$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/2ba18948-d3b7-3c1d-bd57-a27ac9eaa5c4.roa File: 2ba18948-d3b7-3c1d-bd57-a27ac9eaa5c4.roa (raw, json) Hash identifier: /ADVhvd5o+yz+i7WEu0yRQ8wKS1+esZkz+BjlcgBKDM= Subject key identifier: CB:BC:DA:DD:E7:82:9D:1B:0C:15:E2:D7:F2:EF:50:EE:0F:D2:5E:79 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584A84F6DAB89DC25DA9D5749100 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/2ba18948-d3b7-3c1d-bd57-a27ac9eaa5c4.roa Signing time: Mon 14 Jul 2025 20:44:51 +0000 ROA not before: Mon 14 Jul 2025 20:44:51 +0000 ROA not after: Sun 12 Oct 2025 20:44:51 +0000 asID: 14618 IP address blocks: 159.26.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:f6:da:b8:9d:c2:5d:a9:d5:74:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Jul 14 20:44:51 2025 GMT Not After : Oct 12 20:44:51 2025 GMT Subject: CN=c84fb9da-777e-4fec-97a1-e155026b0759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:34:e5:1b:39:b7:06:1e:69:6d:46:28:ef:65: ac:ac:6a:78:75:53:7e:b8:c4:eb:fd:ad:46:09:4e: 21:3d:f1:2d:c7:d1:a3:fa:e3:35:d5:97:09:17:4a: 42:78:87:07:ea:82:be:0a:96:b7:bc:15:d9:e7:33: 76:c3:79:35:d0:67:32:97:50:0a:57:2c:57:46:90: 6b:41:e6:e6:16:22:7d:cc:c4:fb:b4:07:f9:d9:0e: 2b:44:b0:60:c1:4e:b9:c3:d5:a2:d6:d2:4c:a3:b0: 4e:e1:de:b4:9e:45:3d:8a:9a:f5:e0:2f:3d:de:96: 43:8c:29:f4:55:c6:34:20:aa:f8:ca:3e:af:00:74: 50:7e:56:cb:7b:df:18:8f:36:3d:14:97:70:d9:92: 5c:9f:c1:12:7b:53:83:51:87:81:d0:33:59:cf:27: 55:cb:f5:ba:07:89:fa:26:7f:62:d9:f2:8e:49:42: ab:77:91:30:8b:7b:4c:7c:39:cd:22:13:d4:28:d2: 2f:26:e3:15:de:da:a4:b3:07:20:e5:3d:34:5e:92: 4b:a6:d3:2d:99:a1:eb:d8:8a:40:cb:fb:50:46:6d: 80:80:1c:3e:e3:0c:06:b4:7f:48:e2:ed:2a:df:4a: 26:49:0d:e0:20:a4:c1:55:41:12:fc:f5:8a:53:73: 92:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BC:DA:DD:E7:82:9D:1B:0C:15:E2:D7:F2:EF:50:EE:0F:D2:5E:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/2ba18948-d3b7-3c1d-bd57-a27ac9eaa5c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 159.26.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:20:e4:99:e2:6b:01:5a:22:8e:12:e7:7b:42:84:cd:69:c3: ee:4b:5c:15:d0:af:bc:f1:32:71:54:a3:47:87:d8:0d:70:02: 38:f4:56:f7:15:0a:9e:b8:4c:76:f5:cd:dd:2f:c5:ec:d7:a4: 22:5b:4e:8c:98:ac:e0:0f:cb:4b:59:3a:5f:ac:51:79:94:da: 40:f7:c5:dd:42:46:7b:a1:c7:cd:8e:a1:77:ed:f3:d7:4f:be: 25:21:14:d6:9d:3e:6c:c5:3b:78:9d:ea:47:c0:0a:fb:69:ed: 64:99:5b:38:9c:f9:a8:61:d5:13:6f:3f:78:c4:bc:11:d8:b1: 47:f1:a0:ec:eb:8e:39:9d:2e:7c:e6:ce:72:9c:3b:fa:19:56: d2:57:18:2b:98:cd:86:73:f9:cc:d1:f0:cc:8f:e3:20:b8:5d: 42:b8:7d:24:90:11:4b:99:f6:dd:bd:02:6a:b9:10:6f:49:98: fa:7d:a4:88:f3:56:79:04:1f:ba:6c:33:fa:db:c5:25:fc:c9: a7:24:09:c7:0b:af:98:fa:69:3b:49:d6:6c:eb:d3:19:30:57: 56:a6:aa:0b:5b:3f:cc:77:64:f8:9c:66:a3:51:b3:7d:c5:cf: fc:f7:d0:2f:14:57:89:45:d8:17:04:e4:81:6a:e1:62:cb:9d: 04:92:ca:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqE9tq4ncJdqdV0kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MDcxNDIwNDQ1MVoXDTI1MTAxMjIwNDQ1MVowLzEtMCsGA1UEAxMk Yzg0ZmI5ZGEtNzc3ZS00ZmVjLTk3YTEtZTE1NTAyNmIwNzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTTlGzm3Bh5pbUYo72WsrGp4dVN+uMTr/a1G CU4hPfEtx9Gj+uM11ZcJF0pCeIcH6oK+Cpa3vBXZ5zN2w3k10Gcyl1AKVyxXRpBr QebmFiJ9zMT7tAf52Q4rRLBgwU65w9Wi1tJMo7BO4d60nkU9ipr14C893pZDjCn0 VcY0IKr4yj6vAHRQflbLe98YjzY9FJdw2ZJcn8ESe1ODUYeB0DNZzydVy/W6B4n6 Jn9i2fKOSUKrd5Ewi3tMfDnNIhPUKNIvJuMV3tqkswcg5T00XpJLptMtmaHr2IpA y/tQRm2AgBw+4wwGtH9I4u0q30omSQ3gIKTBVUES/PWKU3OS1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMu82t3ngp0bDBXi1/LvUO4P0l55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvMmJhMTg5NDgtZDNiNy0z YzFkLWJkNTctYTI3YWM5ZWFhNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnxqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0g5JniawFaIo4S53tChM1pw+5LXBXQr7zxMnFUo0eH2A1wAjj0VvcV Cp64THb1zd0vxezXpCJbToyYrOAPy0tZOl+sUXmU2kD3xd1CRnuhx82OoXft89dP viUhFNadPmzFO3id6kfACvtp7WSZWzic+ahh1RNvP3jEvBHYsUfxoOzrjjmdLnzm znKcO/oZVtJXGCuYzYZz+czR8MyP4yC4XUK4fSSQEUuZ9t29Amq5EG9JmPp9pIjz VnkEH7psM/rbxSX8yackCccLr5j6aTtJ1mzr0xkwV1amqgtbP8x3ZPicZqNRs33F z/z30C8UV4lF2BcE5IFq4WLLnQSSypU= -----END CERTIFICATE-----Generated at Fri Jul 25 12:44:08 2025 by rpki-client