$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9d0f11b4-e4fa-387a-aa52-bef69c505b26.roa File: 9d0f11b4-e4fa-387a-aa52-bef69c505b26.roa (raw, json) Hash identifier: 84dSyCECaXEL2r+US5z6kIR/PsdTgTxOig78zFEAHPQ= Subject key identifier: B6:34:FA:DB:76:53:75:AA:C6:7C:7F:38:68:D8:DD:07:F0:42:F7:41 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D920A17C18EEAA5E4DEAC1080 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9d0f11b4-e4fa-387a-aa52-bef69c505b26.roa Signing time: Mon 20 Apr 2026 15:29:56 +0000 ROA not before: Mon 20 Apr 2026 15:29:56 +0000 ROA not after: Sun 19 Jul 2026 15:29:56 +0000 asID: 211865 IP address blocks: 154.46.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:92:0a:17:c1:8e:ea:a5:e4:de:ac:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 20 15:29:56 2026 GMT Not After : Jul 19 15:29:56 2026 GMT Subject: CN=d367eed6-8ffc-4a3c-9f44-5d493fc0fb45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:62:8c:a2:24:79:89:a7:26:0d:a7:9c:4a:1e: a7:67:0b:e3:98:76:ec:17:6a:24:a7:7c:b9:dd:30: 99:3c:b1:ca:d0:07:6a:8e:3f:81:ff:18:73:67:03: db:42:a7:48:01:31:e4:6f:29:e6:eb:9a:11:79:bb: 14:f5:71:e5:da:37:d6:3f:a6:b3:d5:a9:cd:54:85: 44:84:f7:0d:02:e8:99:83:f8:f0:63:88:05:a4:b7: 18:af:7c:d5:ea:d2:6e:67:b9:5c:b1:09:d1:41:1c: 0d:ad:81:4d:28:29:1e:24:eb:90:a0:6f:4f:6d:3b: 46:e4:8a:7a:0a:56:2b:19:ae:c8:9f:3b:5e:36:6b: 53:5e:ca:fd:1d:89:33:e2:24:0f:69:c4:3d:5b:ee: 3b:9a:5f:04:fc:85:50:be:02:3b:b1:82:02:ea:74: e0:ac:a6:93:62:67:a6:46:b1:c4:0c:79:f6:1c:13: 13:79:d0:4e:da:97:2d:30:72:c9:dc:62:db:b3:8b: 9e:88:82:43:a6:0b:e4:ac:c8:88:8f:cb:82:7a:9f: 45:df:2a:99:79:8a:22:eb:53:7c:6e:b3:27:44:9c: dd:9c:db:d5:52:04:06:80:c7:16:34:7e:62:85:70: 5a:00:f5:0e:50:dd:11:89:0d:e0:a6:6b:d6:74:af: 7d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:34:FA:DB:76:53:75:AA:C6:7C:7F:38:68:D8:DD:07:F0:42:F7:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9d0f11b4-e4fa-387a-aa52-bef69c505b26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 154.46.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:48:27:55:b3:63:2f:8b:d2:6d:af:f9:28:12:3a:a2:11:09: c3:57:e5:fb:19:f8:c1:a9:dc:ae:e4:e5:26:65:70:f8:67:2f: 2b:5d:59:4b:ee:3f:8d:f1:15:a6:d4:71:90:82:1c:29:10:28: 6e:61:ba:1d:21:3c:a5:64:a1:27:58:24:56:b4:8d:d6:29:17: 94:e7:83:6c:19:ea:fb:f3:d9:20:12:95:fd:57:d6:a1:25:06: 29:b3:bf:e4:b8:bc:f6:7b:2e:78:a5:1a:3e:eb:bd:ab:34:28: 5d:b3:99:08:e5:52:00:15:75:e7:0d:45:c5:77:fa:39:8d:2c: 60:43:cd:67:cf:d0:a0:2b:06:26:27:35:3f:77:41:86:3f:f1: 3f:c7:7e:69:e8:fa:33:f7:1f:0d:e2:76:4e:de:0f:1c:4a:4f: 77:a5:c6:e0:04:58:dc:c0:fd:64:67:e1:1d:79:7f:14:2a:2b: 72:af:0f:6f:6d:76:2f:7e:c0:82:4d:c4:53:0b:43:3f:5d:85: 91:84:19:80:b9:f0:d5:ec:0e:fd:50:55:ab:34:f5:4e:f4:18: f2:66:c8:00:95:b8:13:17:2b:d6:6c:15:4e:2d:1c:4c:db:0f: a5:42:1d:d3:08:95:14:99:d6:ad:d9:e3:9d:93:f6:1f:a8:fd: 72:78:f4:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2SChfBjuql5N6sEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyMDE1Mjk1NloXDTI2MDcxOTE1Mjk1NlowLzEtMCsGA1UEAxMk ZDM2N2VlZDYtOGZmYy00YTNjLTlmNDQtNWQ0OTNmYzBmYjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWKMoiR5iacmDaecSh6nZwvjmHbsF2okp3y5 3TCZPLHK0Adqjj+B/xhzZwPbQqdIATHkbynm65oRebsU9XHl2jfWP6az1anNVIVE hPcNAuiZg/jwY4gFpLcYr3zV6tJuZ7lcsQnRQRwNrYFNKCkeJOuQoG9PbTtG5Ip6 ClYrGa7InzteNmtTXsr9HYkz4iQPacQ9W+47ml8E/IVQvgI7sYIC6nTgrKaTYmem RrHEDHn2HBMTedBO2pctMHLJ3GLbs4ueiIJDpgvkrMiIj8uCep9F3yqZeYoi61N8 brMnRJzdnNvVUgQGgMcWNH5ihXBaAPUOUN0RiQ3gpmvWdK993QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLY0+tt2U3Wqxnx/OGjY3QfwQvdBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOWQwZjExYjQtZTRmYS0z ODdhLWFhNTItYmVmNjljNTA1YjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmi6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtIJ1WzYy+L0m2v+SgSOqIRCcNX5fsZ+MGp3K7k5SZlcPhnLytdWUvu P43xFabUcZCCHCkQKG5huh0hPKVkoSdYJFa0jdYpF5Tng2wZ6vvz2SASlf1X1qEl Bimzv+S4vPZ7LnilGj7rvas0KF2zmQjlUgAVdecNRcV3+jmNLGBDzWfP0KArBiYn NT93QYY/8T/Hfmno+jP3Hw3idk7eDxxKT3elxuAEWNzA/WRn4R15fxQqK3KvD29t di9+wIJNxFMLQz9dhZGEGYC58NXsDv1QVas09U70GPJmyACVuBMXK9ZsFU4tHEzb D6VCHdMIlRSZ1q3Z452T9h+o/XJ49CM= -----END CERTIFICATE-----Generated at Tue Apr 28 21:11:48 2026 by rpki-client