$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0159b89a-a656-3a48-9238-a00b41851590.roa File: 0159b89a-a656-3a48-9238-a00b41851590.roa (raw, json) Hash identifier: P3JngYo2LZXkYKMZxTikXIE8uYIkcgAFld+rorQSaak= Subject key identifier: 3D:A7:39:DA:04:D3:69:0F:26:03:89:BF:7A:DC:C1:BB:55:28:FD:E7 Certificate issuer: /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63 Certificate serial: 010D0C9F4328584F71ED81FB33686F6764EFAB00 Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0159b89a-a656-3a48-9238-a00b41851590.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 12025 IP address blocks: 72.44.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:81:fb:33:68:6f:67:64:ef:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=8f0241cb-0fa3-4adf-b380-35e01ccd3fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:da:dc:55:65:04:de:ae:66:aa:fe:ad:c7:5f: db:2f:79:14:fd:19:69:13:cb:46:74:da:48:e5:32: 9b:6a:f6:5f:2a:dc:c9:d0:7c:cf:62:ff:e8:86:da: ad:18:3a:39:ba:cb:b6:1e:00:a8:16:96:b4:16:42: 4c:61:56:a0:74:d8:83:b1:f2:59:e6:33:9a:b6:a5: b0:40:ff:1b:db:f6:0b:e5:33:cd:ac:66:ad:9a:be: 55:e6:96:05:bc:7f:db:c1:66:cd:7f:75:b8:a5:63: b6:08:57:27:f6:78:4d:b5:e5:18:53:d3:6a:8f:6f: 0e:76:a2:d2:a0:3c:7b:fa:f2:14:06:f9:b5:21:90: 53:55:d1:ef:f2:f7:1e:67:21:e9:27:ef:29:a3:82: 3f:ce:ac:c4:fc:6d:3c:7f:c0:2a:2b:7a:cf:21:ff: d6:76:0b:58:77:b8:7c:21:f4:25:55:61:f5:d4:55: 2e:29:1a:a6:06:35:99:db:28:08:2a:c3:5f:f5:49: 41:b6:50:2a:96:f5:4c:aa:32:8a:16:e0:d6:f9:3d: ac:cb:cd:d0:74:34:b8:88:48:c6:2e:69:21:6a:70: c7:3d:31:e9:ef:ba:89:2e:44:1a:58:e0:a0:65:c6: 30:51:46:33:37:3b:74:7a:73:9a:44:93:06:10:4b: 61:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A7:39:DA:04:D3:69:0F:26:03:89:BF:7A:DC:C1:BB:55:28:FD:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0159b89a-a656-3a48-9238-a00b41851590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl X509v3 Authority Key Identifier: keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer sbgp-ipAddrBlock: critical IPv4: 72.44.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:66:ad:8b:90:04:51:62:96:5b:01:75:08:4c:69:9c:07:62: 7e:90:de:0e:38:a6:97:69:f1:d6:d8:c4:b1:d0:3f:bc:b9:17: 4c:b1:38:d9:e3:86:6a:c6:f6:e9:13:23:c4:cd:43:03:cb:62: fb:b6:18:df:c4:d4:52:ce:b3:8d:a5:aa:a5:98:fe:5b:fc:42: fa:1e:f4:f4:06:07:9b:e1:97:e1:90:a3:6c:8c:2d:66:4a:c1: 1d:6d:6d:57:dd:38:a0:57:ac:26:47:f0:90:b8:a6:a7:aa:c9: 8c:b1:97:12:7a:39:b0:a4:31:ea:ac:79:17:59:5a:05:bf:71: d0:e4:30:ad:a3:8f:27:12:c6:56:22:7d:b9:8b:26:a5:02:4e: 50:d1:d1:ae:1c:f2:d7:44:1c:e4:a0:11:70:fa:0d:dd:27:7f: ed:08:21:0a:21:a4:05:b0:ad:a5:77:e1:e5:f9:00:a3:21:c2: a7:9b:87:28:56:79:15:cb:1f:dd:da:20:ec:a7:d9:6e:a6:84: 1e:52:3f:8f:22:cb:b2:c4:49:88:29:e4:9c:59:7e:e3:b5:37: ee:b0:3f:94:71:5f:7a:22:d3:47:7f:3e:c1:cc:d4:c6:64:be: d7:4d:7e:70:85:48:35:69:0f:1f:82:09:11:f3:fc:c8:b9:24: a2:f2:4d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7YH7M2hvZ2TvqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU1OWMxMzctMDYxOS00MDdiLTg3Y2UtOGE0ZTA4ZGQ2 YzYzMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk OGYwMjQxY2ItMGZhMy00YWRmLWIzODAtMzVlMDFjY2QzZmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydrcVWUE3q5mqv6tx1/bL3kU/RlpE8tGdNpI 5TKbavZfKtzJ0HzPYv/ohtqtGDo5usu2HgCoFpa0FkJMYVagdNiDsfJZ5jOatqWw QP8b2/YL5TPNrGatmr5V5pYFvH/bwWbNf3W4pWO2CFcn9nhNteUYU9Nqj28OdqLS oDx7+vIUBvm1IZBTVdHv8vceZyHpJ+8po4I/zqzE/G08f8AqK3rPIf/WdgtYd7h8 IfQlVWH11FUuKRqmBjWZ2ygIKsNf9UlBtlAqlvVMqjKKFuDW+T2sy83QdDS4iEjG LmkhanDHPTHp77qJLkQaWOCgZcYwUUYzNzt0enOaRJMGEEthIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2nOdoE02kPJgOJv3rcwbtVKP3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5 YzEzNy0wNjE5LTQwN2ItODdjZS04YTRlMDhkZDZjNjMvMDE1OWI4OWEtYTY1Ni0z YTQ4LTkyMzgtYTAwYjQxODUxNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGU1OWMxMzctMDYxOS00MDdiLTg3 Y2UtOGE0ZTA4ZGQ2YzYzLzBlNTljMTM3LTA2MTktNDA3Yi04N2NlLThhNGUwOGRk NmM2My5jcmwwHwYDVR0jBBgwFoAUhK/fZENn+KWm3VRabKVzFb4wW8EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5YzEzNy0wNjE5LTQwN2ItODdjZS04YTRl MDhkZDZjNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCzzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxmrYuQBFFillsBdQhMaZwHYn6Q3g44ppdp8dbYxLHQP7y5F0yxONnj hmrG9ukTI8TNQwPLYvu2GN/E1FLOs42lqqWY/lv8Qvoe9PQGB5vhl+GQo2yMLWZK wR1tbVfdOKBXrCZH8JC4pqeqyYyxlxJ6ObCkMeqseRdZWgW/cdDkMK2jjycSxlYi fbmLJqUCTlDR0a4c8tdEHOSgEXD6Dd0nf+0IIQohpAWwraV34eX5AKMhwqebhyhW eRXLH93aIOyn2W6mhB5SP48iy7LESYgp5JxZfuO1N+6wP5RxX3oi00d/PsHM1MZk vtdNfnCFSDVpDx+CCRHz/Mi5JKLyTSE= -----END CERTIFICATE-----Generated at Sun Oct 11 14:57:20 2026 by rpki-client