$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a936f59c-530b-3701-8514-dcc669422914.roa File: a936f59c-530b-3701-8514-dcc669422914.roa (raw, json) Hash identifier: ZVTYIkgwQGYT8p9WebcDP3omboOk+0x1KehYcI6mWko= Subject key identifier: A8:CA:C3:E5:40:7B:43:F7:F8:69:75:F6:B3:EE:E4:09:8B:59:1A:E8 Certificate issuer: /CN=61e7cca0-e65d-417d-a651-371c91be9c95 Certificate serial: 010D0C9F4328584D703FE1E6411C8A0DB20D7940 Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a936f59c-530b-3701-8514-dcc669422914.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 1448 IP address blocks: 156.146.128.0/18 maxlen: 18 156.146.192.0/20 maxlen: 20 156.146.208.0/20 maxlen: 20 156.146.224.0/19 maxlen: 19 158.41.128.0/19 maxlen: 19 158.41.160.0/20 maxlen: 20 158.41.176.0/21 maxlen: 21 158.41.184.0/21 maxlen: 21 158.41.192.0/20 maxlen: 20 158.41.208.0/20 maxlen: 20 158.41.224.0/20 maxlen: 20 158.41.240.0/20 maxlen: 20 158.41.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:e1:e6:41:1c:8a:0d:b2:0d:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=3c37fb97-83ab-4aa7-b55e-3f2b60e17e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:41:ee:60:24:e8:1a:21:11:88:33:34:ea:b2: 40:b1:8f:16:fa:4a:ed:ac:87:50:c5:41:55:dc:50: c5:4c:42:70:57:1a:83:aa:a6:b5:79:7d:2c:c5:41: 3d:a0:d0:35:dd:41:bb:99:a7:8e:85:a3:0d:75:50: 97:52:8d:d4:4e:be:8b:10:90:b3:1c:84:61:15:d7: 51:7c:ee:55:bc:c9:e8:c4:f3:45:52:6f:4b:8a:57: d9:14:06:7e:5d:09:f7:3b:a1:11:cd:12:10:b1:41: 44:92:a5:83:3d:68:d5:8b:59:da:fc:2d:77:4f:b1: 7e:87:bc:b3:c6:a4:a6:41:5b:7b:1a:62:26:d7:52: a0:f9:f4:75:aa:37:76:b5:cf:0e:e1:75:f0:16:b7: b1:84:5c:c1:b6:22:96:80:aa:bb:2a:b1:64:86:eb: 48:9d:7b:51:00:0d:6c:c1:e4:93:20:be:58:b6:e9: ca:2b:99:2e:f5:ae:14:3e:b9:56:a4:41:68:81:9d: 59:cf:28:fe:5a:b0:19:3f:0c:2f:33:9a:26:fd:6a: be:52:96:0e:a2:90:ab:01:5b:f6:71:f7:92:74:ea: 65:4b:ec:7b:7e:21:33:0b:e4:a9:08:08:c5:8e:03: e6:ff:5c:42:f9:20:9d:86:11:c1:f7:fe:da:94:5f: fa:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CA:C3:E5:40:7B:43:F7:F8:69:75:F6:B3:EE:E4:09:8B:59:1A:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a936f59c-530b-3701-8514-dcc669422914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl X509v3 Authority Key Identifier: keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer sbgp-ipAddrBlock: critical IPv4: 156.146.128.0/17 158.41.