$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/422a0f33-2965-34cf-afb3-c607d0e91cbb.roa File: 422a0f33-2965-34cf-afb3-c607d0e91cbb.roa (raw, json) Hash identifier: 8xqaIrbGmGXAjhS9NpE+jgrUucPW/XWPgkQ5GVpxdW8= Subject key identifier: B5:FD:09:75:AF:8C:58:D3:28:D1:B5:2E:55:04:A6:25:45:E0:9D:1E Certificate issuer: /CN=15986e61-33e4-484c-ae89-1cac7765c365 Certificate serial: 010D0C9F4328584CAE570E9767F5E12C20EB0A80 Authority key identifier: B4:C1:3E:8B:3C:1F:EF:78:E7:4F:BD:55:77:FA:46:FB:13:87:F3:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/422a0f33-2965-34cf-afb3-c607d0e91cbb.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 397906 IP address blocks: 158.247.61.0/24 maxlen: 24 2606:b840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/15986e61-33e4-484c-ae89-1cac7765c365.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/15986e61-33e4-484c-ae89-1cac7765c365.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:0e:97:67:f5:e1:2c:20:eb:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15986e61-33e4-484c-ae89-1cac7765c365 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=30166408-fa98-49e7-8ff2-6c2a17e2e365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d3:d7:22:c7:07:b1:ee:a2:00:e4:6d:f8:86: db:a9:1d:ec:12:3d:61:4a:5d:1c:80:8b:3e:74:f3: 64:ff:94:ec:b7:bf:19:71:92:36:46:1d:e3:1b:d6: 25:3c:95:be:f5:79:a0:19:ae:cc:b2:f1:44:04:58: c5:69:d6:6a:c6:ca:22:31:1e:a5:65:dc:24:d2:1c: 25:a8:60:a9:c6:b7:6f:94:5a:3e:1c:4d:3c:5b:d9: 28:0d:94:f8:ea:6c:c7:f4:4c:95:ec:c0:45:71:86: ed:13:2e:4d:0b:bb:00:bf:c3:40:05:dc:72:c8:a7: f3:a7:a9:e1:25:76:e3:bf:77:d3:e9:ee:35:de:12: 6a:39:4c:be:14:6c:55:ab:bc:22:09:92:af:77:65: 56:bf:55:c4:94:02:f4:e9:5c:0d:05:b7:78:29:c5: 8d:c5:92:c2:21:08:5a:89:cf:b7:fc:7f:46:8a:82: 9e:1b:e8:3f:b3:c7:79:a1:55:0c:4e:ef:ef:e9:67: dc:a7:46:6a:a0:a9:b8:fd:47:d1:cf:fc:0d:e2:bd: 35:28:8e:3c:ad:5f:29:68:e8:18:1c:96:fe:d5:93: 70:4e:15:49:81:c8:6e:72:c9:00:e3:c0:08:bb:36: 7a:e3:8a:04:21:bf:29:ac:71:f4:9f:98:b7:03:56: 3b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FD:09:75:AF:8C:58:D3:28:D1:B5:2E:55:04:A6:25:45:E0:9D:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/422a0f33-2965-34cf-afb3-c607d0e91cbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/15986e61-33e4-484c-ae89-1cac7765c365.crl X509v3 Authority Key Identifier: keyid:B4:C1:3E:8B:3C:1F:EF:78:E7:4F:BD:55:77:FA:46:FB:13:87:F3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365.cer sbgp-ipAddrBlock: critical IPv4: 158.247.61.0/24 IPv6: 2606:b840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:19:6e:f6:25:af:fa:0b:34:29:18:24:13:03:27:61:a8:5a: