$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5c691f4-22aa-3d5d-81bd-e4d8a90d9a12.roa File: e5c691f4-22aa-3d5d-81bd-e4d8a90d9a12.roa (raw, json) Hash identifier: GcHu0ifMJtocxNbK67KgYmbDAVgIKeSfdMx4ZwPimd8= Subject key identifier: 95:48:FB:4E:ED:7E:FE:28:2D:31:88:62:1C:79:B8:6C:F9:97:96:31 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D143D4DE34A5FAEFEA755C640 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5c691f4-22aa-3d5d-81bd-e4d8a90d9a12.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 8075 IP address blocks: 161.58.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:4d:e3:4a:5f:ae:fe:a7:55:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=7f40019e-de06-4d4d-a118-8328f55aa18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7f:10:5b:54:8d:44:86:1a:8c:ea:32:b4:a2: 2b:e8:90:db:1e:21:2f:d1:fa:06:af:d4:ea:f6:40: 36:3c:bc:36:09:ea:b6:4d:c6:18:0b:ef:3d:b9:4e: 61:8d:18:88:51:a5:f4:ee:f0:ef:be:b0:5d:9d:fc: 87:d7:c0:2b:95:a0:ea:cd:ea:b3:e2:dd:d7:eb:02: 75:dc:f8:44:83:31:db:9f:1c:65:6a:ea:0a:37:f6: 94:10:d7:16:8c:ee:93:28:9c:1f:5f:b5:13:3c:6f: d4:a5:7d:6b:a3:f4:6e:57:85:c0:a0:e5:b4:2c:d5: b5:89:0f:fa:f4:6b:ea:04:af:61:25:32:21:f6:9e: de:d3:b2:ad:a3:05:8e:4b:2b:71:91:96:fb:d7:0c: fc:05:03:c7:d7:c1:b0:5c:0b:9a:8b:83:a7:31:92: f9:60:4d:cb:b2:25:be:1a:55:81:65:d2:d6:e7:d6: 57:1a:99:00:29:72:43:38:d6:40:d5:a1:a7:b8:a3: a6:1c:3a:7f:90:ed:93:ce:b7:cc:22:97:cd:f2:5a: 1f:fd:42:89:05:23:f6:74:3f:77:ce:2e:78:9d:e3: c8:7d:40:a1:d8:1d:d4:9d:6b:9f:00:62:6a:74:fa: 47:4e:39:de:fd:87:a9:9c:b2:63:30:49:4e:f2:f8: f6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:48:FB:4E:ED:7E:FE:28:2D:31:88:62:1C:79:B8:6C:F9:97:96:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5c691f4-22aa-3d5d-81bd-e4d8a90d9a12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 161.58.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:be:ab:64:08:fb:61:b7:fc:6c:62:68:cf:14:43:c8:18:18: 7e:5b:fa:3c:7a:b1:75:94:30:24:c4:d8:c4:4c:ca:2f:d7:c0: c5:4d:40:87:fb:a0:53:aa:ef:ab:f1:72:c4:24:5c:68:f0:cb: 0b:21:16:13:94:ed:4d:66:8d:8d:da:ff:8b:84:18:2d:51:8d: 84:6b:71:7a:48:9c:91:49:05:fb:cf:92:bb:28:b9:6a:46:3a: be:7c:d7:99:87:91:ad:92:c8:2a:7f:cf:b0:3c:f8:0d:d2:87: a0:8b:90:37:ca:31:0f:63:26:0f:18:5e:00:4b:a3:30:ee:c0: d0:a0:33:99:95:ab:fc:59:b9:6b:55:51:05:8a:ea:88:92:1d: ec:b5:2f:51:70:34:c7:e9:61:da:ce:fb:1e:bb:63:97:95:80: 4e:3f:3e:08:b9:2f:e6:fc:dd:35:d1:76:31:65:2c:79:e6:67: 5c:0c:4b:df:a5:75:24:35:6d:0d:3b:03:5a:25:7d:1b:28:5c: e9:cf:17:13:97:a9:d1:78:fa:41:a3:fa:4c:a1:d5:0b:87:cf: 40:e0:60:67:d2:64:fa:ff:9f:9f:41:c1:d1:30:40:ae:4d:49: 1e:d9:d1:cb:bc:4c:fa:84:3e:37:9e:36:51:ea:56:11:2a:19: 6e:50:c8:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPU3jSl+u/qdVxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk N2Y0MDAxOWUtZGUwNi00ZDRkLWExMTgtODMyOGY1NWFhMThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH8QW1SNRIYajOoytKIr6JDbHiEv0foGr9Tq 9kA2PLw2Ceq2TcYYC+89uU5hjRiIUaX07vDvvrBdnfyH18ArlaDqzeqz4t3X6wJ1 3PhEgzHbnxxlauoKN/aUENcWjO6TKJwfX7UTPG/UpX1ro/RuV4XAoOW0LNW1iQ/6 9GvqBK9hJTIh9p7e07KtowWOSytxkZb71wz8BQPH18GwXAuai4OnMZL5YE3LsiW+ GlWBZdLW59ZXGpkAKXJDONZA1aGnuKOmHDp/kO2TzrfMIpfN8lof/UKJBSP2dD93 zi54nePIfUCh2B3UnWufAGJqdPpHTjne/YepnLJjMElO8vj2RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVI+07tfv4oLTGIYhx5uGz5l5YxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZTVjNjkxZjQtMjJhYS0z ZDVkLTgxYmQtZTRkOGE5MGQ5YTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoTqeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHy+q2QI+2G3/GxiaM8UQ8gYGH5b+jx6sXWUMCTE2MRMyi/XwMVNQIf7 oFOq76vxcsQkXGjwywshFhOU7U1mjY3a/4uEGC1RjYRrcXpInJFJBfvPkrsouWpG Or5815mHka2SyCp/z7A8+A3Sh6CLkDfKMQ9jJg8YXgBLozDuwNCgM5mVq/xZuWtV UQWK6oiSHey1L1FwNMfpYdrO+x67Y5eVgE4/Pgi5L+b83TXRdjFlLHnmZ1wMS9+l dSQ1bQ07A1olfRsoXOnPFxOXqdF4+kGj+kyh1QuHz0DgYGfSZPr/n59BwdEwQK5N SR7Z0cu8TPqEPjeeNlHqVhEqGW5QyLw= -----END CERTIFICATE-----Generated at Thu Mar 26 01:56:18 2026 by rpki-client