$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa File: 86ce795d-c584-310b-9693-21cb26b6e90a.roa (raw, json) Hash identifier: L7ICqOYpdiCpaKKCyTlX2I1JqV3aU4zCR6P/Q/BemcQ= Subject key identifier: 59:6C:6C:B7:F4:C3:7C:CB:CA:A8:18:ED:8F:01:57:48:AB:CF:E5:87 Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Certificate serial: 010D0C9F4328584CA5F6F90195367EB1B98E3DC0 Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 14618 IP address blocks: 148.59.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f6:f9:01:95:36:7e:b1:b9:8e:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=c5d5333d-47ef-400f-9a58-239a11e6fecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7d:6a:2a:58:08:ef:a5:96:1d:54:d3:e7:2e: fd:cb:f4:20:6f:16:06:7a:08:f3:25:5e:ce:49:c4: 8e:00:fe:71:6d:bb:e5:7e:e7:41:3c:b6:53:19:b8: 64:f7:2e:51:85:73:c4:a0:3b:be:74:4d:13:9e:d8: bb:7d:1e:7b:e1:5f:b1:98:bd:e8:f2:ca:95:bc:df: 12:35:62:f1:dc:2c:82:43:72:48:e4:bf:f3:5b:92: be:2f:46:31:db:2b:90:5f:ee:61:a2:54:41:55:86: 03:2d:c6:ea:d4:14:32:eb:f2:a5:ec:9c:ae:09:f8: 3d:a3:39:5b:5a:00:fb:1f:49:c7:ba:13:3c:c9:d6: 32:8d:ac:e1:33:8c:6a:03:79:f0:5e:b4:32:6f:5e: ec:59:cb:67:44:6c:ee:15:52:62:17:2b:0d:81:70: ec:df:f5:fd:15:1a:29:1a:5c:e0:b9:7e:10:5d:1b: 07:83:09:f6:9a:52:fd:9b:54:97:9d:46:dc:51:1c: 30:75:cb:4a:dd:12:45:84:07:6f:b9:0c:57:42:95: f5:7b:cf:47:2a:b9:9d:24:86:12:3a:f4:1d:72:c2: 2d:f5:3d:a6:83:02:71:b6:7f:18:e0:5c:4d:a0:59: 7d:de:7b:5c:53:14:ec:60:09:0a:ed:5f:19:ab:d6: d9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6C:6C:B7:F4:C3:7C:CB:CA:A8:18:ED:8F:01:57:48:AB:CF:E5:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl X509v3 Authority Key Identifier: keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer sbgp-ipAddrBlock: critical IPv4: 148.59.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:14:22:b1:3c:d2:6f:dc:29:9d:6c:e3:f8:c7:fc:17:a8:8a: 59:e1:e1:e1:3c:29:33:10:60:d6:47:22:f6:e7:d8:c8:6f:5f: de:64:10:45:85:6a:c5:b9:03:c5:2e:ed:6b:40:9f:ed:a0:aa: 00:c3:59:5c:0f:75:65:b8:d8:41:ed:da:c5:4c:da:54:2a:a6: 4d:b4:36:50:b4:35:58:86:69:b1:aa:d9:c2:8d:95:18:87:24: 0f:f5:90:75:24:38:63:cc:db:1c:03:a1:a8:6f:22:8e:c5:df: 8c:48:09:7d:46:5c:52:6e:bc:9b:47:e8:9d:21:36:9f:11:a8: db:1b:83:24:89:bd:2e:c3:3f:29:bd:46:d1:df:4c:e5:4b:33: 8b:1d:40:fa:40:ad:a1:9c:99:a6:4b:b2:0f:83:f8:98:ba:32: 39:ae:ae:c2:26:29:cb:9c:32:5e:6f:43:e4:9e:88:59:35:eb: d1:8d:10:ec:14:65:cd:ab:6f:31:cc:43:ef:ad:de:02:8c:b7: 3a:55:17:dc:24:bd:86:8f:bb:19:02:84:27:99:2c:02:4c:76: b9:38:ce:15:be:e1:63:7b:82:11:3b:a4:8b:d4:c5:84:22:68: e5:0a:47:20:e2:e0:6d:81:a7:6c:1f:ad:91:4f:f5:68:41:80: 44:c3:cc:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9vkBlTZ+sbmOPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4 MTI0MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk YzVkNTMzM2QtNDdlZi00MDBmLTlhNTgtMjM5YTExZTZmZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl31qKlgI76WWHVTT5y79y/QgbxYGegjzJV7O ScSOAP5xbbvlfudBPLZTGbhk9y5RhXPEoDu+dE0Tnti7fR574V+xmL3o8sqVvN8S NWLx3CyCQ3JI5L/zW5K+L0Yx2yuQX+5holRBVYYDLcbq1BQy6/Kl7JyuCfg9ozlb WgD7H0nHuhM8ydYyjazhM4xqA3nwXrQyb17sWctnRGzuFVJiFysNgXDs3/X9FRop GlzguX4QXRsHgwn2mlL9m1SXnUbcURwwdctK3RJFhAdvuQxXQpX1e89HKrmdJIYS OvQdcsIt9T2mgwJxtn8Y4FxNoFl93ntcUxTsYAkK7V8Zq9bZaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlsbLf0w3zLyqgY7Y8BV0irz+WHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvODZjZTc5NWQtYzU4NC0z MTBiLTk2OTMtMjFjYjI2YjZlOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1 NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl MGZjMDgxMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUUIrE80m/cKZ1s4/jH/Beoilnh4eE8KTMQYNZHIvbn2MhvX95kEEWF asW5A8Uu7WtAn+2gqgDDWVwPdWW42EHt2sVM2lQqpk20NlC0NViGabGq2cKNlRiH JA/1kHUkOGPM2xwDoahvIo7F34xICX1GXFJuvJtH6J0hNp8RqNsbgySJvS7DPym9 RtHfTOVLM4sdQPpAraGcmaZLsg+D+Ji6MjmursImKcucMl5vQ+SeiFk169GNEOwU Zc2rbzHMQ++t3gKMtzpVF9wkvYaPuxkChCeZLAJMdrk4zhW+4WN7ghE7pIvUxYQi aOUKRyDi4G2Bp2wfrZFP9WhBgETDzJU= -----END CERTIFICATE-----Generated at Mon Mar 2 02:56:46 2026 by rpki-client