$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/72035800-3e75-3949-9085-d1960203a8c1.roa File: 72035800-3e75-3949-9085-d1960203a8c1.roa (raw, json) Hash identifier: b1SeLxCMNU7sfZP0Jewv0aCe592jWSrKJ5FNWiwn5N4= Subject key identifier: 64:96:03:D8:D0:7F:95:E8:FF:EB:D4:9D:1C:88:2B:D3:AE:79:B8:8C Certificate issuer: /CN=e553e5ec-0211-480d-9476-86db3dbe2182 Certificate serial: 010D0C9F4328584D07ACF1ED44105DFA856D9880 Authority key identifier: 74:13:B4:04:67:64:F5:A0:B0:72:10:1B:35:BF:97:BD:B2:25:4C:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/72035800-3e75-3949-9085-d1960203a8c1.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 31898 IP address blocks: 192.159.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/e553e5ec-0211-480d-9476-86db3dbe2182.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/e553e5ec-0211-480d-9476-86db3dbe2182.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:f1:ed:44:10:5d:fa:85:6d:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e553e5ec-0211-480d-9476-86db3dbe2182 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=9a8b4fe0-3a9c-4fa2-8ab3-d3514a3cb4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3d:f2:4c:0a:e9:d9:7e:8f:0d:e2:2a:be:73: 03:dd:23:d1:26:30:54:9a:68:48:cd:50:6b:3e:4b: 8a:53:11:90:7a:73:05:4c:ad:77:5b:de:56:ec:cd: 86:e7:ea:b8:b3:64:bb:13:28:0e:f9:0d:a2:9c:e9: 6e:bd:5a:7b:98:ea:27:14:80:9a:0b:9c:d0:19:19: 52:1d:a6:8e:87:2f:f0:0b:bd:38:34:4b:bf:4d:5b: 66:bc:bb:fc:68:e2:8e:2d:a8:e4:4b:b5:9a:a9:52: e3:ab:de:f4:fa:cd:9f:3d:df:0c:a9:cb:7a:b9:2d: 46:d0:11:47:a0:b9:03:59:34:a7:1a:f6:9d:09:9d: a2:5a:20:19:25:ac:96:45:63:76:68:90:5d:0a:dd: a3:bf:23:92:84:50:69:3f:43:5a:c1:ff:58:ec:b1: 14:bd:f8:a2:b5:e6:9c:ed:85:6a:00:96:55:d6:37: 2e:47:f7:88:5b:9c:20:2f:12:fd:2f:79:bf:56:a5: 18:29:50:e7:d0:91:91:d2:46:97:6c:49:63:0d:c1: 8e:44:03:c1:c6:1a:d4:c3:c5:4b:19:9a:40:e2:d1: b5:73:29:08:98:5f:1d:eb:9b:aa:7c:49:3d:5d:43: bb:12:56:e4:dd:29:be:61:04:dc:27:28:07:70:59: 08:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:96:03:D8:D0:7F:95:E8:FF:EB:D4:9D:1C:88:2B:D3:AE:79:B8:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/72035800-3e75-3949-9085-d1960203a8c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/e553e5ec-0211-480d-9476-86db3dbe2182.crl X509v3 Authority Key Identifier: keyid:74:13:B4:04:67:64:F5:A0:B0:72:10:1B:35:BF:97:BD:B2:25:4C:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182.cer sbgp-ipAddrBlock: critical IPv4: 192.159.