$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa File: 2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa (raw, json) Hash identifier: 9aTFeIwh0/m2wJON37QOpDgsIZ23hTkxPezpY9KZ8VI= Subject key identifier: 50:9E:3E:10:71:0A:AB:79:E7:FE:4F:15:5F:2A:F1:04:90:3F:33:B5 Certificate issuer: /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Certificate serial: 010D0C9F4328584D6AAA85BCBFCFF3C3457C6300 Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 53991 IP address blocks: 164.152.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:85:bc:bf:cf:f3:c3:45:7c:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=5ba5ff20-8395-4739-93b7-53355d924a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:62:cb:fb:85:30:17:d4:1d:0c:ce:d3:89:72: 22:7d:36:0f:45:84:86:5f:f0:17:9d:96:01:4e:34: 82:b8:c0:f1:9d:f0:45:03:05:42:a9:fc:df:c0:29: cd:af:29:b7:ad:83:a2:59:6c:6b:ef:73:51:ad:14: db:6e:0f:ef:6f:54:5a:6c:a5:58:57:d5:3c:3c:ce: 84:c2:8c:00:93:ff:6a:d7:2d:a2:38:fe:46:64:88: 23:7b:93:38:52:87:eb:8a:7b:7d:74:82:a3:03:86: 87:d4:16:c1:b3:1d:20:97:38:a3:bc:e3:f8:2d:b6: 24:cb:da:df:75:c1:54:dd:fd:1d:5c:8c:53:59:b3: a7:6d:be:0c:02:92:86:58:f0:c7:42:35:46:cf:ac: ce:ad:b8:ef:ea:a3:70:6c:10:ed:03:c0:f9:3b:c1: 5c:63:d7:17:ca:a6:71:72:c8:d7:4c:d1:f7:8e:63: 2e:e8:f5:6d:69:8a:d9:c4:c8:d6:5e:3f:eb:16:32: 12:3f:6e:54:c9:6f:7f:29:68:49:d7:0a:b6:a8:8d: f8:f1:57:b3:d7:16:b4:9f:59:a8:14:2b:3b:98:42: 46:ee:ce:a8:a6:5d:d0:cb:f1:54:dd:18:d5:db:ab: 63:bf:5a:4e:10:16:f1:ca:a3:1c:ba:d5:3d:89:73: 31:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9E:3E:10:71:0A:AB:79:E7:FE:4F:15:5F:2A:F1:04:90:3F:33:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl X509v3 Authority Key Identifier: keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer sbgp-ipAddrBlock: critical IPv4: 164.152.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:50:79:39:8b:17:9f:6b:f9:fb:fa:e7:cd:c3:49:c6:08:60: 38:15:bc:0c:fe:43:26:59:c0:72:2c:6c:2a:9c:7d:2c:a8:3d: 08:81:8d:ed:7b:57:58:ec:f2:93:c8:81:13:52:03:af:71:4e: b9:74:c2:cb:e8:8e:65:12:bf:47:aa:42:98:7b:f3:2a:37:35: 67:c5:09:22:99:38:59:6c:5d:a0:76:a8:1a:ca:65:9f:7f:b5: 57:1c:a5:a6:3c:f9:9b:59:7f:a8:29:e4:ff:12:64:89:ae:b6: a9:23:af:80:51:b9:d0:5a:8b:33:99:4e:4e:2c:ac:56:a8:0a: 8f:86:3f:0e:e2:e7:32:ce:b8:eb:ab:7a:7a:1c:9f:e2:5b:2f: c0:8f:2c:71:cc:b1:55:ee:80:5a:06:96:7b:21:a9:37:58:c2: d2:27:cb:d2:7a:88:a8:73:83:4c:67:5b:ef:37:3c:da:33:e5: 63:fd:86:c7:96:8d:1a:87:c8:e9:27:50:f1:22:1c:34:11:85: 1f:86:a0:52:f8:e5:80:27:70:94:1e:49:ff:0a:89:6a:e2:fe: 91:68:c7:13:81:1b:28:16:f0:db:f2:1c:f3:df:62:24:b4:f5: 8c:40:c9:68:3c:a7:19:dd:e6:fa:b9:0b:46:8f:f3:6b:c7:98: 6a:d1:d5:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqoW8v8/zw0V8YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIyNjE3YzAtMDNmNC00YWQ3LTlkMTEtMzZiMmM2NDk2 YjdkMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk NWJhNWZmMjAtODM5NS00NzM5LTkzYjctNTMzNTVkOTI0YTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGLL+4UwF9QdDM7TiXIifTYPRYSGX/AXnZYB TjSCuMDxnfBFAwVCqfzfwCnNrym3rYOiWWxr73NRrRTbbg/vb1RabKVYV9U8PM6E wowAk/9q1y2iOP5GZIgje5M4Uofrint9dIKjA4aH1BbBsx0glzijvOP4LbYky9rf dcFU3f0dXIxTWbOnbb4MApKGWPDHQjVGz6zOrbjv6qNwbBDtA8D5O8FcY9cXyqZx csjXTNH3jmMu6PVtaYrZxMjWXj/rFjISP25UyW9/KWhJ1wq2qI348Vez1xa0n1mo FCs7mEJG7s6opl3Qy/FU3RjV26tjv1pOEBbxyqMcutU9iXMxwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCePhBxCqt55/5PFV8q8QSQPzO1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2 MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIyYzY0OTZiN2QvMjk0M2JmYzQtYTg0OS0z MTIzLTg0ZjYtOTlkNmNlYjc5ZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGIyNjE3YzAtMDNmNC00YWQ3LTlk MTEtMzZiMmM2NDk2YjdkL2RiMjYxN2MwLTAzZjQtNGFkNy05ZDExLTM2YjJjNjQ5 NmI3ZC5jcmwwHwYDVR0jBBgwFoAUb4y8Y/4j18SoBgk6tbahaqOUWLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIy YzY0OTZiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpJh8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdQeTmLF59r+fv6583DScYIYDgVvAz+QyZZwHIsbCqcfSyoPQiBje17 V1js8pPIgRNSA69xTrl0wsvojmUSv0eqQph78yo3NWfFCSKZOFlsXaB2qBrKZZ9/ tVccpaY8+ZtZf6gp5P8SZImutqkjr4BRudBaizOZTk4srFaoCo+GPw7i5zLOuOur enocn+JbL8CPLHHMsVXugFoGlnshqTdYwtIny9J6iKhzg0xnW+83PNoz5WP9hseW jRqHyOknUPEiHDQRhR+GoFL45YAncJQeSf8KiWri/pFoxxOBGygW8NvyHPPfYiS0 9YxAyWg8pxnd5vq5C0aP82vHmGrR1YU= -----END CERTIFICATE-----Generated at Fri Apr 17 15:01:26 2026 by rpki-client