$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/ff94971f-87dc-357c-99a9-98110a2d1389.roa File: ff94971f-87dc-357c-99a9-98110a2d1389.roa (raw, json) Hash identifier: FMlU0+10z3G2wRAdmKGwCe1pNhvx7JuULztYknBkYac= Subject key identifier: AF:B4:59:76:DC:17:31:FC:C8:31:ED:D0:77:B0:54:F7:EB:6E:1E:85 Certificate issuer: /CN=1d71aad6-87bb-4b95-b81e-5f6d95d05f03 Certificate serial: 010D0C9F4328584D00B2717A25BC16EEF1583CC0 Authority key identifier: 64:EB:9A:E0:63:A7:1F:14:5A:3B:C2:09:12:04:E7:85:81:F6:88:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/ff94971f-87dc-357c-99a9-98110a2d1389.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 53548 IP address blocks: 170.39.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:71:7a:25:bc:16:ee:f1:58:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d71aad6-87bb-4b95-b81e-5f6d95d05f03 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=7643fc3f-efd5-4dc4-a15d-c070398d7bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:19:4b:ad:13:8e:76:23:35:7e:5e:62:b5:b7: 1c:34:8f:ee:c4:17:10:0e:0d:58:3c:58:be:7b:72: 54:2c:2c:aa:58:2d:82:e3:8b:13:af:ae:1e:cf:b3: 01:c3:ba:a6:8a:53:50:30:4f:03:22:b1:63:e3:82: bb:de:7d:9e:a7:5d:d2:65:2e:c0:40:51:07:5c:51: cb:a3:b4:4f:9a:c1:51:13:44:ca:b3:c0:39:8f:4b: d0:ac:7e:d4:8f:79:3e:04:de:18:0c:ab:4b:28:94: 50:e4:2a:a6:e6:32:70:02:3e:8d:1f:ca:58:6d:90: 37:95:7a:c0:68:fd:8f:ef:84:f0:14:7d:b6:60:e1: f0:ec:20:b0:0a:90:64:9f:4f:da:99:c7:95:3f:cc: e5:88:28:d2:1b:96:ff:67:4d:9e:fd:9b:44:21:f0: c1:9b:d8:9b:9f:f8:30:16:dd:60:0b:ab:3f:5e:ad: 50:9d:f5:1f:07:b0:b1:48:2d:c0:0a:41:3d:af:f2: 3f:fc:c5:ff:6a:f4:e0:3e:50:f6:87:e7:28:5a:2c: 72:a5:dd:70:25:4c:b7:e2:a4:af:71:3a:d4:3a:46: fb:7e:9b:64:a8:7e:e6:16:4f:2b:c3:26:5d:84:17: 89:39:11:1f:39:cb:c3:8e:d6:99:82:2a:81:be:43: 53:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B4:59:76:DC:17:31:FC:C8:31:ED:D0:77:B0:54:F7:EB:6E:1E:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/ff94971f-87dc-357c-99a9-98110a2d1389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.crl X509v3 Authority Key Identifier: keyid:64:EB:9A:E0:63:A7:1F:14:5A:3B:C2:09:12:04:E7:85:81:F6:88:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.cer sbgp-ipAddrBlock: critical IPv4: 170.39.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:72:b4:18:a6:14:22:ee:de:db:f7:f6:f9:ab:31:d7:c9:38: f3:1f:e3:d3:7a:50:93:86:b3:dc:b6:70:0e:df:bd:bf:b0:b7: 6b:03:0b:1a:d9:2a:35:fe:a8:a7:a0:44:f9:cd:07:4f:9a:89: a4:42:ca:28:01:78:a6:21:bf:d2:ba:f2:41:6d:2e:13:3c:88: 25:69:08:5a:da:a9:58:a0:e1:ae:a7:af:35:fa:fd:ce:36:d5: 44:35:b9:77:67:a0:e7:8d:b3:6e:57:44:9e:c3:11:23:50:07: 2a:2a:6d:41:6b:32:77:a0:75:f0:7d:cd:f4:e5:8d:20:55:6e: 1b:eb:c6:75:90:87:f6:1d:d3:81:13:dc:cf:00:36:3a:95:ef: 49:05:e8:83:6a:71:79:31:eb:33:27:d6:7b:fa:f8:7c:95:12: 6f:e0:44:74:68:ed:6d:cd:59:8b:a4:06:8f:57:b3:0c:f0:fb: 87:31:9e:fb:8d:83:16:a0:d0:a0:ae:c5:87:e9:c7:aa:ef:7b: 27:de:d1:d8:4a:a8:90:3a:b1:5c:45:4d:11:97:5b:a9:0c:d3: fd:2b:98:34:53:02:95:c4:b5:0f:28:cc:a6:5c:c6:90:16:2b: 76:61:af:af:fd:f4:ad:73:17:4e:0e:b8:b6:eb:0e:76:51:40: f3:a7:42:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AsnF6JbwW7vFYPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ3MWFhZDYtODdiYi00Yjk1LWI4MWUtNWY2ZDk1ZDA1 ZjAzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk NzY0M2ZjM2YtZWZkNS00ZGM0LWExNWQtYzA3MDM5OGQ3YmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxlLrROOdiM1fl5itbccNI/uxBcQDg1YPFi+ e3JULCyqWC2C44sTr64ez7MBw7qmilNQME8DIrFj44K73n2ep13SZS7AQFEHXFHL o7RPmsFRE0TKs8A5j0vQrH7Uj3k+BN4YDKtLKJRQ5Cqm5jJwAj6NH8pYbZA3lXrA aP2P74TwFH22YOHw7CCwCpBkn0/amceVP8zliCjSG5b/Z02e/ZtEIfDBm9ibn/gw Ft1gC6s/Xq1QnfUfB7CxSC3ACkE9r/I//MX/avTgPlD2h+coWixypd1wJUy34qSv cTrUOkb7fptkqH7mFk8rwyZdhBeJOREfOcvDjtaZgiqBvkNTXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+0WXbcFzH8yDHt0HewVPfrbh6FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZDcx YWFkNi04N2JiLTRiOTUtYjgxZS01ZjZkOTVkMDVmMDMvZmY5NDk3MWYtODdkYy0z NTdjLTk5YTktOTgxMTBhMmQxMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWQ3MWFhZDYtODdiYi00Yjk1LWI4 MWUtNWY2ZDk1ZDA1ZjAzLzFkNzFhYWQ2LTg3YmItNGI5NS1iODFlLTVmNmQ5NWQw NWYwMy5jcmwwHwYDVR0jBBgwFoAUZOua4GOnHxRaO8IJEgTnhYH2iG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZDcxYWFkNi04N2JiLTRiOTUtYjgxZS01ZjZk OTVkMDVmMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqifwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMBytBimFCLu3tv39vmrMdfJOPMf49N6UJOGs9y2cA7fvb+wt2sDCxrZ KjX+qKegRPnNB0+aiaRCyigBeKYhv9K68kFtLhM8iCVpCFraqVig4a6nrzX6/c42 1UQ1uXdnoOeNs25XRJ7DESNQByoqbUFrMnegdfB9zfTljSBVbhvrxnWQh/Yd04ET 3M8ANjqV70kF6INqcXkx6zMn1nv6+HyVEm/gRHRo7W3NWYukBo9Xswzw+4cxnvuN gxag0KCuxYfpx6rveyfe0dhKqJA6sVxFTRGXW6kM0/0rmDRTApXEtQ8ozKZcxpAW K3Zhr6/99K1zF04OuLbrDnZRQPOnQng= -----END CERTIFICATE-----Generated at Mon Mar 2 10:22:06 2026 by rpki-client