$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/b131168b-bc99-34b1-a223-b4ae6928d4b5.roa File: b131168b-bc99-34b1-a223-b4ae6928d4b5.roa (raw, json) Hash identifier: o3T6zi3ADUrgyfAqm7VeQty2096WssKpPkkYjoKvj6E= Subject key identifier: 70:5D:DB:80:5C:E2:C7:15:11:31:BE:4C:78:EC:61:3E:23:3B:22:E4 Certificate issuer: /CN=3c7b6e18-00da-4da1-9f2c-19421fa6a575 Certificate serial: 010D0C9F4328584DF0AB4A5B0B24E8E6CE458180 Authority key identifier: DF:7B:54:60:4D:B4:E0:CA:A8:46:C2:52:D4:AB:B5:22:2B:8F:29:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/b131168b-bc99-34b1-a223-b4ae6928d4b5.roa Signing time: Sun 24 May 2026 13:00:30 +0000 ROA not before: Sun 24 May 2026 13:00:30 +0000 ROA not after: Sat 22 Aug 2026 13:00:30 +0000 asID: 20012 IP address blocks: 168.158.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/3c7b6e18-00da-4da1-9f2c-19421fa6a575.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/3c7b6e18-00da-4da1-9f2c-19421fa6a575.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f0:ab:4a:5b:0b:24:e8:e6:ce:45:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c7b6e18-00da-4da1-9f2c-19421fa6a575 Validity Not Before: May 24 13:00:30 2026 GMT Not After : Aug 22 13:00:30 2026 GMT Subject: CN=88d61af7-8a2b-415f-b600-93eff22692d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:18:6f:8e:71:8e:0c:74:6e:38:e0:c5:7c:db: af:15:f1:eb:ec:43:fc:8b:39:df:6f:aa:f2:21:6c: a9:7c:79:d7:a6:34:f7:0a:f9:95:0f:d5:ec:2f:df: e8:00:fd:44:d1:31:72:62:89:84:09:c6:2e:59:0a: b9:9f:e0:33:b4:f2:d9:76:c0:ca:71:30:02:44:22: b1:06:a4:30:d5:1c:f5:c5:31:34:72:83:04:68:3e: b3:2f:a5:77:71:58:e0:9b:73:29:92:59:68:1c:8d: f9:31:7a:7b:f3:ff:1a:6f:ce:17:24:5e:1f:73:e4: 5d:ab:04:4d:ab:f3:9a:0c:9e:1d:53:d8:9e:6c:42: b0:47:b2:10:f7:2f:89:1b:a4:d2:84:e2:48:01:54: 06:07:2d:d4:ff:dd:81:94:8a:5d:c9:cb:0c:bf:8a: 3e:ab:ea:7c:8e:65:2a:69:63:ce:cb:67:da:09:11: 5e:1e:3d:76:2b:34:23:b0:92:22:d3:26:94:f4:55: eb:e7:9e:c0:f0:74:b3:63:7b:1c:31:c6:c0:fe:a6: d1:10:9b:45:06:8c:3c:06:0a:b0:c4:06:92:72:00: 9a:af:cc:5b:95:7d:b0:e8:8e:93:e9:6d:07:ac:1d: 7b:1f:66:4e:89:35:0f:97:a2:f3:56:91:ed:81:36: 4a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5D:DB:80:5C:E2:C7:15:11:31:BE:4C:78:EC:61:3E:23:3B:22:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/b131168b-bc99-34b1-a223-b4ae6928d4b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/3c7b6e18-00da-4da1-9f2c-19421fa6a575.crl X509v3 Authority Key Identifier: keyid:DF:7B:54:60:4D:B4:E0:CA:A8:46:C2:52:D4:AB:B5:22:2B:8F:29:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575.cer sbgp-ipAddrBlock: critical IPv4: 168.158.