$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/2950fd60-f5e3-383f-8bdb-3eb89a676bc5.roa File: 2950fd60-f5e3-383f-8bdb-3eb89a676bc5.roa (raw, json) Hash identifier: 8DBIBEbJBFZngr/KJfQ3HZBrfV5eZV+tIhGo8NCAGgI= Subject key identifier: 97:4B:4F:51:D3:51:38:37:09:38:B0:37:2F:2E:12:B9:F6:49:0F:3D Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F4328584D2BDA361FDD4D781F8FA06D00 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/2950fd60-f5e3-383f-8bdb-3eb89a676bc5.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 29016 IP address blocks: 159.182.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:36:1f:dd:4d:78:1f:8f:a0:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=e58c4eb0-de13-41ef-9362-763e3dd545f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1e:bc:05:ae:f1:33:b3:52:db:46:cf:7c:3f: 1c:3f:13:8b:26:e0:44:05:ef:df:2e:7a:af:69:53: 9a:8b:10:ce:2a:8a:59:46:5d:47:90:21:a0:b2:af: 85:ee:f3:42:91:88:c5:1b:63:25:1b:3d:58:b1:19: 4e:34:93:87:d7:eb:9b:2b:23:06:42:2e:bf:c6:a2: 84:6d:03:b3:44:3c:be:01:ab:ba:e1:2d:b7:ea:86: ae:32:15:54:f7:33:34:5f:82:8b:ca:d8:94:19:6b: 6d:8c:6c:9e:91:22:cb:0d:a3:52:b0:ff:9e:e2:b7: 93:f6:95:a4:76:c7:e0:26:fd:e9:6c:a5:9a:54:a5: 75:0f:1f:52:98:a5:6d:d0:f5:95:fb:eb:d8:ea:5c: 79:c2:7d:96:53:ac:32:bd:4b:f6:ca:32:76:14:57: 9f:4f:75:93:33:a8:b8:9f:36:3b:ab:21:1c:5b:e3: 22:2c:45:83:83:fe:58:53:47:30:cc:da:64:ea:db: dd:55:dd:26:10:20:f2:1a:7d:a5:49:ee:7f:f4:7e: 3b:0e:14:53:c1:45:6f:d1:d4:c4:8b:89:17:43:1c: 27:38:c2:86:75:32:8a:9a:e1:2e:7a:0d:f5:2a:80: 18:e7:a6:6b:77:fd:ff:2a:65:ae:21:59:97:c7:3f: 10:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4B:4F:51:D3:51:38:37:09:38:B0:37:2F:2E:12:B9:F6:49:0F:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/2950fd60-f5e3-383f-8bdb-3eb89a676bc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 159.182.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:19:3a:30:db:b0:94:f0:ea:84:4d:1c:e2:d5:8a:e3:46:31: a3:0c:21:f0:f9:f2:10:c0:2a:29:46:2a:d4:8c:f1:9e:c9:f2: 01:70:76:86:c5:4b:f8:29:f3:e1:dd:b7:c7:e7:c0:62:da:61: d7:51:a9:a9:59:4f:66:69:b0:cb:40:c0:c1:25:61:d9:bd:dd: a3:29:94:d0:64:b3:78:51:df:85:13:34:be:41:72:f6:37:54: 6f:7b:fe:67:e2:51:19:bc:83:0c:96:ee:72:d7:b1:7d:15:a3: db:53:97:a1:8e:84:32:ae:02:a0:93:fa:43:03:79:43:3b:69: 93:91:d6:bf:a2:54:eb:35:a8:d2:27:2e:4f:0a:32:18:95:a0: 27:88:b8:06:48:cd:35:4c:2a:3f:6d:12:fc:80:4b:90:f9:9c: b2:5b:4b:0d:cf:5a:69:e6:a1:40:6b:a8:2a:cc:a2:a4:10:b6: ea:ac:3a:a2:a4:32:b4:82:07:91:e9:f3:ce:96:3d:df:5f:6a: f6:72:8c:24:66:fd:8e:ab:dd:a0:cc:8e:1d:ff:eb:ef:1f:ec: 5f:35:cb:1b:d4:e5:51:8a:a3:13:d4:3a:b0:44:53:8b:e0:3a: e4:7c:5a:8c:7d:98:5b:0a:41:ab:a6:4a:f5:c5:c8:ea:7e:0f: fd:e2:26:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jYf3U14H4+gbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZTU4YzRlYjAtZGUxMy00MWVmLTkzNjItNzYzZTNkZDU0NWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB68Ba7xM7NS20bPfD8cPxOLJuBEBe/fLnqv aVOaixDOKopZRl1HkCGgsq+F7vNCkYjFG2MlGz1YsRlONJOH1+ubKyMGQi6/xqKE bQOzRDy+Aau64S236oauMhVU9zM0X4KLytiUGWttjGyekSLLDaNSsP+e4reT9pWk dsfgJv3pbKWaVKV1Dx9SmKVt0PWV++vY6lx5wn2WU6wyvUv2yjJ2FFefT3WTM6i4 nzY7qyEcW+MiLEWDg/5YU0cwzNpk6tvdVd0mECDyGn2lSe5/9H47DhRTwUVv0dTE i4kXQxwnOMKGdTKKmuEueg31KoAY56Zrd/3/KmWuIVmXxz8Q5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdLT1HTUTg3CTiwNy8uErn2SQ89MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvMjk1MGZkNjAtZjVlMy0z ODNmLThiZGItM2ViODlhNjc2YmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn7YOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgZOjDbsJTw6oRNHOLViuNGMaMMIfD58hDAKilGKtSM8Z7J8gFwdobF S/gp8+Hdt8fnwGLaYddRqalZT2ZpsMtAwMElYdm93aMplNBks3hR34UTNL5BcvY3 VG97/mfiURm8gwyW7nLXsX0Vo9tTl6GOhDKuAqCT+kMDeUM7aZOR1r+iVOs1qNIn Lk8KMhiVoCeIuAZIzTVMKj9tEvyAS5D5nLJbSw3PWmnmoUBrqCrMoqQQtuqsOqKk MrSCB5Hp886WPd9favZyjCRm/Y6r3aDMjh3/6+8f7F81yxvU5VGKoxPUOrBEU4vg OuR8Wox9mFsKQaumSvXFyOp+D/3iJrA= -----END CERTIFICATE-----Generated at Thu Mar 26 19:32:07 2026 by rpki-client