:77: 8d:e3:5f:89:6f:cc:bb:98:d7:7e:ac:e6:24:16:b8: ed:e1:8a:fb:fd:38:ac:e2:ce:6b:3d:24:f7:38:09: 78:b0:d2:d0:4c:aa:6f:5d:eb:87:89:1c:32:a5:94: 7d:3a:2b:54:47:20:ec:83:af:5e:1f:48:fc:1d:0a: 13:f2:62:51:f2:28:cc:be:40:e9:8a:3b:7f:76:99: b8:e6:b8:9e:09:06:27:cd:c8:5f:dd:c3:6a:4d:6f: e1:4d:35:67:8f:7d:be:43:62:5f:53:f4:7f:32:16: 8c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:96:C3:6A:44:FD:53:A4:33:5E:60:53:FE:16:9D:2F:B8:2A:75:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce/175be9fb-183f-35ce-9616-0b9802cbde2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce/170886d5-062a-4c5d-a01f-02088ff038ce.crl X509v3 Authority Key Identifier: keyid:83:31:23:A3:70:72:ED:85:53:E3:94:29:45:80:11:D6:76:97:26:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce.cer sbgp-ipAddrBlock: critical IPv4: 104.128.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:2e:cf:e4:65:d8:3c:5c:f0:34:46:12:6e:10:22:aa:6f:aa: 85:f4:eb:af:30:85:da:7e:be:78:f3:77:75:95:6d:6d:6f:2e: 44:05:ef:5c:2e:2e:23:7f:d1:94:9b:b7:57:b6:8d:d2:ab:2f: 18:69:04:4d:61:01:6c:d7:aa:d7:b9:5e:e3:80:8b:83:ee:b7: 2c:f7:7c:d2:42:ca:0c:0c:67:05:58:82:9a:38:25:9b:9f:4e: c9:f1:9c:b3:db:84:d0:44:34:46:ec:c1:a0:0b:bd:f9:b8:6d: 04:00:2a:61:1a:a6:84:00:ea:21:f4:56:f1:44:73:a7:16:bb: db:b2:a8:4a:0a:8c:1c:17:f6:90:39:4b:44:39:18:04:23:0c: 91:fe:8f:c2:5a:5b:ea:53:a1:dc:3b:2c:a9:f1:4d:ff:a8:b8: 9b:e3:c0:7b:38:f6:96:5d:3e:2b:0f:ae:10:45:0e:ba:7b:84: 90:ae:3c:59:f5:d8:40:97:38:46:65:42:ce:20:ea:73:18:de: b8:73:bd:07:38:c1:a2:6f:c9:c1:ec:22:af:d6:dd:85:4d:cf: 63:6e:3e:e1:89:78:44:fa:86:78:bc:42:2b:f1:1f:27:da:ce: d3:da:c1:be:41:0c:cf:d0:08:c6:97:d5:9c:b9:c8:39:3d:3d: ff:dc:79:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Asnp1NiM1oDnfdcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcwODg2ZDUtMDYyYS00YzVkLWEwMWYtMDIwODhmZjAz OGNlMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk NmNjZTY2MTItMGZlNS00NTUwLTg1MDQtNzU3ODVkY2JmZDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx9cZ9E9pPQybTZsrXJtDkDdV4CyCDUqj3OC RYBAJDIO3i+Jh1SaNnzJ9hD35reLB9nLlnz4Mm/hadSb8kJHaMOKpWJzqXYRW9jk Zsh/feQIBBao457RiUBMIm1By0QuegSvH9BgdgJ/69OURzoGiKtjHLFOBgTXcCSv uXFt84lQFybSPQrC7JJDOzF6RdFyUh2B33eN41+Jb8y7mNd+rOYkFrjt4Yr7/Tis 4s5rPST3OAl4sNLQTKpvXeuHiRwypZR9OitURyDsg69eH0j8HQoT8mJR8ijMvkDp ijt/dpm45rieCQYnzchf3cNqTW/hTTVnj32+Q2JfU/R/MhaMrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqWw2pE/VOkM15gU/4WnS+4KnUUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNzA4 ODZkNS0wNjJhLTRjNWQtYTAxZi0wMjA4OGZmMDM4Y2UvMTc1YmU5ZmItMTgzZi0z NWNlLTk2MTYtMGI5ODAyY2JkZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTcwODg2ZDUtMDYyYS00YzVkLWEw MWYtMDIwODhmZjAzOGNlLzE3MDg4NmQ1LTA2MmEtNGM1ZC1hMDFmLTAyMDg4ZmYw MzhjZS5jcmwwHwYDVR0jBBgwFoAUgzEjo3By7YVT45QpRYAR1naXJnUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNzA4ODZkNS0wNjJhLTRjNWQtYTAxZi0wMjA4 OGZmMDM4Y2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaIDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACguz+Rl2Dxc8DRGEm4QIqpvqoX0668whdp+vnjzd3WVbW1vLkQF71wu LiN/0ZSbt1e2jdKrLxhpBE1hAWzXqte5XuOAi4Putyz3fNJCygwMZwVYgpo4JZuf TsnxnLPbhNBENEbswaALvfm4bQQAKmEapoQA6iH0VvFEc6cWu9uyqEoKjBwX9pA5 S0Q5GAQjDJH+j8JaW+pTodw7LKnxTf+ouJvjwHs49pZdPisPrhBFDrp7hJCuPFn1 2ECXOEZlQs4g6nMY3rhzvQc4waJvycHsIq/W3YVNz2NuPuGJeET6hni8QivxHyfa ztPawb5BDM/QCMaX1Zy5yDk9Pf/cedM= -----END CERTIFICATE-----Generated at Mon Mar 2 15:29:59 2026 by rpki-client