$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/3581304a-962f-3365-9bef-ffc42b70f1cf.roa File: 3581304a-962f-3365-9bef-ffc42b70f1cf.roa (raw, json) Hash identifier: RrqbYUxM4NJ7s3i7KqGhC22txIGIDnz6H1VSK3M47Fs= Subject key identifier: 1C:69:F5:5D:56:8D:E2:D8:E4:96:2B:15:EE:B5:9E:BA:4E:5D:F2:36 Certificate issuer: /CN=b7f47051-24e9-4c6d-a7f1-2165292c5530 Certificate serial: 010D0C9F4328584D55BA359CDDE0633DC9368500 Authority key identifier: 6F:67:21:58:89:0F:9A:09:B1:72:56:0B:79:3A:B9:D7:1D:DD:3C:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/3581304a-962f-3365-9bef-ffc42b70f1cf.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 19050 IP address blocks: 156.40.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/b7f47051-24e9-4c6d-a7f1-2165292c5530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/b7f47051-24e9-4c6d-a7f1-2165292c5530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:35:9c:dd:e0:63:3d:c9:36:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7f47051-24e9-4c6d-a7f1-2165292c5530 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=13e3ecfa-94c8-4d6e-9620-f873027ee6b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:49:4d:1c:8c:4c:94:b3:3d:53:0c:51:a9:bf: 2e:60:f2:33:6a:64:d7:a1:e2:b1:3a:8c:77:48:9a: 43:2d:f4:80:fb:f8:7c:d3:3b:4d:28:36:bc:5c:c6: eb:2a:73:f3:fb:08:76:85:bc:78:f7:de:14:f3:e9: ea:a9:4e:94:0a:77:01:c5:42:6e:ff:07:d5:12:be: ad:5c:3e:11:7b:8f:fe:ee:de:6d:ee:53:a9:b2:e9: bd:e9:60:28:d5:58:a5:c7:c9:db:df:02:ec:ec:12: 29:42:fc:cc:14:6f:6b:4a:75:c7:47:4a:1b:e1:a8: 8d:ee:b3:fe:20:2d:f9:8d:74:12:13:fc:9e:1d:31: 6e:d3:c3:64:95:9b:3f:fe:41:02:2a:34:a6:bb:bd: 00:1b:a3:01:d7:91:9a:0d:28:72:09:b0:6f:dc:10: 7b:de:3e:8b:58:4b:e3:f2:04:d4:12:fa:bb:cd:30: b0:7b:89:b5:dd:79:b5:0a:ce:bf:75:42:93:62:67: fa:bc:52:7c:e6:36:a8:a2:50:01:cf:ce:1e:4e:8b: 18:aa:ee:d1:01:9b:76:e3:d0:d1:a4:4c:f4:cd:c2: f9:86:04:02:32:88:73:86:6a:c2:36:47:f5:0d:da: 71:1e:9f:db:37:a7:4a:90:82:98:a9:8a:2e:f1:e4: f2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:69:F5:5D:56:8D:E2:D8:E4:96:2B:15:EE:B5:9E:BA:4E:5D:F2:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/3581304a-962f-3365-9bef-ffc42b70f1cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/b7f47051-24e9-4c6d-a7f1-2165292c5530.crl X509v3 Authority Key Identifier: keyid:6F:67:21:58:89:0F:9A:09:B1:72:56:0B:79:3A:B9:D7:1D:DD:3C:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530.cer sbgp-ipAddrBlock: critical IPv4: 156.40.