$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/52d0b932-f808-31e1-a65a-b40b5dc3df2c.roa File: 52d0b932-f808-31e1-a65a-b40b5dc3df2c.roa (raw, json) Hash identifier: iTlm+ijHYCjfN48exuwNZMzhEgTS1TO4EmPUHMt5xvU= Subject key identifier: 99:9C:F8:16:0F:A1:6B:32:C3:0C:AA:93:26:6A:41:54:9C:54:E6:98 Certificate issuer: /CN=a84229b8-4341-4c6e-9665-bb4d991b9cdb Certificate serial: 010D0C9F4328584D2644A289E85C34F596F2333F Authority key identifier: 14:F9:A4:42:11:36:C9:E8:D1:AB:75:9D:CF:2A:CD:AE:7F:19:87:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/52d0b932-f808-31e1-a65a-b40b5dc3df2c.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 14618 IP address blocks: 159.119.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/a84229b8-4341-4c6e-9665-bb4d991b9cdb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/a84229b8-4341-4c6e-9665-bb4d991b9cdb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:a2:89:e8:5c:34:f5:96:f2:33:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a84229b8-4341-4c6e-9665-bb4d991b9cdb Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=176bdc0c-f259-4fcb-a1f1-a449c062260b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2b:07:cc:b6:4d:b8:d4:4b:20:f9:5e:1e:db: 70:43:21:fe:f1:02:d2:d1:41:05:2f:4f:0f:dd:7b: 18:db:46:2a:f7:cc:11:93:f5:a9:85:f5:37:2b:37: 3a:65:dd:9d:02:9a:9b:9d:76:84:0b:73:0b:79:4f: 42:6d:8c:1e:f0:b7:31:18:f6:4b:75:0e:04:c1:0b: 01:77:ff:64:dc:20:3f:09:95:56:35:d3:55:7d:8c: be:8f:19:15:b2:85:e6:31:00:34:4a:29:2f:db:20: 94:ac:8d:72:49:fa:13:5d:e2:44:99:5f:9e:ea:26: 9d:f8:13:c1:b6:9b:36:57:9a:ab:93:ad:5f:5c:ff: ab:90:d3:c7:62:dc:19:e6:74:6d:f4:fe:d4:da:81: de:83:9b:43:2a:3b:51:6c:c1:f1:bf:25:85:5f:11: 3d:7c:4a:00:6f:d9:4e:16:7f:62:ba:e8:b7:c3:d3: 46:e4:8c:d9:b6:b3:9a:eb:7e:14:e3:5a:07:be:49: 5a:40:07:22:d3:b0:5b:cd:6f:f3:83:6f:5e:2a:70: 81:86:b1:fd:98:09:1c:00:ca:47:98:02:32:d7:60: 06:00:fc:39:2a:bc:26:a4:d4:19:35:68:a8:de:0f: b4:41:03:14:f2:20:02:7e:ac:ca:e1:39:09:df:78: 53:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9C:F8:16:0F:A1:6B:32:C3:0C:AA:93:26:6A:41:54:9C:54:E6:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/52d0b932-f808-31e1-a65a-b40b5dc3df2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/a84229b8-4341-4c6e-9665-bb4d991b9cdb.crl X509v3 Authority Key Identifier: keyid:14:F9:A4:42:11:36:C9:E8:D1:AB:75:9D:CF:2A:CD:AE:7F:19:87:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb.cer sbgp-ipAddrBlock: critical IPv4: 159.119.