$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa File: 96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa (raw, json) Hash identifier: 1v3xG3ahJT3oXNnYTId/EvHSnI1rjxWU3cOBlXG7UHs= Subject key identifier: 45:B6:96:F9:7A:62:87:8D:E0:77:4D:79:16:58:D9:E7:4D:BB:FA:00 Certificate issuer: /CN=ee86bab0-ef7e-4e23-84fe-bcd5cee869bb Certificate serial: 010D0C9F4328584D571FB34D69A7C0966BC06940 Authority key identifier: 17:D3:83:21:A7:3C:E6:27:6D:07:DB:A2:70:2D:1B:95:C2:EE:2F:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 14618 IP address blocks: 170.52.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b3:4d:69:a7:c0:96:6b:c0:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee86bab0-ef7e-4e23-84fe-bcd5cee869bb Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=761ec738-4f7a-4edc-ab6c-f9abeae06623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e1:52:83:c3:1c:07:60:54:6f:2c:f3:c5:1b: d0:2c:f9:6a:d3:d6:42:44:54:9a:9b:f7:a4:a3:59: 7a:58:ca:3e:ed:f2:8f:7a:61:96:b8:ae:4c:78:c4: 81:9b:8c:98:a3:fe:3e:7d:2a:7b:0b:dc:70:20:36: 25:a8:9f:d1:18:e0:73:ea:7f:c4:38:a5:29:e0:a8: fb:8f:9a:bd:b2:ea:81:59:dc:5d:57:5a:6b:a0:b5: 3a:87:9d:a7:81:a1:4c:d8:d5:8f:06:c0:b7:92:be: 1f:4e:76:eb:d6:d3:1e:2a:5b:c8:70:dd:1a:07:5f: b8:b0:6e:de:79:3c:b6:55:ad:12:bc:f1:9a:11:68: b5:2c:88:ae:5b:87:8f:9f:ad:8d:71:ad:80:29:3c: f7:38:0b:97:d4:58:15:21:41:b0:2e:b6:97:bc:e3: 80:50:63:80:af:14:93:b4:53:10:6a:7a:b2:5b:ba: 07:6d:05:94:92:20:76:c6:df:56:6d:1d:bd:c8:6d: 24:0b:91:d7:a9:0d:b7:84:e4:17:0a:9e:d5:d7:41: 3f:a2:03:56:d7:ee:62:ea:03:ab:7f:f0:0d:2e:ca: b2:00:2b:8f:5e:a8:f9:f6:67:93:94:bf:7f:7c:84: 07:e5:45:30:5e:01:76:4f:6d:f8:ae:04:36:39:37: 20:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B6:96:F9:7A:62:87:8D:E0:77:4D:79:16:58:D9:E7:4D:BB:FA:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.crl X509v3 Authority Key Identifier: keyid:17:D3:83:21:A7:3C:E6:27:6D:07:DB:A2:70:2D:1B:95:C2:EE:2F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer sbgp-ipAddrBlock: critical IPv4: 170.52.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c1:7b:e3:4b:39:d1:5c:94:f3:8b:0f:1c:34:68:96:63:a2: e8:ea:10:c1:c3:18:5c:40:f7:ce:1c:8a:34:08:01:44:97:25: 31:88:d6:53:62:ee:d4:bd:84:b6:78:9e:18:58:3d:f2:8e:b4: 37:94:ee:3f:7f:f9:23:fb:ac:e0:32:47:f3:e4:00:cc:5b:48: 3b:66:ef:c4:b4:be:7b:4e:33:05:33:02:93:ec:04:b6:13:4b: 09:6b:75:34:56:b3:b4:e8:2a:f4:84:fa:47:65:2a:59:72:ff: d6:3a:57:4d:85:10:3c:72:c1:4f:79:ce:b1:91:b8:25:df:f6: dd:73:d5:42:ad:ea:b5:a6:ed:b8:c9:c5:8a:99:dc:b3:e5:65: d3:86:d8:11:15:9a:49:a5:86:11:b0:d2:fc:f7:25:b4:a8:33: cf:eb:66:0d:88:fa:7e:03:a4:7a:4b:b8:e8:79:cb:6a:3b:3c: c7:29:49:46:82:05:19:92:bc:91:f6:cc:fa:21:24:36:ae:32: 63:08:48:63:ae:99:82:65:39:96:2a:3e:84:4e:56:79:7b:97: 3e:09:57:f4:66:47:14:91:9c:f5:23:fe:8f:41:0c:7f:59:71: 0c:86:5c:ca:3c:12:67:cd:f4:ba:a2:ad:85:24:c8:99:50:6f: 02:c2:a1:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7NNaafAlmvAaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU4NmJhYjAtZWY3ZS00ZTIzLTg0ZmUtYmNkNWNlZTg2 OWJiMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk NzYxZWM3MzgtNGY3YS00ZWRjLWFiNmMtZjlhYmVhZTA2NjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+FSg8McB2BUbyzzxRvQLPlq09ZCRFSam/ek o1l6WMo+7fKPemGWuK5MeMSBm4yYo/4+fSp7C9xwIDYlqJ/RGOBz6n/EOKUp4Kj7 j5q9suqBWdxdV1proLU6h52ngaFM2NWPBsC3kr4fTnbr1tMeKlvIcN0aB1+4sG7e eTy2Va0SvPGaEWi1LIiuW4ePn62Nca2AKTz3OAuX1FgVIUGwLraXvOOAUGOArxST tFMQanqyW7oHbQWUkiB2xt9WbR29yG0kC5HXqQ23hOQXCp7V10E/ogNW1+5i6gOr f/ANLsqyACuPXqj59meTlL9/fIQH5UUwXgF2T234rgQ2OTcgxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEW2lvl6YoeN4HdNeRZY2edNu/oAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZTg2 YmFiMC1lZjdlLTRlMjMtODRmZS1iY2Q1Y2VlODY5YmIvOTZiNWVjZGYtMDAzYy0z N2ZkLWI2MjEtOGZlNmI0OWJkMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWU4NmJhYjAtZWY3ZS00ZTIzLTg0 ZmUtYmNkNWNlZTg2OWJiL2VlODZiYWIwLWVmN2UtNGUyMy04NGZlLWJjZDVjZWU4 NjliYi5jcmwwHwYDVR0jBBgwFoAUF9ODIac85idtB9uicC0blcLuLw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lZTg2YmFiMC1lZjdlLTRlMjMtODRmZS1iY2Q1 Y2VlODY5YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqjQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDBe+NLOdFclPOLDxw0aJZjoujqEMHDGFxA984cijQIAUSXJTGI1lNi 7tS9hLZ4nhhYPfKOtDeU7j9/+SP7rOAyR/PkAMxbSDtm78S0vntOMwUzApPsBLYT SwlrdTRWs7ToKvSE+kdlKlly/9Y6V02FEDxywU95zrGRuCXf9t1z1UKt6rWm7bjJ xYqZ3LPlZdOG2BEVmkmlhhGw0vz3JbSoM8/rZg2I+n4DpHpLuOh5y2o7PMcpSUaC BRmSvJH2zPohJDauMmMISGOumYJlOZYqPoROVnl7lz4JV/RmRxSRnPUj/o9BDH9Z cQyGXMo8EmfN9LqirYUkyJlQbwLCobk= -----END CERTIFICATE-----Generated at Fri Apr 17 10:28:32 2026 by rpki-client