$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/0171967b-73fa-3071-ae83-adf3407d9a47.roa File: 0171967b-73fa-3071-ae83-adf3407d9a47.roa (raw, json) Hash identifier: ZRb94SOVYXO/n2I86DRFgRNHoqLwnWNyKYuNEGq+Cl0= Subject key identifier: 89:4B:63:71:09:25:32:FD:83:CA:7D:99:50:63:51:2F:37:6C:B2:0F Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584CFDE7A5D6BA0EF4176AD15150 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/0171967b-73fa-3071-ae83-adf3407d9a47.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 40509 IP address blocks: 188.93.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e7:a5:d6:ba:0e:f4:17:6a:d1:51:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=1ab01951-32e9-41d5-936e-4fa275b67830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f7:88:01:8b:bd:c1:4b:5d:67:d9:a2:af:f8: a5:fe:0c:dc:56:9e:0d:44:b4:fd:64:ab:ab:15:9b: 8f:55:9e:62:72:9c:b0:f3:a4:b5:51:a9:82:9b:9b: 54:0b:63:07:7c:1e:fd:ba:24:fd:b8:5f:82:c5:00: 66:4f:88:2a:35:05:f1:10:ec:e9:09:79:b3:ba:c5: f0:d0:48:53:9a:89:e8:22:86:1e:28:eb:73:04:61: 92:62:ff:eb:b2:a9:82:6e:20:a6:3d:6b:e5:9a:e4: c4:fb:36:3c:ee:98:79:94:01:2d:1c:79:bb:e2:ff: 84:97:f3:8a:d1:ed:bc:94:ae:b3:38:cd:71:d1:93: ac:3a:20:c5:4f:e4:3b:43:97:0c:b8:0e:a2:40:c1: e3:d2:ec:91:91:62:5e:f9:36:fb:29:e9:d3:18:67: ef:5c:9f:9a:5d:9f:32:b9:45:8b:8a:75:65:ba:22: 7f:76:46:1d:a9:fc:df:06:34:b8:0f:76:b0:0c:85: 2b:5a:6a:60:29:44:7a:aa:ae:ad:ec:18:46:e6:ef: 7a:95:71:98:27:bd:47:d3:e9:be:ce:ee:06:0e:6f: 5d:a3:b6:a3:79:8c:3e:6e:4f:8c:f9:e6:86:fd:3b: 4b:98:fc:38:12:7e:64:54:79:05:10:ef:e7:a6:c2: 45:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4B:63:71:09:25:32:FD:83:CA:7D:99:50:63:51:2F:37:6C:B2:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/0171967b-73fa-3071-ae83-adf3407d9a47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 188.93.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a3:93:60:4f:12:3c:b1:46:3d:f9:06:fc:71:91:22:d8:c0: 5a:c2:f4:68:aa:5a:e5:f7:89:5b:45:f2:d6:e2:5f:03:45:49: 7a:fc:b1:3e:bd:2d:a2:52:c5:79:24:ba:28:95:ce:c3:b4:4a: 56:20:82:24:57:a4:6f:4e:3a:be:bc:c7:03:0a:fb:8a:9c:cf: 92:8f:6e:3a:b7:6e:c1:1d:f0:f2:23:d3:66:ed:d4:28:cb:f6: 80:97:f3:e7:5d:7e:39:00:49:ad:90:d8:8b:10:51:ce:13:45: d2:37:1a:c5:a9:d4:fb:9a:d7:8f:40:ed:b8:aa:52:49:fd:d7: 7c:6d:6e:71:1a:44:db:e6:6e:b2:6f:ea:1b:2e:7b:58:c0:b9: 30:f1:af:86:ec:5b:1e:3d:0a:5d:3d:9a:84:7f:ab:bc:2d:22: 72:1c:fc:38:f6:a3:3d:b0:1c:80:a2:d7:15:8b:27:02:50:1c: 43:ab:0e:e3:a1:21:4a:b3:76:e1:8c:b4:7c:f8:e4:6e:c6:3b: 41:da:41:c7:2a:17:47:bf:31:60:e5:e2:41:20:18:15:df:bf: 2c:5f:bf:bd:f9:32:45:4d:13:02:ef:97:3c:af:36:55:67:d5: 08:49:24:26:0b:d9:94:16:38:f1:bd:06:0e:26:83:59:05:77: c2:d2:cf:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz956XWug70F2rRUVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk MWFiMDE5NTEtMzJlOS00MWQ1LTkzNmUtNGZhMjc1YjY3ODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPeIAYu9wUtdZ9mir/il/gzcVp4NRLT9ZKur FZuPVZ5icpyw86S1UamCm5tUC2MHfB79uiT9uF+CxQBmT4gqNQXxEOzpCXmzusXw 0EhTmonoIoYeKOtzBGGSYv/rsqmCbiCmPWvlmuTE+zY87ph5lAEtHHm74v+El/OK 0e28lK6zOM1x0ZOsOiDFT+Q7Q5cMuA6iQMHj0uyRkWJe+Tb7KenTGGfvXJ+aXZ8y uUWLinVluiJ/dkYdqfzfBjS4D3awDIUrWmpgKUR6qq6t7BhG5u96lXGYJ71H0+m+ zu4GDm9do7ajeYw+bk+M+eaG/TtLmPw4En5kVHkFEO/npsJFqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlLY3EJJTL9g8p9mVBjUS83bLIPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvMDE3MTk2N2ItNzNmYS0z MDcxLWFlODMtYWRmMzQwN2Q5YTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvF2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISjk2BPEjyxRj35BvxxkSLYwFrC9GiqWuX3iVtF8tbiXwNFSXr8sT69 LaJSxXkkuiiVzsO0SlYggiRXpG9OOr68xwMK+4qcz5KPbjq3bsEd8PIj02bt1CjL 9oCX8+ddfjkASa2Q2IsQUc4TRdI3GsWp1Pua149A7biqUkn913xtbnEaRNvmbrJv 6hsue1jAuTDxr4bsWx49Cl09moR/q7wtInIc/Dj2oz2wHICi1xWLJwJQHEOrDuOh IUqzduGMtHz45G7GO0HaQccqF0e/MWDl4kEgGBXfvyxfv735MkVNEwLvlzyvNlVn 1QhJJCYL2ZQWOPG9Bg4mg1kFd8LSz/s= -----END CERTIFICATE-----Generated at Mon Mar 2 20:01:54 2026 by rpki-client