$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c8150f7e-efe4-3311-9301-be33e354ea81.roa File: c8150f7e-efe4-3311-9301-be33e354ea81.roa (raw, json) Hash identifier: nmKtHmdoDAMs2sdGg4JglqkH2FHPSVPZRzs46JkWka0= Subject key identifier: 34:79:32:17:6D:05:70:7E:58:34:67:55:F7:0A:81:F6:CD:39:97:1D Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F4328584D65150C58122C6348AF8BD580 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c8150f7e-efe4-3311-9301-be33e354ea81.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 11260 IP address blocks: 148.170.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:0c:58:12:2c:63:48:af:8b:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=a098358f-68cc-4508-80c3-c36c028e00b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:65:b9:43:83:20:63:4b:ea:a7:06:65:b6:2a: 75:f3:60:5d:ff:b2:63:df:e2:a1:ea:50:6c:3c:ae: ca:e3:62:5f:38:64:a0:d1:a4:89:dc:33:42:23:3e: 36:37:fa:67:a7:b4:73:6f:4a:7f:08:27:0f:a6:a4: 81:67:b0:13:3d:78:c7:64:18:56:c0:73:74:cb:df: c2:fa:9a:f9:0c:12:66:53:1c:9b:23:67:a5:be:a4: 26:aa:9a:ad:e5:59:09:4d:95:f9:9f:9b:e1:d4:dc: 4c:4a:68:5f:d0:f3:1a:15:17:b9:50:cb:df:de:21: f9:0d:7f:1d:d1:f7:4f:af:5d:a5:4f:40:6a:eb:d0: 5f:a2:a8:c1:82:45:dd:ad:67:03:90:80:ac:68:d5: 8c:81:c4:1e:1c:73:a7:52:b0:2a:d7:b6:e0:cf:1b: f8:7b:24:7b:c3:d6:85:a9:fa:dc:d6:23:16:e9:ca: e7:a3:7d:40:5a:be:0c:52:ed:04:c5:b4:88:01:d1: 71:2b:2d:3a:e4:75:9d:15:e1:16:44:18:49:be:a4: b2:21:46:57:98:c5:5f:82:4f:77:f7:92:db:45:58: 1b:b9:fe:ca:ee:72:0c:e1:40:a2:46:59:63:1e:f3: d6:a6:07:07:cf:95:13:3c:71:1a:68:b5:96:82:60: 00:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:79:32:17:6D:05:70:7E:58:34:67:55:F7:0A:81:F6:CD:39:97:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c8150f7e-efe4-3311-9301-be33e354ea81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 148.170.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:8d:3c:84:cf:5c:de:66:8a:17:4e:23:50:be:51:1a:a5:a9: 3f:82:17:0c:46:55:7d:47:28:91:35:8a:1e:fa:e0:c7:c5:79: 77:ea:e6:32:65:d1:b0:1b:c7:be:7e:45:9d:2f:fb:a3:82:73: 69:74:6a:a8:04:b0:f9:4e:40:63:7a:ac:14:25:5b:dc:e5:34: a1:b2:d3:93:73:6a:91:21:24:c9:74:ac:c2:f3:32:7e:6a:b6: 76:7f:15:9b:85:7e:ce:b8:c6:db:b8:8d:69:f1:74:24:e6:d9: 60:33:29:10:c0:39:a5:47:6e:94:cc:fc:c1:67:56:67:bf:61: e4:e0:45:c1:7a:0d:c7:88:b9:09:aa:66:ae:b6:2b:38:ce:60: 6d:ce:d1:6d:5d:7f:04:41:d3:f7:de:7a:a2:e2:9a:42:e7:42: fa:8d:92:9e:e4:f7:c4:a6:e8:d1:6d:3e:a9:c6:ad:d7:1d:d5: fd:66:a3:04:a5:c3:d6:86:92:17:5c:9e:80:3d:af:08:a3:94: 32:28:51:5d:7a:08:61:25:30:cf:63:15:a4:fd:ad:e0:20:15: b2:d3:45:d1:39:6b:4d:89:c6:07:a7:33:68:b7:5a:38:ac:6f: 8a:17:1d:01:5e:e5:1b:3e:74:3e:e0:05:07:24:4a:05:97:51: 5f:39:30:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFQxYEixjSK+L1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk YTA5ODM1OGYtNjhjYy00NTA4LTgwYzMtYzM2YzAyOGUwMGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWW5Q4MgY0vqpwZltip182Bd/7Jj3+Kh6lBs PK7K42JfOGSg0aSJ3DNCIz42N/pnp7Rzb0p/CCcPpqSBZ7ATPXjHZBhWwHN0y9/C +pr5DBJmUxybI2elvqQmqpqt5VkJTZX5n5vh1NxMSmhf0PMaFRe5UMvf3iH5DX8d 0fdPr12lT0Bq69BfoqjBgkXdrWcDkICsaNWMgcQeHHOnUrAq17bgzxv4eyR7w9aF qfrc1iMW6crno31AWr4MUu0ExbSIAdFxKy065HWdFeEWRBhJvqSyIUZXmMVfgk93 95LbRVgbuf7K7nIM4UCiRlljHvPWpgcHz5UTPHEaaLWWgmAAgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDR5MhdtBXB+WDRnVfcKgfbNOZcdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvYzgxNTBmN2UtZWZlNC0z MzExLTkzMDEtYmUzM2UzNTRlYTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGlKqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmNPITPXN5mihdOI1C+URqlqT+CFwxGVX1HKJE1ih764MfFeXfq5jJl 0bAbx75+RZ0v+6OCc2l0aqgEsPlOQGN6rBQlW9zlNKGy05NzapEhJMl0rMLzMn5q tnZ/FZuFfs64xtu4jWnxdCTm2WAzKRDAOaVHbpTM/MFnVme/YeTgRcF6DceIuQmq Zq62KzjOYG3O0W1dfwRB0/feeqLimkLnQvqNkp7k98Sm6NFtPqnGrdcd1f1mowSl w9aGkhdcnoA9rwijlDIoUV16CGElMM9jFaT9reAgFbLTRdE5a02JxgenM2i3Wjis b4oXHQFe5Rs+dD7gBQckSgWXUV85MII= -----END CERTIFICATE-----Generated at Fri Apr 17 18:03:25 2026 by rpki-client