$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/9a35aab1-3858-3df5-b514-667aa30d3359.roa File: 9a35aab1-3858-3df5-b514-667aa30d3359.roa (raw, json) Hash identifier: 7N54FHy5+x7r/8VRpBOs9RoHnYHLJ1Z/dQPF8Yey8jg= Subject key identifier: 31:DA:6B:85:C5:D8:04:C3:97:45:08:81:9B:6E:8C:35:AA:B2:0F:23 Certificate issuer: /CN=c966e577-4964-41bf-aced-835168bef4f1 Certificate serial: 010D0C9F4328584D55BA2F8060261B5F89582300 Authority key identifier: 2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/9a35aab1-3858-3df5-b514-667aa30d3359.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 395400 IP address blocks: 168.123.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:2f:80:60:26:1b:5f:89:58:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c966e577-4964-41bf-aced-835168bef4f1 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=e657f0e6-f830-45c8-ac86-558265d41e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:be:e3:22:95:ef:ec:53:ad:3e:74:e4:54:89: be:e6:dc:6d:11:bf:eb:d7:ca:74:c2:2d:3c:93:32: 8a:71:9f:db:60:f4:34:47:c8:1f:cc:a4:02:70:56: 89:d4:19:a0:2e:79:9b:52:3d:a9:0d:3c:89:88:1f: 95:d3:b3:84:22:dc:d5:c3:ff:cc:84:e5:54:a2:dd: 6e:cf:e0:74:be:59:92:96:46:4f:60:36:d3:38:ab: b3:5c:56:f2:d5:34:c5:df:21:e3:dd:40:13:e8:c0: ea:5f:10:61:e2:5c:52:ec:ab:4b:bc:c1:03:50:77: 41:92:49:55:6d:4b:21:e9:f0:6a:9a:b6:33:05:30: fd:66:fa:85:ea:ab:35:d5:de:d5:1a:2d:71:e6:78: 8e:56:88:7b:01:67:45:88:55:d3:84:ad:17:28:9f: 85:b2:97:4d:bb:97:99:fe:48:ea:0e:79:76:a7:70: ff:ce:f2:b9:13:4d:49:18:7c:75:87:2c:c8:60:68: 31:6c:04:ac:ef:65:cd:97:18:fc:17:42:1a:43:82: d0:4f:73:ce:c4:40:cb:08:e9:d6:07:3e:98:ee:37: c0:54:36:43:8c:39:15:06:1b:cd:ae:64:12:83:09: 67:54:53:12:b9:eb:b4:dd:bb:91:a4:c6:66:40:7c: a4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DA:6B:85:C5:D8:04:C3:97:45:08:81:9B:6E:8C:35:AA:B2:0F:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/9a35aab1-3858-3df5-b514-667aa30d3359.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl X509v3 Authority Key Identifier: keyid:2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer sbgp-ipAddrBlock: critical IPv4: 168.123.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:54:4c:e3:15:30:64:a0:19:fa:b8:17:8b:fb:ec:f7:5c:ad: b2:28:e5:3f:b7:27:ee:d8:90:ba:47:0c:52:eb:a5:cc:ef:c2: 2b:58:f4:57:02:c2:37:76:04:8e:38:51:2a:40:7d:e3:e8:74: 33:52:5f:dc:8f:0a:b5:46:c7:ca:1b:77:d1:d1:b7:c5:25:2a: 7e:62:85:35:05:23:67:05:52:30:e5:64:11:90:21:b2:33:f2: bf:6d:5f:dc:d3:bf:4e:75:a9:90:9f:31:a2:16:50:4b:cd:f3: 1d:57:7b:20:6f:86:b8:41:0e:e3:3c:c8:74:7a:86:b3:4f:67: b1:b6:91:42:9b:a2:17:71:9c:32:eb:b1:2d:3b:fd:ac:31:0c: bb:b7:11:94:38:e2:e1:01:86:e7:48:8c:a6:60:17:25:73:23: d6:b2:d3:1d:ad:df:69:1d:eb:e4:02:96:aa:28:19:b2:0e:2c: 2c:81:c7:a7:ee:9d:23:14:14:ea:b6:da:21:f1:ee:d3:10:4a: 7a:04:59:d4:d4:b0:c1:3d:ca:1a:a4:f5:c2:bf:7f:81:3f:12: e8:22:6c:81:71:23:7d:16:58:62:bf:fb:ff:de:37:fc:6b:46: a6:f5:48:52:e8:62:af:80:56:cf:62:e6:f4:ec:13:82:45:f6: 95:dc:0b:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vui+AYCYbX4lYIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk2NmU1NzctNDk2NC00MWJmLWFjZWQtODM1MTY4YmVm NGYxMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZTY1N2YwZTYtZjgzMC00NWM4LWFjODYtNTU4MjY1ZDQxZTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb7jIpXv7FOtPnTkVIm+5txtEb/r18p0wi08 kzKKcZ/bYPQ0R8gfzKQCcFaJ1BmgLnmbUj2pDTyJiB+V07OEItzVw//MhOVUot1u z+B0vlmSlkZPYDbTOKuzXFby1TTF3yHj3UAT6MDqXxBh4lxS7KtLvMEDUHdBkklV bUsh6fBqmrYzBTD9ZvqF6qs11d7VGi1x5niOVoh7AWdFiFXThK0XKJ+FspdNu5eZ /kjqDnl2p3D/zvK5E01JGHx1hyzIYGgxbASs72XNlxj8F0IaQ4LQT3POxEDLCOnW Bz6Y7jfAVDZDjDkVBhvNrmQSgwlnVFMSueu03buRpMZmQHykiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHaa4XF2ATDl0UIgZtujDWqsg8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2 ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUxNjhiZWY0ZjEvOWEzNWFhYjEtMzg1OC0z ZGY1LWI1MTQtNjY3YWEzMGQzMzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzk2NmU1NzctNDk2NC00MWJmLWFj ZWQtODM1MTY4YmVmNGYxL2M5NjZlNTc3LTQ5NjQtNDFiZi1hY2VkLTgzNTE2OGJl ZjRmMS5jcmwwHwYDVR0jBBgwFoAULQ3aREnxHebf8ZdH9KV9jx6KcV0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUx NjhiZWY0ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqHv1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpUTOMVMGSgGfq4F4v77PdcrbIo5T+3J+7YkLpHDFLrpczvwitY9FcC wjd2BI44USpAfePodDNSX9yPCrVGx8obd9HRt8UlKn5ihTUFI2cFUjDlZBGQIbIz 8r9tX9zTv051qZCfMaIWUEvN8x1XeyBvhrhBDuM8yHR6hrNPZ7G2kUKbohdxnDLr sS07/awxDLu3EZQ44uEBhudIjKZgFyVzI9ay0x2t32kd6+QClqooGbIOLCyBx6fu nSMUFOq22iHx7tMQSnoEWdTUsME9yhqk9cK/f4E/EugibIFxI30WWGK/+//eN/xr Rqb1SFLoYq+AVs9i5vTsE4JF9pXcC2M= -----END CERTIFICATE-----Generated at Sat Apr 18 07:17:24 2026 by rpki-client