$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad7e6acd-9722-496e-b091-3ea437453856/b2e6b538-c685-379c-890e-a97412e7aeef.roa File: b2e6b538-c685-379c-890e-a97412e7aeef.roa (raw, json) Hash identifier: xpzOkz5oAqpIDg5vwDWmbDbyBqhRzgKWBhg6ctL+3V4= Subject key identifier: 4D:45:96:4D:41:45:30:F6:83:B1:D4:8A:92:76:87:59:34:FD:6A:D6 Certificate issuer: /CN=ad7e6acd-9722-496e-b091-3ea437453856 Certificate serial: 010D0C9F4328584D3341B2DF280D95BAB8E46E80 Authority key identifier: 5D:78:A2:2D:38:B7:F9:1A:79:0A:40:39:CB:45:85:14:54:6B:CF:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad7e6acd-9722-496e-b091-3ea437453856.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad7e6acd-9722-496e-b091-3ea437453856/b2e6b538-c685-379c-890e-a97412e7aeef.roa Signing time: Tue 17 Mar 2026 16:40:11 +0000 ROA not before: Tue 17 Mar 2026 16:40:11 +0000 ROA not after: Mon 15 Jun 2026 16:40:11 +0000 asID: 25903 IP address blocks: 213.159.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad7e6acd-9722-496e-b091-3ea437453856/ad7e6acd-9722-496e-b091-3ea437453856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad7e6acd-9722-496e-b091-3ea437453856/ad7e6acd-9722-496e-b091-3ea437453856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad7e6acd-9722-496e-b091-3ea437453856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:33:41:b2:df:28:0d:95:ba:b8:e4:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad7e6acd-9722-496e-b091-3ea437453856 Validity Not Before: Mar 17 16:40:11 2026 GMT Not After : Jun 15 16:40:11 2026 GMT Subject: CN=b1db30c9-8ca1-4e10-a259-8302c813f320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e1:e6:b3:c2:92:1f:6c:a3:ac:16:db:e4:dd: 17:3c:9a:06:84:00:51:b4:b5:a1:96:06:63:7a:fa: 21:45:6d:c4:54:5f:d1:ee:12:9a:68:fb:78:1e:8e: 12:90:74:1e:af:4c:8b:40:35:a0:93:fd:99:b6:24: b5:04:62:94:46:30:0d:20:62:88:0a:b7:c4:5a:2b: 47:33:b0:83:98:72:b2:eb:42:f3:8b:2c:55:7f:da: f2:b3:ce:55:aa:d0:8b:20:ec:e1:d1:3b:44:9a:37: 7d:2c:4c:4e:b5:ab:1c:c3:0c:c8:65:75:3e:82:0e: 32:85:07:15:b7:8c:0b:b2:23:5a:9d:8a:a7:b6:fc: a6:f1:d7:25:50:74:e1:7f:00:05:34:b9:91:96:23: 7c:ea:7b:88:b3:98:0d:72:ed:74:4c:2c:ef:1b:9a: 8f:d5:5a:2a:be:07:f5:45:46:60:87:d1:11:86:74: 07:13:d4:09:2e:71:38:df:16:ca:b0:e9:cf:2d:ab: 76:3f:28:97:e6:70:1a:1a:56:e8:c3:d4:00:e9:d2: f9:1f:96:96:d5:5e:fd:b7:5b:6c:f2:aa:f8:64:87: 0b:84:26:e9:48:f3:bb:1b:4e:4b:c3:ea:35:1a:bf: fb:f3:14:1d:12:7e:e3:b3:07:4b:34:d9:75:21:eb: 0c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:45:96:4D:41:45:30:F6:83:B1:D4:8A:92:76:87:59:34:FD:6A:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad7e6acd-9722-496e-b091-3ea437453856/b2e6b538-c685-379c-890e-a97412e7aeef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad7e6acd-9722-496e-b091-3ea437453856/ad7e6acd-9722-496e-b091-3ea437453856.crl X509v3 Authority Key Identifier: keyid:5D:78:A2:2D:38:B7:F9:1A:79:0A:40:39:CB:45:85:14:54:6B:CF:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad7e6acd-9722-496e-b091-3ea437453856.cer sbgp-ipAddrBlock: critical IPv4: 213.159.