$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/146ef9ae-f845-3565-9b2c-e21a984d126d.roa File: 146ef9ae-f845-3565-9b2c-e21a984d126d.roa (raw, json) Hash identifier: kcUrp8C3Hf8owY2UzUNrFRH9EQUigIzBWkY8GubwRyE= Subject key identifier: E5:0A:85:1D:7A:97:47:94:06:A1:B9:EB:DB:3F:A9:74:D5:91:22:26 Certificate issuer: /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee Certificate serial: 010D0C9F4328584D300A563920BE195AD7599180 Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/146ef9ae-f845-3565-9b2c-e21a984d126d.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 53407 IP address blocks: 158.120.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:56:39:20:be:19:5a:d7:59:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=5e383bff-fac6-4721-b3f3-65bc2e950bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:4f:8f:2c:85:55:55:78:e6:06:3e:47:e2: 73:f2:38:57:73:4f:19:6c:f7:fa:72:84:25:3f:fd: 50:c2:22:68:a1:e0:d9:a1:16:d5:f8:f7:6f:be:7f: b5:f8:0b:80:86:18:1e:8f:2c:28:8a:2b:14:13:79: 4c:f9:df:a7:3e:45:ca:53:5b:5a:f4:95:10:a3:81: 12:39:57:ec:71:55:c8:fa:97:8b:19:ca:77:7d:f8: 1e:f0:44:e9:7f:32:67:27:ab:62:8c:44:4d:a4:4b: 7b:df:5f:36:bd:b9:f4:75:1a:fa:51:63:6c:05:f0: 1c:0c:39:f9:38:b1:26:8b:2f:4f:69:67:55:42:e0: 8f:5c:39:71:31:0b:c0:96:c3:91:35:fc:55:ec:65: cb:01:bf:6c:d0:90:bd:54:d7:52:3d:e6:6e:cc:62: 82:1b:5c:be:12:1a:e2:9b:b3:d1:5a:0d:8e:ca:22: 41:10:4f:9c:2e:02:92:c1:6a:ed:3b:43:bb:37:92: 9e:22:c4:02:36:f0:0e:f9:fd:f8:b7:5c:80:96:39: f0:23:1e:04:d3:d3:66:a3:63:c5:5a:b1:97:13:04: 62:ce:b5:b0:d4:b9:91:82:ca:74:87:64:17:d7:f6: 4a:3e:4b:70:2d:44:eb:ea:7b:d3:6f:c3:fe:ad:af: 48:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0A:85:1D:7A:97:47:94:06:A1:B9:EB:DB:3F:A9:74:D5:91:22:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/146ef9ae-f845-3565-9b2c-e21a984d126d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl X509v3 Authority Key Identifier: keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer sbgp-ipAddrBlock: critical IPv4: 158.120.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a7:b7:9f:2d:c8:20:66:49:d5:13:15:bc:90:3d:13:3c:db: 1a:c6:33:95:2f:6e:69:2e:02:1e:23:9e:36:5d:f6:58:80:84: 9d:64:7d:ae:7f:6b:db:19:e9:7f:be:4a:96:f7:c9:c4:af:45: cc:9b:c0:99:f2:ae:81:a2:2c:07:56:a2:9a:5c:20:2d:10:70: 3c:a5:d7:4c:cc:b9:ec:d5:d1:d3:60:9b:17:34:ab:fb:bf:8c: e1:75:8f:e6:7b:43:4b:8f:56:3c:49:cc:29:4b:6b:ce:29:ee: ef:a1:12:fa:33:cf:97:e7:d0:a7:46:1d:6b:12:8a:4b:43:b1: d8:17:4a:b8:f8:45:0a:2d:b5:16:16:00:72:19:85:dd:be:69: 1f:fc:e9:41:d8:1a:86:16:c9:8f:81:42:ad:a0:cb:7c:f3:b0: e2:18:ab:e1:c5:ca:7b:a7:9e:73:9b:c2:fa:99:9b:c7:cb:ab: e0:34:54:1c:d1:97:47:c0:5c:5b:91:da:7d:ce:e9:d5:44:73: dd:2b:02:8c:17:92:c1:43:1c:7b:3b:02:da:a8:29:67:0c:94: 64:fb:32:88:0f:08:c2:e7:5f:4a:0b:af:87:07:f1:86:2b:08: 0c:01:0c:a5:a2:e3:3e:7c:e3:0e:2a:3a:8d:5a:ff:5a:f3:d8: e7:62:d7:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wClY5IL4ZWtdZkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE2MDE0YjEtZGYwZi00Y2ZkLTk5ODAtM2VlNGJjOWU5 ZmVlMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NWUzODNiZmYtZmFjNi00NzIxLWIzZjMtNjViYzJlOTUwYmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWBPjyyFVVV45gY+R+Jz8jhXc08ZbPf6coQl P/1QwiJooeDZoRbV+Pdvvn+1+AuAhhgejywoiisUE3lM+d+nPkXKU1ta9JUQo4ES OVfscVXI+peLGcp3ffge8ETpfzJnJ6tijERNpEt73182vbn0dRr6UWNsBfAcDDn5 OLEmiy9PaWdVQuCPXDlxMQvAlsORNfxV7GXLAb9s0JC9VNdSPeZuzGKCG1y+Ehri m7PRWg2OyiJBEE+cLgKSwWrtO0O7N5KeIsQCNvAO+f34t1yAljnwIx4E09Nmo2PF WrGXEwRizrWw1LmRgsp0h2QX1/ZKPktwLUTr6nvTb8P+ra9IcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUKhR16l0eUBqG569s/qXTVkSImMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYw MTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0YmM5ZTlmZWUvMTQ2ZWY5YWUtZjg0NS0z NTY1LTliMmMtZTIxYTk4NGQxMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGE2MDE0YjEtZGYwZi00Y2ZkLTk5 ODAtM2VlNGJjOWU5ZmVlLzhhNjAxNGIxLWRmMGYtNGNmZC05OTgwLTNlZTRiYzll OWZlZS5jcmwwHwYDVR0jBBgwFoAUkhU2LxsekHKvkCTiHxNn13oJ6bEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYwMTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0 YmM5ZTlmZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnnggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSnt58tyCBmSdUTFbyQPRM82xrGM5UvbmkuAh4jnjZd9liAhJ1kfa5/ a9sZ6X++Spb3ycSvRcybwJnyroGiLAdWoppcIC0QcDyl10zMuezV0dNgmxc0q/u/ jOF1j+Z7Q0uPVjxJzClLa84p7u+hEvozz5fn0KdGHWsSiktDsdgXSrj4RQottRYW AHIZhd2+aR/86UHYGoYWyY+BQq2gy3zzsOIYq+HFynunnnObwvqZm8fLq+A0VBzR l0fAXFuR2n3O6dVEc90rAowXksFDHHs7AtqoKWcMlGT7MogPCMLnX0oLr4cH8YYr CAwBDKWi4z584w4qOo1a/1rz2Odi1+Y= -----END CERTIFICATE-----Generated at Thu Mar 26 00:53:17 2026 by rpki-client