$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/8d665762-0465-323b-b950-c65d3069d14c.roa File: 8d665762-0465-323b-b950-c65d3069d14c.roa (raw, json) Hash identifier: 4AOGdPmEfZnUhSqnYJDI6Nqj/bxCbxGkQdhEQDMeJRA= Subject key identifier: 42:07:D2:4E:92:B8:C2:B1:37:30:23:FA:F6:92:B0:74:40:B2:09:36 Certificate issuer: /CN=fdf3df42-040e-4856-b3d6-7c2ebe1e1d94 Certificate serial: 010D0C9F4328584D3DFFB4BADFE1E8559654BC80 Authority key identifier: 6C:0A:1B:00:BC:3F:09:2F:2D:15:05:C2:07:E5:2B:B9:E6:30:61:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/8d665762-0465-323b-b950-c65d3069d14c.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 28959 IP address blocks: 158.51.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b4:ba:df:e1:e8:55:96:54:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdf3df42-040e-4856-b3d6-7c2ebe1e1d94 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=d0b0715b-82e7-436d-90e8-661660d1cdd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a0:9e:04:9e:b0:c2:55:fb:f8:04:7d:6d:e1: 29:bf:2b:52:ca:20:c0:93:fb:20:5c:d3:3b:94:20: ea:ce:df:8b:7a:79:ee:79:c5:96:72:7b:4d:c7:fc: 19:0e:60:b4:ff:1b:de:78:36:fc:03:78:71:22:51: e0:64:ac:3f:8b:39:dc:46:ac:4e:dd:0b:88:42:0d: 59:60:ca:c1:77:51:3b:7a:ae:06:0c:57:c3:06:a7: d3:eb:4b:e7:b7:8e:35:96:49:21:c7:91:7e:38:a3: f7:24:9a:65:74:35:28:c6:70:6c:ff:d3:fb:56:86: 95:af:c2:e4:bf:2e:51:a5:8f:5a:e0:4b:0e:aa:27: 88:f4:ff:8d:02:dc:61:62:33:46:07:38:51:4f:d0: fb:42:e1:d0:33:72:b2:a3:bd:1e:87:18:4b:3c:71: 20:fa:2f:f3:a1:e2:82:3e:7b:9d:5f:c2:7e:15:ac: 72:4f:84:cb:38:b5:b9:68:54:2a:99:63:63:97:f7: 17:be:6e:c0:87:c9:7f:a4:54:dd:53:45:3d:4c:ed: fd:b3:7e:db:c3:7c:37:1f:86:17:f1:2f:8e:ac:b8: 7b:3e:0f:8b:40:84:c9:da:66:dc:8d:5d:3c:fc:21: fe:cb:02:29:da:4d:59:cf:90:2b:45:62:17:2a:e3: f2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:07:D2:4E:92:B8:C2:B1:37:30:23:FA:F6:92:B0:74:40:B2:09:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/8d665762-0465-323b-b950-c65d3069d14c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.crl X509v3 Authority Key Identifier: keyid:6C:0A:1B:00:BC:3F:09:2F:2D:15:05:C2:07:E5:2B:B9:E6:30:61:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.cer sbgp-ipAddrBlock: critical IPv4: 158.51.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:79:c2:7d:aa:f0:81:31:4f:12:8e:87:37:52:c0:1b:c4:e2: 66:f6:91:7b:5b:74:d6:7a:60:43:b2:13:03:85:a4:c0:a6:9b: 82:08:0c:4c:b6:20:e3:b3:78:1d:74:d1:4e:38:39:70:57:67: 72:b9:02:33:47:c2:85:87:2e:af:8c:52:06:e7:26:ce:a3:d4: 56:c5:0a:39:af:c8:4d:88:bc:ba:d8:f9:cf:2d:96:2f:dc:98: 9a:e3:24:19:37:1c:dd:e1:7c:92:6a:94:12:28:7c:0b:c6:99: a3:ea:b0:c1:e8:0f:11:49:09:d7:bb:24:54:88:57:91:5b:fb: 8f:82:73:ef:1c:96:65:8b:13:cf:10:5d:6c:bf:7b:c6:3d:b2: 3a:bd:93:21:0d:84:52:cf:e7:af:ba:1b:b6:b5:2c:ed:70:19: 74:92:13:19:f3:da:20:e1:61:dd:bd:45:8b:49:df:98:d8:c2: f0:3f:72:d5:2f:41:3a:a4:16:e3:e9:0b:39:2a:59:16:97:2a: de:16:94:8f:b9:f0:1c:ba:a2:44:b0:23:d9:54:bc:0e:ee:ef: 8e:a5:a8:f2:4b:5d:7c:d4:64:eb:15:47:e5:e5:a2:fd:55:e8: e1:e2:21:07:35:73:a0:c2:f2:48:7a:48:86:5e:c3:0d:17:49: 8f:b2:aa:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7S63+HoVZZUvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRmM2RmNDItMDQwZS00ODU2LWIzZDYtN2MyZWJlMWUx ZDk0MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZDBiMDcxNWItODJlNy00MzZkLTkwZTgtNjYxNjYwZDFjZGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKCeBJ6wwlX7+AR9beEpvytSyiDAk/sgXNM7 lCDqzt+LennuecWWcntNx/wZDmC0/xveeDb8A3hxIlHgZKw/izncRqxO3QuIQg1Z YMrBd1E7eq4GDFfDBqfT60vnt441lkkhx5F+OKP3JJpldDUoxnBs/9P7VoaVr8Lk vy5RpY9a4EsOqieI9P+NAtxhYjNGBzhRT9D7QuHQM3Kyo70ehxhLPHEg+i/zoeKC PnudX8J+FaxyT4TLOLW5aFQqmWNjl/cXvm7Ah8l/pFTdU0U9TO39s37bw3w3H4YX 8S+OrLh7Pg+LQITJ2mbcjV08/CH+ywIp2k1Zz5ArRWIXKuPyoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIH0k6SuMKxNzAj+vaSsHRAsgk2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZGYz ZGY0Mi0wNDBlLTQ4NTYtYjNkNi03YzJlYmUxZTFkOTQvOGQ2NjU3NjItMDQ2NS0z MjNiLWI5NTAtYzY1ZDMwNjlkMTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmRmM2RmNDItMDQwZS00ODU2LWIz ZDYtN2MyZWJlMWUxZDk0L2ZkZjNkZjQyLTA0MGUtNDg1Ni1iM2Q2LTdjMmViZTFl MWQ5NC5jcmwwHwYDVR0jBBgwFoAUbAobALw/CS8tFQXCB+UrueYwYTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZGYzZGY0Mi0wNDBlLTQ4NTYtYjNkNi03YzJl YmUxZTFkOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIF5wn2q8IExTxKOhzdSwBvE4mb2kXtbdNZ6YEOyEwOFpMCmm4IIDEy2 IOOzeB100U44OXBXZ3K5AjNHwoWHLq+MUgbnJs6j1FbFCjmvyE2IvLrY+c8tli/c mJrjJBk3HN3hfJJqlBIofAvGmaPqsMHoDxFJCde7JFSIV5Fb+4+Cc+8clmWLE88Q XWy/e8Y9sjq9kyENhFLP56+6G7a1LO1wGXSSExnz2iDhYd29RYtJ35jYwvA/ctUv QTqkFuPpCzkqWRaXKt4WlI+58By6okSwI9lUvA7u746lqPJLXXzUZOsVR+Xlov1V 6OHiIQc1c6DC8kh6SIZeww0XSY+yqok= -----END CERTIFICATE-----Generated at Thu Mar 26 17:58:35 2026 by rpki-client