$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/0e58b5f4-d235-31a9-8461-9d4dd4e3a926.roa File: 0e58b5f4-d235-31a9-8461-9d4dd4e3a926.roa (raw, json) Hash identifier: nF4uUFYD6hz1cFwuUB9xfAblF9u6nk7YRD2jl8wADGE= Subject key identifier: FF:A2:13:91:17:FF:11:C3:21:3F:11:E6:BE:C0:D5:79:42:E4:9F:BA Certificate issuer: /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6 Certificate serial: 010D0C9F4328584DB0757802DE74E073978C08E0 Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/0e58b5f4-d235-31a9-8461-9d4dd4e3a926.roa Signing time: Fri 01 May 2026 13:00:30 +0000 ROA not before: Fri 01 May 2026 13:00:30 +0000 ROA not after: Thu 30 Jul 2026 13:00:30 +0000 asID: 21568 IP address blocks: 170.149.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b0:75:78:02:de:74:e0:73:97:8c:08:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6 Validity Not Before: May 1 13:00:30 2026 GMT Not After : Jul 30 13:00:30 2026 GMT Subject: CN=81e36162-9402-43e0-93e2-884b28e6d2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:10:bb:af:d8:32:27:0b:3a:13:43:63:55:9a: 0c:17:35:f0:9e:4e:3e:a6:fa:e0:9c:2d:72:41:10: 7e:9f:e7:da:6d:9b:38:3c:b0:89:bc:6c:0e:f2:9a: f6:b1:e7:94:b3:d0:c3:0b:d5:ef:29:e2:56:be:bd: 22:0a:76:59:37:95:e7:56:f0:35:8a:36:9f:7a:c8: c1:85:85:f2:59:7c:59:28:08:05:5a:fe:85:6d:71: 9d:aa:b6:62:ea:3e:19:ba:a8:31:3e:fa:e7:0b:6a: f4:3a:82:b2:a9:73:0f:3a:52:08:fe:78:40:1d:a1: 96:f8:e2:c7:24:30:b1:57:77:2d:d1:29:62:0c:87: 12:33:32:c5:d5:25:54:1e:c8:34:73:f4:90:62:41: 21:53:d4:cb:9d:73:bc:33:1b:06:2e:f7:e0:3a:b0: 38:da:a3:b7:e2:1a:d6:ba:2b:9c:d0:d7:38:f6:27: c5:2b:69:ec:4d:4a:93:f1:5a:99:4f:ba:8b:47:62: 99:bc:95:f5:17:86:e4:af:cc:9e:7b:34:39:b3:07: ef:3c:55:0b:f3:61:79:b3:ed:0d:0c:1e:62:b9:f8: 86:f2:a3:05:13:22:54:65:29:30:44:bd:39:cc:d3: 5d:c4:bd:11:b6:3b:e3:d4:02:83:ff:d8:96:35:b8: 60:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A2:13:91:17:FF:11:C3:21:3F:11:E6:BE:C0:D5:79:42:E4:9F:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/0e58b5f4-d235-31a9-8461-9d4dd4e3a926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl X509v3 Authority Key Identifier: keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer sbgp-ipAddrBlock: critical IPv4: 170.149.