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:27:3c:56:93:3d:fe:70:8d:35:17:a6:d2:7f:4f:eb:8c:e3: 64:73:32:b0:7e:5f:0d:e2:49:fc:6c:8b:99:dd:9f:c1:c2:ce: 9f:34:ca:56:f4:33:ee:14:46:c9:33:a6:7c:a2:6e:a9:af:3a: 6b:b6:49:de:8f:4b:7e:66:ae:0d:f5:5d:1f:b9:35:f1:93:13: 75:c2:e1:04:50:86:d0:d0:c2:28:ad:e2:29:0b:03:78:9b:c6: 17:62:53:d5:b3:ce:c0:d5:b4:0a:19:f0:a0:e2:db:a5:92:47: 6a:9a:f5:16:31:7e:3a:37:c5:81:cf:e8:78:ce:7a:e4:7e:db: 71:b9:da:99:22:1f:62:6c:2c:32:e1:42:d7:91:91:dc:52:89: fa:70:2b:d7:e1:20:84:56:8c:75:57:8e:97:4c:b7:1b:68:d1: b1:19:be:02:80:a2:58:5f:71:00:23:93:bc:43:03:ce:61:35: bd:ec:68:82:0e:e3:51:e0:93:68:7f:10:76:ea:61:37:57:cd: a2:ca:8c:f0:f5:6d:03:09:74:1d:52:83:66:dd:22:9d:59:85: 04:70:8e:c7:15:67:81:08:a6:c9:30:6e:ba:45:b9:2c:29:b9: fc:47:01:14:f7:45:c1:f8:e2:01:03:03:2f:20:5e:95:21:6e: 81:f4:4c:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRKKJ6Fw09ZbyMz8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg0MjI5YjgtNDM0MS00YzZlLTk2NjUtYmI0ZDk5MWI5 Y2RiMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk MTc2YmRjMGMtZjI1OS00ZmNiLWExZjEtYTQ0OWMwNjIyNjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnysHzLZNuNRLIPleHttwQyH+8QLS0UEFL08P 3XsY20Yq98wRk/WphfU3Kzc6Zd2dApqbnXaEC3MLeU9CbYwe8LcxGPZLdQ4EwQsB d/9k3CA/CZVWNdNVfYy+jxkVsoXmMQA0Sikv2yCUrI1ySfoTXeJEmV+e6iad+BPB tps2V5qrk61fXP+rkNPHYtwZ5nRt9P7U2oHeg5tDKjtRbMHxvyWFXxE9fEoAb9lO Fn9iuui3w9NG5IzZtrOa634U41oHvklaQAci07BbzW/zg29eKnCBhrH9mAkcAMpH mAIy12AGAPw5KrwmpNQZNWio3g+0QQMU8iACfqzK4TkJ33hT4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmc+BYPoWsywwyqkyZqQVScVOaYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODQy MjliOC00MzQxLTRjNmUtOTY2NS1iYjRkOTkxYjljZGIvNTJkMGI5MzItZjgwOC0z MWUxLWE2NWEtYjQwYjVkYzNkZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg0MjI5YjgtNDM0MS00YzZlLTk2 NjUtYmI0ZDk5MWI5Y2RiL2E4NDIyOWI4LTQzNDEtNGM2ZS05NjY1LWJiNGQ5OTFi OWNkYi5jcmwwHwYDVR0jBBgwFoAUFPmkQhE2yejRq3WdzyrNrn8Zh6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hODQyMjliOC00MzQxLTRjNmUtOTY2NS1iYjRk OTkxYjljZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn3eAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFInPFaTPf5wjTUXptJ/T+uM42RzMrB+Xw3iSfxsi5ndn8HCzp80ylb0 M+4URskzpnyibqmvOmu2Sd6PS35mrg31XR+5NfGTE3XC4QRQhtDQwiit4ikLA3ib xhdiU9WzzsDVtAoZ8KDi26WSR2qa9RYxfjo3xYHP6HjOeuR+23G52pkiH2JsLDLh QteRkdxSifpwK9fhIIRWjHVXjpdMtxto0bEZvgKAolhfcQAjk7xDA85hNb3saIIO 41Hgk2h/EHbqYTdXzaLKjPD1bQMJdB1Sg2bdIp1ZhQRwjscVZ4EIpskwbrpFuSwp ufxHART3RcH44gEDAy8gXpUhboH0TDc= -----END CERTIFICATE-----Generated at Thu Mar 26 02:09:30 2026 by rpki-client