$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/a6582479-22e2-3b2a-bbf7-5e4e4ae3ff4f.roa File: a6582479-22e2-3b2a-bbf7-5e4e4ae3ff4f.roa (raw, json) Hash identifier: L+jQu9qiyCm9cYIFnf/dlim3N7fA/DZCenO9b2JS/pc= Subject key identifier: AA:BB:6F:13:7E:8C:FC:16:80:5F:06:00:FA:FA:9E:24:5B:1A:FD:DB Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F4328584D2A74D8FEAED1069C6822BB80 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/a6582479-22e2-3b2a-bbf7-5e4e4ae3ff4f.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 9823 IP address blocks: 159.182.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:d8:fe:ae:d1:06:9c:68:22:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=c2dc36e2-d41c-4c91-aae4-344b1f578551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ce:0c:ed:73:a7:a7:b1:d7:5a:82:80:8f:9e: db:4b:36:c4:48:14:6f:4b:df:f3:0c:9e:52:75:4d: d5:52:37:74:6f:ba:c8:25:6d:ed:da:86:05:82:01: 03:f0:50:8b:61:d8:dc:fa:9b:b0:0c:1c:a7:14:44: 3c:56:67:48:4b:1c:18:35:2d:07:24:04:1a:cf:f7: f6:70:d4:e6:ff:a8:91:70:e4:48:83:26:ce:9e:db: 30:84:b9:c6:6f:4f:9b:8f:6a:a3:d1:07:03:ba:b8: 35:56:12:06:39:00:f3:03:fd:da:71:32:af:b0:93: de:a7:cb:3e:65:a6:db:c7:a7:a9:04:1d:d5:18:eb: f9:9f:ec:05:cb:5c:9f:4c:76:60:a2:78:8a:1a:d9: 05:b2:eb:4c:da:db:81:07:bb:b5:88:56:1e:92:c9: 50:23:7d:04:01:ea:91:1e:da:00:a0:45:e7:20:ff: 0c:80:72:63:53:68:72:ed:dd:bc:63:32:61:43:cb: 16:c4:02:76:ce:e9:d8:d6:3a:54:30:55:05:1f:b5: 8a:14:9c:77:96:43:a4:6b:25:65:bb:6b:ff:31:f9: 46:1c:5b:64:eb:41:ef:91:24:0e:50:a1:04:ae:0f: cd:b9:49:e0:5b:1f:ee:8b:d8:5e:1f:11:7a:e4:c6: ec:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BB:6F:13:7E:8C:FC:16:80:5F:06:00:FA:FA:9E:24:5B:1A:FD:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/a6582479-22e2-3b2a-bbf7-5e4e4ae3ff4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 159.182.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:ca:5f:54:9e:77:c8:00:24:c7:34:ff:87:e3:c1:26:d5:45: 1b:8c:45:d2:84:9c:74:b5:c8:e4:6b:9b:a6:4e:82:74:55:fd: f2:6d:f7:20:90:5a:a3:32:45:4a:8e:38:1b:f8:36:b2:88:f2: b6:b6:fd:c3:54:2e:1b:c9:7d:fe:3b:9b:52:c6:87:ba:43:d6: 3d:dd:96:1a:dc:12:e0:bc:15:9c:2d:ae:f0:79:f0:be:20:db: 85:fa:b1:a7:72:e2:68:a4:46:0f:d1:11:8a:16:06:f3:21:ba: 16:ee:e6:7b:3c:c0:de:dd:55:aa:52:3f:38:0d:ca:8c:ee:da: a3:18:9d:8c:07:f9:92:67:4e:75:69:22:ab:86:5e:8a:55:54: 3a:71:40:76:19:b1:e3:c6:e8:65:cc:50:98:4a:fb:3b:d1:b2: 50:62:ff:cb:00:ac:03:49:c2:39:6f:ad:ca:8f:e4:d3:f9:3c: 00:24:df:b3:a8:5e:1c:5b:24:f8:44:7d:f1:39:8a:83:37:7b: 9e:16:1a:ba:f7:ab:1a:4d:97:d9:4c:21:06:24:b6:4f:6a:fe: 0e:be:e7:f9:03:d0:54:c2:de:7e:cb:ca:8e:31:1b:b0:58:13: 37:e7:00:75:3e:ac:a7:12:3b:42:50:30:15:73:66:62:bf:51: 03:f2:58:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdNj+rtEGnGgiu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk YzJkYzM2ZTItZDQxYy00YzkxLWFhZTQtMzQ0YjFmNTc4NTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz84M7XOnp7HXWoKAj57bSzbESBRvS9/zDJ5S dU3VUjd0b7rIJW3t2oYFggED8FCLYdjc+puwDBynFEQ8VmdISxwYNS0HJAQaz/f2 cNTm/6iRcORIgybOntswhLnGb0+bj2qj0QcDurg1VhIGOQDzA/3acTKvsJPep8s+ Zabbx6epBB3VGOv5n+wFy1yfTHZgoniKGtkFsutM2tuBB7u1iFYekslQI30EAeqR HtoAoEXnIP8MgHJjU2hy7d28YzJhQ8sWxAJ2zunY1jpUMFUFH7WKFJx3lkOkayVl u2v/MflGHFtk60HvkSQOUKEErg/NuUngWx/ui9heHxF65Mbs2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKq7bxN+jPwWgF8GAPr6niRbGv3bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvYTY1ODI0NzktMjJlMi0z YjJhLWJiZjctNWU0ZTRhZTNmZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCn7ZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL7KX1Sed8gAJMc0/4fjwSbVRRuMRdKEnHS1yORrm6ZOgnRV/fJt9yCQ WqMyRUqOOBv4NrKI8ra2/cNULhvJff47m1LGh7pD1j3dlhrcEuC8FZwtrvB58L4g 24X6sady4mikRg/REYoWBvMhuhbu5ns8wN7dVapSPzgNyozu2qMYnYwH+ZJnTnVp IquGXopVVDpxQHYZsePG6GXMUJhK+zvRslBi/8sArANJwjlvrcqP5NP5PAAk37Oo XhxbJPhEffE5ioM3e54WGrr3qxpNl9lMIQYktk9q/g6+5/kD0FTC3n7Lyo4xG7BY EzfnAHU+rKcSO0JQMBVzZmK/UQPyWAE= -----END CERTIFICATE-----Generated at Thu Mar 26 17:49:03 2026 by rpki-client