$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/945a37c8-263b-40f2-aa6c-b88157a5e45d/b29846fc-d670-3709-8650-da5aaedea589.roa File: b29846fc-d670-3709-8650-da5aaedea589.roa (raw, json) Hash identifier: fepz9XnQkTra++XkQsTxKUUAnb8U4UUbWRdogw0GkcU= Subject key identifier: 43:C0:0D:2A:F1:B5:FC:F3:15:D9:99:0A:D3:CE:41:EA:41:DB:37:A7 Certificate issuer: /CN=945a37c8-263b-40f2-aa6c-b88157a5e45d Certificate serial: 010D0C9F4328584D6944F778A6AF5B0145680480 Authority key identifier: 48:75:6A:81:42:05:20:00:37:7C:04:3B:CD:3B:BF:A7:E4:49:F8:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/945a37c8-263b-40f2-aa6c-b88157a5e45d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/945a37c8-263b-40f2-aa6c-b88157a5e45d/b29846fc-d670-3709-8650-da5aaedea589.roa Signing time: Mon 06 Apr 2026 01:00:24 +0000 ROA not before: Mon 06 Apr 2026 01:00:24 +0000 ROA not after: Sun 05 Jul 2026 01:00:24 +0000 asID: 14108 IP address blocks: 168.151.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/945a37c8-263b-40f2-aa6c-b88157a5e45d/945a37c8-263b-40f2-aa6c-b88157a5e45d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/945a37c8-263b-40f2-aa6c-b88157a5e45d/945a37c8-263b-40f2-aa6c-b88157a5e45d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/945a37c8-263b-40f2-aa6c-b88157a5e45d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:69:44:f7:78:a6:af:5b:01:45:68:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945a37c8-263b-40f2-aa6c-b88157a5e45d Validity Not Before: Apr 6 01:00:24 2026 GMT Not After : Jul 5 01:00:24 2026 GMT Subject: CN=4edd3049-6afe-473d-8e7e-7c00df6791a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:34:30:8c:5b:fa:fa:fc:02:45:c2:2b:92:63: e0:f1:05:ae:46:ba:cd:8b:8a:22:1e:26:22:4c:29: 3f:ed:ce:69:d4:3c:e7:79:fb:aa:58:b4:eb:ef:83: 8d:d4:fb:0a:97:ab:6f:41:7a:c6:1c:cd:ad:c5:ea: 73:51:87:7c:03:9c:9c:e9:a2:85:12:f5:60:bf:32: 5e:5d:c4:43:c3:74:8d:fe:7e:5b:24:ad:cd:35:6c: f5:95:83:74:da:d5:e8:c0:4e:98:06:45:af:72:a0: 7c:ea:16:a9:c9:15:69:34:9a:61:54:dc:d6:c8:3d: 76:3e:0e:d9:d1:81:17:bd:9c:fa:b9:2d:b6:31:52: a8:b6:98:da:f1:b1:ec:3c:c5:0f:87:ea:2a:32:ba: a9:41:26:e2:d6:be:c8:2c:fa:c3:f3:40:6f:74:9c: e0:c6:e6:e7:0a:0a:cd:5a:30:53:c9:09:f0:87:3d: d7:62:62:97:95:d1:df:93:2b:a6:cf:bf:2b:c9:e2: c7:f9:0e:dd:c8:4a:11:39:dc:3f:a0:7c:ed:dc:e1: 1d:34:f2:c0:0f:9f:c7:91:68:93:4a:3c:67:ea:ee: 74:25:d1:8b:dd:67:86:6a:80:46:59:80:57:2c:40: 7b:11:d7:05:9e:0f:fa:35:3a:b2:19:16:22:cb:b0: 78:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C0:0D:2A:F1:B5:FC:F3:15:D9:99:0A:D3:CE:41:EA:41:DB:37:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/945a37c8-263b-40f2-aa6c-b88157a5e45d/b29846fc-d670-3709-8650-da5aaedea589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/945a37c8-263b-40f2-aa6c-b88157a5e45d/945a37c8-263b-40f2-aa6c-b88157a5e45d.crl X509v3 Authority Key Identifier: keyid:48:75:6A:81:42:05:20:00:37:7C:04:3B:CD:3B:BF:A7:E4:49:F8:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/945a37c8-263b-40f2-aa6c-b88157a5e45d.cer sbgp-ipAddrBlock: critical IPv4: 168.151.