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:52:c7:b0:c6:58:14:28:c6:ea:bc:70:07:60:ec:74:1f:e7: 22:ec:92:2a:f4:12:cd:36:32:d3:09:2c:f8:6f:8d:04:49:bf: e3:8f:49:fc:79:fa:5d:61:39:c6:90:15:2a:fd:7f:e7:83:69: 83:5b:79:b4:dd:1b:43:d6:c4:a0:8b:5b:fd:72:a9:eb:9f:c8: e0:ec:5a:25:fc:6f:d6:fa:e0:3a:71:d0:35:16:20:09:81:00: a0:73:62:e9:52:01:39:82:c3:a2:19:d6:f4:18:06:1f:d8:c8: 0d:63:ab:3c:51:ea:0c:33:8d:14:04:46:21:84:1d:11:f7:07: c7:9f:2d:c1:c4:0e:62:fa:4f:1d:ca:f2:96:6a:74:28:10:ad: 0f:b8:cc:cf:da:c3:1d:a9:1f:d9:11:7c:8a:73:03:ad:2a:98: 6d:42:07:94:b3:9c:9c:04:a0:8c:13:47:94:6e:93:4c:27:82: 2d:53:5a:bc:3b:6c:7f:0c:c6:fd:1d:17:f5:09:e5:84:13:19: bb:25:e7:97:5c:0c:c2:23:bc:ef:51:fa:91:ba:9d:0a:47:b4: 90:b6:41:0c:90:22:8e:b3:19:d4:7c:ff:e8:43:0c:c1:e9:5c: 73:66:7b:84:30:15:e2:0e:56:e4:16:ff:4b:de:ae:46:ef:e7: b7:4b:6d:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrPHtRBBd+oVtmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTU1M2U1ZWMtMDIxMS00ODBkLTk0NzYtODZkYjNkYmUy MTgyMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk OWE4YjRmZTAtM2E5Yy00ZmEyLThhYjMtZDM1MTRhM2NiNGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD3yTArp2X6PDeIqvnMD3SPRJjBUmmhIzVBr PkuKUxGQenMFTK13W95W7M2G5+q4s2S7EygO+Q2inOluvVp7mOonFICaC5zQGRlS HaaOhy/wC704NEu/TVtmvLv8aOKOLajkS7WaqVLjq970+s2fPd8Mqct6uS1G0BFH oLkDWTSnGvadCZ2iWiAZJayWRWN2aJBdCt2jvyOShFBpP0Nawf9Y7LEUvfiiteac 7YVqAJZV1jcuR/eIW5wgLxL9L3m/VqUYKVDn0JGR0kaXbEljDcGORAPBxhrUw8VL GZpA4tG1cykImF8d65uqfEk9XUO7Elbk3Sm+YQTcJygHcFkIuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSWA9jQf5Xo/+vUnRyIK9OuebiMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNTUz ZTVlYy0wMjExLTQ4MGQtOTQ3Ni04NmRiM2RiZTIxODIvNzIwMzU4MDAtM2U3NS0z OTQ5LTkwODUtZDE5NjAyMDNhOGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTU1M2U1ZWMtMDIxMS00ODBkLTk0 NzYtODZkYjNkYmUyMTgyL2U1NTNlNWVjLTAyMTEtNDgwZC05NDc2LTg2ZGIzZGJl MjE4Mi5jcmwwHwYDVR0jBBgwFoAUdBO0BGdk9aCwchAbNb+XvbIlTCUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lNTUzZTVlYy0wMjExLTQ4MGQtOTQ3Ni04NmRi M2RiZTIxODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ98MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5Sx7DGWBQoxuq8cAdg7HQf5yLskir0Es02MtMJLPhvjQRJv+OPSfx5 +l1hOcaQFSr9f+eDaYNbebTdG0PWxKCLW/1yqeufyODsWiX8b9b64Dpx0DUWIAmB AKBzYulSATmCw6IZ1vQYBh/YyA1jqzxR6gwzjRQERiGEHRH3B8efLcHEDmL6Tx3K 8pZqdCgQrQ+4zM/awx2pH9kRfIpzA60qmG1CB5SznJwEoIwTR5Ruk0wngi1TWrw7 bH8Mxv0dF/UJ5YQTGbsl55dcDMIjvO9R+pG6nQpHtJC2QQyQIo6zGdR8/+hDDMHp XHNme4QwFeIOVuQW/0verkbv57dLbQc= -----END CERTIFICATE-----Generated at Mon Mar 2 15:55:41 2026 by rpki-client