$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/186ed1c4-1800-342a-a23a-48f3f305d0cc.roa File: 186ed1c4-1800-342a-a23a-48f3f305d0cc.roa (raw, json) Hash identifier: sixqqg+Zi7rB18dK+pvYDwi4RiyQS3y0rmyB6Kh7+Qw= Subject key identifier: 89:49:CF:DD:3E:8F:3E:10:A0:39:3B:D4:D3:D6:94:04:D3:F8:1B:2F Certificate issuer: /CN=e8253a5c-5822-44df-8846-56b6c0450bbe Certificate serial: 010D0C9F4328584D237A2E2E5412E03647A3FA80 Authority key identifier: 8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/186ed1c4-1800-342a-a23a-48f3f305d0cc.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 158.222.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:2e:2e:54:12:e0:36:47:a3:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8253a5c-5822-44df-8846-56b6c0450bbe Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=f78da516-2acc-4537-9dc1-a7d7d11d0a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6d:b1:2d:15:89:83:c7:9c:fe:0d:b0:fa:a0: 99:39:67:60:65:e1:7c:9a:cb:07:d1:51:93:c8:20: 2d:a6:29:ab:fb:31:fc:a5:31:7a:f3:4a:b6:50:de: 77:1f:13:b4:85:05:20:82:8f:9f:d9:5f:61:53:a3: e5:0f:de:b6:af:7e:6c:97:cd:fe:c0:82:d1:6e:81: 97:75:5e:d5:64:d3:62:00:06:fe:03:85:75:1c:3c: 8a:85:aa:f0:f7:23:8b:3e:10:d8:f5:9b:e0:ba:2d: 76:cc:07:ca:03:04:70:49:7a:4a:2a:8d:ae:9d:36: 0d:fe:5b:be:5d:de:56:f1:99:6c:63:2f:73:00:08: 5c:ef:46:2b:99:30:f2:b0:47:c5:97:46:77:4f:fc: 04:23:69:9f:6e:84:6c:6b:eb:bb:c9:e1:18:dc:c4: 77:9e:bd:c4:4e:3c:a5:42:e8:35:fd:69:79:0c:00: 38:2d:5d:7e:18:3b:d8:42:a6:ce:c3:97:9e:71:a1: a7:86:1f:59:5c:04:60:44:fa:5b:57:a1:d9:c9:65: 27:9b:48:37:cc:02:20:76:dd:3c:92:23:43:1a:a7: 63:e3:2c:c3:59:b9:21:39:30:6f:f2:25:ce:82:2c: e9:a7:06:14:68:0e:31:74:28:79:a1:bf:8f:ff:72: 93:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:49:CF:DD:3E:8F:3E:10:A0:39:3B:D4:D3:D6:94:04:D3:F8:1B:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/186ed1c4-1800-342a-a23a-48f3f305d0cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl X509v3 Authority Key Identifier: keyid:8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer sbgp-ipAddrBlock: critical IPv4: 158.222.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:e0:db:81:4d:98:70:e4:bc:be:62:78:bb:3b:57:a3:3a:e5: 87:5e:4f:75:ee:bf:4b:f9:52:73:01:f7:15:61:f2:4e:35:04: dc:25:8f:15:c9:8e:70:f3:0c:8c:65:6d:ba:16:d2:ca:e4:74: 3d:ef:8c:54:45:ca:70:15:36:7e:d7:1c:67:75:05:35:82:1f: 7d:a9:41:26:58:c5:f1:ab:05:ee:05:79:51:47:49:e5:35:95: 1b:c5:82:98:8d:87:48:b7:db:f9:2f:e1:75:77:9b:c8:0b:2b: 08:c8:b7:0d:08:ec:26:61:fd:4f:76:bd:8d:64:0c:36:61:6c: f2:c2:1f:bb:b7:b2:44:7f:4f:2d:9d:f1:00:07:39:d8:9a:5f: d8:74:fe:f5:28:2e:b6:f4:4b:ea:4f:45:59:95:fd:ec:79:df: 30:67:90:1e:5e:04:ee:5b:37:c4:e8:8c:82:34:e3:96:54:0f: 9a:83:fb:3b:7e:ce:10:88:92:ff:af:34:0d:ea:59:14:36:19: b3:f6:40:67:b3:02:b5:5b:84:51:82:0c:5f:97:6d:a0:03:98: 59:4a:81:1a:74:39:12:de:89:7d:12:4c:36:22:0f:1d:a7:3b: 9e:ce:f6:de:a9:0b:bf:ed:78:2e:f3:f2:2b:4d:f4:ce:c9:c9: dc:7e:34:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jei4uVBLgNkej+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTgyNTNhNWMtNTgyMi00NGRmLTg4NDYtNTZiNmMwNDUw YmJlMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk Zjc4ZGE1MTYtMmFjYy00NTM3LTlkYzEtYTdkN2QxMWQwYTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG2xLRWJg8ec/g2w+qCZOWdgZeF8mssH0VGT yCAtpimr+zH8pTF680q2UN53HxO0hQUggo+f2V9hU6PlD962r35sl83+wILRboGX dV7VZNNiAAb+A4V1HDyKharw9yOLPhDY9Zvgui12zAfKAwRwSXpKKo2unTYN/lu+ Xd5W8ZlsYy9zAAhc70YrmTDysEfFl0Z3T/wEI2mfboRsa+u7yeEY3MR3nr3ETjyl Qug1/Wl5DAA4LV1+GDvYQqbOw5eecaGnhh9ZXARgRPpbV6HZyWUnm0g3zAIgdt08 kiNDGqdj4yzDWbkhOTBv8iXOgizppwYUaA4xdCh5ob+P/3KTpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlJz90+jz4QoDk71NPWlATT+BsvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lODI1 M2E1Yy01ODIyLTQ0ZGYtODg0Ni01NmI2YzA0NTBiYmUvMTg2ZWQxYzQtMTgwMC0z NDJhLWEyM2EtNDhmM2YzMDVkMGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTgyNTNhNWMtNTgyMi00NGRmLTg4 NDYtNTZiNmMwNDUwYmJlL2U4MjUzYTVjLTU4MjItNDRkZi04ODQ2LTU2YjZjMDQ1 MGJiZS5jcmwwHwYDVR0jBBgwFoAUjARRQe9lRA2Nvxc4Mhp+c0pN6gowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lODI1M2E1Yy01ODIyLTQ0ZGYtODg0Ni01NmI2 YzA0NTBiYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnt5QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3g24FNmHDkvL5ieLs7V6M65YdeT3Xuv0v5UnMB9xVh8k41BNwljxXJ jnDzDIxlbboW0srkdD3vjFRFynAVNn7XHGd1BTWCH32pQSZYxfGrBe4FeVFHSeU1 lRvFgpiNh0i32/kv4XV3m8gLKwjItw0I7CZh/U92vY1kDDZhbPLCH7u3skR/Ty2d 8QAHOdiaX9h0/vUoLrb0S+pPRVmV/ex53zBnkB5eBO5bN8TojII045ZUD5qD+zt+ zhCIkv+vNA3qWRQ2GbP2QGezArVbhFGCDF+XbaADmFlKgRp0ORLeiX0STDYiDx2n O57O9t6pC7/teC7z8itN9M7Jydx+NAs= -----END CERTIFICATE-----Generated at Thu Mar 26 19:50:48 2026 by rpki-client