$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ace70f2f-fe59-3fb0-bbb4-04ee4acba39e.roa File: ace70f2f-fe59-3fb0-bbb4-04ee4acba39e.roa (raw, json) Hash identifier: NAmkfXidPceVsumwvDs6i3KSYsGOYG3WBdKFxspaIQE= Subject key identifier: D4:A7:97:C3:B8:FC:06:09:8D:46:62:F0:77:36:50:31:F2:C7:8E:5C Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584CBF171B3C95CA890E6A5B0700 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ace70f2f-fe59-3fb0-bbb4-04ee4acba39e.roa Signing time: Wed 04 Feb 2026 02:00:31 +0000 ROA not before: Wed 04 Feb 2026 02:00:31 +0000 ROA not after: Tue 05 May 2026 01:00:31 +0000 asID: 62904 IP address blocks: 170.130.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bf:17:1b:3c:95:ca:89:0e:6a:5b:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Feb 4 02:00:31 2026 GMT Not After : May 5 01:00:31 2026 GMT Subject: CN=a0861302-54c3-4cc0-a85e-71e703e08ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:07:6e:5e:4b:73:3b:4a:8e:eb:4a:64:7d:72: bb:5e:f0:9f:51:af:c6:cc:6f:f0:2c:e4:66:db:d0: 91:60:6d:49:03:c7:1e:62:76:be:63:91:ed:e3:0b: 04:52:2e:72:c6:a7:21:a5:06:94:37:d8:e6:e6:ad: cf:50:78:30:28:6a:a7:66:f9:e3:0c:bb:e2:a8:55: 3e:22:42:b9:33:86:66:b9:ed:0b:e0:90:41:df:f2: 6f:81:93:f2:d7:fc:bc:6b:e2:02:47:e6:d6:e1:cc: 41:a9:6a:51:c1:60:74:17:f4:3d:f0:d0:61:27:b7: f2:1c:56:bd:32:ad:a0:56:00:2f:03:3f:3b:df:39: 56:11:d7:e2:0d:7e:5b:14:b8:2c:1c:b0:fb:0f:8f: 77:13:28:55:9e:b8:1e:4a:83:df:ce:98:88:f0:b5: a3:b3:57:65:60:b6:5f:6b:cb:ce:aa:e2:b3:a4:65: 37:c6:4d:7b:d8:19:79:98:9e:28:80:b9:64:44:e9: 37:9b:04:a1:6a:f1:dd:dc:19:8d:7d:45:5f:99:f2: 96:e1:d7:b3:71:14:cd:3d:3c:a6:72:eb:d9:d2:a5: 28:8a:51:6f:46:82:5e:6d:08:72:6f:e1:6e:20:b8: 8d:6e:06:34:9b:d2:11:ab:93:f4:ad:2a:7a:37:25: ba:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A7:97:C3:B8:FC:06:09:8D:46:62:F0:77:36:50:31:F2:C7:8E:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ace70f2f-fe59-3fb0-bbb4-04ee4acba39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 170.130.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:c3:ce:25:c0:a7:5d:9b:2a:4c:dd:8e:55:91:76:8f:3e:cc: 1c:23:99:5c:61:6c:01:d1:8f:16:32:97:49:98:7a:03:5e:f8: a6:59:5a:8a:b5:8c:8f:62:33:fb:fb:27:77:e8:b5:4f:00:d4: bd:c0:2e:ce:dd:54:ed:42:f8:52:9d:53:af:32:31:d1:4e:70: be:b9:f4:8c:d8:52:70:71:f4:ff:7b:29:91:8a:0f:7d:01:c3: 88:db:96:e2:2a:13:ef:a3:ec:5c:02:97:4a:5c:26:0e:26:b5: af:dc:31:06:75:07:38:0c:77:21:b8:5b:92:74:a6:fa:1f:88: 9a:e4:9e:d5:7c:6a:9c:88:14:8e:49:79:df:ff:d5:c4:bf:12: 0a:1b:88:b3:86:cd:57:01:30:df:33:6b:32:6d:01:fe:45:9e: a1:48:21:13:07:eb:13:1f:2b:64:2b:32:8e:ce:ff:61:d1:25: da:e4:9c:a3:df:78:1b:63:8a:a3:f9:ae:aa:62:ab:1e:f1:2f: b0:ec:dd:2d:09:00:ee:74:ce:3c:ee:ff:71:46:a9:92:cc:b0: 22:cf:a2:b3:d0:dd:47:c1:a4:8e:30:f7:50:2b:82:e1:9e:6f: 22:31:cf:c6:ff:e7:49:0c:8b:0b:27:63:76:00:9d:c0:05:6c: 7d:17:c7:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy/Fxs8lcqJDmpbBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk YTA4NjEzMDItNTRjMy00Y2MwLWE4NWUtNzFlNzAzZTA4YmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AduXktzO0qO60pkfXK7XvCfUa/GzG/wLORm 29CRYG1JA8ceYna+Y5Ht4wsEUi5yxqchpQaUN9jm5q3PUHgwKGqnZvnjDLviqFU+ IkK5M4Zmue0L4JBB3/JvgZPy1/y8a+ICR+bW4cxBqWpRwWB0F/Q98NBhJ7fyHFa9 Mq2gVgAvAz873zlWEdfiDX5bFLgsHLD7D493EyhVnrgeSoPfzpiI8LWjs1dlYLZf a8vOquKzpGU3xk172Bl5mJ4ogLlkROk3mwShavHd3BmNfUVfmfKW4dezcRTNPTym cuvZ0qUoilFvRoJebQhyb+FuILiNbgY0m9IRq5P0rSp6NyW66QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSnl8O4/AYJjUZi8Hc2UDHyx45cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYWNlNzBmMmYtZmU1OS0z ZmIwLWJiYjQtMDRlZTRhY2JhMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqoLoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3DziXAp12bKkzdjlWRdo8+zBwjmVxhbAHRjxYyl0mYegNe+KZZWoq1 jI9iM/v7J3fotU8A1L3ALs7dVO1C+FKdU68yMdFOcL659IzYUnBx9P97KZGKD30B w4jbluIqE++j7FwCl0pcJg4mta/cMQZ1BzgMdyG4W5J0pvofiJrkntV8apyIFI5J ed//1cS/EgobiLOGzVcBMN8zazJtAf5FnqFIIRMH6xMfK2QrMo7O/2HRJdrknKPf eBtjiqP5rqpiqx7xL7Ds3S0JAO50zjzu/3FGqZLMsCLPorPQ3UfBpI4w91ArguGe byIxz8b/50kMiwsnY3YAncAFbH0Xx1E= -----END CERTIFICATE-----Generated at Mon Mar 2 08:37:50 2026 by rpki-client