$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/159ace5d-d880-38ca-9296-22d7f83d3cb6.roa File: 159ace5d-d880-38ca-9296-22d7f83d3cb6.roa (raw, json) Hash identifier: RD1RxcctBn24gUWE5oien4zVHM0mWRl96W7XaJ09fAg= Subject key identifier: 50:10:B8:67:C8:5D:C4:78:7C:68:A1:DD:03:42:70:00:F6:4E:50:EB Certificate issuer: /CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Certificate serial: 010D0C9F4328584D703FD16153C2E485DDAB2180 Authority key identifier: 92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/159ace5d-d880-38ca-9296-22d7f83d3cb6.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 92 IP address blocks: 128.153.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:d1:61:53:c2:e4:85:dd:ab:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=945092a8-b548-4f3b-9484-e774197c1837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7b:20:c0:94:ad:42:81:bb:c3:16:db:5b:67: d3:27:fb:b4:40:a9:4a:4b:ec:2e:3a:23:22:4c:72: 25:d6:38:79:76:df:fb:61:8e:b4:92:3e:60:bd:c5: 0d:c9:b8:3b:60:05:e5:8a:c3:1c:2d:c1:b5:56:65: 33:e1:eb:98:01:0e:ed:d5:f8:9f:61:b0:e4:60:43: 55:26:c1:4b:ce:21:a8:f2:c3:96:a5:38:0e:96:23: bd:57:fa:46:c8:d3:58:f6:a1:8f:e6:9d:c8:ca:1c: 52:e4:cb:f3:02:7e:d1:bb:05:c9:9a:ae:94:4a:53: 2a:0b:19:1c:93:43:10:16:8b:f7:a8:a7:b3:f0:db: 8e:13:55:3f:6d:9d:16:b7:28:33:b9:49:01:09:84: 72:83:24:c6:9d:d9:d8:1f:09:97:82:40:47:c9:cb: 78:1d:31:5e:30:d7:58:ad:d0:d6:f4:72:d4:67:01: 8a:69:a2:48:3b:5c:43:0d:a5:22:c7:0a:0a:5f:9d: 53:65:f1:00:4c:f2:a4:59:ab:cb:39:48:bc:77:93: 8a:57:12:c1:ca:bf:d5:a7:cd:70:cb:0f:e1:0c:e5: f4:23:96:36:3e:4d:7a:8e:b1:d4:78:05:13:5a:14: 4d:b1:84:08:f2:ab:5e:5a:58:d3:89:4d:ad:92:f8: 31:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:10:B8:67:C8:5D:C4:78:7C:68:A1:DD:03:42:70:00:F6:4E:50:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/159ace5d-d880-38ca-9296-22d7f83d3cb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl X509v3 Authority Key Identifier: keyid:92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer sbgp-ipAddrBlock: critical IPv4: 128.153.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:cc:49:5a:05:e1:7b:5e:c2:9b:db:df:f8:99:24:0f:28:68: f7:cc:b6:82:9f:bc:3e:60:7b:b4:05:f1:9c:f7:cd:7b:e7:78: df:ad:f0:ac:cc:ba:92:90:d8:08:24:52:a2:e5:81:75:07:af: d1:a8:be:ef:b0:3f:7a:cf:91:9e:c0:bd:97:3c:97:94:db:d2: 9f:20:56:b2:27:af:b4:48:22:1b:ba:8c:db:c1:3c:c5:24:8b: ab:33:a6:0f:da:8a:57:f1:7c:30:2a:47:f8:16:11:0f:a8:8a: d9:22:23:7e:b8:3b:c6:10:ef:82:af:ce:db:46:2e:c4:29:b7: 5f:07:15:e1:bc:3b:7d:c9:25:30:7f:0e:01:83:f1:45:36:f9: 7a:ed:d8:78:ab:be:36:18:81:9f:8a:b3:25:50:4e:bc:ce:97: 36:8f:23:6f:0c:0a:cb:6a:65:b0:3c:5d:61:fe:5e:57:86:5b: 34:f6:74:fa:28:9a:2c:31:38:41:e5:4e:b8:a5:a7:77:08:8b: b5:c1:44:d6:6d:44:fa:c4:92:4d:3a:e1:6b:69:4a:85:b1:87: f4:a3:3f:9b:c8:1e:3c:f3:de:bd:1a:b1:f9:d1:80:0d:fd:c9: 04:7f:83:0a:63:23:ed:fd:87:22:42:bc:40:08:d6:d3:b7:85: 35:c4:c3:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP9FhU8Lkhd2rIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAwOGFmYjgtYzkxMy00MjZmLWE3MmQtZWE3NDFhYjFl YjdhMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk OTQ1MDkyYTgtYjU0OC00ZjNiLTk0ODQtZTc3NDE5N2MxODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnsgwJStQoG7wxbbW2fTJ/u0QKlKS+wuOiMi THIl1jh5dt/7YY60kj5gvcUNybg7YAXlisMcLcG1VmUz4euYAQ7t1fifYbDkYENV JsFLziGo8sOWpTgOliO9V/pGyNNY9qGP5p3IyhxS5MvzAn7RuwXJmq6USlMqCxkc k0MQFov3qKez8NuOE1U/bZ0WtygzuUkBCYRygyTGndnYHwmXgkBHyct4HTFeMNdY rdDW9HLUZwGKaaJIO1xDDaUixwoKX51TZfEATPKkWavLOUi8d5OKVxLByr/Vp81w yw/hDOX0I5Y2Pk16jrHUeAUTWhRNsYQI8qteWljTiU2tkvgxEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAQuGfIXcR4fGih3QNCcAD2TlDrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4 YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0MWFiMWViN2EvMTU5YWNlNWQtZDg4MC0z OGNhLTkyOTYtMjJkN2Y4M2QzY2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjAwOGFmYjgtYzkxMy00MjZmLWE3 MmQtZWE3NDFhYjFlYjdhLzYwMDhhZmI4LWM5MTMtNDI2Zi1hNzJkLWVhNzQxYWIx ZWI3YS5jcmwwHwYDVR0jBBgwFoAUkkya7J2xWNrUBrBWHjmf0mFJSvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0 MWFiMWViN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgJmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXMSVoF4Xtewpvb3/iZJA8oaPfMtoKfvD5ge7QF8Zz3zXvneN+t8KzM upKQ2AgkUqLlgXUHr9Govu+wP3rPkZ7AvZc8l5Tb0p8gVrInr7RIIhu6jNvBPMUk i6szpg/ailfxfDAqR/gWEQ+oitkiI364O8YQ74KvzttGLsQpt18HFeG8O33JJTB/ DgGD8UU2+Xrt2HirvjYYgZ+KsyVQTrzOlzaPI28MCstqZbA8XWH+XleGWzT2dPoo miwxOEHlTrilp3cIi7XBRNZtRPrEkk064WtpSoWxh/SjP5vIHjzz3r0asfnRgA39 yQR/gwpjI+39hyJCvEAI1tO3hTXEw98= -----END CERTIFICATE-----Generated at Fri Apr 17 18:25:15 2026 by rpki-client