$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/5e450465-9ac7-337a-986e-032f3f81cf20.roa File: 5e450465-9ac7-337a-986e-032f3f81cf20.roa (raw, json) Hash identifier: QWj8gCj4IQLnPid4BPfWiRfiDmFzMz0Noab28xe7s4M= Subject key identifier: 2D:53:97:4C:59:C2:D0:77:64:CD:B2:CB:16:C9:36:CE:08:24:B8:FD Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F4328584D27AAC2BB50B61BF6C8D8C9C0 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/5e450465-9ac7-337a-986e-032f3f81cf20.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 9823 IP address blocks: 159.182.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:c2:bb:50:b6:1b:f6:c8:d8:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=c096d22b-5c8f-4ca9-9850-b1b538d9fa95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fc:6b:d3:c3:28:aa:c9:48:f0:18:57:9b:df: ce:8f:6b:ba:5e:38:de:42:91:41:07:b1:ee:4f:26: 7d:c1:7f:16:58:4a:a7:91:04:69:3e:07:bd:c4:98: e9:5d:6b:1f:c9:fd:22:13:fc:e2:81:2d:4d:69:83: b1:8d:96:02:e3:fe:ab:45:3e:53:03:ec:01:4d:46: ba:eb:8f:87:67:33:0e:59:90:13:da:14:81:17:15: 63:0e:23:cb:9a:6b:b1:e6:78:bf:f5:f1:f3:93:17: b6:2e:17:89:5b:fc:b3:cf:b7:bb:d9:ca:be:97:e3: ff:55:ec:c6:8d:8b:7b:b1:67:c1:aa:7c:20:ed:64: 1e:89:e2:e5:23:86:47:50:ab:93:12:2a:12:92:32: 93:56:7d:bf:f6:c5:3c:30:3d:89:c8:6c:bb:c5:53: d5:d1:db:b0:2b:a2:e0:67:61:96:b3:16:b9:28:4d: 9b:a8:81:22:51:1a:93:33:b0:a0:39:14:e4:f3:8f: 01:19:05:8e:92:c2:15:e8:2d:c8:e2:5b:41:d8:3e: 8a:ff:a6:8d:e9:2d:8d:d0:d7:bb:11:bc:2b:79:8f: aa:a2:29:c7:49:82:2f:b2:42:24:75:a0:75:d0:94: 3d:2c:0a:da:a7:e6:bc:66:f6:e4:f0:22:25:eb:a7: 50:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:53:97:4C:59:C2:D0:77:64:CD:B2:CB:16:C9:36:CE:08:24:B8:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/5e450465-9ac7-337a-986e-032f3f81cf20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 159.182.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:41:ec:8e:be:9d:6b:de:a8:19:da:48:df:dc:b0:ac:37:1e: d7:b9:11:34:7e:c6:cb:82:e4:e6:c6:36:b0:6b:55:cb:f7:4d: df:9f:d7:cf:0a:4b:d4:95:84:27:69:b3:3d:85:16:5f:bf:a9: d7:b0:32:a1:5c:4c:6f:ab:c8:d3:10:68:56:a0:cd:fe:ad:af: 52:4f:f9:e0:3c:c0:a5:a5:21:c8:a3:ad:28:2c:91:96:7b:26: 58:e7:42:b2:53:6e:31:e1:8c:1e:42:bf:3a:c6:2e:a4:c9:ed: 75:33:99:fa:be:a1:bd:4a:60:66:0b:a5:66:ba:81:b7:43:a0: 45:72:42:b8:32:a6:ef:da:b5:42:79:12:2e:59:9c:9c:f4:2c: 14:41:1a:40:e4:6c:5b:b7:32:06:90:7c:1e:f2:d6:71:97:eb: fa:70:7d:97:35:77:12:30:b7:d1:42:ce:e7:f1:03:24:f2:85: 1d:f1:80:33:e6:0e:88:63:b1:42:63:60:bc:d5:d1:88:c0:0c: a2:bd:37:ba:39:ea:a0:67:97:03:6b:3e:c8:b2:92:88:3d:cf: 54:1c:be:aa:7d:46:f3:53:96:cf:fd:20:39:a1:7e:f5:32:4a: 6e:67:cf:4d:d5:02:b3:3e:d1:30:36:5e:94:96:4f:cb:88:ba: 61:f8:b1:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqsK7ULYb9sjYycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YzA5NmQyMmItNWM4Zi00Y2E5LTk4NTAtYjFiNTM4ZDlmYTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/xr08MoqslI8BhXm9/Oj2u6XjjeQpFBB7Hu TyZ9wX8WWEqnkQRpPge9xJjpXWsfyf0iE/zigS1NaYOxjZYC4/6rRT5TA+wBTUa6 64+HZzMOWZAT2hSBFxVjDiPLmmux5ni/9fHzkxe2LheJW/yzz7e72cq+l+P/VezG jYt7sWfBqnwg7WQeieLlI4ZHUKuTEioSkjKTVn2/9sU8MD2JyGy7xVPV0duwK6Lg Z2GWsxa5KE2bqIEiURqTM7CgORTk848BGQWOksIV6C3I4ltB2D6K/6aN6S2N0Ne7 EbwreY+qoinHSYIvskIkdaB10JQ9LArap+a8Zvbk8CIl66dQwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1Tl0xZwtB3ZM2yyxbJNs4IJLj9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvNWU0NTA0NjUtOWFjNy0z MzdhLTk4NmUtMDMyZjNmODFjZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBn7Y0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1B7I6+nWveqBnaSN/csKw3Hte5ETR+xsuC5ObGNrBrVcv3Td+f188K S9SVhCdpsz2FFl+/qdewMqFcTG+ryNMQaFagzf6tr1JP+eA8wKWlIcijrSgskZZ7 JljnQrJTbjHhjB5CvzrGLqTJ7XUzmfq+ob1KYGYLpWa6gbdDoEVyQrgypu/atUJ5 Ei5ZnJz0LBRBGkDkbFu3MgaQfB7y1nGX6/pwfZc1dxIwt9FCzufxAyTyhR3xgDPm DohjsUJjYLzV0YjADKK9N7o56qBnlwNrPsiykog9z1Qcvqp9RvNTls/9IDmhfvUy Sm5nz03VArM+0TA2XpSWT8uIumH4sWk= -----END CERTIFICATE-----Generated at Thu Mar 26 19:25:17 2026 by rpki-client