$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/af842844-d11b-3603-9c7c-234323b41c8d.roa File: af842844-d11b-3603-9c7c-234323b41c8d.roa (raw, json) Hash identifier: PzhSMHT05a9Cbf3gsua/W32MARAVJee+d6AGTe+id6c= Subject key identifier: 9A:0A:E3:29:79:77:16:EC:C7:23:D8:09:AD:11:18:59:B6:27:16:F0 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584B3D17935BDA5B3256BDD7EDC0 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/af842844-d11b-3603-9c7c-234323b41c8d.roa Signing time: Thu 18 Sep 2025 19:39:31 +0000 ROA not before: Thu 18 Sep 2025 19:39:31 +0000 ROA not after: Wed 17 Dec 2025 20:39:31 +0000 asID: 11377 IP address blocks: 159.26.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:17:93:5b:da:5b:32:56:bd:d7:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Sep 18 19:39:31 2025 GMT Not After : Dec 17 20:39:31 2025 GMT Subject: CN=c435899d-5d7e-425f-8866-30c9f54aa98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3e:1e:8d:df:56:b4:a1:87:8b:6b:f3:da:ed: 20:bb:e8:07:b1:79:4c:fe:fc:8d:9d:0e:00:a7:93: d7:57:9d:48:09:b9:54:18:1d:38:ef:eb:09:ac:06: 4f:ad:e2:1f:e3:bd:28:7d:cb:89:01:59:63:90:a0: 22:ec:bc:aa:6c:eb:e0:f0:5b:12:8f:b8:ee:0a:b5: 6b:d9:85:45:3f:06:71:f8:c2:8a:60:57:f6:24:10: 68:2e:10:41:43:cf:bf:e5:50:3f:3a:e5:5d:5f:67: 18:f5:bc:63:f9:e0:23:26:10:33:04:ed:ae:cf:ea: d7:e9:bc:c7:18:22:37:ab:0c:da:42:c5:8f:dc:40: e3:c3:35:3d:96:22:b9:f7:31:1f:62:36:04:bc:d6: 04:96:0c:a1:73:fe:47:1e:99:e2:c9:33:93:f1:b9: 3f:b8:2d:ee:68:55:8c:db:18:ff:18:b5:ae:12:84: 0e:d0:e7:48:37:1b:bd:0f:d0:c5:5b:53:f6:66:6a: 12:98:61:52:4d:33:de:a4:3f:1e:67:a1:23:38:90: 74:e7:fe:7d:4f:ff:d8:40:89:fc:fb:2d:15:ba:2e: d0:b7:10:8d:b3:45:61:3e:bb:ae:82:dc:0a:da:2f: 8b:e7:3f:cc:56:01:3b:bb:42:29:82:21:ec:92:39: 2b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0A:E3:29:79:77:16:EC:C7:23:D8:09:AD:11:18:59:B6:27:16:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/af842844-d11b-3603-9c7c-234323b41c8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 159.26.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:50:cc:49:c0:6c:08:50:9f:e1:c2:69:63:0d:28:be:91:be: a3:50:f2:9d:ce:78:c2:11:ca:dd:6a:97:a6:58:76:39:eb:a3: 0b:81:65:9a:57:b2:33:60:c5:7a:a1:f4:c7:03:15:48:75:73: b4:17:27:9b:08:3c:62:55:c8:0a:9f:02:5d:8f:c3:ac:2e:8b: d6:fa:b0:ee:93:d3:44:e1:ca:42:22:8d:6c:cb:d7:ea:3d:dc: 7c:88:43:2f:26:8f:b7:33:3f:4f:61:d4:91:97:34:49:d4:31: 35:23:4c:77:66:50:25:ae:b9:1c:fb:9b:c3:f8:5a:f2:ea:24: 99:2a:c4:4f:e9:db:06:88:36:e4:6b:bc:f6:b9:b7:6b:35:51: 9e:45:bf:77:bf:9f:1d:52:9f:90:ed:84:93:53:51:b0:9a:c4: ef:db:30:78:d4:a3:32:c9:c2:28:24:8d:db:d9:7a:07:b4:35: 04:54:de:0c:94:1a:fc:dd:a1:38:96:94:83:4a:db:20:80:6f: cf:80:17:8d:55:bc:a6:e6:81:9d:16:43:da:34:d3:3f:d7:78: e7:14:65:8e:22:5a:00:2f:09:08:f3:97:c6:30:e7:eb:b9:86: 52:f5:21:2a:46:7d:f0:cd:28:3c:aa:ff:ad:17:a8:4f:6b:b3: b3:23:81:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9F5Nb2lsyVr3X7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MDkxODE5MzkzMVoXDTI1MTIxNzIwMzkzMVowLzEtMCsGA1UEAxMk YzQzNTg5OWQtNWQ3ZS00MjVmLTg4NjYtMzBjOWY1NGFhOThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD4ejd9WtKGHi2vz2u0gu+gHsXlM/vyNnQ4A p5PXV51ICblUGB047+sJrAZPreIf470ofcuJAVljkKAi7LyqbOvg8FsSj7juCrVr 2YVFPwZx+MKKYFf2JBBoLhBBQ8+/5VA/OuVdX2cY9bxj+eAjJhAzBO2uz+rX6bzH GCI3qwzaQsWP3EDjwzU9liK59zEfYjYEvNYElgyhc/5HHpniyTOT8bk/uC3uaFWM 2xj/GLWuEoQO0OdINxu9D9DFW1P2ZmoSmGFSTTPepD8eZ6EjOJB05/59T//YQIn8 +y0Vui7QtxCNs0VhPruugtwK2i+L5z/MVgE7u0IpgiHskjkruQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoK4yl5dxbsxyPYCa0RGFm2JxbwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvYWY4NDI4NDQtZDExYi0z NjAzLTljN2MtMjM0MzIzYjQxYzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnxq8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5QzEnAbAhQn+HCaWMNKL6RvqNQ8p3OeMIRyt1ql6ZYdjnrowuBZZpX sjNgxXqh9McDFUh1c7QXJ5sIPGJVyAqfAl2Pw6wui9b6sO6T00ThykIijWzL1+o9 3HyIQy8mj7czP09h1JGXNEnUMTUjTHdmUCWuuRz7m8P4WvLqJJkqxE/p2waINuRr vPa5t2s1UZ5Fv3e/nx1Sn5DthJNTUbCaxO/bMHjUozLJwigkjdvZege0NQRU3gyU GvzdoTiWlINK2yCAb8+AF41VvKbmgZ0WQ9o00z/XeOcUZY4iWgAvCQjzl8Yw5+u5 hlL1ISpGffDNKDyq/60XqE9rs7MjgbI= -----END CERTIFICATE-----Generated at Fri Sep 19 14:32:09 2025 by rpki-client