$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/d5aaebb6-4e45-3566-bea3-8e881f0c07bf.roa File: d5aaebb6-4e45-3566-bea3-8e881f0c07bf.roa (raw, json) Hash identifier: m4pBoCdS/ONytEORpl8cRG4PNatMcoZiK2M5Tp76KJA= Subject key identifier: 38:C0:9A:0C:6E:4C:D2:7E:19:D6:FB:83:A7:86:83:AE:C6:F7:54:BE Certificate issuer: /CN=53047e29-2570-4585-9e69-b23797196c26 Certificate serial: 010D0C9F4328584D5243539BE025561D9F1C0E00 Authority key identifier: C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/d5aaebb6-4e45-3566-bea3-8e881f0c07bf.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 397183 IP address blocks: 158.116.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:53:9b:e0:25:56:1d:9f:1c:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53047e29-2570-4585-9e69-b23797196c26 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=c5884be0-b452-4f49-8a66-ff580093086d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:27:e2:70:9a:96:8d:a9:91:a6:2a:ba:70:94: 12:eb:d2:36:1b:fd:f8:56:d2:06:a4:0e:b9:e7:e5: 79:e0:31:af:71:cc:d6:cf:4e:1f:51:19:0f:db:00: 63:f8:0c:e6:f6:03:cd:87:c5:99:35:e2:ba:52:7e: ea:89:a1:41:a0:43:5e:b7:3a:83:47:72:ef:0a:ca: 08:50:ab:ba:73:4c:0f:11:2c:ac:ec:7f:a4:2d:59: f1:2b:b9:68:9d:bc:b4:c0:9e:6a:68:76:9b:91:58: 55:63:72:21:3c:3d:e3:58:17:43:ac:be:c1:20:c7: 6a:87:b8:75:63:7a:d7:4a:fb:cc:b2:5b:18:1f:32: 91:86:a5:81:c3:11:83:62:bd:da:92:29:ab:7c:25: 7d:99:81:b0:c7:ca:8c:73:05:08:2a:8a:6b:30:08: 0c:c1:eb:7a:4e:ce:95:27:ec:66:1f:37:45:2d:23: a7:95:95:8e:21:c4:2a:4e:27:a1:1b:e8:5b:44:34: 82:43:b5:2a:a4:8b:18:e7:54:e8:de:7e:95:5a:5d: ce:7b:8d:ec:3a:1e:a7:e7:ff:26:61:9f:c2:6f:10: ea:c3:c5:eb:8b:8d:a1:1c:d9:dd:9f:8a:e7:39:40: f8:05:a1:42:84:47:37:42:23:b4:30:70:d8:cf:91: fb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C0:9A:0C:6E:4C:D2:7E:19:D6:FB:83:A7:86:83:AE:C6:F7:54:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/d5aaebb6-4e45-3566-bea3-8e881f0c07bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl X509v3 Authority Key Identifier: keyid:C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer sbgp-ipAddrBlock: critical IPv4: 158.116.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:0f:bd:f4:08:e2:66:a4:3d:f6:30:31:7d:fc:a3:56:d4:76: e3:d0:98:31:55:2e:3c:69:24:93:41:60:72:d2:bc:01:57:ae: 50:46:47:3f:d7:51:39:2d:67:04:e0:21:24:47:13:dc:25:e7: 37:80:62:9e:8d:cd:73:9c:ab:77:d6:4a:fc:21:73:d2:0b:14: 9e:7a:04:7c:12:da:68:ee:27:a9:f5:b9:fd:50:8f:34:e3:b8: 17:11:55:ed:73:76:75:0b:ec:5c:bb:36:87:a9:a4:0e:10:86: e7:14:f8:91:4f:a4:2a:9f:0c:cc:12:e9:fc:1b:87:da:96:8b: 7c:6d:13:f0:a2:2d:a9:66:00:9c:c1:6e:28:83:63:67:a4:44: c4:80:b3:45:28:5d:32:40:1c:82:63:49:63:43:9e:9e:01:c7: f3:dc:39:3e:c8:1f:31:4f:46:62:a0:54:a4:16:03:30:48:9f: 92:62:94:6c:1a:f6:02:15:84:ff:31:e6:e5:13:7b:74:24:0a: 73:4d:a7:d4:a1:90:8f:b0:1a:47:ef:49:fe:1a:f0:2a:2c:8c: 1a:3b:ff:36:b6:2a:e6:2a:61:3f:09:a9:a5:df:a2:99:0c:de: bb:9d:48:99:60:3e:37:2f:9a:1e:49:8a:99:06:b4:2d:e0:e4: 4a:12:66:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1Ob4CVWHZ8cDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTMwNDdlMjktMjU3MC00NTg1LTllNjktYjIzNzk3MTk2 YzI2MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk YzU4ODRiZTAtYjQ1Mi00ZjQ5LThhNjYtZmY1ODAwOTMwODZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SficJqWjamRpiq6cJQS69I2G/34VtIGpA65 5+V54DGvcczWz04fURkP2wBj+Azm9gPNh8WZNeK6Un7qiaFBoENetzqDR3LvCsoI UKu6c0wPESys7H+kLVnxK7lonby0wJ5qaHabkVhVY3IhPD3jWBdDrL7BIMdqh7h1 Y3rXSvvMslsYHzKRhqWBwxGDYr3akimrfCV9mYGwx8qMcwUIKoprMAgMwet6Ts6V J+xmHzdFLSOnlZWOIcQqTiehG+hbRDSCQ7UqpIsY51To3n6VWl3Oe43sOh6n5/8m YZ/CbxDqw8Xri42hHNndn4rnOUD4BaFChEc3QiO0MHDYz5H7bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjAmgxuTNJ+Gdb7g6eGg67G91S+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81MzA0 N2UyOS0yNTcwLTQ1ODUtOWU2OS1iMjM3OTcxOTZjMjYvZDVhYWViYjYtNGU0NS0z NTY2LWJlYTMtOGU4ODFmMGMwN2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTMwNDdlMjktMjU3MC00NTg1LTll NjktYjIzNzk3MTk2YzI2LzUzMDQ3ZTI5LTI1NzAtNDU4NS05ZTY5LWIyMzc5NzE5 NmMyNi5jcmwwHwYDVR0jBBgwFoAUwbHF/ap4TpJ+5eUnes7voPyzEdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81MzA0N2UyOS0yNTcwLTQ1ODUtOWU2OS1iMjM3 OTcxOTZjMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnnQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUPvfQI4makPfYwMX38o1bUduPQmDFVLjxpJJNBYHLSvAFXrlBGRz/X UTktZwTgISRHE9wl5zeAYp6NzXOcq3fWSvwhc9ILFJ56BHwS2mjuJ6n1uf1QjzTj uBcRVe1zdnUL7Fy7NoeppA4QhucU+JFPpCqfDMwS6fwbh9qWi3xtE/CiLalmAJzB biiDY2ekRMSAs0UoXTJAHIJjSWNDnp4Bx/PcOT7IHzFPRmKgVKQWAzBIn5JilGwa 9gIVhP8x5uUTe3QkCnNNp9ShkI+wGkfvSf4a8CosjBo7/za2KuYqYT8JqaXfopkM 3rudSJlgPjcvmh5JipkGtC3g5EoSZoI= -----END CERTIFICATE-----Generated at Fri Apr 17 23:02:52 2026 by rpki-client