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:93:c9:60:41:2a:6d:72:0c:02:de:a5:7a:b5:37:7d:79:32: 96:86:5e:ab:8d:44:ca:58:16:74:63:9d:e5:e8:c8:8b:c5:75: 31:a1:68:a9:6d:08:51:80:b0:35:47:7b:f9:96:9d:3f:bd:db: 61:8a:18:76:05:e2:78:f8:c1:0b:64:9b:75:f5:05:8f:a9:9f: 06:ea:ca:97:9c:c2:7f:8a:44:49:b3:f7:ec:02:5d:44:b4:f3: 6d:93:28:db:c9:ea:73:3d:2c:1c:6d:45:24:d4:d4:2a:38:d8: bb:e7:3c:5e:08:af:77:91:92:52:33:db:ca:a6:56:90:20:12: fd:0c:0b:e5:a9:90:77:2d:de:d6:b5:e3:04:d0:7c:5b:53:a0: d3:6a:76:10:10:e3:b8:4a:78:dc:26:e7:a7:fa:00:89:b5:ce: 2c:bd:38:c1:d9:2b:d7:21:0b:f8:29:b8:a6:e0:c4:11:1d:76: 3d:a2:00:9c:1c:e8:f5:da:73:8f:dd:e8:9d:98:c5:e0:51:df: b9:eb:7a:2e:cd:a8:fb:0d:00:e4:18:02:26:ae:1b:b6:f7:c0: 2b:18:a1:b5:b2:af:54:2a:34:f3:9a:0d:4b:fa:1a:25:6e:d0: 4a:cd:23:30:12:8c:c5:82:68:31:1b:7a:e0:63:de:04:bc:7c: e8:b6:2b:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1pRPd4pq9bAUVoBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1YTM3YzgtMjYzYi00MGYyLWFhNmMtYjg4MTU3YTVl NDVkMB4XDTI2MDQwNjAxMDAyNFoXDTI2MDcwNTAxMDAyNFowLzEtMCsGA1UEAxMk NGVkZDMwNDktNmFmZS00NzNkLThlN2UtN2MwMGRmNjc5MWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzQwjFv6+vwCRcIrkmPg8QWuRrrNi4oiHiYi TCk/7c5p1DznefuqWLTr74ON1PsKl6tvQXrGHM2txepzUYd8A5yc6aKFEvVgvzJe XcRDw3SN/n5bJK3NNWz1lYN02tXowE6YBkWvcqB86hapyRVpNJphVNzWyD12Pg7Z 0YEXvZz6uS22MVKotpja8bHsPMUPh+oqMrqpQSbi1r7ILPrD80BvdJzgxubnCgrN WjBTyQnwhz3XYmKXldHfkyumz78ryeLH+Q7dyEoROdw/oHzt3OEdNPLAD5/HkWiT Sjxn6u50JdGL3WeGaoBGWYBXLEB7EdcFng/6NTqyGRYiy7B4hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPADSrxtfzzFdmZCtPOQepB2zenMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NDVh MzdjOC0yNjNiLTQwZjItYWE2Yy1iODgxNTdhNWU0NWQvYjI5ODQ2ZmMtZDY3MC0z NzA5LTg2NTAtZGE1YWFlZGVhNTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTQ1YTM3YzgtMjYzYi00MGYyLWFh NmMtYjg4MTU3YTVlNDVkLzk0NWEzN2M4LTI2M2ItNDBmMi1hYTZjLWI4ODE1N2E1 ZTQ1ZC5jcmwwHwYDVR0jBBgwFoAUSHVqgUIFIAA3fAQ7zTu/p+RJ+DowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NDVhMzdjOC0yNjNiLTQwZjItYWE2Yy1iODgx NTdhNWU0NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqJcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOTyWBBKm1yDALepXq1N315MpaGXquNRMpYFnRjneXoyIvFdTGhaKlt CFGAsDVHe/mWnT+922GKGHYF4nj4wQtkm3X1BY+pnwbqypecwn+KREmz9+wCXUS0 822TKNvJ6nM9LBxtRSTU1Co42LvnPF4Ir3eRklIz28qmVpAgEv0MC+WpkHct3ta1 4wTQfFtToNNqdhAQ47hKeNwm56f6AIm1ziy9OMHZK9chC/gpuKbgxBEddj2iAJwc 6PXac4/d6J2YxeBR37nrei7NqPsNAOQYAiauG7b3wCsYobWyr1QqNPOaDUv6GiVu 0ErNIzASjMWCaDEbeuBj3gS8fOi2K1s= -----END CERTIFICATE-----Generated at Mon Apr 13 12:10:09 2026 by rpki-client