$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/b845b639-74a8-302e-ba71-b40514d5e445.roa File: b845b639-74a8-302e-ba71-b40514d5e445.roa (raw, json) Hash identifier: NbAI7JMUXYlYxkvOsStq+a6zv9u6XDK2ATvYDcwhYgQ= Subject key identifier: D4:6D:23:76:15:7A:15:F1:D9:E3:12:2D:AF:25:7A:0A:54:19:F0:20 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F4328584CAA270AA21AF3AC9BE82F6B20 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/b845b639-74a8-302e-ba71-b40514d5e445.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 14618 IP address blocks: 170.176.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:0a:a2:1a:f3:ac:9b:e8:2f:6b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=17520fad-7ce4-45db-851f-ff2d2108a243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f6:b2:ff:24:b0:2c:70:ae:d1:3c:56:ee:55: 69:11:ab:cf:53:61:52:a4:61:68:24:d6:1b:e6:03: 3e:d5:cc:18:5d:95:1d:86:89:e2:3f:2c:50:80:b5: 4b:3b:fe:c1:ad:5c:d8:18:4d:ab:90:16:cd:23:d5: d8:72:ff:48:4b:c1:65:e6:66:49:46:44:92:e8:0c: 12:b6:2a:ed:bc:de:12:bf:e6:67:1a:ae:7d:8f:27: a1:91:ab:62:de:35:e0:dc:1c:e1:33:80:8b:65:54: d9:8e:ee:d5:a4:66:0f:69:5f:08:f4:7e:af:6b:f6: 5a:58:38:7e:f7:f4:cc:07:87:8d:06:a3:35:52:b9: f8:27:9e:ac:e5:91:7a:a0:a4:bd:80:ab:63:09:64: 36:48:fa:f7:17:b6:4d:6e:86:f9:c3:52:52:1c:51: 74:f3:8a:10:ed:85:6d:95:c5:80:cd:8c:4f:96:5d: 7d:a9:c7:85:db:be:ee:67:2e:eb:19:0e:b2:3c:9c: cd:88:04:78:1f:94:77:a3:d0:7d:b8:05:a0:e1:66: 8a:32:dd:58:57:c1:30:d4:2a:a6:1b:7a:b6:c4:60: 5b:73:c6:5e:8c:9a:7d:da:de:11:22:c6:f8:13:dc: dd:85:96:11:71:e3:cc:b0:a4:48:22:dd:2c:1a:84: c9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6D:23:76:15:7A:15:F1:D9:E3:12:2D:AF:25:7A:0A:54:19:F0:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/b845b639-74a8-302e-ba71-b40514d5e445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:43:98:33:88:71:8a:e6:17:e3:c1:21:09:6e:a6:14:1f:9a: 7f:40:2a:9b:c0:77:67:7d:07:1b:57:45:6d:d6:dd:9f:f4:e0: 23:06:af:c6:5b:7a:33:49:fc:97:c7:ef:8d:f4:df:ac:48:9f: 54:6e:27:c3:31:37:f5:49:ad:8f:f6:fb:b1:5f:17:db:46:76: bb:a1:07:c3:a3:a9:06:dc:40:af:df:3c:c2:37:48:ea:d6:96: a3:d9:ed:94:66:b2:b7:0f:10:89:f5:c6:2c:6e:2a:48:17:59: 7c:5e:2d:19:72:23:fd:27:ef:24:f7:68:21:98:41:f8:96:c0: d9:fc:0f:3e:26:19:9f:c8:c0:48:97:3d:59:ea:ce:36:b3:75: 62:03:d5:3d:b9:5c:8d:30:ed:fa:68:20:84:c2:d0:0a:b5:1c: 8b:67:1c:36:27:af:d6:86:da:0f:f8:58:6a:29:cf:13:2f:ca: 2c:58:a4:0e:4e:13:27:0d:fb:75:9e:59:c6:24:ef:d0:e9:ff: cd:52:23:1c:b7:46:da:87:0d:4f:73:1e:99:45:73:6b:60:5c: ee:43:c9:d3:7d:5a:a0:e8:02:05:79:70:30:f0:8c:9c:83:b3: fe:fc:12:98:0a:41:21:53:58:ab:96:42:0c:0d:76:44:7b:7f: f5:98:5d:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJwqiGvOsm+gvayAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk MTc1MjBmYWQtN2NlNC00NWRiLTg1MWYtZmYyZDIxMDhhMjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPay/ySwLHCu0TxW7lVpEavPU2FSpGFoJNYb 5gM+1cwYXZUdhoniPyxQgLVLO/7BrVzYGE2rkBbNI9XYcv9IS8Fl5mZJRkSS6AwS tirtvN4Sv+ZnGq59jyehkati3jXg3BzhM4CLZVTZju7VpGYPaV8I9H6va/ZaWDh+ 9/TMB4eNBqM1Urn4J56s5ZF6oKS9gKtjCWQ2SPr3F7ZNbob5w1JSHFF084oQ7YVt lcWAzYxPll19qceF277uZy7rGQ6yPJzNiAR4H5R3o9B9uAWg4WaKMt1YV8Ew1Cqm G3q2xGBbc8ZejJp92t4RIsb4E9zdhZYRcePMsKRIIt0sGoTJvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRtI3YVehXx2eMSLa8legpUGfAgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvYjg0NWI2MzktNzRhOC0z MDJlLWJhNzEtYjQwNTE0ZDVlNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBDmDOIcYrmF+PBIQluphQfmn9AKpvAd2d9BxtXRW3W3Z/04CMGr8Zb ejNJ/JfH743036xIn1RuJ8MxN/VJrY/2+7FfF9tGdruhB8OjqQbcQK/fPMI3SOrW lqPZ7ZRmsrcPEIn1xixuKkgXWXxeLRlyI/0n7yT3aCGYQfiWwNn8Dz4mGZ/IwEiX PVnqzjazdWID1T25XI0w7fpoIITC0Aq1HItnHDYnr9aG2g/4WGopzxMvyixYpA5O EycN+3WeWcYk79Dp/81SIxy3RtqHDU9zHplFc2tgXO5DydN9WqDoAgV5cDDwjJyD s/78EpgKQSFTWKuWQgwNdkR7f/WYXSQ= -----END CERTIFICATE-----Generated at Sun Mar 1 20:48:47 2026 by rpki-client