$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/dacb8d64-0467-305d-8bc3-2c5336579a32.roa File: dacb8d64-0467-305d-8bc3-2c5336579a32.roa (raw, json) Hash identifier: yh1YgM7K2T//Ibn/ymKWPcPpDNbCbLjMxKf8rxcJnDc= Subject key identifier: D5:0B:D6:91:99:BC:59:D4:58:75:41:4F:A7:DE:0A:6F:5C:35:64:5B Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F4328584EAE819ACD602FB900CC4DF280 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/dacb8d64-0467-305d-8bc3-2c5336579a32.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 29016 IP address blocks: 159.182.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:9a:cd:60:2f:b9:00:cc:4d:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=f32a8b88-75ef-4a94-b17f-77f5bcc32a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:84:81:bf:04:f2:92:30:6e:f0:60:13:02:e2: 6a:1c:16:b0:c0:23:ab:09:a8:d0:a5:0e:2a:52:4d: 0f:93:45:58:ca:61:d1:1b:4b:d7:98:52:75:48:7e: 3e:47:be:69:a3:25:e7:84:6c:bc:a4:53:e4:37:8e: 63:bd:40:5a:cd:b7:ef:51:3c:59:85:3e:7c:6c:8c: 5b:89:f2:e1:e0:f4:95:9a:2b:1c:a6:e7:27:3f:ec: ed:7b:bc:ab:41:8b:ae:69:1a:cf:2d:eb:94:5e:e4: ab:0b:7f:dd:c0:c5:60:1c:33:d6:c5:05:ff:05:9c: 3d:27:ca:15:19:a5:a6:89:fb:76:43:e3:20:90:f3: be:7f:44:9c:e3:4d:fb:32:8c:2a:3d:54:70:17:e3: 08:aa:59:49:c3:c0:0f:13:d7:f3:96:f7:2d:04:98: c6:6f:28:c4:b6:19:a4:79:3a:59:3c:7b:f4:35:8b: 55:db:ff:2a:fa:e8:95:23:de:6c:48:48:7f:aa:5e: c0:b9:b4:8b:66:98:6a:3f:dc:0d:09:2e:10:38:08: de:95:a9:1b:61:ab:28:4f:68:e6:f9:1f:18:ad:17: 56:8f:64:82:a0:03:d9:2b:ae:27:e5:74:17:b5:4c: 10:5c:3d:8f:38:4a:2e:a9:42:a5:a3:37:c9:96:87: e5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0B:D6:91:99:BC:59:D4:58:75:41:4F:A7:DE:0A:6F:5C:35:64:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/dacb8d64-0467-305d-8bc3-2c5336579a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 159.182.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a9:ea:06:08:91:c5:f5:ef:6f:0b:ca:fd:bf:af:9c:eb:12: 64:f0:6c:d3:d3:8b:12:65:79:d1:96:ca:69:d4:1d:f1:c0:42: f8:f9:84:41:e4:cf:3e:52:07:d6:6e:86:25:d0:c7:9a:40:1d: 08:b3:6e:c1:40:63:e7:c2:ab:b6:a4:28:a2:85:7c:bf:b5:e4: 33:48:1e:c5:6a:d7:f3:9e:0a:d8:4a:ec:98:e7:d3:f9:c5:1e: 49:cc:7e:c7:f2:85:9a:c4:ca:05:22:c0:8e:14:8c:06:69:3e: 5d:05:12:e3:e1:79:a7:29:e1:b7:40:70:f5:6b:96:59:72:51: 47:6b:31:f3:33:a6:47:83:af:ba:f3:48:0f:9a:5c:04:ea:21: cc:50:af:b7:7d:88:69:ca:fc:e6:7a:03:bc:58:fb:0e:e0:90: b8:de:b2:16:31:f4:58:c0:b5:c0:85:fb:21:6a:71:6e:2c:94: a7:5d:60:1b:3b:26:b0:a8:c4:1d:11:f7:57:73:75:a5:dc:8a: 06:1f:2a:50:0a:69:51:4d:ca:4f:91:46:d7:8f:0a:e7:8f:2e: 30:e0:6d:2d:b0:69:ff:23:04:8e:98:3f:42:1e:63:88:e6:ae: 0f:b7:2e:05:ad:f8:41:a2:41:03:9d:c8:79:cb:e0:26:a8:55: d9:7b:a4:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugZrNYC+5AMxN8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk ZjMyYThiODgtNzVlZi00YTk0LWIxN2YtNzdmNWJjYzMyYTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgISBvwTykjBu8GATAuJqHBawwCOrCajQpQ4q Uk0Pk0VYymHRG0vXmFJ1SH4+R75poyXnhGy8pFPkN45jvUBazbfvUTxZhT58bIxb ifLh4PSVmiscpucnP+zte7yrQYuuaRrPLeuUXuSrC3/dwMVgHDPWxQX/BZw9J8oV GaWmift2Q+MgkPO+f0Sc4037MowqPVRwF+MIqllJw8APE9fzlvctBJjGbyjEthmk eTpZPHv0NYtV2/8q+uiVI95sSEh/ql7AubSLZphqP9wNCS4QOAjelakbYasoT2jm +R8YrRdWj2SCoAPZK64n5XQXtUwQXD2POEouqUKlozfJloflSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUL1pGZvFnUWHVBT6feCm9cNWRbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvZGFjYjhkNjQtMDQ2Ny0z MDVkLThiYzMtMmM1MzM2NTc5YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDn7Z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6p6gYIkcX1728Lyv2/r5zrEmTwbNPTixJledGWymnUHfHAQvj5hEHk zz5SB9ZuhiXQx5pAHQizbsFAY+fCq7akKKKFfL+15DNIHsVq1/OeCthK7Jjn0/nF HknMfsfyhZrEygUiwI4UjAZpPl0FEuPheacp4bdAcPVrlllyUUdrMfMzpkeDr7rz SA+aXATqIcxQr7d9iGnK/OZ6A7xY+w7gkLjeshYx9FjAtcCF+yFqcW4slKddYBs7 JrCoxB0R91dzdaXcigYfKlAKaVFNyk+RRtePCuePLjDgbS2waf8jBI6YP0IeY4jm rg+3LgWt+EGiQQOdyHnL4CaoVdl7pHw= -----END CERTIFICATE-----Generated at Fri Aug 21 22:02:51 2026 by rpki-client