$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/6dc002a1-bbc4-3072-8992-a9895f4cbf86.roa File: 6dc002a1-bbc4-3072-8992-a9895f4cbf86.roa (raw, json) Hash identifier: w6oxyxQ0BYIVYpHyIn5hX8eMuI4LSJsUU61zVLjiq3k= Subject key identifier: 8E:BA:8D:4A:88:F1:76:A8:3C:54:F6:A5:3E:38:D7:76:D0:E3:84:EC Certificate issuer: /CN=be7047c2-33bd-411c-802c-e79eb6aea35f Certificate serial: 010D0C9F4328584D1B19EA128CAB7DB580E57180 Authority key identifier: 55:7C:AA:E6:E4:52:A2:F3:51:4E:FD:84:5E:8F:7D:EE:4E:89:40:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/6dc002a1-bbc4-3072-8992-a9895f4cbf86.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 401602 IP address blocks: 164.153.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/be7047c2-33bd-411c-802c-e79eb6aea35f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/be7047c2-33bd-411c-802c-e79eb6aea35f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:ea:12:8c:ab:7d:b5:80:e5:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be7047c2-33bd-411c-802c-e79eb6aea35f Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=21e6168a-5d08-4e30-ba99-22d3d17cac6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:85:34:7a:00:87:5f:84:23:16:8a:32:83:be: 07:a3:e7:52:29:75:46:4f:4b:60:81:9c:bf:14:98: 30:6f:6d:46:e1:98:93:33:db:fe:c2:64:53:ea:eb: 16:5c:2b:76:cd:29:9b:0d:9e:6b:0c:66:40:a7:f2: 68:9f:8f:4b:9a:0e:07:aa:eb:31:9e:f7:0f:d2:90: a4:c3:80:73:e7:a9:34:14:cd:18:9c:19:e3:32:12: 78:53:8a:a4:bf:15:54:83:0e:f9:85:9c:49:a1:ac: 02:b1:70:54:c8:e7:2f:a7:b8:c2:11:ea:c8:95:33: 53:7f:76:93:00:ce:f5:d2:8a:3e:52:0a:b1:27:b0: 88:a5:cf:81:3c:75:54:5a:c3:73:50:f7:ed:5a:47: 07:c6:77:97:f9:23:39:4e:82:43:87:3c:1f:9e:bb: 3a:ae:21:6d:c8:1e:e1:d1:5c:a2:17:2f:d1:29:f8: 0b:22:82:1c:42:0d:df:f7:7d:ec:7d:b0:98:10:96: 5b:db:8e:7e:19:9f:13:a9:d6:39:1e:08:e7:64:84: ba:c7:20:dd:11:f7:72:a7:e8:79:f3:35:88:86:5d: e9:b0:d3:f4:26:cd:89:d8:36:73:5b:ee:0b:f5:46: eb:39:27:29:b0:71:18:6c:c9:9e:f0:70:52:1f:9a: 84:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BA:8D:4A:88:F1:76:A8:3C:54:F6:A5:3E:38:D7:76:D0:E3:84:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/6dc002a1-bbc4-3072-8992-a9895f4cbf86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/be7047c2-33bd-411c-802c-e79eb6aea35f.crl X509v3 Authority Key Identifier: keyid:55:7C:AA:E6:E4:52:A2:F3:51:4E:FD:84:5E:8F:7D:EE:4E:89:40:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f.cer sbgp-ipAddrBlock: critical IPv4: 164.153.