$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7255de94-c26e-30a0-a765-c429b196c862.roa File: 7255de94-c26e-30a0-a765-c429b196c862.roa (raw, json) Hash identifier: wk7kvtad5Df5BWZ9i3gdbtNzP8k9O/cijPb+VzQ3sk8= Subject key identifier: D3:1C:87:89:46:97:09:F9:CB:74:B6:31:70:27:09:80:A9:CA:0E:DA Certificate issuer: /CN=324346b5-3875-43b0-bb0d-8052274567d4 Certificate serial: 010D0C9F4328584D492A74F9FA8EB7A7E7D99600 Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7255de94-c26e-30a0-a765-c429b196c862.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 55 IP address blocks: 158.130.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:74:f9:fa:8e:b7:a7:e7:d9:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=0a58c683-fa60-4517-b07a-4c9b0957586c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:65:0c:a1:65:56:5d:46:d9:9f:bb:ca:0e:aa: 46:dd:12:fa:55:6b:80:8b:29:64:c8:1c:fd:a9:58: 5e:1d:83:b5:7d:46:d2:52:0d:99:2f:d0:51:3b:f7: 08:9b:be:d2:5e:18:f5:b5:0c:37:c9:50:09:54:c6: b4:4f:51:f4:1e:5b:92:58:0e:2a:9b:1f:6a:f7:91: 4c:06:d8:b3:a2:a1:48:0c:97:41:28:8a:af:b5:ac: 49:9d:b7:c5:b5:d0:4d:10:0e:d8:97:2d:0b:08:36: 41:e5:20:13:93:2d:f9:9d:a6:2c:58:aa:e3:dc:f2: 5d:a0:84:0a:fa:e1:6f:cb:85:ba:c2:02:95:0b:e7: 64:a1:44:06:2e:e1:da:0b:19:a9:37:db:b2:af:87: 7d:97:ed:e1:ae:f5:30:ab:03:dd:7a:7d:e3:b5:fd: 83:8f:fb:44:2e:2f:b3:6b:55:87:9a:91:9a:d8:71: 2c:26:14:1c:25:3a:86:c5:6d:81:13:3b:70:93:ad: 35:a5:50:6f:73:a8:52:90:62:5a:b4:ca:fb:85:e7: 59:f9:d1:a4:f5:71:4e:00:54:a2:f0:19:a3:82:16: ba:af:f4:97:93:30:e5:a3:00:98:8e:29:b3:51:0c: 23:18:e2:6b:7f:42:c9:61:97:cf:c2:22:4d:d7:b6: 63:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1C:87:89:46:97:09:F9:CB:74:B6:31:70:27:09:80:A9:CA:0E:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7255de94-c26e-30a0-a765-c429b196c862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl X509v3 Authority Key Identifier: keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer sbgp-ipAddrBlock: critical IPv4: 158.130.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:d1:ac:44:66:24:fe:c2:cd:ae:2e:c8:c3:de:bf:4d:74:5c: 4c:58:f3:12:a3:4f:25:31:f6:0a:05:88:63:51:62:ea:7a:a0: d2:88:96:c9:0a:77:ea:8a:94:99:b6:7a:61:00:02:0e:03:9b: 1b:2a:cd:97:69:13:e3:0f:3f:43:60:22:c8:33:5b:9d:40:7c: aa:f2:79:0f:62:83:6d:5c:f5:84:ea:d5:f4:9c:2c:86:56:5a: 6c:96:18:12:14:21:c3:d1:44:88:fd:58:cb:c0:20:ce:43:88: e0:7b:1f:d4:79:dd:47:5e:23:af:45:67:3c:b0:af:90:af:ae: 29:6c:bb:e0:3f:22:2c:d9:cf:98:c9:22:95:71:cd:36:71:ec: f6:d3:72:fc:88:7a:8a:e9:22:5b:87:f5:08:a7:46:60:5d:0e: 29:70:c1:06:79:60:d0:08:0a:01:0a:e9:fc:61:94:61:0c:33: c4:e6:ea:6f:a5:bd:2c:70:e3:71:ff:47:a6:ab:48:45:dc:11: 39:eb:4d:6c:75:c0:da:17:9a:1a:d7:09:ca:33:04:82:57:74: 37:df:76:1a:27:27:9b:e6:37:a9:16:a1:a8:0f:67:30:d6:cb: 6e:d8:d5:e2:1b:16:b2:20:18:2e:93:62:cb:27:e0:9d:82:1a: a6:f2:88:a9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1JKnT5+o63p+fZlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0MzQ2YjUtMzg3NS00M2IwLWJiMGQtODA1MjI3NDU2 N2Q0MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk MGE1OGM2ODMtZmE2MC00NTE3LWIwN2EtNGM5YjA5NTc1ODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2UMoWVWXUbZn7vKDqpG3RL6VWuAiylkyBz9 qVheHYO1fUbSUg2ZL9BRO/cIm77SXhj1tQw3yVAJVMa0T1H0HluSWA4qmx9q95FM BtizoqFIDJdBKIqvtaxJnbfFtdBNEA7Yly0LCDZB5SATky35naYsWKrj3PJdoIQK +uFvy4W6wgKVC+dkoUQGLuHaCxmpN9uyr4d9l+3hrvUwqwPden3jtf2Dj/tELi+z a1WHmpGa2HEsJhQcJTqGxW2BEztwk601pVBvc6hSkGJatMr7hedZ+dGk9XFOAFSi 8Bmjgha6r/SXkzDlowCYjimzUQwjGOJrf0LJYZfPwiJN17ZjiQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNMch4lGlwn5y3S2MXAnCYCpyg7aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQz NDZiNS0zODc1LTQzYjAtYmIwZC04MDUyMjc0NTY3ZDQvNzI1NWRlOTQtYzI2ZS0z MGEwLWE3NjUtYzQyOWIxOTZjODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0MzQ2YjUtMzg3NS00M2IwLWJi MGQtODA1MjI3NDU2N2Q0LzMyNDM0NmI1LTM4NzUtNDNiMC1iYjBkLTgwNTIyNzQ1 NjdkNC5jcmwwHwYDVR0jBBgwFoAUSik0xZJmeenp4Av+f7bw6Cl2XiQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQzNDZiNS0zODc1LTQzYjAtYmIwZC04MDUy Mjc0NTY3ZDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnoIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAA9GsRGYk/sLNri7Iw96/TXRcTFjzEqNPJTH2CgWIY1Fi6nqg0oiWyQp3 6oqUmbZ6YQACDgObGyrNl2kT4w8/Q2AiyDNbnUB8qvJ5D2KDbVz1hOrV9JwshlZa bJYYEhQhw9FEiP1Yy8AgzkOI4Hsf1HndR14jr0VnPLCvkK+uKWy74D8iLNnPmMki lXHNNnHs9tNy/Ih6iukiW4f1CKdGYF0OKXDBBnlg0AgKAQrp/GGUYQwzxObqb6W9 LHDjcf9HpqtIRdwROetNbHXA2heaGtcJyjMEgld0N992Gicnm+Y3qRahqA9nMNbL btjV4hsWsiAYLpNiyyfgnYIapvKIqQ== -----END CERTIFICATE-----Generated at Fri Mar 27 02:34:34 2026 by rpki-client