$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/de52b118-f70d-34c0-8d87-b4abb72880d9.roa File: de52b118-f70d-34c0-8d87-b4abb72880d9.roa (raw, json) Hash identifier: CdYAMB6P3PsqiDPYiyrBOP09HTZ1+3w+66buZ3GTxSY= Subject key identifier: B5:7C:AE:F4:D8:20:E5:99:F1:E3:9C:F0:29:E6:85:BF:23:9C:4F:74 Certificate issuer: /CN=b2db0e90-cb59-4049-beac-d39b54244d28 Certificate serial: 010D0C9F4328584D5AB5747FAC350CF092D0B480 Authority key identifier: 1D:C1:26:00:16:E9:EC:19:BC:69:F5:29:93:E9:1C:47:E7:00:7E:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/de52b118-f70d-34c0-8d87-b4abb72880d9.roa Signing time: Tue 31 Mar 2026 19:49:56 +0000 ROA not before: Tue 31 Mar 2026 19:49:56 +0000 ROA not after: Mon 27 Apr 2026 01:00:29 +0000 asID: 11155 IP address blocks: 147.124.16.0/20 maxlen: 24 153.75.32.0/20 maxlen: 24 162.118.64.0/19 maxlen: 24 2605:f9c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/b2db0e90-cb59-4049-beac-d39b54244d28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/b2db0e90-cb59-4049-beac-d39b54244d28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5a:b5:74:7f:ac:35:0c:f0:92:d0:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2db0e90-cb59-4049-beac-d39b54244d28 Validity Not Before: Mar 31 19:49:56 2026 GMT Not After : Apr 27 01:00:29 2026 GMT Subject: CN=0e184bef-7a31-4687-8b4e-30881ade8755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f2:bf:47:ea:5b:88:46:d0:88:e8:db:8f:7e: 35:3d:48:c4:bb:0b:f4:7b:9d:3e:3f:2a:7c:49:d8: 45:e8:13:d9:e5:ca:40:59:e1:63:21:92:e6:1b:8b: 56:c4:26:9e:bd:1f:27:00:d8:1e:a7:ff:e1:c5:72: 53:40:13:45:e5:2f:a5:09:3d:48:21:1c:d9:24:1c: d6:11:f1:f7:38:f6:5b:9c:05:d4:71:49:df:ef:06: 20:93:20:5e:b6:7a:56:f3:ba:28:45:70:b9:2f:06: a3:6f:21:2e:a1:4e:47:5a:13:e1:4b:30:7e:f1:5f: 42:bd:8c:1f:3f:33:22:2c:0d:90:1a:6e:8b:76:4b: 69:a8:26:05:6f:98:54:cc:b5:e9:36:5b:3e:41:82: a2:c1:5b:2f:19:5a:02:c2:88:db:d2:ae:8a:8a:4b: 82:78:c1:c3:71:b8:55:7e:85:a1:e7:9f:be:84:21: 9c:d6:ed:ae:df:3f:b2:35:db:ad:e4:3d:0c:95:08: 06:76:89:0f:24:c8:74:6e:53:2f:47:14:a8:f2:05: 49:71:b1:69:35:1f:95:28:32:63:d0:09:99:3b:02: 9f:79:80:ee:9b:a7:52:00:4e:bb:f5:88:9c:9c:13: a5:f1:96:67:37:12:97:59:56:4e:c0:29:ce:cf:40: 97:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7C:AE:F4:D8:20:E5:99:F1:E3:9C:F0:29:E6:85:BF:23:9C:4F:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/de52b118-f70d-34c0-8d87-b4abb72880d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/b2db0e90-cb59-4049-beac-d39b54244d28.crl X509v3 Authority Key Identifier: keyid:1D:C1:26:00:16:E9:EC:19:BC:69:F5:29:93:E9:1C:47:E7:00:7E:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28.cer sbgp-ipAddrBlock: critical IPv4: 147.124.16.0/20 