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:26:94:24:c0:80:a8:c4:7c:d1:6b:cb:e0:b4:1e:2f:2e:33: f0:2a:d4:6f:0d:cf:a4:d9:b3:4a:59:86:32:20:fb:7a:2b:5d: ce:66:e1:89:8a:f0:29:a5:fb:be:c2:e3:cb:e8:34:2d:a9:4d: 05:eb:da:0a:aa:2d:ad:08:02:59:ba:be:5b:e0:06:73:31:b2: 4a:ab:bb:d4:dc:fc:b1:82:8f:ce:ad:b2:dd:5b:be:d5:7f:43: 8e:97:7f:a7:fe:97:61:ff:6d:63:9d:6f:6e:20:e4:75:e0:77: 1d:5d:14:08:2c:da:f8:d2:e9:c9:e5:1a:83:58:d7:1e:f7:99: 29:87:84:20:db:1a:47:7f:cd:dd:ad:d2:86:9b:a1:c9:9d:88: 99:17:6b:ce:a1:a9:25:ef:90:f7:13:b2:81:03:16:35:76:9e: 0d:2d:78:7e:5a:98:05:16:ee:45:36:2d:6a:d1:27:33:1a:65: e5:85:87:f2:6a:9d:1d:f5:01:bf:b2:f7:b5:a7:a6:9e:b2:52: 6e:4f:0e:88:45:bb:08:20:f0:29:3e:67:e0:32:49:df:6f:4e: f3:a7:7d:f8:5f:0c:52:a9:c9:3c:f6:8e:a2:e9:29:e3:36:b7: 14:a1:ef:8e:fe:c7:4d:92:2a:05:36:67:bc:a1:32:3f:2b:67: 71:11:76:43 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE3wq0pbCyTo5s5FgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M3YjZlMTgtMDBkYS00ZGExLTlmMmMtMTk0MjFmYTZh NTc1MB4XDTI2MDUyNDEzMDAzMFoXDTI2MDgyMjEzMDAzMFowLzEtMCsGA1UEAxMk ODhkNjFhZjctOGEyYi00MTVmLWI2MDAtOTNlZmYyMjY5MmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRhvjnGODHRuOODFfNuvFfHr7EP8iznfb6ry IWypfHnXpjT3CvmVD9XsL9/oAP1E0TFyYomECcYuWQq5n+AztPLZdsDKcTACRCKx BqQw1Rz1xTE0coMEaD6zL6V3cVjgm3MpklloHI35MXp78/8ab84XJF4fc+RdqwRN q/OaDJ4dU9iebEKwR7IQ9y+JG6TShOJIAVQGBy3U/92BlIpdycsMv4o+q+p8jmUq aWPOy2faCRFeHj12KzQjsJIi0yaU9FXr557A8HSzY3scMcbA/qbREJtFBow8Bgqw xAaScgCar8xblX2w6I6T6W0HrB17H2ZOiTUPl6LzVpHtgTZKgQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHBd24Bc4scVETG+THjsYT4jOyLkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zYzdi NmUxOC0wMGRhLTRkYTEtOWYyYy0xOTQyMWZhNmE1NzUvYjEzMTE2OGItYmM5OS0z NGIxLWEyMjMtYjRhZTY5MjhkNGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvM2M3YjZlMTgtMDBkYS00ZGExLTlm MmMtMTk0MjFmYTZhNTc1LzNjN2I2ZTE4LTAwZGEtNGRhMS05ZjJjLTE5NDIxZmE2 YTU3NS5jcmwwHwYDVR0jBBgwFoAU33tUYE204MqoRsJS1Ku1IiuPKeUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zYzdiNmUxOC0wMGRhLTRkYTEtOWYyYy0xOTQy MWZhNmE1NzUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqJ4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAriaUJMCAqMR80WvL4LQeLy4z8CrUbw3PpNmzSlmGMiD7eitdzmbhiYrw KaX7vsLjy+g0LalNBevaCqotrQgCWbq+W+AGczGySqu71Nz8sYKPzq2y3Vu+1X9D jpd/p/6XYf9tY51vbiDkdeB3HV0UCCza+NLpyeUag1jXHveZKYeEINsaR3/N3a3S hpuhyZ2ImRdrzqGpJe+Q9xOygQMWNXaeDS14flqYBRbuRTYtatEnMxpl5YWH8mqd HfUBv7L3taemnrJSbk8OiEW7CCDwKT5n4DJJ329O86d9+F8MUqnJPPaOoukp4za3 FKHvjv7HTZIqBTZnvKEyPytncRF2Qw== -----END CERTIFICATE-----Generated at Sat Jun 13 16:23:34 2026 by rpki-client