$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8473396c-8a36-3619-80aa-c025ed526998.roa File: 8473396c-8a36-3619-80aa-c025ed526998.roa (raw, json) Hash identifier: o89LQuJWvHQuMIdlQVukPQENDD3JoSZb2rmN8ZbtT68= Subject key identifier: 4F:36:E1:76:AA:33:70:BC:9D:CB:1A:6B:6D:1F:D2:BD:99:C7:13:A2 Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F4328584D47C4E3D2FCD5595367604F00 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8473396c-8a36-3619-80aa-c025ed526998.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 13984 IP address blocks: 164.153.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:e3:d2:fc:d5:59:53:67:60:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=5ca07185-9f10-491e-8e2e-c33eb38d3a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d6:0e:93:0a:b8:4e:0d:8d:06:75:9a:37:96: 64:41:04:41:ed:48:f9:9d:0f:8a:d9:dd:23:3b:e9: de:cf:55:1e:0f:42:73:de:2f:b7:37:21:fd:22:61: bd:cf:38:ab:76:bc:f6:d8:04:01:e1:71:a8:9e:d6: cc:41:b7:92:cb:8d:86:60:cc:a0:d9:70:3e:e9:b0: 82:a1:59:77:cc:d2:dc:80:d8:78:be:40:88:3e:83: 76:ea:12:1a:ba:37:ff:65:7d:61:0f:ed:73:0b:52: 6b:22:49:71:14:65:f7:54:50:f7:3e:9b:fc:2d:e4: a8:48:2d:9a:75:e6:33:b5:78:a2:be:a5:76:06:0b: 6a:04:90:79:a5:da:9c:2a:19:05:ed:96:56:d2:4c: ad:b2:81:e6:c2:9c:cf:12:06:dd:ef:2a:c9:6a:5a: d2:19:32:a5:a1:81:06:d0:b6:7b:3b:97:51:b9:ae: a3:f6:67:20:d6:62:08:42:41:6f:37:6b:e3:60:e2: 20:67:05:66:0d:f1:4a:51:49:db:7b:95:8e:f9:f8: 38:7e:7a:78:cf:70:74:05:a0:92:a6:42:dc:5b:dc: a5:04:47:e1:c0:3f:10:62:5b:82:4a:58:8d:7d:7f: 90:d0:ed:30:c9:62:e1:7e:8d:3a:e6:c2:62:8d:a9: 08:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:36:E1:76:AA:33:70:BC:9D:CB:1A:6B:6D:1F:D2:BD:99:C7:13:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8473396c-8a36-3619-80aa-c025ed526998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 164.153.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:e6:87:92:8a:d8:9f:a4:94:c3:1d:c8:a3:87:21:a6:a1:3b: 66:e5:e4:9e:bf:2f:31:16:75:04:58:cb:56:c8:05:e1:6c:65: 12:29:8d:ea:7c:0d:37:0b:84:3f:f9:ad:1c:33:be:56:d0:a0: fd:2b:2f:1e:8e:d3:5f:2a:04:b3:9c:29:d1:fe:b9:fb:f3:74: 06:a8:f5:e7:38:75:32:7e:f1:5f:49:19:2c:9d:0b:7d:ba:da: 80:5f:8a:e3:45:34:28:a0:6e:93:2f:ca:5d:60:72:75:41:d6: e9:a7:56:6e:2c:5c:5e:18:c2:27:51:e9:94:df:be:3b:c8:59: 92:3b:92:2c:3e:a5:5d:be:38:59:ce:2c:e6:9f:25:28:84:3f: 69:c3:7f:9e:65:e1:75:8b:f4:72:3a:fd:40:6d:1d:ca:88:b2: 30:dc:18:c4:a1:d6:18:94:37:d0:42:c4:5a:07:8e:67:78:14: 9b:be:ec:48:f6:0d:c8:0f:27:4c:15:fa:d1:19:19:e1:ff:d6: 02:4c:49:64:d9:31:fb:7e:ed:09:a2:ed:a5:6c:7a:17:5a:39: 70:bc:ec:80:4c:21:d7:93:34:d4:f6:c9:90:be:dd:5e:36:dc: cf:ab:52:d4:94:c8:69:ab:3d:84:9f:77:68:42:6f:82:9f:25: 0f:0e:50:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOPS/NVZU2dgTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk NWNhMDcxODUtOWYxMC00OTFlLThlMmUtYzMzZWIzOGQzYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtYOkwq4Tg2NBnWaN5ZkQQRB7Uj5nQ+K2d0j O+nez1UeD0Jz3i+3NyH9ImG9zzirdrz22AQB4XGontbMQbeSy42GYMyg2XA+6bCC oVl3zNLcgNh4vkCIPoN26hIaujf/ZX1hD+1zC1JrIklxFGX3VFD3Ppv8LeSoSC2a deYztXiivqV2BgtqBJB5pdqcKhkF7ZZW0kytsoHmwpzPEgbd7yrJalrSGTKloYEG 0LZ7O5dRua6j9mcg1mIIQkFvN2vjYOIgZwVmDfFKUUnbe5WO+fg4fnp4z3B0BaCS pkLcW9ylBEfhwD8QYluCSliNfX+Q0O0wyWLhfo065sJijakIZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE824XaqM3C8ncsaa20f0r2ZxxOiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvODQ3MzM5NmMtOGEzNi0z NjE5LTgwYWEtYzAyNWVkNTI2OTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpJkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjmh5KK2J+klMMdyKOHIaahO2bl5J6/LzEWdQRYy1bIBeFsZRIpjep8 DTcLhD/5rRwzvlbQoP0rLx6O018qBLOcKdH+ufvzdAao9ec4dTJ+8V9JGSydC326 2oBfiuNFNCigbpMvyl1gcnVB1umnVm4sXF4YwidR6ZTfvjvIWZI7kiw+pV2+OFnO LOafJSiEP2nDf55l4XWL9HI6/UBtHcqIsjDcGMSh1hiUN9BCxFoHjmd4FJu+7Ej2 DcgPJ0wV+tEZGeH/1gJMSWTZMft+7Qmi7aVsehdaOXC87IBMIdeTNNT2yZC+3V42 3M+rUtSUyGmrPYSfd2hCb4KfJQ8OUEo= -----END CERTIFICATE-----Generated at Thu Mar 26 15:53:43 2026 by rpki-client