$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/3b68887b-51b0-3889-9f65-79b4f87aeba8.roa File: 3b68887b-51b0-3889-9f65-79b4f87aeba8.roa (raw, json) Hash identifier: P9c2SL/6kiWPGKDFs+pL9fZ1zGdjsLkTrieMzWsIcDs= Subject key identifier: 70:21:3C:1A:04:15:64:C4:06:D7:99:1C:CE:EE:14:E7:5D:3D:8E:5C Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584D746FBDA7B6A5ECF421E0CC48 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/3b68887b-51b0-3889-9f65-79b4f87aeba8.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 11377 IP address blocks: 159.183.128.0/18 maxlen: 18 159.183.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:bd:a7:b6:a5:ec:f4:21:e0:cc:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=093adb3e-1d26-4914-bc74-c20d50ca1aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ab:1f:8b:c5:10:5f:08:4f:12:27:a9:63:d2: dd:1c:bf:0b:0c:18:0f:15:d6:ff:e4:fc:25:39:c1: de:3b:29:6a:9b:63:cf:dd:49:aa:3e:c5:65:9b:a8: f1:22:32:e2:11:1c:d3:80:01:7b:29:82:d8:82:d7: 8b:3c:99:50:e6:df:44:4d:4a:37:fe:b2:3d:e7:d4: 33:7a:ff:c9:ae:a3:87:5c:4c:80:00:34:bd:f7:24: 9a:52:ad:70:cb:0b:ba:d7:52:b3:77:31:1f:58:ae: 55:93:eb:ef:1d:81:6f:cc:ed:ea:22:84:f9:88:38: f9:c4:15:f6:18:e7:b6:00:7e:2c:bc:4d:5c:08:92: 2b:0b:4b:c6:db:52:d0:db:02:cb:f1:b2:f9:41:1b: 17:db:7e:33:44:20:b3:6e:d8:6d:61:d5:a5:d3:00: 08:7a:cb:cb:ab:e0:46:f5:5b:e9:81:83:97:4a:2d: bc:9b:fb:90:1a:72:09:00:11:91:05:f3:9b:c1:29: fe:b7:c4:68:b8:a8:21:6a:52:62:17:86:09:52:f1: c3:7e:0e:62:2e:4b:a4:e3:2b:41:d8:99:52:20:02: 3d:a7:44:56:e6:57:5e:03:65:62:18:1e:ca:6d:2e: 9c:7b:de:03:58:75:16:5f:d7:48:1b:ec:00:97:e4: 93:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:21:3C:1A:04:15:64:C4:06:D7:99:1C:CE:EE:14:E7:5D:3D:8E:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/3b68887b-51b0-3889-9f65-79b4f87aeba8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 159.183.128.0-159.183.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:fc:58:9d:37:4c:9f:38:c2:07:1d:7a:ed:1c:55:13:da:21: dc:cc:d0:44:ab:6d:bf:4c:49:a7:fd:bd:ec:c8:45:8d:79:49: 4a:e2:2a:54:ab:59:5d:4c:b0:bb:b9:4d:0e:98:98:97:63:89: 05:eb:59:68:d1:91:c8:5d:b1:31:87:76:95:6a:70:59:35:f6: f3:82:b0:5d:f5:01:80:e9:63:79:42:9d:a1:33:95:75:ee:7d: 43:38:2b:3f:6c:97:1c:bb:9e:88:89:05:1b:53:22:c6:4b:8b: a6:9b:91:8d:ca:d3:7c:89:46:dc:17:e0:68:53:28:75:29:13: 18:73:a6:1b:7d:ed:80:f6:e2:52:23:57:fc:78:0e:94:ee:dd: 95:38:01:65:57:32:a9:09:2d:2d:16:37:c0:a1:c4:d0:86:ea: 7a:31:6f:92:33:21:5b:38:85:47:86:44:2f:4a:52:3c:bc:ca: 02:3c:b0:ca:03:33:14:c2:bc:26:c8:17:2f:29:8f:1e:06:fa: 11:9a:72:a7:13:66:a9:da:b9:64:21:64:da:00:c5:95:06:cc: 93:53:90:13:57:81:ac:93:5e:93:d4:e1:b8:9c:f4:ef:51:4b: 6b:fd:03:c3:08:b7:98:1c:5f:be:54:61:cc:0d:1b:3a:78:0f: e3:a9:13:22 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE10b72ntqXs9CHgzEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk MDkzYWRiM2UtMWQyNi00OTE0LWJjNzQtYzIwZDUwY2ExYWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ksfi8UQXwhPEiepY9LdHL8LDBgPFdb/5Pwl OcHeOylqm2PP3UmqPsVlm6jxIjLiERzTgAF7KYLYgteLPJlQ5t9ETUo3/rI959Qz ev/JrqOHXEyAADS99ySaUq1wywu611KzdzEfWK5Vk+vvHYFvzO3qIoT5iDj5xBX2 GOe2AH4svE1cCJIrC0vG21LQ2wLL8bL5QRsX234zRCCzbthtYdWl0wAIesvLq+BG 9VvpgYOXSi28m/uQGnIJABGRBfObwSn+t8RouKghalJiF4YJUvHDfg5iLkuk4ytB 2JlSIAI9p0RW5ldeA2ViGB7KbS6ce94DWHUWX9dIG+wAl+ST/wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFHAhPBoEFWTEBteZHM7uFOddPY5cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvM2I2ODg4N2ItNTFiMC0z ODg5LTlmNjUtNzliNGY4N2FlYmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAeft4AD BAWft8AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAX/xYnTdMnzjCBx167RxVE9oh3MzQRKttv0xJp/297MhF jXlJSuIqVKtZXUywu7lNDpiYl2OJBetZaNGRyF2xMYd2lWpwWTX284KwXfUBgOlj eUKdoTOVde59QzgrP2yXHLueiIkFG1MixkuLppuRjcrTfIlG3BfgaFModSkTGHOm G33tgPbiUiNX/HgOlO7dlTgBZVcyqQktLRY3wKHE0IbqejFvkjMhWziFR4ZEL0pS PLzKAjywygMzFMK8JsgXLymPHgb6EZpypxNmqdq5ZCFk2gDFlQbMk1OQE1eBrJNe k9ThuJz071FLa/0Dwwi3mBxfvlRhzA0bOngP46kTIg== -----END CERTIFICATE-----Generated at Fri Apr 17 14:37:18 2026 by rpki-client