$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/11fcf488-56c3-38f1-a544-3bbab76f8974.roa File: 11fcf488-56c3-38f1-a544-3bbab76f8974.roa (raw, json) Hash identifier: vL3oYB4TyuQszvuNFywuWKHJ4J8g6B27ibypzXiWhAs= Subject key identifier: 11:5E:39:0F:79:66:EE:A6:B2:F6:AA:0E:04:1A:50:6B:6A:9B:A2:31 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584D24E133FDE21DF6F4DE59E200 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/11fcf488-56c3-38f1-a544-3bbab76f8974.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 16509 IP address blocks: 159.26.144.0/24 maxlen: 24 159.26.145.0/24 maxlen: 24 159.26.146.0/24 maxlen: 24 159.26.147.0/24 maxlen: 24 159.26.148.0/24 maxlen: 24 159.26.149.0/24 maxlen: 24 159.26.150.0/24 maxlen: 24 159.26.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:33:fd:e2:1d:f6:f4:de:59:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ca1095b6-ffa5-4cdc-af6a-091043055951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5e:bb:a5:f5:4c:32:ea:5e:c7:9d:89:72:fb: 55:a3:34:8b:3b:30:fd:c8:86:22:36:b0:8a:54:6a: 76:64:85:f2:cd:95:da:f2:a5:62:02:67:78:07:65: c0:85:ff:c5:87:4c:5d:cb:5a:e1:36:fe:51:6c:38: bc:4d:b5:d0:ed:fb:73:0a:e3:c0:3d:1f:3e:6a:c1: b7:43:2f:b4:71:ee:b3:63:b5:90:1e:03:5e:07:1f: da:fe:31:88:76:c3:b2:89:2f:04:6b:04:54:da:d3: c0:e8:bc:07:e8:eb:f7:4e:c0:c4:7f:38:ba:5c:7b: f9:e3:fc:1e:10:2a:a9:4b:30:c5:d1:9a:fc:eb:00: 4b:fb:e5:97:c9:c4:e1:62:f9:51:94:8f:ea:36:12: 8c:1d:f7:6f:b4:c5:ee:e2:14:81:ba:dd:d1:2b:a5: 64:e7:fd:1e:7c:59:f4:2e:c5:9b:50:8b:b0:a6:fe: 6b:0b:86:3a:c0:84:a5:30:12:ab:c5:5c:3a:ab:d4: 4f:7d:f7:7d:8b:77:5c:54:35:d6:ba:9d:20:d6:89: 31:01:58:7b:c8:e9:fe:57:16:f2:1b:9a:b7:31:60: 2c:5a:6d:6e:3d:0d:1c:00:bf:2e:89:0e:56:a5:6d: 1d:19:c2:9b:9d:b1:c7:79:74:f3:b2:a6:fb:21:e0: 99:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5E:39:0F:79:66:EE:A6:B2:F6:AA:0E:04:1A:50:6B:6A:9B:A2:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/11fcf488-56c3-38f1-a544-3bbab76f8974.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 159.26.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f0:de:19:3c:a8:38:8b:6d:5a:a4:a8:4d:9b:8b:65:52:57: f0:2a:48:8d:7b:21:2c:e5:60:47:32:11:56:d0:b3:d2:b9:30: cb:69:3f:1d:98:b5:e9:81:96:f2:fa:5f:0b:64:94:98:09:ac: ec:c9:06:24:82:24:b4:dd:de:58:c2:33:11:fb:13:04:00:b4: cc:88:8a:56:7b:0f:0b:75:3d:02:b8:e4:df:30:63:d4:e0:52: 7b:ab:a6:fc:69:35:4e:c4:67:f0:a4:5e:23:08:54:ba:af:8c: 50:19:20:25:8b:09:1d:8a:39:a7:e3:bc:ac:10:db:63:b4:5f: f9:71:6e:81:ac:9c:e4:57:31:05:e0:73:2e:71:3f:ce:1f:ca: db:ff:d5:f0:b1:a9:09:7a:08:e4:11:0b:e4:4f:08:c4:0b:d1: f3:a2:8f:bd:6f:9b:d0:dc:9e:ae:e8:1b:fb:fa:a7:01:af:d4: 52:20:d6:86:ba:d9:27:df:8b:83:50:a6:09:be:20:29:fa:49: 69:c2:ee:b1:bf:a9:d9:e2:e8:97:65:24:1b:cc:a4:93:72:27: 62:ea:5b:b5:57:9e:3f:bd:6e:5c:d9:d2:5c:ba:b2:47:f3:9e: 97:06:d6:56:d1:3c:bf:47:21:e0:a7:bf:bf:de:01:20:95:6a: 2f:31:af:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4TP94h329N5Z4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Y2ExMDk1YjYtZmZhNS00Y2RjLWFmNmEtMDkxMDQzMDU1OTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl67pfVMMupex52JcvtVozSLOzD9yIYiNrCK VGp2ZIXyzZXa8qViAmd4B2XAhf/Fh0xdy1rhNv5RbDi8TbXQ7ftzCuPAPR8+asG3 Qy+0ce6zY7WQHgNeBx/a/jGIdsOyiS8EawRU2tPA6LwH6Ov3TsDEfzi6XHv54/we ECqpSzDF0Zr86wBL++WXycThYvlRlI/qNhKMHfdvtMXu4hSBut3RK6Vk5/0efFn0 LsWbUIuwpv5rC4Y6wISlMBKrxVw6q9RPffd9i3dcVDXWup0g1okxAVh7yOn+Vxby G5q3MWAsWm1uPQ0cAL8uiQ5WpW0dGcKbnbHHeXTzsqb7IeCZXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFeOQ95Zu6msvaqDgQaUGtqm6IxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvMTFmY2Y0ODgtNTZjMy0z OGYxLWE1NDQtM2JiYWI3NmY4OTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnxqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADw3hk8qDiLbVqkqE2bi2VSV/AqSI17ISzlYEcyEVbQs9K5MMtpPx2Y temBlvL6XwtklJgJrOzJBiSCJLTd3ljCMxH7EwQAtMyIilZ7Dwt1PQK45N8wY9Tg UnurpvxpNU7EZ/CkXiMIVLqvjFAZICWLCR2KOafjvKwQ22O0X/lxboGsnORXMQXg cy5xP84fytv/1fCxqQl6COQRC+RPCMQL0fOij71vm9Dcnq7oG/v6pwGv1FIg1oa6 2Sffi4NQpgm+ICn6SWnC7rG/qdni6JdlJBvMpJNyJ2LqW7VXnj+9blzZ0ly6skfz npcG1lbRPL9HIeCnv7/eASCVai8xr7w= -----END CERTIFICATE-----Generated at Thu Mar 26 15:08:40 2026 by rpki-client