$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/5584634c-07a6-3f85-9f96-cebd2ae0742b.roa File: 5584634c-07a6-3f85-9f96-cebd2ae0742b.roa (raw, json) Hash identifier: 3C6We4v8HSMBT8xUyz5quK63q7N4m5o97e4YllKX1Qc= Subject key identifier: C3:B4:1C:80:E7:08:6B:D2:C6:F9:16:E6:11:54:4A:37:25:81:0C:E0 Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F4328584D4D5A5FB6C5E7940DC99C4FA0 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/5584634c-07a6-3f85-9f96-cebd2ae0742b.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 397865 IP address blocks: 216.168.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:5f:b6:c5:e7:94:0d:c9:9c:4f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=157fd0ac-e735-4ad8-97af-dd88fa477ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a0:1a:a0:5c:12:db:4f:e5:b1:50:8b:a0:e9: eb:6e:b9:93:44:03:7c:f3:dd:04:84:ef:d3:3e:cf: 90:5e:db:7f:55:83:f3:6b:4c:43:77:59:51:00:55: f2:3b:1e:16:c3:46:b8:08:4a:23:e1:1f:cf:85:27: 7e:b7:9a:df:90:0e:d8:0b:52:e0:52:2b:1b:33:e1: 59:49:29:b9:1c:3e:7a:b7:47:61:d6:6c:00:b0:d9: 98:12:01:b9:64:69:2d:f2:64:ff:0a:f3:a1:99:3c: 03:41:8b:65:b5:25:4e:9f:fd:ca:bd:51:64:a7:aa: 74:29:e9:a8:da:32:12:33:b1:ac:27:52:2b:13:2d: 38:3e:ff:e2:16:80:15:69:7d:71:53:53:04:fd:67: 6e:fc:b4:10:8b:31:12:96:9e:64:73:b1:e5:99:5c: a1:17:c1:4f:77:47:5c:75:09:08:9d:39:a1:e0:3a: f6:20:f6:41:0e:ff:f8:1f:98:79:4d:cd:59:43:47: fc:02:38:0f:d5:28:24:91:60:45:26:e4:6d:26:32: 33:aa:be:1e:11:c9:80:5e:7a:4e:03:64:a2:a9:2c: 48:70:78:3f:86:1c:ce:08:e6:fc:0f:57:e0:72:73: 6d:10:5b:8b:af:57:4a:b2:fd:6c:96:27:9b:06:b4: db:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B4:1C:80:E7:08:6B:D2:C6:F9:16:E6:11:54:4A:37:25:81:0C:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/5584634c-07a6-3f85-9f96-cebd2ae0742b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 216.168.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:c5:fc:8f:14:e2:96:14:2f:8f:ff:0a:ae:e3:29:4f:08:70: 9b:79:a2:1b:b8:0d:82:95:f3:b6:bd:da:4e:ab:a0:9f:81:a8: 94:f3:8c:d2:e6:ba:80:1e:25:ff:5b:1c:ed:48:e8:d4:96:fb: 8c:91:6c:1d:e0:34:a8:5d:25:6b:19:96:82:78:8f:f4:3f:46: 4b:ec:df:94:49:b3:60:14:dd:03:e4:6d:26:03:bc:9e:2e:bc: b3:2d:87:ad:d8:a6:9f:27:df:77:41:b9:86:f5:86:22:ea:08: 14:0d:c5:f9:eb:32:c3:ad:01:a8:d2:95:d2:13:02:ec:3a:c0: bd:b7:ee:2b:2b:d7:48:54:c5:96:80:e0:33:f0:c9:3d:aa:4d: e8:ae:e1:f8:13:d4:ad:77:4b:0c:f2:19:76:23:54:9d:cd:58: 1a:5d:14:a8:40:3e:d6:cb:4c:27:70:20:34:0a:e1:89:d5:39: d9:f2:aa:6c:f7:89:07:14:43:1f:c1:69:a2:df:dc:21:a2:ac: 64:ca:58:b1:84:13:02:5f:d8:2b:4c:72:cc:3c:79:70:27:72: d4:2d:58:b5:75:22:85:85:60:b9:a2:38:03:2d:8c:98:94:3d: 85:5f:20:77:fe:c5:79:17:06:4d:76:12:a0:9e:0a:7a:da:0f: f8:d8:55:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWl+2xeeUDcmcT6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk MTU3ZmQwYWMtZTczNS00YWQ4LTk3YWYtZGQ4OGZhNDc3YWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qAaoFwS20/lsVCLoOnrbrmTRAN8890EhO/T Ps+QXtt/VYPza0xDd1lRAFXyOx4Ww0a4CEoj4R/PhSd+t5rfkA7YC1LgUisbM+FZ SSm5HD56t0dh1mwAsNmYEgG5ZGkt8mT/CvOhmTwDQYtltSVOn/3KvVFkp6p0Kemo 2jISM7GsJ1IrEy04Pv/iFoAVaX1xU1ME/Wdu/LQQizESlp5kc7HlmVyhF8FPd0dc dQkInTmh4Dr2IPZBDv/4H5h5Tc1ZQ0f8AjgP1SgkkWBFJuRtJjIzqr4eEcmAXnpO A2SiqSxIcHg/hhzOCOb8D1fgcnNtEFuLr1dKsv1sliebBrTbLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMO0HIDnCGvSxvkW5hFUSjclgQzgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvNTU4NDYzNGMtMDdhNi0z Zjg1LTlmOTYtY2ViZDJhZTA3NDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHF/I8U4pYUL4//Cq7jKU8IcJt5ohu4DYKV87a92k6roJ+BqJTzjNLm uoAeJf9bHO1I6NSW+4yRbB3gNKhdJWsZloJ4j/Q/Rkvs35RJs2AU3QPkbSYDvJ4u vLMth63Ypp8n33dBuYb1hiLqCBQNxfnrMsOtAajSldITAuw6wL237isr10hUxZaA 4DPwyT2qTeiu4fgT1K13SwzyGXYjVJ3NWBpdFKhAPtbLTCdwIDQK4YnVOdnyqmz3 iQcUQx/BaaLf3CGirGTKWLGEEwJf2CtMcsw8eXAnctQtWLV1IoWFYLmiOAMtjJiU PYVfIHf+xXkXBk12EqCeCnraD/jYVWU= -----END CERTIFICATE-----Generated at Sun Apr 19 10:32:50 2026 by rpki-client