f2:8f:be:ed:2b:b2:12:7b:d9:39:f1:78:7d:53:33:8f:ab:37: a5:7c:50:32:a5:1c:3d:ae:fd:5d:2b:48:b8:c4:07:5d:1b:0e: db:72:93:23:8c:51:b0:a1:bf:99:24:8d:3f:11:7e:44:68:77: e7:70:b1:cd:76:89:50:0c:6b:08:e1:b0:03:b4:25:fd:c5:ff: b6:1f:8c:13:59:12:1d:3f:9d:07:30:2b:42:ef:53:45:a4:c6: 18:d1:d8:5d:a1:27:c5:de:88:44:2b:34:8b:78:29:18:97:79: 81:b7:3e:92:9a:33:50:7c:da:ae:60:8a:7b:a5:0b:03:3a:d7: 97:b9:77:a5:d5:1a:33:e4:20:9d:b8:cb:90:a4:c3:52:53:1b: 51:2e:9b:d8:e9:ec:f7:9c:4c:1a:2c:e6:3e:58:45:4f:f9:e6: e2:92:3e:34:b8:9b:47:56:f1:b7:cc:79:07:5a:55:94:aa:19: ce:b2:2a:bf:90:91:3b:5f:47:a0:ca:d4:d9:0e:3c:b3:d4:86: ab:74:17:74:41:11:5e:8c:e7:d8:4c:af:ef:28:0d:64:47:ac: 4d:37:61:c0:c5:fb:7c:be:dd:fd:fe:66:08:b8:14:3c:95:9b: 33:d0:da:f1 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEyuVw6XZ/XhLCDrCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU5ODZlNjEtMzNlNC00ODRjLWFlODktMWNhYzc3NjVj MzY1MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MzAxNjY0MDgtZmE5OC00OWU3LThmZjItNmMyYTE3ZTJlMzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNPXIscHse6iAORt+IbbqR3sEj1hSl0cgIs+ dPNk/5Tst78ZcZI2Rh3jG9YlPJW+9XmgGa7MsvFEBFjFadZqxsoiMR6lZdwk0hwl qGCpxrdvlFo+HE08W9koDZT46mzH9EyV7MBFcYbtEy5NC7sAv8NABdxyyKfzp6nh JXbjv3fT6e413hJqOUy+FGxVq7wiCZKvd2VWv1XElAL06VwNBbd4KcWNxZLCIQha ic+3/H9GioKeG+g/s8d5oVUMTu/v6Wfcp0ZqoKm4/UfRz/wN4r01KI48rV8paOgY HJb+1ZNwThVJgchucskA48AIuzZ644oEIb8prHH0n5i3A1Y7RwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFLX9CXWvjFjTKNG1LlUEpiVF4J0eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xNTk4 NmU2MS0zM2U0LTQ4NGMtYWU4OS0xY2FjNzc2NWMzNjUvNDIyYTBmMzMtMjk2NS0z NGNmLWFmYjMtYzYwN2QwZTkxY2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTU5ODZlNjEtMzNlNC00ODRjLWFl ODktMWNhYzc3NjVjMzY1LzE1OTg2ZTYxLTMzZTQtNDg0Yy1hZTg5LTFjYWM3NzY1 YzM2NS5jcmwwHwYDVR0jBBgwFoAUtME+izwf73jnT71Vd/pG+xOH82QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xNTk4NmU2MS0zM2U0LTQ4NGMtYWU4OS0xY2Fj Nzc2NWMzNjUuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAnvc9MA0E AgACMAcDBQAmBrhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADYZbvYlr/oLNCkYJBMDJ2GoWvKPvu0rshJ7 2TnxeH1TM4+rN6V8UDKlHD2u/V0rSLjEB10bDttykyOMUbChv5kkjT8RfkRod+dw sc12iVAMawjhsAO0Jf3F/7YfjBNZEh0/nQcwK0LvU0WkxhjR2F2hJ8XeiEQrNIt4 KRiXeYG3PpKaM1B82q5ginulCwM615e5d6XVGjPkIJ24y5Ckw1JTG1Eum9jp7Pec TBos5j5YRU/55uKSPjS4m0dW8bfMeQdaVZSqGc6yKr+QkTtfR6DK1NkOPLPUhqt0 F3RBEV6M59hMr+8oDWRHrE03YcDF+3y+3f3+Zgi4FDyVmzPQ2vE= -----END CERTIFICATE-----Generated at Mon Mar 2 21:13:16 2026 by rpki-client