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:67:92:2e:0b:69:f5:8a:8d:c3:8e:94:0f:b3:0e:a9:a8:e4: e8:ac:3d:70:fa:a5:45:1a:00:26:24:e5:9b:db:d3:b5:5e:82: b9:ab:cc:47:d6:f4:86:94:01:9d:98:7c:2c:48:b0:bb:f9:99: 65:b5:d5:37:36:f4:99:30:39:1c:6b:4d:30:2e:2a:14:b7:62: fd:c9:a5:93:e4:3a:07:dc:cb:94:f4:13:d9:79:09:1d:00:67: 92:4c:59:ff:c9:c6:c2:a9:22:9e:e8:f7:7e:10:a6:7d:ff:89: 8d:25:26:47:69:62:c2:5e:20:cb:c6:98:6c:49:22:88:88:bd: cc:1f:47:a5:95:47:c3:b7:61:1d:c8:36:85:4c:da:6c:1a:07: 24:15:a9:64:e5:48:96:d9:8f:70:c3:12:86:c8:7f:9f:b8:e6: ca:64:7b:0c:bb:19:d8:89:49:d3:a7:fa:da:be:58:b7:0d:c9: c6:dc:ce:f2:8b:ff:89:88:05:c7:2f:09:35:9e:b7:0a:bc:b4: 2b:37:e5:14:ba:74:47:99:a0:4a:a9:ee:32:3e:e2:44:30:a9: ae:28:3f:fc:64:2a:a6:b1:02:e2:4b:18:ce:86:8b:fd:3b:73: c3:e2:38:5d:a3:90:d5:96:5b:f1:a9:38:78:98:2e:d8:2e:6c: 12:0b:b2:cc -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1wP+HmQRyKDbINeUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFlN2NjYTAtZTY1ZC00MTdkLWE2NTEtMzcxYzkxYmU5 Yzk1MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk M2MzN2ZiOTctODNhYi00YWE3LWI1NWUtM2YyYjYwZTE3ZTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUHuYCToGiERiDM06rJAsY8W+krtrIdQxUFV 3FDFTEJwVxqDqqa1eX0sxUE9oNA13UG7maeOhaMNdVCXUo3UTr6LEJCzHIRhFddR fO5VvMnoxPNFUm9LilfZFAZ+XQn3O6ERzRIQsUFEkqWDPWjVi1na/C13T7F+h7yz xqSmQVt7GmIm11Kg+fR1qjd2tc8O4XXwFrexhFzBtiKWgKq7KrFkhutInXtRAA1s weSTIL5YtunKK5ku9a4UPrlWpEFogZ1Zzyj+WrAZPwwvM5om/Wq+UpYOopCrAVv2 cfeSdOplS+x7fiEzC+SpCAjFjgPm/1xC+SCdhhHB9/7alF/6YwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKjKw+VAe0P3+Gl19rPu5AmLWRroMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3 Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFjOTFiZTljOTUvYTkzNmY1OWMtNTMwYi0z NzAxLTg1MTQtZGNjNjY5NDIyOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjFlN2NjYTAtZTY1ZC00MTdkLWE2 NTEtMzcxYzkxYmU5Yzk1LzYxZTdjY2EwLWU2NWQtNDE3ZC1hNjUxLTM3MWM5MWJl OWM5NS5jcmwwHwYDVR0jBBgwFoAUZKKfsBKjdPIJ4gOO6+LG02MkVyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFj OTFiZTljOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHnJKAAwQH nimAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAH1nki4LafWKjcOOlA+zDqmo5OisPXD6pUUaACYk5Zvb07Ve grmrzEfW9IaUAZ2YfCxIsLv5mWW11Tc29JkwORxrTTAuKhS3Yv3JpZPkOgfcy5T0 E9l5CR0AZ5JMWf/JxsKpIp7o934Qpn3/iY0lJkdpYsJeIMvGmGxJIoiIvcwfR6WV R8O3YR3INoVM2mwaByQVqWTlSJbZj3DDEobIf5+45spkewy7GdiJSdOn+tq+WLcN ycbczvKL/4mIBccvCTWetwq8tCs35RS6dEeZoEqp7jI+4kQwqa4oP/xkKqaxAuJL GM6Gi/07c8PiOF2jkNWWW/GpOHiYLtgubBILssw= -----END CERTIFICATE-----Generated at Fri Apr 17 19:53:08 2026 by rpki-client