$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/d8f68052-942f-3f9b-bf26-34d9c4b2ba3c.roa File: d8f68052-942f-3f9b-bf26-34d9c4b2ba3c.roa (raw, json) Hash identifier: 4JEdSawxLf9ey4QJwLEd7ydM91Fw+21tzIcFqa9y664= Subject key identifier: B8:A9:FA:E5:9B:DE:0E:B1:CE:F1:06:24:FF:A1:33:80:B0:82:07:7D Certificate issuer: /CN=2085ad50-174f-4646-80aa-6de9c61a11a4 Certificate serial: 010D0C9F4328584D55BA432F3A1DF6A28C66A380 Authority key identifier: 37:86:19:60:3B:61:D3:A2:F3:43:DA:42:0F:B3:32:2E:8E:29:2F:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/d8f68052-942f-3f9b-bf26-34d9c4b2ba3c.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 208188 IP address blocks: 158.51.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/2085ad50-174f-4646-80aa-6de9c61a11a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/2085ad50-174f-4646-80aa-6de9c61a11a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:43:2f:3a:1d:f6:a2:8c:66:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2085ad50-174f-4646-80aa-6de9c61a11a4 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=5f1ef700-c671-4a36-bed1-829b266fd76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:68:69:11:af:c2:e6:5d:7a:a2:04:86:3b:1e: 4e:b4:e2:ee:39:84:dc:67:ef:ec:92:52:1e:d4:15: 16:1d:a8:a6:96:6a:3b:89:64:f8:a5:47:37:86:88: a7:8f:30:a9:ed:54:f1:38:5a:66:74:72:5d:00:5e: f1:63:c9:01:e2:99:9e:f0:9d:4c:66:27:32:ae:94: d1:75:e5:9e:f8:56:10:c4:ae:ce:fa:bd:e6:12:5f: fe:08:bf:84:91:1c:33:1b:03:e4:c9:23:58:b8:cb: 4c:41:24:76:e0:7f:66:20:4b:2a:f7:dc:c1:fc:89: 6d:ee:75:01:05:4d:59:02:cf:b0:6d:30:c0:e2:b7: 00:82:b6:4d:1f:02:a2:14:6a:01:29:79:28:ec:c8: 9f:c2:89:15:d4:fe:e4:86:c0:6d:95:ce:8e:9d:d2: 40:ca:66:f7:6a:b7:95:49:39:64:8a:61:f4:d3:12: a3:7d:1d:e6:8c:c1:d2:32:9a:3d:5f:7d:57:61:f4: ff:5d:b9:b7:72:94:84:43:7f:6e:73:6e:be:6e:0e: 09:8b:9c:e5:8a:cd:93:f1:6d:8a:6f:29:ea:52:2b: 38:8d:02:a1:4d:76:4d:eb:37:94:46:ee:31:54:3f: 9a:b5:09:18:23:83:7a:e2:79:24:1b:84:33:8e:69: 40:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A9:FA:E5:9B:DE:0E:B1:CE:F1:06:24:FF:A1:33:80:B0:82:07:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/d8f68052-942f-3f9b-bf26-34d9c4b2ba3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/2085ad50-174f-4646-80aa-6de9c61a11a4.crl X509v3 Authority Key Identifier: keyid:37:86:19:60:3B:61:D3:A2:F3:43:DA:42:0F:B3:32:2E:8E:29:2F:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4.cer sbgp-ipAddrBlock: critical IPv4: 158.51.