$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa File: a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa (raw, json) Hash identifier: +GV6FEBPU4vw0r+F8QAZsZJeyeI+tI9MFt0Ftxw9HWo= Subject key identifier: 74:BB:2B:A7:C0:C5:9A:41:62:35:4C:08:82:91:EC:B1:F7:CD:B6:78 Certificate issuer: /CN=d886f3a2-7325-4b74-8802-19528a9f380c Certificate serial: 010D0C9F4328584D0BDD09C4E0FEB6970049C480 Authority key identifier: 70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 397735 IP address blocks: 158.51.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:09:c4:e0:fe:b6:97:00:49:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d886f3a2-7325-4b74-8802-19528a9f380c Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=864cc28f-e707-49af-8567-5ff0ffaaeeba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0a:50:da:c5:b6:d4:fc:85:27:a1:99:3d:f3: fc:f3:01:e7:47:ef:8b:a1:fe:68:d6:23:87:38:ca: 1f:d9:f3:e6:aa:ad:a3:90:b0:92:d6:93:08:fe:0e: 03:2a:c1:72:24:14:84:13:9a:c6:a7:aa:4f:c7:d8: fa:65:fd:e7:60:be:3f:77:42:f5:34:aa:34:4e:d0: 70:16:e1:db:d2:b2:2c:4d:cb:65:0d:eb:e6:e7:25: 9f:a7:34:3b:8f:3e:c7:73:b2:26:bb:df:97:58:a0: a6:48:44:2b:8e:f0:9c:53:28:3c:ac:46:35:c3:0c: 91:29:4c:eb:f7:5c:09:63:d4:5d:cc:89:99:73:39: ef:d0:c4:96:5f:02:0a:2e:86:79:40:ed:1e:74:8c: 20:d6:e7:f6:da:e5:eb:49:94:da:4c:8d:5e:d1:b5: 3a:34:d0:db:e2:33:89:3e:0f:5f:23:3c:4a:1d:80: d1:82:2b:1d:27:9d:59:32:b6:b5:37:42:99:df:8c: ce:00:b1:92:2a:57:d6:73:5f:43:4e:1e:fd:fe:5e: 11:59:60:e3:84:a5:7b:a8:fb:73:fc:d1:77:b8:94: 8c:3b:05:b0:ab:e8:e3:25:f2:f8:f1:76:09:08:de: 45:eb:dd:0e:53:3c:c1:eb:ea:d7:ac:f8:b5:1c:53: 39:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BB:2B:A7:C0:C5:9A:41:62:35:4C:08:82:91:EC:B1:F7:CD:B6:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.crl X509v3 Authority Key Identifier: keyid:70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer sbgp-ipAddrBlock: critical IPv4: 158.51.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:84:19:3e:7c:a5:35:cc:58:cc:21:47:2e:f2:1a:9d:c2:b4: 0b:fa:e1:c8:55:c6:bf:5a:ae:01:48:b1:e9:21:b5:90:39:30: 7d:17:3a:65:40:ca:c8:eb:e2:a1:79:16:fd:70:ed:fc:f5:42: c2:4d:78:7a:09:f0:d9:b5:87:8d:ca:b6:5e:0c:be:d4:53:2f: d1:2d:92:dc:c1:cd:b0:50:d7:64:db:f8:da:6a:06:8e:cd:ed: e4:11:cf:33:ca:99:fb:0c:66:f4:66:64:99:0c:cf:d0:05:1a: a3:c3:b7:04:f3:ee:6f:b4:ac:07:63:db:ed:55:f7:f9:c4:9d: 7e:63:99:cc:11:e8:3a:56:31:e7:67:20:5f:15:22:51:0b:eb: 47:87:cd:0b:6f:56:72:5b:e2:7e:48:e7:f1:aa:0d:d7:cd:b8: d1:d8:76:8d:29:ef:b8:f8:5d:f3:72:a7:3f:1c:0f:a8:02:06: 2c:a0:cf:16:23:99:7b:86:d2:a6:d6:d8:ed:65:6c:f0:e9:a6: 27:52:c7:8c:f3:bd:33:a1:2c:eb:78:8e:09:21:df:f7:cf:f4: 31:70:04:bf:d5:40:d6:6b:20:57:30:e2:d7:a9:19:6f:be:93: a6:ed:6e:c0:a3:12:d9:0a:5f:1e:da:b2:b4:cb:71:77:e7:09: 45:32:6f:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L3QnE4P62lwBJxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg4NmYzYTItNzMyNS00Yjc0LTg4MDItMTk1MjhhOWYz ODBjMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk ODY0Y2MyOGYtZTcwNy00OWFmLTg1NjctNWZmMGZmYWFlZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QpQ2sW21PyFJ6GZPfP88wHnR++Lof5o1iOH OMof2fPmqq2jkLCS1pMI/g4DKsFyJBSEE5rGp6pPx9j6Zf3nYL4/d0L1NKo0TtBw FuHb0rIsTctlDevm5yWfpzQ7jz7Hc7Imu9+XWKCmSEQrjvCcUyg8rEY1wwyRKUzr 91wJY9RdzImZcznv0MSWXwIKLoZ5QO0edIwg1uf22uXrSZTaTI1e0bU6NNDb4jOJ Pg9fIzxKHYDRgisdJ51ZMra1N0KZ34zOALGSKlfWc19DTh79/l4RWWDjhKV7qPtz /NF3uJSMOwWwq+jjJfL48XYJCN5F690OUzzB6+rXrPi1HFM5kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHS7K6fAxZpBYjVMCIKR7LH3zbZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kODg2 ZjNhMi03MzI1LTRiNzQtODgwMi0xOTUyOGE5ZjM4MGMvYTRhZTFlYmUtOTg1Yy0z M2M4LWFlOTAtOGNhMzM4YTRlYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDg4NmYzYTItNzMyNS00Yjc0LTg4 MDItMTk1MjhhOWYzODBjL2Q4ODZmM2EyLTczMjUtNGI3NC04ODAyLTE5NTI4YTlm MzgwYy5jcmwwHwYDVR0jBBgwFoAUcJut8ULNEhBZHcn7NhsyGUoSs1owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kODg2ZjNhMi03MzI1LTRiNzQtODgwMi0xOTUy OGE5ZjM4MGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnjMsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOEGT58pTXMWMwhRy7yGp3CtAv64chVxr9argFIsekhtZA5MH0XOmVA ysjr4qF5Fv1w7fz1QsJNeHoJ8Nm1h43Ktl4MvtRTL9EtktzBzbBQ12Tb+NpqBo7N 7eQRzzPKmfsMZvRmZJkMz9AFGqPDtwTz7m+0rAdj2+1V9/nEnX5jmcwR6DpWMedn IF8VIlEL60eHzQtvVnJb4n5I5/GqDdfNuNHYdo0p77j4XfNypz8cD6gCBiygzxYj mXuG0qbW2O1lbPDppidSx4zzvTOhLOt4jgkh3/fP9DFwBL/VQNZrIFcw4tepGW++ k6btbsCjEtkKXx7asrTLcXfnCUUybz0= -----END CERTIFICATE-----Generated at Sat Mar 21 13:57:22 2026 by rpki-client