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b2:d9:c0:49:65:ee:6b:33:cf:78:75:96:45:b8:77:0f:a4: 24:de:b4:f2:7c:94:8e:16:ae:19:ad:8e:ea:d4:41:af:cc:ef: 92:47:30:1e:6b:2a:a3:43:55:c8:89:54:6a:17:d2:f5:7e:83: 33:1d:29:ee:f4:85:6d:78:6b:43:40:a5:fe:6a:cb:b0:9d:75: b8:de:88:d3:a1:41:06:4e:81:3f:75:5b:40:04:41:c9:a1:d1: 1e:53:fb:55:f8:71:35:cb:56:a2:8e:c4:31:6a:3d:92:ae:78: 10:c1:c1:b5:70:ef:9a:6b:7f:a4:a5:f7:11:24:b1:ee:15:68: a4:93:8b:8b:5d:2e:2a:70:91:1c:48:9f:6a:af:83:8b:db:f5: 48:f4:67:e7:59:0d:9d:5d:ae:46:11:5a:3b:c0:73:3a:b7:d0: ce:8f:94:9c:cf:e0:32:34:ee:58:d8:82:7d:a2:99:8a:d7:5c: 1c:71:d0:b5:04:84:1c:ea:88:dd:2a:6d:7a:ae:13:3e:90:88: 51:d0:83:89:43:bc:7f:51:e7:61:3b:31:f9:e2:ed:19:50:42: 1e:1e:ea:b5:20:ac:b6:92:86:71:2b:2c:fd:6f:01:12:5f:aa: 64:36:f2:bf:d6:33:56:d4:9d:ea:bf:01:53:e4:2f:35:c8:08: 66:64:9d:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VujWc3eBjPck2hQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdmNDcwNTEtMjRlOS00YzZkLWE3ZjEtMjE2NTI5MmM1 NTMwMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MTNlM2VjZmEtOTRjOC00ZDZlLTk2MjAtZjg3MzAyN2VlNmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmklNHIxMlLM9UwxRqb8uYPIzamTXoeKxOox3 SJpDLfSA+/h80ztNKDa8XMbrKnPz+wh2hbx4994U8+nqqU6UCncBxUJu/wfVEr6t XD4Re4/+7t5t7lOpsum96WAo1Vilx8nb3wLs7BIpQvzMFG9rSnXHR0ob4aiN7rP+ IC35jXQSE/yeHTFu08NklZs//kECKjSmu70AG6MB15GaDShyCbBv3BB73j6LWEvj 8gTUEvq7zTCwe4m13Xm1Cs6/dUKTYmf6vFJ85jaoolABz84eTosYqu7RAZt249DR pEz0zcL5hgQCMohzhmrCNkf1DdpxHp/bN6dKkIKYqYou8eTyuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxp9V1WjeLY5JYrFe61nrpOXfI2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iN2Y0 NzA1MS0yNGU5LTRjNmQtYTdmMS0yMTY1MjkyYzU1MzAvMzU4MTMwNGEtOTYyZi0z MzY1LTliZWYtZmZjNDJiNzBmMWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjdmNDcwNTEtMjRlOS00YzZkLWE3 ZjEtMjE2NTI5MmM1NTMwL2I3ZjQ3MDUxLTI0ZTktNGM2ZC1hN2YxLTIxNjUyOTJj NTUzMC5jcmwwHwYDVR0jBBgwFoAUb2chWIkPmgmxclYLeTq51x3dPP0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iN2Y0NzA1MS0yNGU5LTRjNmQtYTdmMS0yMTY1 MjkyYzU1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnChfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6y2cBJZe5rM894dZZFuHcPpCTetPJ8lI4WrhmtjurUQa/M75JHMB5r KqNDVciJVGoX0vV+gzMdKe70hW14a0NApf5qy7CddbjeiNOhQQZOgT91W0AEQcmh 0R5T+1X4cTXLVqKOxDFqPZKueBDBwbVw75prf6Sl9xEkse4VaKSTi4tdLipwkRxI n2qvg4vb9Uj0Z+dZDZ1drkYRWjvAczq30M6PlJzP4DI07ljYgn2imYrXXBxx0LUE hBzqiN0qbXquEz6QiFHQg4lDvH9R52E7Mfni7RlQQh4e6rUgrLaShnErLP1vARJf qmQ28r/WM1bUneq/AVPkLzXICGZknSI= -----END CERTIFICATE-----Generated at Wed Apr 15 16:18:04 2026 by rpki-client