$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aca8707a-936e-31c6-9bed-9ddd4677f562.roa File: aca8707a-936e-31c6-9bed-9ddd4677f562.roa (raw, json) Hash identifier: wLl2Tn/Ixwt/vli+FXL+wgjfhP7Y6Lf0vSP+90x3Fkg= Subject key identifier: 31:8D:1E:C2:9B:59:EF:11:D3:32:32:A5:CC:D4:8F:6D:D2:BE:F1:C3 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584CA491AC104251628984D1A680 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aca8707a-936e-31c6-9bed-9ddd4677f562.roa Signing time: Sun 25 Jan 2026 14:00:40 +0000 ROA not before: Sun 25 Jan 2026 14:00:40 +0000 ROA not after: Sat 25 Apr 2026 13:00:40 +0000 asID: 3257 IP address blocks: 173.44.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a4:91:ac:10:42:51:62:89:84:d1:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Jan 25 14:00:40 2026 GMT Not After : Apr 25 13:00:40 2026 GMT Subject: CN=4d16c012-a2b1-4f53-9f19-b82c0209cc4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0b:64:3e:98:c5:80:68:b5:48:5c:86:23:b9: b2:39:39:ac:f8:16:51:43:5a:28:d3:99:3f:79:c6: 03:14:3e:dd:f9:98:ed:73:50:e7:a5:0d:23:bb:dc: be:3f:0a:3c:70:05:1d:1e:e9:7a:2e:10:bc:6d:07: 67:9d:8e:46:85:0d:99:41:2d:76:52:86:12:f2:2a: 79:08:6a:bd:35:9b:ae:23:e6:46:50:d8:96:22:0e: dd:08:22:fa:c8:ee:d0:c7:53:46:7a:dd:44:ff:b0: 0e:d4:9f:2a:e0:80:49:00:b2:e2:3a:01:af:30:3a: 7a:d1:4e:cc:c3:d3:b7:53:44:a2:df:4a:2f:54:bf: e1:4f:ce:c1:a5:d5:89:8c:19:a0:ee:44:66:03:9b: d9:44:3b:95:38:62:52:37:d3:1c:80:c4:63:d6:fb: e0:34:03:80:f6:81:20:a5:a6:28:d0:82:b3:7d:8a: 92:78:55:da:fc:a4:37:5c:be:d1:ad:53:f2:96:e2: 4c:dd:ab:51:a0:0f:8b:58:42:ff:57:67:8a:24:96: 74:06:93:85:d0:46:b6:c1:7c:82:ee:77:b1:c6:8b: aa:c5:70:f2:b8:cc:6e:21:a0:00:0c:6d:fe:6f:33: 55:02:c6:25:91:85:ee:5e:80:33:ad:a0:91:27:76: 0c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8D:1E:C2:9B:59:EF:11:D3:32:32:A5:CC:D4:8F:6D:D2:BE:F1:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aca8707a-936e-31c6-9bed-9ddd4677f562.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.44.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:72:19:0c:17:7b:46:2a:66:f9:11:ec:ad:b0:b1:5e:5a:a1: ed:6f:88:aa:5a:72:cb:a4:57:81:20:4f:06:00:2e:de:50:0f: c7:f3:01:f7:21:cc:a2:d2:9c:05:9c:41:93:7b:87:bf:2c:d9: 93:54:90:a2:81:40:65:a2:0e:86:d2:b7:44:c3:70:48:31:13: 87:68:04:6a:bb:b8:59:9b:23:a8:55:82:65:5f:10:59:41:49: 4e:f4:2b:6c:9a:e4:f1:5f:13:0a:a1:e6:b1:5d:81:88:78:d6: 5a:00:a5:1c:6f:00:fb:d4:32:6c:e3:fc:7f:6f:69:b9:d4:48: 52:ae:00:a6:a8:4e:4a:27:02:46:a0:e3:56:82:cd:39:f1:1e: 1c:fb:5d:93:2a:da:51:c9:1d:d2:b1:29:f8:14:f1:47:8e:df: ef:ab:f8:a8:06:a5:bb:f7:00:b1:27:87:f3:fe:4a:2e:40:5d: 30:e7:ae:d0:57:20:27:44:73:ba:48:80:fa:7f:3d:78:0b:0b: 2d:3d:26:34:ee:03:57:5a:25:4f:f3:4f:48:85:04:88:96:87: 78:ab:85:8e:10:d5:fe:6a:52:95:21:13:15:87:78:5d:21:56: 4e:17:6c:fe:32:9e:dd:a3:12:83:8a:2f:05:a4:87:90:53:04: ec:cb:de:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEykkawQQlFiiYTRpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDEyNTE0MDA0MFoXDTI2MDQyNTEzMDA0MFowLzEtMCsGA1UEAxMk NGQxNmMwMTItYTJiMS00ZjUzLTlmMTktYjgyYzAyMDljYzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wtkPpjFgGi1SFyGI7myOTms+BZRQ1oo05k/ ecYDFD7d+Zjtc1DnpQ0ju9y+Pwo8cAUdHul6LhC8bQdnnY5GhQ2ZQS12UoYS8ip5 CGq9NZuuI+ZGUNiWIg7dCCL6yO7Qx1NGet1E/7AO1J8q4IBJALLiOgGvMDp60U7M w9O3U0Si30ovVL/hT87BpdWJjBmg7kRmA5vZRDuVOGJSN9McgMRj1vvgNAOA9oEg paYo0IKzfYqSeFXa/KQ3XL7RrVPyluJM3atRoA+LWEL/V2eKJJZ0BpOF0Ea2wXyC 7nexxouqxXDyuMxuIaAADG3+bzNVAsYlkYXuXoAzraCRJ3YMWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGNHsKbWe8R0zIypczUj23SvvHDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYWNhODcwN2EtOTM2ZS0z MWM2LTliZWQtOWRkZDQ2NzdmNTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArSy9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1yGQwXe0YqZvkR7K2wsV5aoe1viKpacsukV4EgTwYALt5QD8fzAfch zKLSnAWcQZN7h78s2ZNUkKKBQGWiDobSt0TDcEgxE4doBGq7uFmbI6hVgmVfEFlB SU70K2ya5PFfEwqh5rFdgYh41loApRxvAPvUMmzj/H9vabnUSFKuAKaoTkonAkag 41aCzTnxHhz7XZMq2lHJHdKxKfgU8UeO3++r+KgGpbv3ALEnh/P+Si5AXTDnrtBX ICdEc7pIgPp/PXgLCy09JjTuA1daJU/zT0iFBIiWh3irhY4Q1f5qUpUhExWHeF0h Vk4XbP4ynt2jEoOKLwWkh5BTBOzL3lw= -----END CERTIFICATE-----Generated at Mon Mar 2 14:12:05 2026 by rpki-client