$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/354b54a0-5686-4c99-8f48-3477d048264a/137ac021-2448-3b1c-93b0-e6126e0b634c.roa File: 137ac021-2448-3b1c-93b0-e6126e0b634c.roa (raw, json) Hash identifier: eGRyNT0fvm1kFCvgkxoMdpN/xIhTgn4XotEGW7/1sIE= Subject key identifier: 24:3A:5A:21:33:C9:B0:84:3B:74:8C:E0:40:FA:AE:84:13:63:8C:DE Certificate issuer: /CN=354b54a0-5686-4c99-8f48-3477d048264a Certificate serial: 010D0C9F4328584D15A2664531B7E1FAC5C49300 Authority key identifier: 06:5B:6D:91:71:30:7B:F1:45:93:FE:43:F1:12:96:8D:61:B0:FA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/354b54a0-5686-4c99-8f48-3477d048264a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/354b54a0-5686-4c99-8f48-3477d048264a/137ac021-2448-3b1c-93b0-e6126e0b634c.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 398537 IP address blocks: 156.12.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/354b54a0-5686-4c99-8f48-3477d048264a/354b54a0-5686-4c99-8f48-3477d048264a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/354b54a0-5686-4c99-8f48-3477d048264a/354b54a0-5686-4c99-8f48-3477d048264a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/354b54a0-5686-4c99-8f48-3477d048264a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:66:45:31:b7:e1:fa:c5:c4:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=354b54a0-5686-4c99-8f48-3477d048264a Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=0d653b91-7ff6-4d90-af41-4d80dbedb91a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e5:f9:ab:fd:a1:30:f5:8f:26:53:27:75:39: e3:ac:4e:7c:f7:2e:f2:56:ed:b6:e7:32:06:ac:48: c4:8d:b0:f1:e4:5c:f1:ee:89:ef:33:4b:a2:08:2a: b3:0d:e4:92:77:91:b1:b3:0d:96:36:65:a4:07:67: 8e:16:7b:38:62:ee:6a:50:18:70:dd:ec:ce:44:7e: 5e:8c:5d:83:0f:23:2b:13:e4:95:8f:b6:d6:39:13: d1:a7:a8:bd:9e:b6:44:1d:7a:ac:b6:95:08:6d:8f: bf:4c:33:42:a6:2a:f4:64:dd:bd:e2:0e:8a:64:2b: dd:eb:8b:7b:09:b1:58:a8:c0:e9:53:22:5d:32:a0: 3d:c0:bb:f8:09:48:3c:5c:90:10:ac:24:90:04:c8: aa:68:66:66:2a:87:67:dc:28:be:6b:78:b3:1d:bb: 6b:aa:90:78:e3:f6:7d:c0:d4:c3:1f:1a:a1:e1:e7: 0c:47:bb:e6:6e:05:67:64:02:e2:c4:dc:3e:f9:b2: fa:c4:50:32:34:c9:6a:eb:3e:d0:c5:11:8c:b0:70: e7:3c:ad:a6:b3:6a:cd:d9:7d:83:89:46:78:66:e3: 48:c3:bf:19:5b:11:cb:0b:bc:c5:32:fb:6f:aa:0c: 10:98:16:13:35:9c:0d:c9:4d:b2:dc:16:95:5b:52: a3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3A:5A:21:33:C9:B0:84:3B:74:8C:E0:40:FA:AE:84:13:63:8C:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/354b54a0-5686-4c99-8f48-3477d048264a/137ac021-2448-3b1c-93b0-e6126e0b634c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/354b54a0-5686-4c99-8f48-3477d048264a/354b54a0-5686-4c99-8f48-3477d048264a.crl X509v3 Authority Key Identifier: keyid:06:5B:6D:91:71:30:7B:F1:45:93:FE:43:F1:12:96:8D:61:B0:FA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/354b54a0-5686-4c99-8f48-3477d048264a.cer sbgp-ipAddrBlock: critical IPv4: 156.12.