153.75.32.0/20 162.118.64.0/19 IPv6: 2605:f9c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:f1:b0:d3:e1:ca:02:de:b0:11:94:cd:45:84:d0:0b:db:39: 4c:cf:e4:e4:9c:5a:c2:93:ba:8d:fd:b2:53:65:90:10:1e:1f: 34:f7:24:1e:68:ff:e8:e0:ae:ba:a5:f2:90:fa:2f:ec:e0:b6: 26:08:46:2f:86:88:9f:f6:3b:1d:ff:19:18:89:80:c5:5c:a5: f9:03:5b:0d:c5:0f:58:30:d8:2c:52:77:7e:3b:93:3e:ef:fa: 09:19:c2:a6:66:7c:c9:bc:2a:5a:9a:14:58:b2:36:34:f0:69: 6e:d7:fa:f0:7a:2c:b1:4a:b7:f5:3a:69:7a:e3:1a:65:46:98: d2:18:63:c4:3c:17:48:0f:01:af:f7:45:8e:43:4b:fe:19:75: cf:d8:71:0a:f0:54:53:f0:45:04:2d:e3:73:f5:d4:81:67:70: e8:a0:00:08:35:89:dc:f3:40:0c:34:65:f4:73:a3:c3:23:52: 7a:8a:02:e0:93:ae:cb:30:0e:47:bc:64:18:78:89:d9:c7:8a: e1:75:5f:98:93:9d:38:aa:5f:4b:df:f3:8c:f5:08:0b:51:6a: 77:26:37:95:af:f1:7c:49:c6:01:52:d3:cd:cc:b5:56:b9:ec: 1d:4d:f0:0f:04:1c:4f:95:34:7c:46:63:dd:fe:bc:2b:06:1f: dd:2f:2c:89 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE1atXR/rDUM8JLQtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJkYjBlOTAtY2I1OS00MDQ5LWJlYWMtZDM5YjU0MjQ0 ZDI4MB4XDTI2MDMzMTE5NDk1NloXDTI2MDQyNzAxMDAyOVowLzEtMCsGA1UEAxMk MGUxODRiZWYtN2EzMS00Njg3LThiNGUtMzA4ODFhZGU4NzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPK/R+pbiEbQiOjbj341PUjEuwv0e50+Pyp8 SdhF6BPZ5cpAWeFjIZLmG4tWxCaevR8nANgep//hxXJTQBNF5S+lCT1IIRzZJBzW EfH3OPZbnAXUcUnf7wYgkyBetnpW87ooRXC5LwajbyEuoU5HWhPhSzB+8V9CvYwf PzMiLA2QGm6LdktpqCYFb5hUzLXpNls+QYKiwVsvGVoCwojb0q6KikuCeMHDcbhV foWh55++hCGc1u2u3z+yNdut5D0MlQgGdokPJMh0blMvRxSo8gVJcbFpNR+VKDJj 0AmZOwKfeYDum6dSAE679YicnBOl8ZZnNxKXWVZOwCnOz0CXcwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFLV8rvTYIOWZ8eOc8Cnmhb8jnE90MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iMmRi MGU5MC1jYjU5LTQwNDktYmVhYy1kMzliNTQyNDRkMjgvZGU1MmIxMTgtZjcwZC0z NGMwLThkODctYjRhYmI3Mjg4MGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjJkYjBlOTAtY2I1OS00MDQ5LWJl YWMtZDM5YjU0MjQ0ZDI4L2IyZGIwZTkwLWNiNTktNDA0OS1iZWFjLWQzOWI1NDI0 NGQyOC5jcmwwHwYDVR0jBBgwFoAUHcEmABbp7Bm8afUpk+kcR+cAfq4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iMmRiMGU5MC1jYjU5LTQwNDktYmVhYy1kMzli NTQyNDRkMjguY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEk3wQAwQE mUsgAwQFonZAMA0EAgACMAcDBQAmBfnAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAjxsNPhygLesBGUzUWE 0AvbOUzP5OScWsKTuo39slNlkBAeHzT3JB5o/+jgrrql8pD6L+zgtiYIRi+GiJ/2 Ox3/GRiJgMVcpfkDWw3FD1gw2CxSd347kz7v+gkZwqZmfMm8KlqaFFiyNjTwaW7X +vB6LLFKt/U6aXrjGmVGmNIYY8Q8F0gPAa/3RY5DS/4Zdc/YcQrwVFPwRQQt43P1 1IFncOigAAg1idzzQAw0ZfRzo8MjUnqKAuCTrsswDke8ZBh4idnHiuF1X5iTnTiq X0vf84z1CAtRancmN5Wv8XxJxgFS083MtVa57B1N8A8EHE+VNHxGY93+vCsGH90v LIk= -----END CERTIFICATE-----Generated at Mon Apr 13 12:07:48 2026 by rpki-client