$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/aa578848-2b75-3b39-9243-d445c17b3680.roa File: aa578848-2b75-3b39-9243-d445c17b3680.roa (raw, json) Hash identifier: QARXdzlMq5g7NfetC8n/S47aCz8tTOU+5MPFMHVd66Q= Subject key identifier: 16:E2:79:84:BD:99:45:C9:2F:B0:47:B5:75:52:AD:E1:0F:BE:4C:46 Certificate issuer: /CN=c966e577-4964-41bf-aced-835168bef4f1 Certificate serial: 010D0C9F4328584D6AAA88E6A6CAD1ABCCF8C380 Authority key identifier: 2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/aa578848-2b75-3b39-9243-d445c17b3680.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 395400 IP address blocks: 168.123.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:88:e6:a6:ca:d1:ab:cc:f8:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c966e577-4964-41bf-aced-835168bef4f1 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=b6cb90db-bfa9-4fc6-b0c2-e699192df0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2c:e9:53:95:6c:3a:db:56:89:44:57:f1:db: dc:70:45:a0:59:94:a1:93:09:79:dc:03:3f:45:14: ae:4f:14:c4:f1:8c:82:70:40:b0:e7:db:ad:b8:75: f0:f1:ae:97:20:b6:a9:74:c0:a3:18:c1:a4:1a:3d: 58:a9:cd:44:56:49:25:a0:c3:e3:ae:31:5e:13:b5: 2e:f0:1d:9b:24:16:ab:a1:5b:1a:6a:37:98:2d:65: 34:5d:fb:78:88:d3:d9:61:1f:14:bc:68:e9:47:e8: 14:77:6e:5b:d6:11:54:ca:c9:6c:81:87:db:a8:22: 1e:1a:8e:33:62:68:e7:1e:8e:4f:12:a0:67:28:19: 73:52:d2:9a:17:c4:ff:1f:d5:8c:a9:10:c5:ab:08: 7d:33:aa:8a:12:a9:08:1e:dd:d7:1e:67:b7:65:b0: de:9f:15:ab:11:74:92:d7:af:4a:21:ce:e4:e0:69: c5:3f:49:59:09:62:02:d9:7c:f5:96:fd:f4:39:61: 19:c4:97:12:41:d9:d0:38:38:7b:18:a5:b4:93:29: 4f:db:d4:b1:c1:80:84:cb:14:c6:2c:63:6c:70:84: cd:4c:a1:67:a8:a4:a1:ea:86:7d:31:16:42:a1:b4: f8:5b:33:04:48:2c:94:b9:f2:25:4a:7b:ea:4f:bc: 5d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E2:79:84:BD:99:45:C9:2F:B0:47:B5:75:52:AD:E1:0F:BE:4C:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/aa578848-2b75-3b39-9243-d445c17b3680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl X509v3 Authority Key Identifier: keyid:2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer sbgp-ipAddrBlock: critical IPv4: 168.123.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:93:c7:7c:af:0c:c9:5b:b9:8e:bd:fc:2d:a5:81:16:4d:bb: 10:e9:a5:bf:50:a8:52:f4:64:2f:bd:47:f8:6e:a4:f1:70:be: c5:df:6d:6c:a7:75:45:9f:df:65:85:c9:ae:ae:9f:8b:fd:12: 11:fe:fa:12:d4:6f:7e:44:8f:5a:e4:56:f7:ca:cd:79:25:4b: 9d:e9:f8:ce:e4:de:83:fe:12:7a:33:fd:b4:fe:0c:1a:6d:2c: 5a:c7:03:5d:3f:31:5e:38:59:a6:88:99:d7:26:3b:25:14:12: e4:c3:d7:3d:3e:68:27:cf:cc:f3:c9:d2:33:75:86:52:64:6e: e1:ef:e0:a5:de:27:e9:39:96:dd:d7:fd:89:57:49:bb:b6:8d: 92:25:b4:17:35:a5:25:a1:82:e1:e3:93:4f:0c:6e:94:73:2a: 39:e2:f6:39:7f:8d:26:46:70:d4:3c:aa:29:f1:f2:59:6f:c4: e2:f8:4c:43:cb:7a:e8:ef:8f:16:8e:ad:50:83:e4:a9:ec:2d: b7:dc:f2:d4:81:c1:95:53:ed:04:a6:95:91:78:39:fe:ba:24: 3d:04:76:cf:23:24:14:7f:ec:00:0a:97:04:04:95:60:60:6f: f2:ec:2c:61:84:63:ac:4d:c7:05:21:6c:74:ea:7b:76:0a:aa: d1:60:8a:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqojmpsrRq8z4w4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk2NmU1NzctNDk2NC00MWJmLWFjZWQtODM1MTY4YmVm NGYxMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk YjZjYjkwZGItYmZhOS00ZmM2LWIwYzItZTY5OTE5MmRmMGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyzpU5VsOttWiURX8dvccEWgWZShkwl53AM/ RRSuTxTE8YyCcECw59utuHXw8a6XILapdMCjGMGkGj1Yqc1EVkkloMPjrjFeE7Uu 8B2bJBaroVsaajeYLWU0Xft4iNPZYR8UvGjpR+gUd25b1hFUyslsgYfbqCIeGo4z YmjnHo5PEqBnKBlzUtKaF8T/H9WMqRDFqwh9M6qKEqkIHt3XHme3ZbDenxWrEXSS 169KIc7k4GnFP0lZCWIC2Xz1lv30OWEZxJcSQdnQODh7GKW0kylP29SxwYCEyxTG LGNscITNTKFnqKSh6oZ9MRZCobT4WzMESCyUufIlSnvqT7xdVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbieYS9mUXJL7BHtXVSreEPvkxGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2 ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUxNjhiZWY0ZjEvYWE1Nzg4NDgtMmI3NS0z YjM5LTkyNDMtZDQ0NWMxN2IzNjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzk2NmU1NzctNDk2NC00MWJmLWFj ZWQtODM1MTY4YmVmNGYxL2M5NjZlNTc3LTQ5NjQtNDFiZi1hY2VkLTgzNTE2OGJl ZjRmMS5jcmwwHwYDVR0jBBgwFoAULQ3aREnxHebf8ZdH9KV9jx6KcV0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUx NjhiZWY0ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqHuEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeTx3yvDMlbuY69/C2lgRZNuxDppb9QqFL0ZC+9R/hupPFwvsXfbWyn dUWf32WFya6un4v9EhH++hLUb35Ej1rkVvfKzXklS53p+M7k3oP+Enoz/bT+DBpt LFrHA10/MV44WaaImdcmOyUUEuTD1z0+aCfPzPPJ0jN1hlJkbuHv4KXeJ+k5lt3X /YlXSbu2jZIltBc1pSWhguHjk08MbpRzKjni9jl/jSZGcNQ8qinx8llvxOL4TEPL eujvjxaOrVCD5KnsLbfc8tSBwZVT7QSmlZF4Of66JD0Eds8jJBR/7AAKlwQElWBg b/LsLGGEY6xNxwUhbHTqe3YKqtFgipI= -----END CERTIFICATE-----Generated at Sat Apr 18 07:17:57 2026 by rpki-client