$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa File: a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa (raw, json) Hash identifier: XSyFymbKXpld3bbLr64lz/oKyGDUJWTm0bCs5H3WWk4= Subject key identifier: 67:AD:AF:86:79:F9:0F:75:0B:84:6E:CE:AC:4F:98:B7:B2:22:5E:D8 Certificate issuer: /CN=d886f3a2-7325-4b74-8802-19528a9f380c Certificate serial: 010D0C9F4328584DEC7B2B7DD16B63D979608260 Authority key identifier: 70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa Signing time: Sat 23 May 2026 01:00:25 +0000 ROA not before: Sat 23 May 2026 01:00:25 +0000 ROA not after: Fri 21 Aug 2026 01:00:25 +0000 asID: 397735 IP address blocks: 158.51.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ec:7b:2b:7d:d1:6b:63:d9:79:60:82:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d886f3a2-7325-4b74-8802-19528a9f380c Validity Not Before: May 23 01:00:25 2026 GMT Not After : Aug 21 01:00:25 2026 GMT Subject: CN=ac183824-0473-40a3-a59c-542d65df3059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:1b:e6:a9:55:d1:90:8b:6d:cb:6b:15:55: 8e:9e:38:0c:9f:aa:b0:76:d7:ef:29:00:b0:b0:f3: 9e:82:fe:9f:d7:06:c5:de:1d:51:6b:28:9f:4f:04: e4:cc:c3:f8:25:fb:f2:e5:d6:db:b7:d0:c0:2f:4d: e4:1c:9f:52:f5:09:6f:3f:cb:72:22:8e:57:03:7f: 15:bc:8f:2d:89:75:d8:bf:04:a6:b7:2d:b5:bd:c3: a4:25:64:aa:c2:5c:59:7b:90:1e:b2:1b:81:f6:c2: 81:3b:b0:41:c0:47:b5:c2:9c:15:5e:15:17:39:d6: 50:b7:68:9e:3b:da:35:f2:62:79:68:7d:91:b1:71: 9b:60:b4:77:ab:e7:8b:a9:3e:af:7a:f0:43:18:4b: a1:e7:13:1e:84:8d:c2:4c:4e:51:43:89:af:55:1d: 7d:6b:76:bf:f6:d7:68:c7:fb:06:1c:8b:65:7d:aa: d2:cc:65:58:50:aa:ad:b5:f0:97:ae:f4:d6:be:b3: aa:c6:40:33:dc:8d:f1:98:ce:d4:b7:f4:c2:8b:33: e4:7f:a8:c6:12:25:f0:a2:1c:00:8d:bc:93:8f:b8: 8a:12:62:52:7a:26:b6:d6:dc:5f:75:3e:e1:d4:54: 8d:65:8a:a0:43:9c:4e:76:70:e3:b4:69:ab:40:4b: 65:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AD:AF:86:79:F9:0F:75:0B:84:6E:CE:AC:4F:98:B7:B2:22:5E:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.crl X509v3 Authority Key Identifier: keyid:70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer sbgp-ipAddrBlock: critical IPv4: 158.51.