$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa File: a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa (raw, json) Hash identifier: JhaqrcPf3aHBFIsG/KT37yL97De+qVHJXLzmhLMYmhw= Subject key identifier: B5:74:A5:1D:88:24:D9:90:75:3C:1F:EC:4A:2B:78:C4:46:3C:BA:05 Certificate issuer: /CN=61e7cca0-e65d-417d-a651-371c91be9c95 Certificate serial: 010D0C9F4328584DB1DAC60E255E8CDDB07A8E80 Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa Signing time: Sat 02 May 2026 01:00:24 +0000 ROA not before: Sat 02 May 2026 01:00:24 +0000 ROA not after: Fri 31 Jul 2026 01:00:24 +0000 asID: 1448 IP address blocks: 156.146.128.0/17 maxlen: 17 158.41.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:da:c6:0e:25:5e:8c:dd:b0:7a:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95 Validity Not Before: May 2 01:00:24 2026 GMT Not After : Jul 31 01:00:24 2026 GMT Subject: CN=9efa14da-09ac-4dc4-8936-e4a0916b8567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ba:be:4b:e0:a5:1e:22:9a:0c:05:4d:a6:26: 8a:69:f9:a1:0d:4f:57:d5:38:46:e9:9e:90:48:60: dd:81:f1:b0:74:ec:09:5a:d0:b2:9e:ca:3c:38:d8: f9:ed:48:d0:6b:00:d0:6c:4c:19:ec:de:64:19:65: 14:2b:bd:df:82:34:31:30:7d:18:3b:9c:89:da:87: 52:bb:8f:5a:92:ab:11:9a:8d:a5:de:fc:b9:c6:a7: 7b:37:3e:5a:91:b0:ef:42:e8:4a:7d:20:b6:ee:70: b4:bd:37:39:d4:7f:d6:4d:a6:af:4e:06:1b:38:aa: c7:10:0b:41:2a:98:e2:33:96:ef:e9:e3:b1:b2:5c: 0f:ae:f5:a2:bc:e7:01:dc:7b:7d:15:9a:a7:e1:c6: 97:59:55:6a:35:0b:9d:87:96:b5:b0:b8:1e:19:b2: 24:2e:a3:b7:49:fb:8b:e5:95:84:9b:30:d0:1d:d0: e5:42:65:bc:8f:3e:2a:2f:24:c6:d6:42:d6:72:d3: ce:a1:4c:86:64:bd:13:27:ce:74:db:0a:26:0d:56: d0:33:93:03:4e:68:e8:03:f2:db:6e:75:9f:9e:52: 80:11:0e:2e:87:36:51:da:86:63:0a:bc:99:aa:bf: e1:f7:23:a5:09:57:a1:1f:86:73:b2:e5:46:e9:ad: 7e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:74:A5:1D:88:24:D9:90:75:3C:1F:EC:4A:2B:78:C4:46:3C:BA:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl X509v3 Authority Key Identifier: keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer sbgp-ipAddrBlock: critical IPv4: 156.146.128.0/17 158.41.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:27:e3:1e:fc:fc:87:b9:52:80:c5:6f:5f:2a:40:a3:95:fb: 6a:46:cd:20:4b:27:91:cf:48:ba:3c:6e:89:d2:0a:ab:44:d1: a1:3b:5f:ec:26:a5:eb:0e:54:2d:ad:56:79:58:f5:8d:c9:d7: 8a:84:a1:e9:d2:44:90:0c:d1:e7:5b:a8:9d:d3:5d:43:1c:52: 01:7b:8a:85:d5:07:94:86:29:b4:68:55:ec:bc:0b:df:87:c0: be:45:4b:48:07:62:5c:22:16:93:15:3d:74:46:a9:68:31:fe: 68:9f:75:05:09:b6:a5:91:61:e2:3b:7b:f5:f1:e6:ce:33:9b: f2:31:eb:d7:aa:66:40:73:2a:a0:49:4b:d2:3c:2a:35:48:eb: 78:a2:9f:56:50:ea:e0:a3:f2:c6:29:ca:95:5a:e2:dc:bb:51: d0:42:c1:9b:87:25:95:4d:70:09:b6:b1:f0:55:1c:9b:d3:52: 94:65:8b:83:16:40:f5:2d:c0:b7:1a:b6:18:66:8f:b5:09:82: e5:4e:5e:76:ae:b8:d2:30:83:67:fc:01:7b:a4:e5:63:79:63: 76:ea:94:7e:b7:4a:eb:a0:3e:c5:8a:7f:92:37:52:5f:66:b1: d2:92:8e:a3:5f:bb:5c:ee:a1:8a:64:eb:08:be:d0:91:c1:f2: da:f5:b9:c8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2x2sYOJV6M3bB6joAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFlN2NjYTAtZTY1ZC00MTdkLWE2NTEtMzcxYzkxYmU5 Yzk1MB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk OWVmYTE0ZGEtMDlhYy00ZGM0LTg5MzYtZTRhMDkxNmI4NTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbq+S+ClHiKaDAVNpiaKafmhDU9X1ThG6Z6Q SGDdgfGwdOwJWtCynso8ONj57UjQawDQbEwZ7N5kGWUUK73fgjQxMH0YO5yJ2odS u49akqsRmo2l3vy5xqd7Nz5akbDvQuhKfSC27nC0vTc51H/WTaavTgYbOKrHEAtB KpjiM5bv6eOxslwPrvWivOcB3Ht9FZqn4caXWVVqNQudh5a1sLgeGbIkLqO3SfuL 5ZWEmzDQHdDlQmW8jz4qLyTG1kLWctPOoUyGZL0TJ8502womDVbQM5MDTmjoA/Lb bnWfnlKAEQ4uhzZR2oZjCryZqr/h9yOlCVehH4ZzsuVG6a1+jQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLV0pR2IJNmQdTwf7EoreMRGPLoFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3 Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFjOTFiZTljOTUvYTFlMjE5ZjEtNGU2Zi0z YjI1LThlNzAtMDBkOTQ5ZmEzOTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjFlN2NjYTAtZTY1ZC00MTdkLWE2 NTEtMzcxYzkxYmU5Yzk1LzYxZTdjY2EwLWU2NWQtNDE3ZC1hNjUxLTM3MWM5MWJl OWM5NS5jcmwwHwYDVR0jBBgwFoAUZKKfsBKjdPIJ4gOO6+LG02MkVyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFj OTFiZTljOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHnJKAAwQH nimAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACsn4x78/Ie5UoDFb18qQKOV+2pGzSBLJ5HPSLo8bonSCqtE 0aE7X+wmpesOVC2tVnlY9Y3J14qEoenSRJAM0edbqJ3TXUMcUgF7ioXVB5SGKbRo Vey8C9+HwL5FS0gHYlwiFpMVPXRGqWgx/mifdQUJtqWRYeI7e/Xx5s4zm/Ix69eq ZkBzKqBJS9I8KjVI63iin1ZQ6uCj8sYpypVa4ty7UdBCwZuHJZVNcAm2sfBVHJvT UpRli4MWQPUtwLcathhmj7UJguVOXnauuNIwg2f8AXuk5WN5Y3bqlH63SuugPsWK f5I3Ul9msdKSjqNfu1zuoYpk6wi+0JHB8tr1ucg= -----END CERTIFICATE-----Generated at Wed May 13 12:20:00 2026 by rpki-client