$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/74fe514f-f282-3fdf-b82d-5a7c858132a2.roa File: 74fe514f-f282-3fdf-b82d-5a7c858132a2.roa (raw, json) Hash identifier: 8IzSIK32FekAleQeT0HhW6uSo5/A1BOvhPwleZnv9/Q= Subject key identifier: 8F:48:DD:4B:04:95:B2:68:F1:8A:30:D6:68:9F:1A:DD:8C:6E:D0:88 Certificate issuer: /CN=a3398dc1-de03-4844-957b-e882d7878ae2 Certificate serial: 010D0C9F4328584D91C004286D3CB2E34B9C8000 Authority key identifier: 42:C5:92:1E:2A:8A:06:BD:75:6A:02:22:DD:CE:30:A6:AB:D9:5D:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/74fe514f-f282-3fdf-b82d-5a7c858132a2.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 16509 IP address blocks: 162.218.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:04:28:6d:3c:b2:e3:4b:9c:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3398dc1-de03-4844-957b-e882d7878ae2 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=4366e9a6-d66c-4029-9608-e2c52e2350a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:20:9d:47:f9:be:d3:f1:1b:d3:03:e7:c0:ee: 8b:ca:7a:cd:c2:f3:65:44:03:f3:ce:59:58:36:e6: aa:8a:ba:38:c6:c8:ab:99:91:21:37:dc:4c:3b:af: 94:a9:60:a7:fe:6d:a6:e1:06:a7:dc:74:27:94:e3: 14:29:dd:b6:18:5b:dd:d6:9c:94:23:88:95:12:82: 29:26:be:df:8f:db:2c:e3:7b:9e:c8:f7:84:c1:80: e4:39:1a:87:02:41:23:e2:ea:29:c7:62:84:a8:24: 26:4f:38:8d:fa:6b:32:10:b8:12:b9:bf:7c:a3:2f: b9:f0:7b:33:3a:c0:50:48:fc:fb:c7:22:73:8f:18: 51:c5:df:47:41:ee:28:42:cf:d4:31:7f:ae:f3:66: 06:5d:90:e9:77:d7:c9:79:a8:ce:2c:40:ac:00:a1: c7:b5:6b:7a:a7:48:e1:45:cf:17:45:9e:22:05:b4: cd:2d:a2:d7:de:1d:5e:81:ad:40:73:d3:4c:21:da: b3:15:c8:1a:13:82:4c:8b:c0:b8:09:d9:53:c3:d5: 3e:d1:e4:dd:e3:f3:80:41:57:ae:8a:be:79:d0:b1: 77:d7:07:e0:35:f7:47:0e:48:ee:4c:67:f9:8d:09: 33:a6:e7:a6:f5:4c:27:d5:3e:9e:97:54:3f:18:c1: ee:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:48:DD:4B:04:95:B2:68:F1:8A:30:D6:68:9F:1A:DD:8C:6E:D0:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/74fe514f-f282-3fdf-b82d-5a7c858132a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.crl X509v3 Authority Key Identifier: keyid:42:C5:92:1E:2A:8A:06:BD:75:6A:02:22:DD:CE:30:A6:AB:D9:5D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer sbgp-ipAddrBlock: critical IPv4: 162.218.