$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/e1b4deef-a5c7-357e-9598-ba8dbf40e0ea.roa File: e1b4deef-a5c7-357e-9598-ba8dbf40e0ea.roa (raw, json) Hash identifier: 58TwT7K58katMOSbm48xmmZ1QfwLJ5oSMVud3RGwU4s= Subject key identifier: 0D:AB:3B:6C:B4:9D:30:B4:AD:4E:8F:D3:81:E3:41:D2:2B:DE:21:D3 Certificate issuer: /CN=b1898100-f40c-4002-b68a-8a97b548e69d Certificate serial: 010D0C9F4328584D5E1A51985FD06E756C5FB480 Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/e1b4deef-a5c7-357e-9598-ba8dbf40e0ea.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 18526 IP address blocks: 158.51.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:51:98:5f:d0:6e:75:6c:5f:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=3a84d210-f037-4d41-b9c9-b69cba72a5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:80:cb:bb:81:3d:de:1c:55:d4:80:f8:60:9a: 8c:26:19:b8:34:f4:f6:8d:6c:eb:9d:1e:2f:09:e0: 75:d1:19:bf:16:63:9b:9e:ca:eb:24:6e:43:c5:67: f2:b4:b9:32:dc:76:73:21:69:18:bc:b1:54:b8:8b: 4f:aa:32:2b:25:96:1f:96:fe:fa:f2:24:9f:e7:ca: 77:ee:5b:3a:da:21:22:3a:e6:ff:ed:43:2c:66:49: 90:22:82:d1:cf:e6:61:9a:b0:1e:88:92:c5:81:b0: b5:18:39:4e:be:a1:63:f0:6d:94:6e:3b:a2:a4:c3: 7a:5d:bd:c6:bc:c1:cc:71:03:ca:5e:93:d7:3a:ee: 4b:83:ac:01:eb:a5:07:f8:96:c2:47:ec:c5:b7:20: 7b:77:78:c7:5f:17:06:2a:21:34:70:bb:e4:d4:31: 1b:c1:dc:c4:b0:98:7e:8c:28:35:8c:04:ef:07:49: 18:9e:bd:41:8a:91:51:9c:a4:e7:22:44:a9:15:4e: a9:c8:70:9f:22:59:84:72:96:f7:71:be:41:86:e4: 10:2e:dd:34:ed:e6:c2:5b:cd:0b:0d:2a:75:72:68: e5:48:e9:b1:28:0f:26:3f:fb:69:37:d6:1d:58:b7: 7a:bc:0a:b8:db:18:db:db:68:59:ef:86:46:8c:ce: 0a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AB:3B:6C:B4:9D:30:B4:AD:4E:8F:D3:81:E3:41:D2:2B:DE:21:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/e1b4deef-a5c7-357e-9598-ba8dbf40e0ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl X509v3 Authority Key Identifier: keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer sbgp-ipAddrBlock: critical IPv4: 158.51.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:fd:ef:ba:8b:87:7a:01:75:e5:45:71:0d:53:c8:52:b3:be: 33:52:5f:71:59:25:70:a1:fa:e8:5b:d9:b6:74:da:f6:66:6e: f6:a3:1a:c0:a7:da:25:1b:83:ec:ec:5c:47:fc:17:c3:07:19: 14:d7:5a:4d:7f:26:9c:67:b6:55:d5:1b:d7:22:c1:31:76:63: 14:8a:62:d6:a5:18:91:98:5a:d5:a1:fa:52:18:ab:24:37:01: 46:14:0b:13:4d:d2:4c:ad:14:28:88:20:2f:99:7e:4d:13:df: 6f:06:bc:fb:09:a0:dd:0d:22:c9:a9:79:f3:cd:46:6b:e6:cc: f9:02:8c:35:c6:de:a7:ed:7a:cf:98:6e:97:a6:f3:0e:a2:69: 6a:b5:4b:9b:1c:98:4b:33:60:2f:89:57:63:c9:2e:01:63:a2: 14:d0:ec:db:a3:1c:38:83:10:5b:65:64:f5:94:e3:db:18:e3: 41:dc:1b:13:61:5c:65:5c:68:b9:3c:a2:fc:c7:4f:29:6b:94: e5:c8:1a:a3:93:0b:ce:d7:90:57:d9:fe:9b:c9:9f:e1:c8:f8: 89:40:79:2b:66:66:21:65:b3:63:c9:40:a9:ec:17:36:cd:03: ca:98:35:5f:39:ba:7b:f0:d1:a1:11:db:d4:52:e0:0c:32:9f: 3c:20:6f:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGlGYX9BudWxftIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE4OTgxMDAtZjQwYy00MDAyLWI2OGEtOGE5N2I1NDhl NjlkMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk M2E4NGQyMTAtZjAzNy00ZDQxLWI5YzktYjY5Y2JhNzJhNWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYDLu4E93hxV1ID4YJqMJhm4NPT2jWzrnR4v CeB10Rm/FmObnsrrJG5DxWfytLky3HZzIWkYvLFUuItPqjIrJZYflv768iSf58p3 7ls62iEiOub/7UMsZkmQIoLRz+ZhmrAeiJLFgbC1GDlOvqFj8G2UbjuipMN6Xb3G vMHMcQPKXpPXOu5Lg6wB66UH+JbCR+zFtyB7d3jHXxcGKiE0cLvk1DEbwdzEsJh+ jCg1jATvB0kYnr1BipFRnKTnIkSpFU6pyHCfIlmEcpb3cb5BhuQQLt007ebCW80L DSp1cmjlSOmxKA8mP/tpN9YdWLd6vAq42xjb22hZ74ZGjM4KhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2rO2y0nTC0rU6P04HjQdIr3iHTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5 ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3YjU0OGU2OWQvZTFiNGRlZWYtYTVjNy0z NTdlLTk1OTgtYmE4ZGJmNDBlMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjE4OTgxMDAtZjQwYy00MDAyLWI2 OGEtOGE5N2I1NDhlNjlkL2IxODk4MTAwLWY0MGMtNDAwMi1iNjhhLThhOTdiNTQ4 ZTY5ZC5jcmwwHwYDVR0jBBgwFoAUiUz4vQ00NIcYcDP5AHBKyw94UlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3 YjU0OGU2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjNvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEX977qLh3oBdeVFcQ1TyFKzvjNSX3FZJXCh+uhb2bZ02vZmbvajGsCn 2iUbg+zsXEf8F8MHGRTXWk1/JpxntlXVG9ciwTF2YxSKYtalGJGYWtWh+lIYqyQ3 AUYUCxNN0kytFCiIIC+Zfk0T328GvPsJoN0NIsmpefPNRmvmzPkCjDXG3qftes+Y bpem8w6iaWq1S5scmEszYC+JV2PJLgFjohTQ7NujHDiDEFtlZPWU49sY40HcGxNh XGVcaLk8ovzHTylrlOXIGqOTC87XkFfZ/pvJn+HI+IlAeStmZiFls2PJQKnsFzbN A8qYNV85unvw0aER29RS4AwynzwgbwE= -----END CERTIFICATE-----Generated at Fri Apr 17 19:56:46 2026 by rpki-client