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:e4:29:0d:36:6f:00:8a:a5:a2:a5:64:e5:a4:b3:cb:6c:4d: ce:32:73:30:83:b4:5d:d3:97:19:94:a9:79:aa:0d:93:b2:6b: 7e:9f:be:09:c9:37:84:67:ed:51:52:e0:c8:3f:d4:1f:2a:4f: d8:4b:31:f4:91:70:f3:e7:53:36:65:34:13:af:88:f9:49:1f: 05:c1:c3:2f:3d:73:55:ed:b9:dd:24:29:04:2b:c1:13:f1:a9: 4b:24:65:3a:70:71:63:87:ae:ba:cc:25:bf:e0:aa:c6:76:40: b6:ba:d6:a6:1c:c1:15:46:a1:e0:63:7c:6e:4b:79:7b:18:dd: b7:f4:b1:10:66:2e:0d:c2:4f:33:0f:47:6f:b2:ac:fb:0c:4c: 77:ed:42:9a:b8:da:c8:b8:cb:26:77:0a:6f:69:88:9a:45:c6: 1c:49:f0:10:4a:f2:04:67:90:d9:b8:d3:c0:9a:aa:61:76:4e: ef:c1:b2:9f:6c:1f:06:e4:63:3d:7b:a3:56:a1:37:a5:39:dc: 7a:42:04:6f:af:0e:5a:49:ee:93:d3:62:ed:55:f8:18:cc:6c: d7:f1:b3:a7:25:ef:7c:5e:e6:d0:5a:48:5d:d7:9c:4d:1d:dc: 20:8c:b6:22:99:68:36:19:98:b2:e8:dc:f0:f2:4d:60:c0:c2: 02:ea:ce:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGeoSjKt9tYDlcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU3MDQ3YzItMzNiZC00MTFjLTgwMmMtZTc5ZWI2YWVh MzVmMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MjFlNjE2OGEtNWQwOC00ZTMwLWJhOTktMjJkM2QxN2NhYzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoU0egCHX4QjFooyg74Ho+dSKXVGT0tggZy/ FJgwb21G4ZiTM9v+wmRT6usWXCt2zSmbDZ5rDGZAp/Jon49Lmg4HqusxnvcP0pCk w4Bz56k0FM0YnBnjMhJ4U4qkvxVUgw75hZxJoawCsXBUyOcvp7jCEerIlTNTf3aT AM710oo+UgqxJ7CIpc+BPHVUWsNzUPftWkcHxneX+SM5ToJDhzwfnrs6riFtyB7h 0VyiFy/RKfgLIoIcQg3f933sfbCYEJZb245+GZ8TqdY5HgjnZIS6xyDdEfdyp+h5 8zWIhl3psNP0Js2J2DZzW+4L9UbrOScpsHEYbMme8HBSH5qEcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI66jUqI8XaoPFT2pT4413bQ44TsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZTcw NDdjMi0zM2JkLTQxMWMtODAyYy1lNzllYjZhZWEzNWYvNmRjMDAyYTEtYmJjNC0z MDcyLTg5OTItYTk4OTVmNGNiZjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmU3MDQ3YzItMzNiZC00MTFjLTgw MmMtZTc5ZWI2YWVhMzVmL2JlNzA0N2MyLTMzYmQtNDExYy04MDJjLWU3OWViNmFl YTM1Zi5jcmwwHwYDVR0jBBgwFoAUVXyq5uRSovNRTv2EXo997k6JQHIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZTcwNDdjMi0zM2JkLTQxMWMtODAyYy1lNzll YjZhZWEzNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJmOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDkKQ02bwCKpaKlZOWks8tsTc4yczCDtF3TlxmUqXmqDZOya36fvgnJ N4Rn7VFS4Mg/1B8qT9hLMfSRcPPnUzZlNBOviPlJHwXBwy89c1Xtud0kKQQrwRPx qUskZTpwcWOHrrrMJb/gqsZ2QLa61qYcwRVGoeBjfG5LeXsY3bf0sRBmLg3CTzMP R2+yrPsMTHftQpq42si4yyZ3Cm9piJpFxhxJ8BBK8gRnkNm408CaqmF2Tu/Bsp9s HwbkYz17o1ahN6U53HpCBG+vDlpJ7pPTYu1V+BjMbNfxs6cl73xe5tBaSF3XnE0d 3CCMtiKZaDYZmLLo3PDyTWDAwgLqzm8= -----END CERTIFICATE-----Generated at Thu Mar 26 08:48:16 2026 by rpki-client