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:4a:51:5d:dd:09:ed:7e:86:73:be:2f:53:61:b2:cb:a4:07: be:c4:b5:30:7d:95:2a:04:c1:03:c5:8e:98:dd:5c:ca:ba:a5: 4b:ee:f8:3d:8a:28:fe:0f:94:ab:12:f8:6b:31:af:52:24:20: ee:15:b0:5c:48:60:5b:12:e2:d2:8c:bc:b2:53:e4:53:95:76: 89:22:21:01:87:d2:d6:38:c9:6c:33:08:d7:70:3d:e9:e3:99: c2:f8:62:52:b7:a4:d4:ac:db:54:a7:ed:3a:63:1c:d0:63:a5: 90:90:81:fb:64:35:8e:31:10:dc:9c:eb:18:38:a5:72:22:b1: 16:2d:b3:d6:56:87:f8:f4:3d:87:8a:89:91:3f:c2:2d:6c:59: 9e:80:a1:da:fa:43:af:b7:0f:55:36:cc:ac:29:14:0f:ef:0a: 5c:6e:08:d6:de:3a:68:83:02:15:56:d8:7f:da:51:1e:c2:7f: e3:d4:97:0f:44:5c:84:b3:cb:20:fe:3d:2b:71:58:fe:bb:fa: 08:f5:c7:03:32:69:d3:ba:fb:2c:fe:bc:44:3b:1f:af:6f:2a: 94:c0:f3:94:5d:22:a5:a5:1d:0e:2e:d8:f8:9e:65:d7:9a:de: ef:2f:b5:57:8d:b9:09:d0:3c:b7:c5:b7:2e:68:8f:55:d4:be: a6:2d:15:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwAQobTyy40ucgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMzOThkYzEtZGUwMy00ODQ0LTk1N2ItZTg4MmQ3ODc4 YWUyMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk NDM2NmU5YTYtZDY2Yy00MDI5LTk2MDgtZTJjNTJlMjM1MGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCCdR/m+0/Eb0wPnwO6LynrNwvNlRAPzzllY Nuaqiro4xsirmZEhN9xMO6+UqWCn/m2m4Qan3HQnlOMUKd22GFvd1pyUI4iVEoIp Jr7fj9ss43ueyPeEwYDkORqHAkEj4uopx2KEqCQmTziN+msyELgSub98oy+58Hsz OsBQSPz7xyJzjxhRxd9HQe4oQs/UMX+u82YGXZDpd9fJeajOLECsAKHHtWt6p0jh Rc8XRZ4iBbTNLaLX3h1ega1Ac9NMIdqzFcgaE4JMi8C4CdlTw9U+0eTd4/OAQVeu ir550LF31wfgNfdHDkjuTGf5jQkzpuem9Uwn1T6el1Q/GMHuFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9I3UsElbJo8Yow1mifGt2MbtCIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMzM5 OGRjMS1kZTAzLTQ4NDQtOTU3Yi1lODgyZDc4NzhhZTIvNzRmZTUxNGYtZjI4Mi0z ZmRmLWI4MmQtNWE3Yzg1ODEzMmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTMzOThkYzEtZGUwMy00ODQ0LTk1 N2ItZTg4MmQ3ODc4YWUyL2EzMzk4ZGMxLWRlMDMtNDg0NC05NTdiLWU4ODJkNzg3 OGFlMi5jcmwwHwYDVR0jBBgwFoAUQsWSHiqKBr11agIi3c4wpqvZXVIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMzM5OGRjMS1kZTAzLTQ4NDQtOTU3Yi1lODgy ZDc4NzhhZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENKUV3dCe1+hnO+L1NhssukB77EtTB9lSoEwQPFjpjdXMq6pUvu+D2K KP4PlKsS+Gsxr1IkIO4VsFxIYFsS4tKMvLJT5FOVdokiIQGH0tY4yWwzCNdwPenj mcL4YlK3pNSs21Sn7TpjHNBjpZCQgftkNY4xENyc6xg4pXIisRYts9ZWh/j0PYeK iZE/wi1sWZ6Aodr6Q6+3D1U2zKwpFA/vClxuCNbeOmiDAhVW2H/aUR7Cf+PUlw9E XISzyyD+PStxWP67+gj1xwMyadO6+yz+vEQ7H69vKpTA85RdIqWlHQ4u2PieZdea 3u8vtVeNuQnQPLfFty5oj1XUvqYtFWE= -----END CERTIFICATE-----Generated at Mon Apr 27 11:20:06 2026 by rpki-client