$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/5d963b30-880b-3180-b1dd-d86e8c4ce588.roa File: 5d963b30-880b-3180-b1dd-d86e8c4ce588.roa (raw, json) Hash identifier: kE1h+wN0c+hY5+8Y0FSFXutYy1bvne19T2dq+V1xoq4= Subject key identifier: 33:20:B6:2D:04:E8:43:3B:95:58:82:4A:2D:0E:B5:EB:A5:50:5E:52 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584D368C812A0FF185D8CC7E6DEC Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/5d963b30-880b-3180-b1dd-d86e8c4ce588.roa Signing time: Wed 18 Mar 2026 20:58:19 +0000 ROA not before: Wed 18 Mar 2026 20:58:19 +0000 ROA not after: Tue 16 Jun 2026 20:58:19 +0000 asID: 215728 IP address blocks: 139.177.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:8c:81:2a:0f:f1:85:d8:cc:7e:6d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Mar 18 20:58:19 2026 GMT Not After : Jun 16 20:58:19 2026 GMT Subject: CN=19df0f1b-6356-4df0-8585-810aa9594f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:19:74:af:58:6c:60:00:90:18:60:e7:e7:1a: 00:a6:28:ed:0c:27:8e:18:bc:37:25:55:05:99:ba: 88:46:64:62:48:81:67:8b:fb:ec:6d:3d:1d:bf:a9: ff:87:8a:f7:89:c7:81:db:f5:4a:77:aa:82:69:ac: c1:96:71:06:78:54:34:84:6a:02:99:2e:1c:8b:f9: 84:60:2b:f6:5d:68:ea:e4:f4:ca:82:18:60:a2:dd: d9:67:d4:53:94:76:25:6a:00:75:79:cb:27:a0:d7: 68:0e:e0:cd:19:28:eb:1c:9b:a1:f4:53:6c:45:1e: 35:d4:8a:a5:fb:d7:46:eb:d0:3a:9f:69:1c:ce:d3: d5:de:1e:4f:3f:d7:48:21:2b:1a:d9:33:1f:88:a6: c6:3b:c1:76:28:04:8b:65:3e:35:04:8c:ea:90:4f: 50:60:3d:87:e1:e0:52:af:4a:89:36:2e:2b:37:95: 5c:93:09:21:65:c5:fd:fc:12:50:76:5e:db:70:05: c7:b0:12:01:f1:17:a1:5e:d7:34:4b:5b:60:ee:df: 66:53:00:e6:3d:2d:71:0c:47:60:09:3d:c8:f8:bc: 45:06:03:c7:83:dc:96:cc:a9:30:c4:56:df:7a:c7: 11:bb:aa:b8:52:da:2b:a0:f6:85:ae:68:33:e2:90: 0d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:20:B6:2D:04:E8:43:3B:95:58:82:4A:2D:0E:B5:EB:A5:50:5E:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/5d963b30-880b-3180-b1dd-d86e8c4ce588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 139.177.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:52:ae:68:93:ac:da:b9:c7:20:54:c1:e3:3d:88:32:63:75: 74:18:96:88:71:ec:86:89:29:9b:40:89:31:1f:b4:ff:c6:b5: fc:c6:f3:94:94:c4:0f:fb:36:d5:11:d5:33:a3:67:0a:11:2b: f7:17:be:5f:44:bd:ef:a9:d6:a6:a5:78:d8:f9:42:fc:78:78: 6c:2d:8a:ed:fd:89:28:81:64:e5:a6:92:f0:d6:e6:bd:03:eb: 7e:60:f5:47:1c:87:cb:71:c4:ea:9a:05:1b:de:28:ca:a4:79: fd:de:89:b3:25:9b:83:45:9a:c9:b3:a7:29:39:57:d9:c9:2f: b0:4c:a2:f8:4a:ec:86:d6:35:e5:e5:48:76:ff:ea:29:ec:f9: 9c:45:2c:97:4d:1b:51:ad:c2:8e:a7:4b:46:9e:75:ca:24:4a: a5:24:83:f9:f5:00:3d:77:53:79:e3:c7:64:13:cd:a6:d4:19: 0f:44:07:a5:16:80:db:f2:1b:ec:8d:8c:98:a1:33:f2:a6:29: 76:b0:15:12:d7:9b:6b:3b:eb:c2:50:97:6c:be:13:d4:01:e8: d6:fa:45:f4:24:18:70:22:9e:36:2a:ea:ec:86:c3:d1:26:7e: 29:aa:c5:d3:71:9e:b9:33:a7:08:a0:8d:0b:e4:a7:f3:69:62: 25:c4:80:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02jIEqD/GF2Mx+bewwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI2MDMxODIwNTgxOVoXDTI2MDYxNjIwNTgxOVowLzEtMCsGA1UEAxMk MTlkZjBmMWItNjM1Ni00ZGYwLTg1ODUtODEwYWE5NTk0ZjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhl0r1hsYACQGGDn5xoApijtDCeOGLw3JVUF mbqIRmRiSIFni/vsbT0dv6n/h4r3iceB2/VKd6qCaazBlnEGeFQ0hGoCmS4ci/mE YCv2XWjq5PTKghhgot3ZZ9RTlHYlagB1ecsnoNdoDuDNGSjrHJuh9FNsRR411Iql +9dG69A6n2kcztPV3h5PP9dIISsa2TMfiKbGO8F2KASLZT41BIzqkE9QYD2H4eBS r0qJNi4rN5VckwkhZcX9/BJQdl7bcAXHsBIB8RehXtc0S1tg7t9mUwDmPS1xDEdg CT3I+LxFBgPHg9yWzKkwxFbfescRu6q4UtoroPaFrmgz4pANnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMgti0E6EM7lViCSi0OteulUF5SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNWQ5NjNiMzAtODgwYi0z MTgwLWIxZGQtZDg2ZThjNGNlNTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7GdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9SrmiTrNq5xyBUweM9iDJjdXQYlohx7IaJKZtAiTEftP/GtfzG85SU xA/7NtUR1TOjZwoRK/cXvl9Eve+p1qaleNj5Qvx4eGwtiu39iSiBZOWmkvDW5r0D 635g9Ucch8txxOqaBRveKMqkef3eibMlm4NFmsmzpyk5V9nJL7BMovhK7IbWNeXl SHb/6ins+ZxFLJdNG1Gtwo6nS0aedcokSqUkg/n1AD13U3njx2QTzabUGQ9EB6UW gNvyG+yNjJihM/KmKXawFRLXm2s768JQl2y+E9QB6Nb6RfQkGHAinjYq6uyGw9Em fimqxdNxnrkzpwigjQvkp/NpYiXEgL8= -----END CERTIFICATE-----Generated at Thu Mar 26 00:49:20 2026 by rpki-client