$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0fda894c-d33f-3637-a29e-e1d1b36e49e3.roa File: 0fda894c-d33f-3637-a29e-e1d1b36e49e3.roa (raw, json) Hash identifier: qiTqGYZMVrYveVDpxYdhvciYy1kpiUdzPL9xEzPHUK0= Subject key identifier: 01:4A:95:64:CB:3F:63:35:05:F4:09:12:73:15:A3:38:DE:E6:D4:D1 Certificate issuer: /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63 Certificate serial: 010D0C9F4328584D5F2708ACCFD53BAA5FD86880 Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0fda894c-d33f-3637-a29e-e1d1b36e49e3.roa Signing time: Thu 02 Apr 2026 10:02:01 +0000 ROA not before: Thu 02 Apr 2026 10:02:01 +0000 ROA not after: Wed 01 Jul 2026 10:02:01 +0000 asID: 12025 IP address blocks: 174.128.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:27:08:ac:cf:d5:3b:aa:5f:d8:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63 Validity Not Before: Apr 2 10:02:01 2026 GMT Not After : Jul 1 10:02:01 2026 GMT Subject: CN=a8ff58c8-c3f2-4b7c-93af-0a992bb2c17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:09:34:d6:58:17:a9:7c:ae:46:a7:d8:ae: 22:86:1b:ff:03:65:14:55:3a:d9:92:cd:a4:78:92: e2:b8:2c:93:81:18:2d:d8:5d:26:8d:dd:f0:75:48: f9:a3:97:0f:79:17:38:1c:9f:94:04:ed:b1:a2:4c: a8:e1:48:ba:a3:65:c0:64:6c:e6:25:ad:1f:e5:fb: f1:93:2c:54:ab:d4:8e:74:9d:10:3a:ae:12:3e:f5: d3:80:f1:6e:c6:cb:b8:f8:b4:31:f6:43:47:0c:73: 73:60:c6:83:67:e1:c7:0a:c2:88:83:0f:31:29:df: 56:d4:4e:6e:60:54:2f:39:72:6d:e1:49:40:5a:a4: fb:42:b2:ee:a3:ba:11:e0:48:c5:50:e1:97:79:aa: 63:cd:5c:d7:08:6e:5a:04:77:45:9f:73:c3:f6:e1: cb:e4:7c:e4:3c:a3:c9:00:42:e2:c4:2f:06:a1:82: b7:b3:6a:97:d3:a0:ac:08:59:3b:b2:19:f4:ac:67: 1a:72:f2:74:a7:ad:0e:bc:52:34:54:38:46:49:59: c1:00:ef:91:5c:6f:e0:6a:95:e0:f1:c4:bc:d5:37: 47:e9:21:44:64:27:96:bc:2a:4c:47:cf:0e:de:3a: 5f:be:1a:59:ac:0b:3a:1f:a6:52:aa:5c:28:3a:b8: 75:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4A:95:64:CB:3F:63:35:05:F4:09:12:73:15:A3:38:DE:E6:D4:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0fda894c-d33f-3637-a29e-e1d1b36e49e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl X509v3 Authority Key Identifier: keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer sbgp-ipAddrBlock: critical IPv4: 174.128.