$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/ea5fac7c-b585-38d4-8a2c-649c73995029.roa File: ea5fac7c-b585-38d4-8a2c-649c73995029.roa (raw, json) Hash identifier: t+jXzFGImD79I++rJTJiUOU4xCv/eOJLEHuVhmqa9Cw= Subject key identifier: 12:E5:0C:FA:47:3E:AE:D1:A7:A4:0D:65:FF:F1:96:91:15:2F:DF:69 Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F4328584EAE8194D98700877DCF34F500 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/ea5fac7c-b585-38d4-8a2c-649c73995029.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 29016 IP address blocks: 159.182.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:94:d9:87:00:87:7d:cf:34:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=3e085967-f9ac-40da-b55c-f56f3ca0caf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0f:b2:4e:4b:16:b2:ea:6c:11:0a:78:e2:1d: 25:09:cd:2c:eb:77:1c:ec:68:9f:2a:4c:e9:da:36: d7:57:88:c6:06:c5:3d:02:3c:77:a4:5f:b0:d4:38: 46:ce:36:63:18:72:41:5c:0e:ca:a4:48:e1:30:f2: 41:88:f7:4e:01:b5:09:cb:04:96:d6:1d:e0:e2:1c: c5:68:bf:33:8f:81:fe:9a:f1:8d:84:85:a0:68:9b: e0:d0:e7:39:04:0b:64:a3:87:54:7e:f5:ef:a6:1c: c1:86:56:7e:eb:b3:96:e9:f5:84:10:d6:a1:28:5b: fb:ee:88:b1:33:88:81:47:f7:37:f3:cc:93:94:17: c1:cc:63:73:73:96:2b:27:9a:4b:aa:f2:c7:e6:fa: dd:a0:2e:ae:d4:a5:ff:0b:b7:3e:bf:9c:47:01:80: 40:a0:61:0f:7c:8c:95:17:88:28:10:ee:b9:d1:14: a6:b4:93:dc:7f:d4:d0:fd:6c:2e:10:04:58:32:55: 6f:23:d8:51:23:34:68:94:6c:06:22:8e:ab:a2:e6: d8:d0:5c:c0:0b:a7:41:24:83:fb:e9:de:9c:f7:55: 04:c4:a2:6b:59:1c:ee:64:50:f2:54:64:b5:a1:47: 3e:b1:0d:bd:08:d0:0e:1a:64:79:9e:32:7a:ab:ac: b6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E5:0C:FA:47:3E:AE:D1:A7:A4:0D:65:FF:F1:96:91:15:2F:DF:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/ea5fac7c-b585-38d4-8a2c-649c73995029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 159.182.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:28:aa:ed:b0:30:c0:33:e6:00:d1:47:39:ce:ae:7b:a4:18: 58:34:8a:70:83:06:37:88:0f:71:7e:bd:29:5d:3f:51:a9:65: 51:b1:cd:b1:16:19:0c:90:00:27:cf:f8:98:19:3e:93:ea:4b: 7b:6c:25:47:69:2c:76:c4:cd:9b:77:ef:69:f8:5f:ca:e2:90: 21:39:53:b7:96:12:d5:50:b0:82:c7:2e:5c:c2:4f:36:f3:01: a8:8a:e3:89:35:4a:b3:7a:65:55:dd:2f:9f:d3:52:fb:0e:cc: b4:74:9c:e4:3e:f6:93:81:15:70:9d:40:52:e1:b0:be:aa:47: 71:1d:0f:dd:41:ff:e5:01:9d:2b:8e:88:e5:02:1e:0b:7f:36: 1c:19:5c:7a:86:9f:06:2d:6d:48:ae:a3:f7:90:d6:2d:4e:82: 3e:10:52:37:8b:62:cc:37:23:11:bb:75:0e:98:b1:7e:f8:dc: a4:2e:5b:1c:d9:3e:34:14:d0:f3:53:3d:18:61:e0:77:b8:3f: b7:43:ad:4c:50:cd:6b:c1:09:7b:34:07:f8:45:53:06:54:30: ef:2e:a1:1e:1e:05:ed:c3:da:c3:b3:ca:96:21:bb:ab:c1:d9: 2e:0f:7d:6c:64:15:d2:b3:34:e3:91:c8:98:99:34:e4:97:48: bf:f7:b0:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugZTZhwCHfc809QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk M2UwODU5NjctZjlhYy00MGRhLWI1NWMtZjU2ZjNjYTBjYWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw+yTksWsupsEQp44h0lCc0s63cc7GifKkzp 2jbXV4jGBsU9Ajx3pF+w1DhGzjZjGHJBXA7KpEjhMPJBiPdOAbUJywSW1h3g4hzF aL8zj4H+mvGNhIWgaJvg0Oc5BAtko4dUfvXvphzBhlZ+67OW6fWEENahKFv77oix M4iBR/c388yTlBfBzGNzc5YrJ5pLqvLH5vrdoC6u1KX/C7c+v5xHAYBAoGEPfIyV F4goEO650RSmtJPcf9TQ/WwuEARYMlVvI9hRIzRolGwGIo6roubY0FzAC6dBJIP7 6d6c91UExKJrWRzuZFDyVGS1oUc+sQ29CNAOGmR5njJ6q6y2nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLlDPpHPq7Rp6QNZf/xlpEVL99pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvZWE1ZmFjN2MtYjU4NS0z OGQ0LThhMmMtNjQ5YzczOTk1MDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDn7ZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8oqu2wMMAz5gDRRznOrnukGFg0inCDBjeID3F+vSldP1GpZVGxzbEW GQyQACfP+JgZPpPqS3tsJUdpLHbEzZt372n4X8rikCE5U7eWEtVQsILHLlzCTzbz AaiK44k1SrN6ZVXdL5/TUvsOzLR0nOQ+9pOBFXCdQFLhsL6qR3EdD91B/+UBnSuO iOUCHgt/NhwZXHqGnwYtbUiuo/eQ1i1Ogj4QUjeLYsw3IxG7dQ6YsX743KQuWxzZ PjQU0PNTPRhh4He4P7dDrUxQzWvBCXs0B/hFUwZUMO8uoR4eBe3D2sOzypYhu6vB 2S4PfWxkFdKzNOORyJiZNOSXSL/3sCc= -----END CERTIFICATE-----Generated at Fri Aug 21 22:03:31 2026 by rpki-client