$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa File: 86ce795d-c584-310b-9693-21cb26b6e90a.roa (raw, json) Hash identifier: 1CM9G2S5EXom/rpqwZWxe2hrY7oUQQJoP838ZN5Ssgo= Subject key identifier: 64:EB:04:18:34:05:3A:78:51:2D:9F:06:0E:76:96:AB:70:73:4D:20 Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Certificate serial: 010D0C9F4328584D86954565686D5A31C2F24580 Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 14618 IP address blocks: 148.59.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:45:65:68:6d:5a:31:c2:f2:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=5c8f5158-f39c-49b9-b0f1-dcdb82547199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2d:ad:8d:93:27:37:55:11:d7:7d:45:fa:db: 76:0b:95:38:3f:75:d8:53:5c:6f:f9:56:cd:b6:1d: 1a:5a:55:c7:54:d4:ed:0a:d5:eb:22:d4:92:ce:75: 98:a9:ad:6a:8e:fc:4d:c7:4b:e3:52:82:8f:4d:b5: 0e:8d:55:5c:08:6b:e1:09:a7:60:b0:c6:5e:1d:08: 2a:85:70:cb:c2:8a:c1:8c:55:a3:f8:8b:70:0b:2a: 5c:99:50:0e:1f:44:d0:a7:fc:2a:b3:02:64:66:8a: 3e:22:52:35:ae:ae:a6:f2:08:c9:99:8a:78:b7:da: e6:61:11:c9:71:fd:2b:93:5f:6a:91:07:c7:ae:de: c2:da:a7:a3:2f:c1:34:7f:22:4a:50:fc:27:65:37: c9:93:5d:3d:dd:b9:5a:5a:8a:a0:5a:9d:cd:c2:76: 7f:bc:f1:f2:91:9d:3e:b9:a8:8b:93:e3:44:e7:52: fa:bb:4e:64:8c:f6:f8:64:35:b0:7b:16:1d:73:12: 67:ef:f3:20:5e:66:56:02:d3:be:33:45:20:e1:6e: 64:99:72:65:98:77:61:98:f2:38:a9:27:f4:66:9e: eb:cc:3a:dd:96:3a:96:f2:b6:ae:ab:d9:e6:e6:54: f7:4f:4b:59:38:47:9e:a0:15:fe:eb:39:5a:e3:ef: 45:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EB:04:18:34:05:3A:78:51:2D:9F:06:0E:76:96:AB:70:73:4D:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl X509v3 Authority Key Identifier: keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer sbgp-ipAddrBlock: critical IPv4: 148.59.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:e0:13:71:68:0f:71:36:3a:56:8e:38:7b:b4:50:30:bd:7b: 2a:96:7c:66:58:31:c8:ba:b3:a8:12:45:11:6c:ef:ce:1b:51: f1:85:57:3d:0b:cc:60:f2:7f:7c:00:56:c9:d8:4b:50:8d:4b: 73:50:56:84:cd:b2:e0:8e:18:5f:a9:81:f2:be:8b:00:73:38: d0:5c:2f:36:3e:29:f3:8d:ef:27:10:9e:3c:1d:f5:b1:80:99: 3d:2e:02:b5:70:ef:21:56:1b:53:44:99:d6:19:fb:cf:3d:40: a5:27:2a:60:4b:fc:ed:7f:8b:58:e9:01:86:01:d5:6f:61:1a: 67:84:27:57:9c:00:87:73:5c:d0:f8:42:23:6c:20:8d:1c:6e: 2f:fb:5c:5a:2b:6e:5e:7f:f3:02:50:02:37:06:c7:cc:06:f8: e9:41:05:a3:ea:c9:7a:83:61:c4:4f:82:5f:5c:75:1b:98:85: 1b:c8:80:91:db:cd:c7:6c:6d:b6:f6:b8:03:c7:05:5f:7f:05: 83:eb:42:24:e9:c5:41:a3:99:7a:4e:ea:4f:ee:2a:85:4b:43: 09:49:22:fa:81:59:e2:fc:05:81:ea:9f:62:75:c0:ed:f7:7a: 28:a7:9f:68:2c:d2:0f:24:20:be:73:18:cd:2e:e1:26:2c:82: 3d:45:c8:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlUVlaG1aMcLyRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4 MTI0MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk NWM4ZjUxNTgtZjM5Yy00OWI5LWIwZjEtZGNkYjgyNTQ3MTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy2tjZMnN1UR131F+tt2C5U4P3XYU1xv+VbN th0aWlXHVNTtCtXrItSSznWYqa1qjvxNx0vjUoKPTbUOjVVcCGvhCadgsMZeHQgq hXDLworBjFWj+ItwCypcmVAOH0TQp/wqswJkZoo+IlI1rq6m8gjJmYp4t9rmYRHJ cf0rk19qkQfHrt7C2qejL8E0fyJKUPwnZTfJk1093blaWoqgWp3NwnZ/vPHykZ0+ uaiLk+NE51L6u05kjPb4ZDWwexYdcxJn7/MgXmZWAtO+M0Ug4W5kmXJlmHdhmPI4 qSf0Zp7rzDrdljqW8rauq9nm5lT3T0tZOEeeoBX+6zla4+9FawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTrBBg0BTp4US2fBg52lqtwc00gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvODZjZTc5NWQtYzU4NC0z MTBiLTk2OTMtMjFjYjI2YjZlOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1 NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl MGZjMDgxMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXgE3FoD3E2OlaOOHu0UDC9eyqWfGZYMci6s6gSRRFs784bUfGFVz0L zGDyf3wAVsnYS1CNS3NQVoTNsuCOGF+pgfK+iwBzONBcLzY+KfON7ycQnjwd9bGA mT0uArVw7yFWG1NEmdYZ+889QKUnKmBL/O1/i1jpAYYB1W9hGmeEJ1ecAIdzXND4 QiNsII0cbi/7XForbl5/8wJQAjcGx8wG+OlBBaPqyXqDYcRPgl9cdRuYhRvIgJHb zcdsbbb2uAPHBV9/BYPrQiTpxUGjmXpO6k/uKoVLQwlJIvqBWeL8BYHqn2J1wO33 eiinn2gs0g8kIL5zGM0u4SYsgj1FyGs= -----END CERTIFICATE-----Generated at Fri Apr 17 15:35:29 2026 by rpki-client