$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/c7ad1741-148a-37a7-bc3b-bb1f5db943b4.roa File: c7ad1741-148a-37a7-bc3b-bb1f5db943b4.roa (raw, json) Hash identifier: 20OOkZTfpbG4c2mp+SCXSniQ/Qrmc9KKsH3OT4hFq2M= Subject key identifier: 61:92:B5:EA:71:5B:F7:88:99:7F:74:7A:89:6E:CF:A7:B8:44:F1:32 Certificate issuer: /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Certificate serial: 010D0C9F4328584CA5F73F8AF9D0C4CD2C0E04A0 Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/c7ad1741-148a-37a7-bc3b-bb1f5db943b4.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 62874 IP address blocks: 167.160.40.0/22 maxlen: 23 167.160.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:3f:8a:f9:d0:c4:cd:2c:0e:04:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=b01973ab-53da-409a-875c-5ec347078e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:27:1b:69:51:0d:62:99:43:a4:de:4c:11:5e: e3:f3:13:fd:b3:cc:c6:5d:c8:5b:7f:d4:0d:2d:37: 67:97:ff:59:b3:15:dc:78:46:83:9f:87:55:7a:3e: 1d:55:1e:72:a2:62:8a:83:e4:20:5f:a1:8c:30:1d: 08:1f:95:c8:a9:3b:c3:d4:99:bd:ab:40:ed:60:dc: 7f:b5:46:46:27:ac:3e:fe:7c:5c:a9:ad:14:d4:aa: 9b:c4:5e:91:2b:fc:64:61:0f:8a:c6:50:de:2f:fa: 22:ea:49:93:fc:4a:75:8b:61:94:34:83:20:94:a9: c1:01:64:d7:f1:4c:55:a0:32:ba:8f:76:25:75:31: 49:78:70:38:2a:b3:8f:b3:5e:61:54:e0:7d:fa:26: c5:e0:d1:e4:3e:50:2d:06:27:e2:8e:2c:c5:cf:b1: 38:93:8c:e1:41:bb:5d:c4:23:af:5e:b8:2a:11:f3: bc:f9:f0:b1:a6:8b:0b:ba:99:0c:e6:61:47:7b:35: 01:1b:b2:a2:68:c6:b0:20:d7:97:24:6d:ce:26:7b: 77:2e:f9:27:e6:a9:b3:c4:3c:4d:c5:4d:17:19:e8: fe:db:a5:8f:ba:d4:bd:ea:c5:65:34:8c:9d:ee:28: d3:36:0e:56:80:10:f9:a9:73:1e:5d:e5:12:55:c9: 28:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:92:B5:EA:71:5B:F7:88:99:7F:74:7A:89:6E:CF:A7:B8:44:F1:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/c7ad1741-148a-37a7-bc3b-bb1f5db943b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl X509v3 Authority Key Identifier: keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer sbgp-ipAddrBlock: critical IPv4: 167.160.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:0c:eb:54:3e:38:c6:2b:7a:f0:3d:19:5f:20:97:14:e2:63: 0b:eb:d5:63:04:dc:f0:98:0b:e4:16:bb:56:14:5e:20:1b:5b: 42:4c:cb:2d:66:ac:c3:6b:8d:ed:12:57:7c:a0:05:bc:39:79: d1:74:39:a0:d7:d8:35:de:ba:0e:0a:2b:e7:cc:0d:c0:39:9f: 5b:ad:d0:8d:f0:cf:56:75:10:8f:a9:d1:9e:b2:e9:b5:7d:bb: ba:50:75:0f:d0:8a:e4:03:66:62:7e:eb:31:92:b3:ac:a0:98: c8:64:90:45:5d:0c:00:87:b5:3d:73:61:c3:1d:7c:94:78:89: 39:40:cb:70:95:6a:88:38:9f:68:21:b0:7f:05:b3:63:6c:b7: a1:74:79:24:7c:47:6f:3e:46:e1:fc:29:76:ed:49:09:2a:d8: fd:61:7b:7d:68:5c:91:88:c1:c8:33:c9:70:1d:00:f1:47:96: 21:22:39:99:80:13:3f:2c:33:48:b9:ed:54:69:cd:64:08:16: 05:c3:0a:bf:2f:f6:9e:24:b6:83:ba:17:02:64:99:e4:84:ae: de:04:0f:ef:63:0d:81:4b:e7:c9:84:82:e3:1c:8e:ed:f7:b0: df:7a:70:cd:e1:81:0c:63:05:4a:d7:34:78:98:b2:c1:73:9f: 2a:ca:b7:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9z+K+dDEzSwOBKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi ZmUyMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk YjAxOTczYWItNTNkYS00MDlhLTg3NWMtNWVjMzQ3MDc4ZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAricbaVENYplDpN5MEV7j8xP9s8zGXchbf9QN LTdnl/9ZsxXceEaDn4dVej4dVR5yomKKg+QgX6GMMB0IH5XIqTvD1Jm9q0DtYNx/ tUZGJ6w+/nxcqa0U1KqbxF6RK/xkYQ+KxlDeL/oi6kmT/Ep1i2GUNIMglKnBAWTX 8UxVoDK6j3YldTFJeHA4KrOPs15hVOB9+ibF4NHkPlAtBifijizFz7E4k4zhQbtd xCOvXrgqEfO8+fCxposLupkM5mFHezUBG7KiaMawINeXJG3OJnt3Lvkn5qmzxDxN xU0XGej+26WPutS96sVlNIyd7ijTNg5WgBD5qXMeXeUSVckoEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGStepxW/eImX90eoluz6e4RPEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5 OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvYzdhZDE3NDEtMTQ4YS0z N2E3LWJjM2ItYmIxZjVkYjk0M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4 YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl N2YxOGJmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDp6AoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEM61Q+OMYrevA9GV8glxTiYwvr1WME3PCYC+QWu1YUXiAbW0JMyy1m rMNrje0SV3ygBbw5edF0OaDX2DXeug4KK+fMDcA5n1ut0I3wz1Z1EI+p0Z6y6bV9 u7pQdQ/QiuQDZmJ+6zGSs6ygmMhkkEVdDACHtT1zYcMdfJR4iTlAy3CVaog4n2gh sH8Fs2Nst6F0eSR8R28+RuH8KXbtSQkq2P1he31oXJGIwcgzyXAdAPFHliEiOZmA Ez8sM0i57VRpzWQIFgXDCr8v9p4ktoO6FwJkmeSErt4ED+9jDYFL58mEguMcju33 sN96cM3hgQxjBUrXNHiYssFznyrKt5M= -----END CERTIFICATE-----Generated at Mon Mar 2 08:51:48 2026 by rpki-client