$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/dacb8d64-0467-305d-8bc3-2c5336579a32.roa File: dacb8d64-0467-305d-8bc3-2c5336579a32.roa (raw, json) Hash identifier: fJtS86IWrbVr0lDD9sWQ+T/BL12yp22rk14Df30GYOs= Subject key identifier: 5E:8B:FF:63:B8:BA:DD:99:BF:17:A7:22:4C:59:EB:49:5F:B7:E5:35 Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F4328584D2BDA11C8DB921493468A5AB0 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/dacb8d64-0467-305d-8bc3-2c5336579a32.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 29016 IP address blocks: 159.182.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:11:c8:db:92:14:93:46:8a:5a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=0c369603-bc7b-4d3b-b325-ef027bc2ed41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:21:b0:cb:48:c9:02:56:19:c7:06:7e:b0:f1: 28:7e:33:a3:6a:b2:a1:8d:5d:a9:99:e0:65:e0:2f: 26:31:3e:8c:c6:0b:46:9f:d4:53:96:27:bc:60:d7: 44:e5:a8:b0:24:df:e2:4c:13:a2:c3:f5:9b:85:75: 83:b2:20:3a:71:03:56:14:d5:6c:df:5f:63:08:65: 1c:fb:d9:be:24:9b:39:3e:51:b7:6a:4a:4d:5a:75: 6f:3a:c8:8e:b2:52:9e:67:14:da:2f:59:2b:dc:93: 0b:a3:4c:1f:a2:6e:9d:12:9d:f7:e0:33:ac:b1:6f: a0:0b:97:3f:98:4a:1f:a8:18:ba:c1:1e:24:08:2a: c2:d7:91:13:ed:52:00:a5:32:c9:99:75:57:5f:66: 02:22:e5:22:cb:fb:97:26:2f:3f:e9:3c:72:55:00: 24:ef:58:33:bf:e9:15:0d:5e:63:0e:ee:07:05:f7: 4c:e4:30:b7:bc:47:c9:34:2e:18:d0:8b:51:d6:c8: d6:64:e9:cc:88:07:f1:47:18:c8:22:1c:32:e6:76: f1:bc:07:17:c3:35:af:a3:7c:52:67:50:8a:96:26: 4b:41:d7:3d:f6:ca:67:ff:39:0a:f7:4b:0d:ab:18: 65:bc:b7:7a:6e:da:11:62:63:d8:f0:a3:d5:bf:a4: e7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8B:FF:63:B8:BA:DD:99:BF:17:A7:22:4C:59:EB:49:5F:B7:E5:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/dacb8d64-0467-305d-8bc3-2c5336579a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 159.182.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:64:b1:9c:47:d8:94:a0:42:f4:af:93:e7:ad:65:56:81:0e: 07:01:8c:0a:68:3b:7e:94:1b:93:b1:a6:c0:31:1a:f5:c1:d0: 2e:bc:18:86:b5:ee:60:aa:ae:fb:6f:fb:f8:14:21:ab:54:46: 01:25:65:44:8d:fd:08:fe:81:c5:c3:01:af:bc:d0:14:39:55: b3:6b:48:fc:13:2d:8e:60:84:6e:de:0a:e3:77:e8:30:f1:bc: e8:ef:49:be:e5:16:cb:f0:45:91:10:87:48:32:9f:ce:63:b5: f2:cf:4d:fa:cb:98:30:47:60:56:76:9b:1f:96:22:db:99:60: 46:e1:82:be:19:30:3e:74:b6:7a:6d:ef:4e:7f:0f:1a:6f:5a: ca:54:21:b1:0a:47:5c:3c:07:f4:62:35:56:9a:14:56:30:52: 6a:b9:6a:68:fe:ba:7e:ff:71:0c:17:c3:dd:22:f6:dd:f5:96: fa:a6:c4:eb:95:64:dc:4b:0a:08:03:9d:ff:23:3f:1a:e5:5d: b8:f8:a5:7e:7e:da:93:44:72:87:62:07:0a:8f:22:f9:53:0d: cf:7e:61:09:6c:7b:9c:f8:66:3c:4d:7a:ef:c5:ba:89:24:09: 9f:df:61:ea:0f:e2:a9:37:8d:aa:51:e8:a4:93:0b:0a:f1:9b: 73:58:35:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hHI25IUk0aKWrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MGMzNjk2MDMtYmM3Yi00ZDNiLWIzMjUtZWYwMjdiYzJlZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiGwy0jJAlYZxwZ+sPEofjOjarKhjV2pmeBl 4C8mMT6MxgtGn9RTlie8YNdE5aiwJN/iTBOiw/WbhXWDsiA6cQNWFNVs319jCGUc +9m+JJs5PlG3akpNWnVvOsiOslKeZxTaL1kr3JMLo0wfom6dEp334DOssW+gC5c/ mEofqBi6wR4kCCrC15ET7VIApTLJmXVXX2YCIuUiy/uXJi8/6TxyVQAk71gzv+kV DV5jDu4HBfdM5DC3vEfJNC4Y0ItR1sjWZOnMiAfxRxjIIhwy5nbxvAcXwzWvo3xS Z1CKliZLQdc99spn/zkK90sNqxhlvLd6btoRYmPY8KPVv6Tn1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6L/2O4ut2ZvxenIkxZ60lft+U1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvZGFjYjhkNjQtMDQ2Ny0z MDVkLThiYzMtMmM1MzM2NTc5YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDn7Z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1ksZxH2JSgQvSvk+etZVaBDgcBjApoO36UG5OxpsAxGvXB0C68GIa1 7mCqrvtv+/gUIatURgElZUSN/Qj+gcXDAa+80BQ5VbNrSPwTLY5ghG7eCuN36DDx vOjvSb7lFsvwRZEQh0gyn85jtfLPTfrLmDBHYFZ2mx+WItuZYEbhgr4ZMD50tnpt 705/DxpvWspUIbEKR1w8B/RiNVaaFFYwUmq5amj+un7/cQwXw90i9t31lvqmxOuV ZNxLCggDnf8jPxrlXbj4pX5+2pNEcodiBwqPIvlTDc9+YQlse5z4ZjxNeu/Fuokk CZ/fYeoP4qk3japR6KSTCwrxm3NYNeU= -----END CERTIFICATE-----Generated at Thu Mar 26 20:59:54 2026 by rpki-client