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:42:82:62:87:c2:b4:ee:c0:c6:c6:1a:b4:fa:f0:22:07:39: fc:09:d9:14:e8:6b:48:dd:c6:55:96:43:16:39:1b:5a:cb:3d: bf:84:5e:aa:66:fb:1a:c5:3b:bf:77:6e:b2:22:7d:e8:65:15: da:73:25:dd:06:4f:26:54:a4:ee:f3:09:0a:50:98:bc:e0:66: 65:f5:6b:ba:50:c3:c3:81:b6:db:b2:fe:a6:15:cc:de:6e:57: 07:94:31:d6:79:8b:e7:fa:1b:c9:bf:6e:1d:40:69:29:3d:95: b1:fa:ad:6e:0c:89:89:d0:e2:28:ec:46:e1:6b:53:71:fd:f2: 1d:03:01:4e:1a:4a:b7:80:3b:0c:19:f2:0b:f6:ea:2b:a0:25: d4:cf:e3:04:88:52:a9:09:37:a4:a7:af:31:70:1e:72:e7:d7: 9b:aa:01:4d:25:a2:75:35:1b:be:64:28:2d:58:89:ac:11:8a: bf:45:ae:a3:8d:f7:a5:6f:dd:79:ee:9f:83:b0:ec:91:4e:7a: ab:bb:b3:93:79:ee:64:c1:f9:87:c9:91:b8:55:65:ef:91:5a: 80:25:20:57:be:26:a6:94:04:ca:38:b6:e3:9a:80:ac:79:fb: 3e:1d:73:e0:fe:0c:73:29:f6:6d:99:e8:34:0c:0f:35:95:69: 50:d8:69:00 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0VomZFMbfh+sXEkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzU0YjU0YTAtNTY4Ni00Yzk5LThmNDgtMzQ3N2QwNDgy NjRhMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk MGQ2NTNiOTEtN2ZmNi00ZDkwLWFmNDEtNGQ4MGRiZWRiOTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+X5q/2hMPWPJlMndTnjrE589y7yVu225zIG rEjEjbDx5Fzx7onvM0uiCCqzDeSSd5Gxsw2WNmWkB2eOFns4Yu5qUBhw3ezORH5e jF2DDyMrE+SVj7bWORPRp6i9nrZEHXqstpUIbY+/TDNCpir0ZN294g6KZCvd64t7 CbFYqMDpUyJdMqA9wLv4CUg8XJAQrCSQBMiqaGZmKodn3Ci+a3izHbtrqpB44/Z9 wNTDHxqh4ecMR7vmbgVnZALixNw++bL6xFAyNMlq6z7QxRGMsHDnPK2ms2rN2X2D iUZ4ZuNIw78ZWxHLC7zFMvtvqgwQmBYTNZwNyU2y3BaVW1KjPQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCQ6WiEzybCEO3SM4ED6roQTY4zeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNTRi NTRhMC01Njg2LTRjOTktOGY0OC0zNDc3ZDA0ODI2NGEvMTM3YWMwMjEtMjQ0OC0z YjFjLTkzYjAtZTYxMjZlMGI2MzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzU0YjU0YTAtNTY4Ni00Yzk5LThm NDgtMzQ3N2QwNDgyNjRhLzM1NGI1NGEwLTU2ODYtNGM5OS04ZjQ4LTM0NzdkMDQ4 MjY0YS5jcmwwHwYDVR0jBBgwFoAUBlttkXEwe/FFk/5D8RKWjWGw+uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNTRiNTRhMC01Njg2LTRjOTktOGY0OC0zNDc3 ZDA0ODI2NGEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnAwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAFEKCYofCtO7AxsYatPrwIgc5/AnZFOhrSN3GVZZDFjkbWss9v4Reqmb7 GsU7v3dusiJ96GUV2nMl3QZPJlSk7vMJClCYvOBmZfVrulDDw4G227L+phXM3m5X B5Qx1nmL5/obyb9uHUBpKT2VsfqtbgyJidDiKOxG4WtTcf3yHQMBThpKt4A7DBny C/bqK6Al1M/jBIhSqQk3pKevMXAecufXm6oBTSWidTUbvmQoLViJrBGKv0Wuo433 pW/dee6fg7DskU56q7uzk3nuZMH5h8mRuFVl75FagCUgV74mppQEyji245qArHn7 Ph1z4P4Mcyn2bZnoNAwPNZVpUNhpAA== -----END CERTIFICATE-----Generated at Thu Mar 26 19:41:43 2026 by rpki-client