$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/3eff7925-cb5c-39cc-b9b9-04fa31cca8e9.roa File: 3eff7925-cb5c-39cc-b9b9-04fa31cca8e9.roa (raw, json) Hash identifier: +IKNdH6jwy4Yy0VrKzmo9gdVcQ0YKtJd4FcnGyAESsk= Subject key identifier: E9:53:DC:F6:77:FD:88:C4:32:D3:0B:59:E5:CE:4D:31:86:81:44:50 Certificate issuer: /CN=ee9986fc-001f-49c5-949c-333fec29fe66 Certificate serial: 010D0C9F4328584D773A63F92A1A04FBF59DA800 Authority key identifier: 2C:6A:93:4E:58:18:37:EB:09:24:3D:FC:9A:24:D0:3A:36:A9:59:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/3eff7925-cb5c-39cc-b9b9-04fa31cca8e9.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 8075 IP address blocks: 170.170.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/ee9986fc-001f-49c5-949c-333fec29fe66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/ee9986fc-001f-49c5-949c-333fec29fe66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:63:f9:2a:1a:04:fb:f5:9d:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee9986fc-001f-49c5-949c-333fec29fe66 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=96d03c4b-9591-4ca8-a14f-452669088e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a8:4a:9e:91:ef:17:0e:8b:02:3f:b3:0c:84: 51:fe:19:12:71:8e:4a:ef:de:14:4e:7d:a2:7d:1b: ad:0f:12:2c:6f:76:b8:05:bc:9f:8d:46:ab:17:ea: 0c:41:c0:50:4f:e9:7e:b9:cb:11:28:e0:4e:7b:22: ac:17:f1:d0:4d:db:d6:1d:6d:56:1c:a9:ca:9e:1c: ed:3a:ed:40:8c:2f:2c:36:01:dc:18:51:28:95:1c: a0:3c:0e:90:ee:e1:b4:bd:ae:8c:82:75:1c:22:a8: 46:e4:33:51:90:21:ad:9f:98:35:4e:50:68:94:95: 23:aa:f7:68:9c:e1:ca:85:99:c3:8e:94:75:5d:14: 58:13:7a:36:12:07:ac:eb:c2:5a:a4:2d:28:2e:8c: 2b:4a:a8:d0:6c:b0:89:0a:4b:e8:44:0b:c7:d0:1d: c2:88:2e:9b:8d:31:48:b0:4b:da:74:af:e4:ac:55: 72:17:a3:8c:8b:1b:61:30:96:cb:20:09:3d:47:f2: e4:5c:ee:76:fe:ed:16:7c:72:da:47:62:e5:56:b3: 94:52:01:ca:f7:4b:8a:1e:00:6e:21:27:f4:c3:7d: e5:3c:fd:a5:07:de:42:d2:d9:3c:ec:0b:70:80:87: 44:3c:60:43:82:44:40:cb:7c:7e:4e:30:64:92:10: 62:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:53:DC:F6:77:FD:88:C4:32:D3:0B:59:E5:CE:4D:31:86:81:44:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/3eff7925-cb5c-39cc-b9b9-04fa31cca8e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/ee9986fc-001f-49c5-949c-333fec29fe66.crl X509v3 Authority Key Identifier: keyid:2C:6A:93:4E:58:18:37:EB:09:24:3D:FC:9A:24:D0:3A:36:A9:59:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66.cer sbgp-ipAddrBlock: critical IPv4: 170.170.