$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/7afa36a6-768e-3e35-9ade-90be71f01c66.roa File: 7afa36a6-768e-3e35-9ade-90be71f01c66.roa (raw, json) Hash identifier: baGcmpQVEg16akfUxvKvHFTWvaknuRC7onaHwuoV8ZU= Subject key identifier: 4A:2A:BA:1F:22:B4:3D:43:17:75:28:8F:B3:EC:03:D4:62:96:CD:26 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584B3D17C499DF3060D782AADA40 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/7afa36a6-768e-3e35-9ade-90be71f01c66.roa Signing time: Thu 18 Sep 2025 19:39:54 +0000 ROA not before: Thu 18 Sep 2025 19:39:54 +0000 ROA not after: Wed 17 Dec 2025 20:39:54 +0000 asID: 11377 IP address blocks: 159.26.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:17:c4:99:df:30:60:d7:82:aa:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Sep 18 19:39:54 2025 GMT Not After : Dec 17 20:39:54 2025 GMT Subject: CN=bef366dc-6024-4158-84c0-b0e5ce8725cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:72:f6:e3:a8:79:bc:c0:d4:d7:de:ae:9c:20: 22:74:31:63:8c:a4:74:93:e2:5b:d1:e2:64:73:63: 44:54:fd:5a:a6:a3:dd:fd:e9:79:00:40:ca:29:eb: df:39:55:7c:79:85:1d:52:02:ab:3d:68:9b:f1:0c: 9c:34:58:33:41:ad:14:63:15:f7:b3:0d:a3:5f:9d: dd:f3:6d:99:53:c5:76:c5:ae:35:3a:b8:d0:42:77: 4b:77:4b:bd:7a:f0:82:ba:df:8f:53:ff:33:6d:60: b5:7f:6c:ae:6b:08:46:0e:78:71:34:73:98:97:9b: 6e:01:71:75:82:83:94:59:b0:04:28:33:66:0c:05: 4f:6d:cd:25:c6:86:8b:e2:c0:4e:27:cf:5f:58:e1: aa:dc:c3:55:cf:a6:3d:2b:05:47:b1:b6:ee:8f:40: e0:41:ec:97:2b:df:d0:26:d6:1a:1d:56:81:84:ab: 71:15:68:8a:25:e0:fd:2a:dc:53:70:1d:03:bf:0b: 14:ef:29:6d:19:01:67:b1:41:c6:1f:38:71:b7:6a: 2a:c0:b3:bb:fb:57:fd:d1:29:b3:81:92:41:3b:75: 45:ca:5b:8b:7b:bc:b5:07:23:f3:fd:50:3a:74:83: e8:de:59:1d:fd:3b:ee:10:dd:6f:d6:3b:83:eb:46: f1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2A:BA:1F:22:B4:3D:43:17:75:28:8F:B3:EC:03:D4:62:96:CD:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/7afa36a6-768e-3e35-9ade-90be71f01c66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 159.26.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:69:57:57:3f:e9:28:87:58:e3:bd:c0:14:54:d9:80:c0:bd: df:be:8c:be:0b:82:e1:63:39:9b:ed:dc:85:13:90:6d:98:9e: 94:8d:d1:de:62:82:1a:77:2c:0a:8f:58:b6:c3:d5:47:9e:0a: 4c:1a:07:25:4e:4b:7d:54:2d:53:d5:1d:3d:58:d6:61:75:3e: 32:78:69:6b:b6:84:9c:e8:6f:7b:8c:1d:4a:cb:0d:e7:0c:98: 01:b8:fa:26:2a:02:85:70:bb:f6:8c:c4:26:a7:b1:f0:38:13: e3:a2:be:38:b4:65:64:35:f4:71:5c:0a:53:a5:a7:8e:47:fd: b2:64:b5:83:8c:90:96:21:18:2a:e0:e5:65:7b:1e:94:ae:56: 94:ee:34:83:ad:c6:6b:15:87:0f:61:3b:92:d8:89:21:e9:c4: 64:ae:40:81:e2:a3:fb:91:9b:de:cd:a5:fb:26:2d:f8:cd:6c: 4c:95:7f:16:bc:d4:67:ef:84:74:09:3f:14:be:c2:d3:53:fa: e6:5e:e2:37:4e:1e:ac:d2:76:e4:31:32:ae:c7:21:f8:20:f1: c6:87:bf:4b:5d:02:74:8c:0f:53:61:8e:fe:2f:54:0f:3b:ef: bb:76:a8:86:2f:a3:00:06:da:37:18:a5:12:17:eb:bf:0d:fd: d2:93:c9:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9F8SZ3zBg14Kq2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MDkxODE5Mzk1NFoXDTI1MTIxNzIwMzk1NFowLzEtMCsGA1UEAxMk YmVmMzY2ZGMtNjAyNC00MTU4LTg0YzAtYjBlNWNlODcyNWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3L246h5vMDU196unCAidDFjjKR0k+Jb0eJk c2NEVP1apqPd/el5AEDKKevfOVV8eYUdUgKrPWib8QycNFgzQa0UYxX3sw2jX53d 822ZU8V2xa41OrjQQndLd0u9evCCut+PU/8zbWC1f2yuawhGDnhxNHOYl5tuAXF1 goOUWbAEKDNmDAVPbc0lxoaL4sBOJ89fWOGq3MNVz6Y9KwVHsbbuj0DgQeyXK9/Q JtYaHVaBhKtxFWiKJeD9KtxTcB0DvwsU7yltGQFnsUHGHzhxt2oqwLO7+1f90Smz gZJBO3VFyluLe7y1ByPz/VA6dIPo3lkd/TvuEN1v1juD60bxSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoquh8itD1DF3Uoj7PsA9Rils0mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvN2FmYTM2YTYtNzY4ZS0z ZTM1LTlhZGUtOTBiZTcxZjAxYzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnxqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1pV1c/6SiHWOO9wBRU2YDAvd++jL4LguFjOZvt3IUTkG2YnpSN0d5i ghp3LAqPWLbD1UeeCkwaByVOS31ULVPVHT1Y1mF1PjJ4aWu2hJzob3uMHUrLDecM mAG4+iYqAoVwu/aMxCansfA4E+Oivji0ZWQ19HFcClOlp45H/bJktYOMkJYhGCrg 5WV7HpSuVpTuNIOtxmsVhw9hO5LYiSHpxGSuQIHio/uRm97NpfsmLfjNbEyVfxa8 1GfvhHQJPxS+wtNT+uZe4jdOHqzSduQxMq7HIfgg8caHv0tdAnSMD1Nhjv4vVA87 77t2qIYvowAG2jcYpRIX678N/dKTyZA= -----END CERTIFICATE-----Generated at Fri Sep 19 13:09:25 2025 by rpki-client