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:2d:f9:79:23:3f:e7:2f:e2:23:9f:51:5d:d5:66:2b:62:9e: e4:c7:d4:f3:d8:76:51:fa:08:45:f1:b3:cb:56:87:b8:34:9b: ad:db:66:54:36:b0:81:cb:b8:7f:48:b7:6e:c7:61:63:0b:48: 76:30:f7:0b:2d:01:40:97:9a:a5:f1:10:5c:97:b2:2a:f6:0d: 57:a0:47:a0:d1:17:5a:6d:a4:1c:c0:52:f3:96:98:29:72:b5: dc:ee:94:60:20:cc:f3:d6:07:7a:8f:ee:42:fc:bf:d9:88:d8: 14:3b:83:01:b0:44:37:8c:20:3e:47:da:32:60:fe:c6:f5:6a: b7:07:7a:e0:99:24:0b:18:cf:6e:70:45:ff:d1:2c:26:73:a0: 91:41:50:59:ff:c3:8a:fc:2b:3c:14:50:37:64:12:48:ac:5c: 07:8c:02:e7:62:67:70:dd:c1:a3:ee:57:b9:9d:72:8d:79:e2: 22:5d:5f:40:8f:2c:86:66:f1:04:89:8d:72:a6:14:66:e5:f5: 2a:bf:2c:d8:43:4c:10:2a:18:e7:9c:84:fc:40:72:92:5b:48: d9:6b:8f:2b:71:87:fd:69:de:4e:9b:28:b3:97:cd:c3:84:a6: 32:00:9a:f9:02:f8:06:94:71:ac:95:2c:4f:c3:9c:fe:e4:9c: 45:48:54:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1fJwisz9U7ql/YaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU1OWMxMzctMDYxOS00MDdiLTg3Y2UtOGE0ZTA4ZGQ2 YzYzMB4XDTI2MDQwMjEwMDIwMVoXDTI2MDcwMTEwMDIwMVowLzEtMCsGA1UEAxMk YThmZjU4YzgtYzNmMi00YjdjLTkzYWYtMGE5OTJiYjJjMTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO8JNNZYF6l8rkan2K4ihhv/A2UUVTrZks2k eJLiuCyTgRgt2F0mjd3wdUj5o5cPeRc4HJ+UBO2xokyo4Ui6o2XAZGzmJa0f5fvx kyxUq9SOdJ0QOq4SPvXTgPFuxsu4+LQx9kNHDHNzYMaDZ+HHCsKIgw8xKd9W1E5u YFQvOXJt4UlAWqT7QrLuo7oR4EjFUOGXeapjzVzXCG5aBHdFn3PD9uHL5HzkPKPJ AELixC8GoYK3s2qX06CsCFk7shn0rGcacvJ0p60OvFI0VDhGSVnBAO+RXG/gapXg 8cS81TdH6SFEZCeWvCpMR88O3jpfvhpZrAs6H6ZSqlwoOrh1KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFKlWTLP2M1BfQJEnMVozje5tTRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5 YzEzNy0wNjE5LTQwN2ItODdjZS04YTRlMDhkZDZjNjMvMGZkYTg5NGMtZDMzZi0z NjM3LWEyOWUtZTFkMWIzNmU0OWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGU1OWMxMzctMDYxOS00MDdiLTg3 Y2UtOGE0ZTA4ZGQ2YzYzLzBlNTljMTM3LTA2MTktNDA3Yi04N2NlLThhNGUwOGRk NmM2My5jcmwwHwYDVR0jBBgwFoAUhK/fZENn+KWm3VRabKVzFb4wW8EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5YzEzNy0wNjE5LTQwN2ItODdjZS04YTRl MDhkZDZjNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroA1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkt+XkjP+cv4iOfUV3VZitinuTH1PPYdlH6CEXxs8tWh7g0m63bZlQ2 sIHLuH9It27HYWMLSHYw9wstAUCXmqXxEFyXsir2DVegR6DRF1ptpBzAUvOWmCly tdzulGAgzPPWB3qP7kL8v9mI2BQ7gwGwRDeMID5H2jJg/sb1arcHeuCZJAsYz25w Rf/RLCZzoJFBUFn/w4r8KzwUUDdkEkisXAeMAudiZ3DdwaPuV7mdco154iJdX0CP LIZm8QSJjXKmFGbl9Sq/LNhDTBAqGOechPxAcpJbSNlrjytxh/1p3k6bKLOXzcOE pjIAmvkC+AaUcayVLE/DnP7knEVIVL8= -----END CERTIFICATE-----Generated at Fri Apr 17 17:58:22 2026 by rpki-client