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:7a:7d:7e:83:72:35:df:77:09:86:12:81:35:41:4b:ae:23: 0d:ef:0c:83:31:72:9b:73:e9:16:c2:18:36:94:f5:d8:10:9f: 09:c9:ba:20:f9:9e:98:9c:e1:8b:e2:ab:01:40:6b:57:21:df: 7f:4e:b2:90:39:7a:c6:12:ca:55:5b:1a:79:8a:cd:e7:53:34: a1:1d:26:0f:c4:e2:df:7b:d5:9d:c8:ff:8e:03:e3:24:0c:62: 8d:29:44:7b:5b:42:92:90:15:5b:20:5a:42:ab:b9:4b:0c:c0: a0:d7:9d:fc:a0:e4:06:bb:96:65:8d:db:b6:0a:a5:d5:b8:fa: 3d:4c:e2:f5:7f:6f:98:63:3c:bf:42:3a:69:00:74:e5:64:99: 0d:65:10:9f:11:b8:5a:5a:97:0e:a4:90:1d:62:47:9c:fc:cc: 4f:06:4e:d7:1f:45:e7:6e:db:b2:ff:88:0c:8b:c2:e8:1b:f2: fb:a5:d9:69:91:70:db:79:57:c7:94:d8:71:c6:20:08:f7:2e: cb:a1:bf:e7:a2:a1:36:3d:66:ba:2e:f4:ae:8f:ba:a2:0a:b6: 2e:b0:d4:c0:13:64:a8:62:c6:e5:b0:18:c3:f1:56:85:3d:a4: 7b:0b:09:b0:2a:1f:90:69:9c:8a:b9:b8:2f:43:26:5c:62:85: b8:94:ad:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukMvOh32ooxmo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA4NWFkNTAtMTc0Zi00NjQ2LTgwYWEtNmRlOWM2MWEx MWE0MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NWYxZWY3MDAtYzY3MS00YTM2LWJlZDEtODI5YjI2NmZkNzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmhpEa/C5l16ogSGOx5OtOLuOYTcZ+/sklIe 1BUWHaimlmo7iWT4pUc3hoinjzCp7VTxOFpmdHJdAF7xY8kB4pme8J1MZicyrpTR deWe+FYQxK7O+r3mEl/+CL+EkRwzGwPkySNYuMtMQSR24H9mIEsq99zB/Ilt7nUB BU1ZAs+wbTDA4rcAgrZNHwKiFGoBKXko7MifwokV1P7khsBtlc6OndJAymb3areV STlkimH00xKjfR3mjMHSMpo9X31XYfT/Xbm3cpSEQ39uc26+bg4Ji5zlis2T8W2K bynqUis4jQKhTXZN6zeURu4xVD+atQkYI4N64nkkG4QzjmlAtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLip+uWb3g6xzvEGJP+hM4Cwggd9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDg1 YWQ1MC0xNzRmLTQ2NDYtODBhYS02ZGU5YzYxYTExYTQvZDhmNjgwNTItOTQyZi0z ZjliLWJmMjYtMzRkOWM0YjJiYTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA4NWFkNTAtMTc0Zi00NjQ2LTgw YWEtNmRlOWM2MWExMWE0LzIwODVhZDUwLTE3NGYtNDY0Ni04MGFhLTZkZTljNjFh MTFhNC5jcmwwHwYDVR0jBBgwFoAUN4YZYDth06LzQ9pCD7MyLo4pL0wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDg1YWQ1MC0xNzRmLTQ2NDYtODBhYS02ZGU5 YzYxYTExYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjNqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMR6fX6DcjXfdwmGEoE1QUuuIw3vDIMxcptz6RbCGDaU9dgQnwnJuiD5 npic4YviqwFAa1ch339OspA5esYSylVbGnmKzedTNKEdJg/E4t971Z3I/44D4yQM Yo0pRHtbQpKQFVsgWkKruUsMwKDXnfyg5Aa7lmWN27YKpdW4+j1M4vV/b5hjPL9C OmkAdOVkmQ1lEJ8RuFpalw6kkB1iR5z8zE8GTtcfRedu27L/iAyLwugb8vul2WmR cNt5V8eU2HHGIAj3Lsuhv+eioTY9Zrou9K6PuqIKti6w1MATZKhixuWwGMPxVoU9 pHsLCbAqH5BpnIq5uC9DJlxihbiUrR8= -----END CERTIFICATE-----Generated at Fri Apr 17 21:26:28 2026 by rpki-client