$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/47ea2d17-33fd-35e6-b0d8-b6603b21510d.roa File: 47ea2d17-33fd-35e6-b0d8-b6603b21510d.roa (raw, json) Hash identifier: bDLw2LJqyHW+Fv7QZTf8psHhOELighPT3HMgqnx5odU= Subject key identifier: D9:09:68:26:C4:A2:95:44:8E:A9:53:71:DF:5A:44:65:C3:3C:0F:FC Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584DA6B012CE87D0F35F388E5A80 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/47ea2d17-33fd-35e6-b0d8-b6603b21510d.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 14618 IP address blocks: 159.112.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:12:ce:87:d0:f3:5f:38:8e:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=416794b0-e18a-41b4-a30d-2e2bc8195732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e2:a6:bd:7c:35:9e:a1:93:9b:65:c1:0b:69: b4:46:d0:b0:cc:66:51:36:3c:8f:52:d9:06:a9:49: 28:41:2d:91:40:80:d2:14:0f:18:dd:b4:3e:03:da: 9b:a4:c7:c0:cc:ee:31:c9:f8:9e:42:68:09:e4:6e: 70:50:7d:b9:20:2e:95:58:42:e0:77:f6:30:02:a0: c5:fa:b1:d7:99:5c:41:f1:57:52:6b:82:5e:c1:66: cb:ca:c6:62:29:75:e0:be:cd:c9:08:a8:3c:65:21: d2:cd:ee:c1:5d:a6:10:7d:2b:dc:45:3b:9b:f6:3d: a6:8a:cc:03:42:13:d9:5d:cc:07:90:51:07:8c:4c: 4c:26:dd:42:13:ea:e2:fa:60:37:c1:ce:c6:0e:3a: c4:94:b5:e4:76:15:6a:e3:0f:80:6e:31:e7:be:2d: 85:c6:63:a5:f3:28:1c:4a:de:e4:b0:00:e6:90:c9: bd:af:34:a9:3a:11:06:49:a7:49:50:3d:63:13:b6: 94:be:4b:88:dd:bb:71:90:fc:81:e3:f0:5d:ed:e0: af:ed:60:33:2e:27:16:54:fd:0e:ee:b4:ad:dc:83: 3e:de:42:b4:29:eb:03:87:5b:26:36:bb:ac:a5:a5: f5:ec:11:ac:61:7a:64:8b:47:0f:0e:5c:2e:a5:ea: f5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:09:68:26:C4:A2:95:44:8E:A9:53:71:DF:5A:44:65:C3:3C:0F:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/47ea2d17-33fd-35e6-b0d8-b6603b21510d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 159.112.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ca:56:75:b3:3a:28:e1:63:fd:f5:80:59:d3:6f:62:5f:73: 89:7f:1a:4d:11:5d:59:34:1b:69:ad:1c:a6:58:dc:97:f6:ab: 51:74:61:da:3a:5b:81:8f:df:ec:0b:8f:f1:30:82:f9:71:3a: 0a:d9:52:c0:88:95:06:b6:19:b4:71:c9:f0:67:c3:3c:34:06: eb:42:64:c4:83:7c:bc:96:85:9f:bc:0e:73:b5:24:e6:c3:b9: 2c:18:e0:16:38:2c:9e:db:9b:78:73:28:c7:85:13:5b:15:fc: 81:d6:39:ee:fb:6b:a1:83:9e:0d:4e:32:88:c8:82:2e:9a:b9: b8:13:ef:5f:c5:48:9b:24:1e:2a:58:ae:da:8d:6f:ce:1f:71: ab:e7:b5:6d:f7:32:a2:80:94:9a:fd:3f:9b:ab:61:ee:60:4f: 97:f0:ca:26:52:7b:fc:31:d9:f8:53:41:be:6c:04:83:54:ba: a6:8e:06:ce:ce:03:29:06:95:6e:58:a3:24:01:56:49:9a:af: 17:f8:d1:bf:b7:b0:2d:23:0a:8b:8e:94:72:d0:cc:c7:51:6b: e1:7c:e6:1c:d3:5e:e5:15:ae:f4:69:0d:67:40:eb:b5:2d:e9: e4:d9:8a:88:3e:33:9b:dc:b0:da:94:f7:d5:b0:04:49:8d:4c: c6:0d:1b:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msBLOh9DzXziOWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NDE2Nzk0YjAtZTE4YS00MWI0LWEzMGQtMmUyYmM4MTk1NzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+KmvXw1nqGTm2XBC2m0RtCwzGZRNjyPUtkG qUkoQS2RQIDSFA8Y3bQ+A9qbpMfAzO4xyfieQmgJ5G5wUH25IC6VWELgd/YwAqDF +rHXmVxB8VdSa4JewWbLysZiKXXgvs3JCKg8ZSHSze7BXaYQfSvcRTub9j2miswD QhPZXcwHkFEHjExMJt1CE+ri+mA3wc7GDjrElLXkdhVq4w+AbjHnvi2FxmOl8ygc St7ksADmkMm9rzSpOhEGSadJUD1jE7aUvkuI3btxkPyB4/Bd7eCv7WAzLicWVP0O 7rSt3IM+3kK0KesDh1smNruspaX17BGsYXpki0cPDlwuper1HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkJaCbEopVEjqlTcd9aRGXDPA/8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNDdlYTJkMTctMzNmZC0z NWU2LWIwZDgtYjY2MDNiMjE1MTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn3DoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbKVnWzOijhY/31gFnTb2Jfc4l/Gk0RXVk0G2mtHKZY3Jf2q1F0Ydo6 W4GP3+wLj/EwgvlxOgrZUsCIlQa2GbRxyfBnwzw0ButCZMSDfLyWhZ+8DnO1JObD uSwY4BY4LJ7bm3hzKMeFE1sV/IHWOe77a6GDng1OMojIgi6aubgT71/FSJskHipY rtqNb84fcavntW33MqKAlJr9P5urYe5gT5fwyiZSe/wx2fhTQb5sBINUuqaOBs7O AykGlW5YoyQBVkmarxf40b+3sC0jCouOlHLQzMdRa+F85hzTXuUVrvRpDWdA67Ut 6eTZiog+M5vcsNqU99WwBEmNTMYNGwA= -----END CERTIFICATE-----Generated at Sun May 3 16:15:50 2026 by rpki-client