$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa File: 59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa (raw, json) Hash identifier: R0js6UEY6JXMqD6FORyM0t2Rv8yzQDbHfi3vrBxotBU= Subject key identifier: BA:B5:D9:F9:6A:3B:D3:BD:FD:FF:10:AD:43:6C:8D:AA:B3:C8:CF:68 Certificate issuer: /CN=8e5312d0-770c-4d40-8042-53d0eadc436b Certificate serial: 010D0C9F4328584D2644C3F92FC828D1EE7DE600 Authority key identifier: 3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 21976 IP address blocks: 192.150.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:c3:f9:2f:c8:28:d1:ee:7d:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5312d0-770c-4d40-8042-53d0eadc436b Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=01a3ae06-ff1e-4f17-b68c-95933db13642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ff:59:25:d4:7c:00:f2:c8:64:aa:b9:f3:d8: a5:8b:d6:55:01:c3:f7:2f:cb:3a:56:8c:7b:a8:af: c7:04:b5:0f:77:fb:1e:ff:be:1f:4a:2d:4e:de:a1: 51:21:ce:46:66:3f:b6:d1:60:ff:0f:97:20:43:75: a5:1a:7a:2f:00:1e:4c:31:45:0f:d0:49:39:28:7f: 15:2f:8e:d2:cd:21:d4:2e:7f:d4:d8:31:04:b1:0a: d8:c1:18:ef:b7:6d:9a:dc:b2:f9:7e:8c:8b:5a:4e: b5:a0:43:5f:62:04:30:f5:ba:ad:dd:d7:17:96:04: ec:41:c9:0e:30:96:be:b5:a6:9e:30:59:6d:da:38: 67:8c:dd:47:02:2f:12:44:02:5f:ea:49:d4:83:42: a6:73:5c:76:63:fe:23:0b:cd:a3:73:4b:8b:7d:f6: aa:a9:ec:71:6f:6a:72:0e:05:56:02:44:25:50:59: c6:d6:c4:19:ad:bb:7f:1b:d5:d4:77:23:35:c0:c3: e9:00:26:3c:83:63:ae:dd:ed:9e:1f:69:a6:81:0b: 4f:0c:59:e9:44:b5:5a:20:d7:35:d7:29:e8:11:ff: f3:9a:d0:78:b1:1f:c3:d9:f7:bf:40:f7:01:64:d4: c9:1a:d7:59:c4:93:28:77:d2:00:e7:36:74:9e:02: fe:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B5:D9:F9:6A:3B:D3:BD:FD:FF:10:AD:43:6C:8D:AA:B3:C8:CF:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl X509v3 Authority Key Identifier: keyid:3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer sbgp-ipAddrBlock: critical IPv4: 192.150.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:b5:86:bb:5a:b9:91:e2:34:68:8f:44:95:b0:26:db:e8:bf: 3e:db:cb:c6:23:54:bd:6e:25:80:4a:af:7c:c2:8b:1c:99:fa: 3a:b1:77:cd:09:f0:7b:b6:03:fd:20:dc:db:a0:c1:83:bc:de: 3f:9c:0f:91:bf:a4:15:d3:4c:45:ab:05:05:7e:ca:9c:68:72: a9:81:60:30:b3:f1:29:b5:d6:f7:93:22:c7:e3:c8:a8:5c:06: fd:56:1d:bc:e8:e9:42:36:5a:7f:53:0a:bd:c3:d9:46:a7:a1: 20:ab:3b:67:45:2b:f0:27:f4:c1:90:e8:62:6c:5b:e7:c3:2d: e2:50:47:82:28:6d:f4:d1:24:4d:01:4a:73:de:b9:29:0d:84: 66:3f:a8:62:44:1f:6f:cf:c5:aa:b1:e8:60:ff:5c:14:43:a4: d2:71:6a:95:0d:c3:20:36:86:30:33:3d:75:78:e7:6c:52:31: 67:36:16:30:cf:a6:29:55:b8:38:58:33:5e:b1:a7:f8:7f:e6: b6:5b:9c:2c:35:c2:50:b4:28:3a:16:9b:59:54:68:fc:0f:f6: 2e:f2:24:60:05:c2:d6:a0:27:3c:36:ee:56:b4:06:a8:0f:33: 7c:16:fe:06:33:49:6c:b8:e5:63:ad:ec:91:29:51:1d:88:a8: 6f:c2:bf:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRMP5L8go0e595gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MzEyZDAtNzcwYy00ZDQwLTgwNDItNTNkMGVhZGM0 MzZiMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk MDFhM2FlMDYtZmYxZS00ZjE3LWI2OGMtOTU5MzNkYjEzNjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv9ZJdR8APLIZKq589ili9ZVAcP3L8s6Vox7 qK/HBLUPd/se/74fSi1O3qFRIc5GZj+20WD/D5cgQ3WlGnovAB5MMUUP0Ek5KH8V L47SzSHULn/U2DEEsQrYwRjvt22a3LL5foyLWk61oENfYgQw9bqt3dcXlgTsQckO MJa+taaeMFlt2jhnjN1HAi8SRAJf6knUg0Kmc1x2Y/4jC82jc0uLffaqqexxb2py DgVWAkQlUFnG1sQZrbt/G9XUdyM1wMPpACY8g2Ou3e2eH2mmgQtPDFnpRLVaINc1 1ynoEf/zmtB4sR/D2fe/QPcBZNTJGtdZxJMod9IA5zZ0ngL+MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLq12flqO9O9/f8QrUNsjaqzyM9oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUz MTJkMC03NzBjLTRkNDAtODA0Mi01M2QwZWFkYzQzNmIvNTlkZWIzYmUtNGNjOC0z ZmNkLTkxZWQtZTg1MDNjOGIzMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU1MzEyZDAtNzcwYy00ZDQwLTgw NDItNTNkMGVhZGM0MzZiLzhlNTMxMmQwLTc3MGMtNGQ0MC04MDQyLTUzZDBlYWRj NDM2Yi5jcmwwHwYDVR0jBBgwFoAUP3aJvQwX92PDUxjSibUKRzfWiQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUzMTJkMC03NzBjLTRkNDAtODA0Mi01M2Qw ZWFkYzQzNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFa1hrtauZHiNGiPRJWwJtvovz7by8YjVL1uJYBKr3zCixyZ+jqxd80J 8Hu2A/0g3NugwYO83j+cD5G/pBXTTEWrBQV+ypxocqmBYDCz8Sm11veTIsfjyKhc Bv1WHbzo6UI2Wn9TCr3D2UanoSCrO2dFK/An9MGQ6GJsW+fDLeJQR4IobfTRJE0B SnPeuSkNhGY/qGJEH2/Pxaqx6GD/XBRDpNJxapUNwyA2hjAzPXV452xSMWc2FjDP pilVuDhYM16xp/h/5rZbnCw1wlC0KDoWm1lUaPwP9i7yJGAFwtagJzw27la0BqgP M3wW/gYzSWy45WOt7JEpUR2IqG/Cv9w= -----END CERTIFICATE-----Generated at Thu Mar 26 11:37:51 2026 by rpki-client