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:6f:cc:5c:1e:3c:0b:c3:c2:74:e2:1d:27:b1:86:52:d6:6e: 71:4b:c0:78:49:ad:95:66:24:eb:60:57:c2:6e:af:45:7f:f5: f7:2a:5d:23:6f:b9:71:58:4b:05:67:76:ee:cb:12:4c:30:45: be:c5:e7:a6:e7:3d:bb:09:43:63:e2:f1:d3:8e:f1:8d:6d:fe: 6d:f2:0b:8f:f4:de:be:ca:04:4e:69:98:78:ad:9d:53:b5:7b: e2:f8:2f:d2:18:b8:da:e7:b8:29:22:a4:84:f8:6a:85:17:64: 14:70:0b:e1:12:08:ef:4d:bf:22:94:42:ed:a1:6c:d0:0f:36: d2:af:4b:db:30:43:32:31:49:7a:de:13:db:f5:7a:07:12:7c: 79:25:1d:9c:18:cc:cc:ee:16:6f:16:5d:16:d0:e0:95:a9:4f: 1b:83:b7:53:88:b0:3f:29:f6:5b:8a:2a:3c:d1:ee:d7:92:58: 78:ba:98:78:4a:f1:38:9e:1c:aa:a2:27:d1:4b:68:32:71:6d: e1:f5:3c:80:31:88:07:6d:ea:b1:f3:8f:d5:9f:da:91:aa:4c: 18:61:05:d7:13:0c:a7:ec:6f:d6:97:14:36:30:64:1c:73:28: 4a:cc:54:a3:dd:25:e6:66:a3:b8:69:f9:4a:05:88:5a:8b:e1: d6:b1:e1:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OmP5KhoE+/WdqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU5OTg2ZmMtMDAxZi00OWM1LTk0OWMtMzMzZmVjMjlm ZTY2MB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk OTZkMDNjNGItOTU5MS00Y2E4LWExNGYtNDUyNjY5MDg4ZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqhKnpHvFw6LAj+zDIRR/hkScY5K794UTn2i fRutDxIsb3a4BbyfjUarF+oMQcBQT+l+ucsRKOBOeyKsF/HQTdvWHW1WHKnKnhzt Ou1AjC8sNgHcGFEolRygPA6Q7uG0va6MgnUcIqhG5DNRkCGtn5g1TlBolJUjqvdo nOHKhZnDjpR1XRRYE3o2Eges68JapC0oLowrSqjQbLCJCkvoRAvH0B3CiC6bjTFI sEvadK/krFVyF6OMixthMJbLIAk9R/LkXO52/u0WfHLaR2LlVrOUUgHK90uKHgBu ISf0w33lPP2lB95C0tk87AtwgIdEPGBDgkRAy3x+TjBkkhBi2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlT3PZ3/YjEMtMLWeXOTTGGgURQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lZTk5 ODZmYy0wMDFmLTQ5YzUtOTQ5Yy0zMzNmZWMyOWZlNjYvM2VmZjc5MjUtY2I1Yy0z OWNjLWI5YjktMDRmYTMxY2NhOGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZWU5OTg2ZmMtMDAxZi00OWM1LTk0 OWMtMzMzZmVjMjlmZTY2L2VlOTk4NmZjLTAwMWYtNDljNS05NDljLTMzM2ZlYzI5 ZmU2Ni5jcmwwHwYDVR0jBBgwFoAULGqTTlgYN+sJJD38miTQOjapWXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lZTk5ODZmYy0wMDFmLTQ5YzUtOTQ5Yy0zMzNm ZWMyOWZlNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqqp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRvzFwePAvDwnTiHSexhlLWbnFLwHhJrZVmJOtgV8Jur0V/9fcqXSNv uXFYSwVndu7LEkwwRb7F56bnPbsJQ2Pi8dOO8Y1t/m3yC4/03r7KBE5pmHitnVO1 e+L4L9IYuNrnuCkipIT4aoUXZBRwC+ESCO9NvyKUQu2hbNAPNtKvS9swQzIxSXre E9v1egcSfHklHZwYzMzuFm8WXRbQ4JWpTxuDt1OIsD8p9luKKjzR7teSWHi6mHhK 8TieHKqiJ9FLaDJxbeH1PIAxiAdt6rHzj9Wf2pGqTBhhBdcTDKfsb9aXFDYwZBxz KErMVKPdJeZmo7hp+UoFiFqL4dax4Wc= -----END CERTIFICATE-----Generated at Fri Apr 17 15:06:04 2026 by rpki-client