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:6c:c4:58:91:37:68:b6:a4:d1:48:f7:fb:37:d3:5d:61:55: 85:79:02:c0:d9:7c:7d:d7:b1:e7:50:2d:da:82:3e:12:39:f9: 49:7f:69:a9:60:31:ee:4c:de:ed:93:84:11:22:77:57:11:56: de:28:3e:98:80:c2:41:34:1f:7f:88:54:24:5b:a6:82:00:65: 41:bb:75:bf:04:25:d0:36:ed:42:45:43:12:ab:72:ef:0b:62: 1c:61:27:da:a0:1a:ec:94:f8:9c:e0:30:5d:84:da:2b:c5:a9: fb:ce:3e:b0:3f:d5:dd:32:c4:be:73:83:06:1b:45:15:e6:57: 55:45:17:1c:bb:ba:41:14:0a:67:f0:e5:3f:23:85:d8:b1:a1: e2:0d:a2:d3:94:02:62:35:ac:5a:05:e6:ed:68:13:ed:39:dd: 9b:80:f6:b5:21:de:f1:ef:70:f4:e8:eb:1c:04:75:aa:41:ff: b4:81:f7:f3:61:44:2f:92:ef:e2:b6:29:44:8d:97:63:b3:d1: fe:77:b4:b7:89:d1:97:55:8d:ff:33:8b:6f:38:24:7e:4f:45: 57:29:ea:30:96:36:fb:59:5d:be:5d:de:ac:e5:50:03:2f:9a: e3:2b:92:1f:4f:d3:50:40:2b:14:3a:ae:8d:f6:fa:cb:4a:2d: 9c:26:48:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2wdXgC3nTgc5eMCOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRjMzEzMDctZTEwZC00NTM3LWFhN2EtNmJiZjM2OTJj NWQ2MB4XDTI2MDUwMTEzMDAzMFoXDTI2MDczMDEzMDAzMFowLzEtMCsGA1UEAxMk ODFlMzYxNjItOTQwMi00M2UwLTkzZTItODg0YjI4ZTZkMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhC7r9gyJws6E0NjVZoMFzXwnk4+pvrgnC1y QRB+n+fabZs4PLCJvGwO8pr2seeUs9DDC9XvKeJWvr0iCnZZN5XnVvA1ijafesjB hYXyWXxZKAgFWv6FbXGdqrZi6j4ZuqgxPvrnC2r0OoKyqXMPOlII/nhAHaGW+OLH JDCxV3ct0SliDIcSMzLF1SVUHsg0c/SQYkEhU9TLnXO8MxsGLvfgOrA42qO34hrW uiuc0Nc49ifFK2nsTUqT8VqZT7qLR2KZvJX1F4bkr8yeezQ5swfvPFUL82F5s+0N DB5iufiG8qMFEyJUZSkwRL05zNNdxL0Rtjvj1AKD/9iWNbhgxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+iE5EX/xHDIT8R5r7A1XlC5J+6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMz MTMwNy1lMTBkLTQ1MzctYWE3YS02YmJmMzY5MmM1ZDYvMGU1OGI1ZjQtZDIzNS0z MWE5LTg0NjEtOWQ0ZGQ0ZTNhOTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjRjMzEzMDctZTEwZC00NTM3LWFh N2EtNmJiZjM2OTJjNWQ2LzI0YzMxMzA3LWUxMGQtNDUzNy1hYTdhLTZiYmYzNjky YzVkNi5jcmwwHwYDVR0jBBgwFoAUU0jWjSPeyR9it/CXVgVTm0JSO5wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMzMTMwNy1lMTBkLTQ1MzctYWE3YS02YmJm MzY5MmM1ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqpXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElsxFiRN2i2pNFI9/s3011hVYV5AsDZfH3XsedQLdqCPhI5+Ul/aalg Me5M3u2ThBEid1cRVt4oPpiAwkE0H3+IVCRbpoIAZUG7db8EJdA27UJFQxKrcu8L YhxhJ9qgGuyU+JzgMF2E2ivFqfvOPrA/1d0yxL5zgwYbRRXmV1VFFxy7ukEUCmfw 5T8jhdixoeINotOUAmI1rFoF5u1oE+053ZuA9rUh3vHvcPTo6xwEdapB/7SB9/Nh RC+S7+K2KUSNl2Oz0f53tLeJ0ZdVjf8zi284JH5PRVcp6jCWNvtZXb5d3qzlUAMv muMrkh9P01BAKxQ6ro32+stKLZwmSM4= -----END CERTIFICATE-----Generated at Wed May 13 01:12:54 2026 by rpki-client