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:1e:6d:ac:66:8f:1b:b8:0d:9f:f7:80:ea:b8:93:fb:be:ef: 20:78:19:01:8e:35:ad:9e:90:42:f4:f2:e8:18:95:4b:29:d6: f3:ec:ac:06:a8:b4:15:97:10:80:ef:66:b9:19:2b:fa:10:ed: 71:d0:b3:ae:c1:78:82:af:12:50:55:12:7c:85:6d:98:e1:24: e3:56:00:f7:22:dd:09:a9:48:f8:9f:dc:84:68:3a:81:c2:eb: 21:21:4a:fa:00:4d:65:7b:19:36:69:9d:8d:e7:98:d5:9c:b3: 15:12:35:91:ce:c0:67:1f:83:29:cd:d3:e6:0a:42:c7:35:bf: 5d:62:2b:14:d2:d9:50:46:0d:fa:a9:ad:9c:5d:1c:38:9c:98: c7:76:14:fb:23:4c:95:45:d8:1e:23:0d:19:a7:82:66:a8:0b: 84:79:f7:44:f6:6f:12:26:eb:a8:2b:f2:82:93:78:58:a5:46: 60:e9:da:4d:d6:1f:f7:12:d1:e2:09:bc:dc:2b:26:9a:ab:7b: 9d:0f:97:17:75:19:d7:dd:41:1f:f8:25:76:f0:32:39:16:4d: 1c:ca:b7:32:16:17:00:4a:21:79:8c:27:ba:b3:b3:73:eb:74: 16:4e:f7:2e:60:7a:07:14:b2:24:24:90:8e:ea:db:6d:cd:de: f5:81:90:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0zQbLfKA2VurjkboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ3ZTZhY2QtOTcyMi00OTZlLWIwOTEtM2VhNDM3NDUz ODU2MB4XDTI2MDMxNzE2NDAxMVoXDTI2MDYxNTE2NDAxMVowLzEtMCsGA1UEAxMk YjFkYjMwYzktOGNhMS00ZTEwLWEyNTktODMwMmM4MTNmMzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOHms8KSH2yjrBbb5N0XPJoGhABRtLWhlgZj evohRW3EVF/R7hKaaPt4Ho4SkHQer0yLQDWgk/2ZtiS1BGKURjANIGKICrfEWitH M7CDmHKy60LziyxVf9rys85VqtCLIOzh0TtEmjd9LExOtascwwzIZXU+gg4yhQcV t4wLsiNanYqntvym8dclUHThfwAFNLmRliN86nuIs5gNcu10TCzvG5qP1Voqvgf1 RUZgh9ERhnQHE9QJLnE43xbKsOnPLat2PyiX5nAaGlbow9QA6dL5H5aW1V79t1ts 8qr4ZIcLhCbpSPO7G05Lw+o1Gr/78xQdEn7jswdLNNl1IesMrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1Flk1BRTD2g7HUipJ2h1k0/WrWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZDdl NmFjZC05NzIyLTQ5NmUtYjA5MS0zZWE0Mzc0NTM4NTYvYjJlNmI1MzgtYzY4NS0z NzljLTg5MGUtYTk3NDEyZTdhZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWQ3ZTZhY2QtOTcyMi00OTZlLWIw OTEtM2VhNDM3NDUzODU2L2FkN2U2YWNkLTk3MjItNDk2ZS1iMDkxLTNlYTQzNzQ1 Mzg1Ni5jcmwwHwYDVR0jBBgwFoAUXXiiLTi3+Rp5CkA5y0WFFFRrz7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZDdlNmFjZC05NzIyLTQ5NmUtYjA5MS0zZWE0 Mzc0NTM4NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Z8PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYebaxmjxu4DZ/3gOq4k/u+7yB4GQGONa2ekEL08ugYlUsp1vPsrAao tBWXEIDvZrkZK/oQ7XHQs67BeIKvElBVEnyFbZjhJONWAPci3QmpSPif3IRoOoHC 6yEhSvoATWV7GTZpnY3nmNWcsxUSNZHOwGcfgynN0+YKQsc1v11iKxTS2VBGDfqp rZxdHDicmMd2FPsjTJVF2B4jDRmngmaoC4R590T2bxIm66gr8oKTeFilRmDp2k3W H/cS0eIJvNwrJpqre50Plxd1GdfdQR/4JXbwMjkWTRzKtzIWFwBKIXmMJ7qzs3Pr dBZO9y5gegcUsiQkkI7q223N3vWBkGA= -----END CERTIFICATE-----Generated at Thu Mar 26 11:13:36 2026 by rpki-client