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:49:9e:02:d1:a5:8b:31:5c:b8:79:6b:4d:01:09:a7:23:32: 3d:d3:a0:af:62:9c:d7:2d:6f:48:0a:50:f2:b4:7e:a6:de:b2: 19:ef:d4:14:6a:14:af:ec:55:11:de:39:54:8e:ca:bc:53:0b: d2:06:61:76:25:86:f2:9c:8b:68:9f:3d:ba:9e:e5:c7:29:14: b1:64:ce:ae:31:4d:b3:4b:9b:2e:cb:18:f3:91:40:8d:bb:f8: 4a:96:e4:51:dc:78:e6:22:dd:fe:8a:8d:f7:55:6f:c7:d2:20: 98:2e:a0:b6:3a:ee:d5:67:71:aa:ef:37:14:4f:f8:1b:a4:fb: 19:cd:69:c7:d3:62:2d:7c:ca:d4:a8:e5:b4:d1:9f:72:9e:96: ce:c7:9a:50:b8:08:b0:ef:ff:7f:8f:67:48:27:fb:c5:5f:a1: 47:4f:bc:6a:67:9a:98:ec:25:7f:b8:74:e6:b6:f9:4d:6d:d5: 80:3c:d6:b8:77:86:ca:47:af:3b:07:da:6e:52:49:2d:41:9b: f7:a9:b1:c9:8a:8d:16:57:d8:5e:31:2a:25:61:67:24:21:88: df:1a:3b:81:0f:e9:cf:c0:ad:f8:e8:28:af:2c:a4:78:f9:dd: 94:ad:89:9e:fc:fb:48:22:f1:d3:a2:6f:a0:4b:94:89:33:a3: e3:c4:5c:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3seyt90Wtj2XlggmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg4NmYzYTItNzMyNS00Yjc0LTg4MDItMTk1MjhhOWYz ODBjMB4XDTI2MDUyMzAxMDAyNVoXDTI2MDgyMTAxMDAyNVowLzEtMCsGA1UEAxMk YWMxODM4MjQtMDQ3My00MGEzLWE1OWMtNTQyZDY1ZGYzMDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnIb5qlV0ZCLbctrFVWOnjgMn6qwdtfvKQCw sPOegv6f1wbF3h1RayifTwTkzMP4Jfvy5dbbt9DAL03kHJ9S9QlvP8tyIo5XA38V vI8tiXXYvwSmty21vcOkJWSqwlxZe5AeshuB9sKBO7BBwEe1wpwVXhUXOdZQt2ie O9o18mJ5aH2RsXGbYLR3q+eLqT6vevBDGEuh5xMehI3CTE5RQ4mvVR19a3a/9tdo x/sGHItlfarSzGVYUKqttfCXrvTWvrOqxkAz3I3xmM7Ut/TCizPkf6jGEiXwohwA jbyTj7iKEmJSeia21txfdT7h1FSNZYqgQ5xOdnDjtGmrQEtllQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGetr4Z5+Q91C4RuzqxPmLeyIl7YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kODg2 ZjNhMi03MzI1LTRiNzQtODgwMi0xOTUyOGE5ZjM4MGMvYTRhZTFlYmUtOTg1Yy0z M2M4LWFlOTAtOGNhMzM4YTRlYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDg4NmYzYTItNzMyNS00Yjc0LTg4 MDItMTk1MjhhOWYzODBjL2Q4ODZmM2EyLTczMjUtNGI3NC04ODAyLTE5NTI4YTlm MzgwYy5jcmwwHwYDVR0jBBgwFoAUcJut8ULNEhBZHcn7NhsyGUoSs1owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kODg2ZjNhMi03MzI1LTRiNzQtODgwMi0xOTUy OGE5ZjM4MGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnjMsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9JngLRpYsxXLh5a00BCacjMj3ToK9inNctb0gKUPK0fqbeshnv1BRq FK/sVRHeOVSOyrxTC9IGYXYlhvKci2ifPbqe5ccpFLFkzq4xTbNLmy7LGPORQI27 +EqW5FHceOYi3f6KjfdVb8fSIJguoLY67tVncarvNxRP+Buk+xnNacfTYi18ytSo 5bTRn3Kels7HmlC4CLDv/3+PZ0gn+8VfoUdPvGpnmpjsJX+4dOa2+U1t1YA81rh3 hspHrzsH2m5SSS1Bm/epscmKjRZX2F4xKiVhZyQhiN8aO4EP6c/ArfjoKK8spHj5 3ZStiZ78+0gi8dOib6BLlIkzo+PEXMM= -----END CERTIFICATE-----Generated at Sat Jun 13 14:49:13 2026 by rpki-client