$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/68a189f6-d878-3750-bf65-8c6843f738fe.roa File: 68a189f6-d878-3750-bf65-8c6843f738fe.roa (raw, json) Hash identifier: ET4m4qIoQnhEj4NTM7/GEUVTYLE25XZGy3OnsrTyrA8= Subject key identifier: A2:78:5E:F6:83:A9:EF:06:0D:56:C7:31:39:9E:FF:00:85:99:EB:6D Certificate issuer: /CN=dd758471-203f-4eb9-b2e3-2061f2a9397b Certificate serial: 010D0C9F4328584D4D5A966E1F8263D1B2601E90 Authority key identifier: 4E:54:E4:17:CE:24:A0:CF:49:4A:32:72:1B:9C:86:4B:8B:20:7E:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/68a189f6-d878-3750-bf65-8c6843f738fe.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 399937 IP address blocks: 158.222.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/dd758471-203f-4eb9-b2e3-2061f2a9397b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/dd758471-203f-4eb9-b2e3-2061f2a9397b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:96:6e:1f:82:63:d1:b2:60:1e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd758471-203f-4eb9-b2e3-2061f2a9397b Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=362477da-7c74-4be3-936b-931f1cc25707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bb:ed:68:d3:08:57:74:0c:3d:fa:8a:60:b5: 28:41:a9:da:fe:80:c7:74:7a:a6:0f:a9:f6:ad:81: 3d:e0:a7:af:d5:cc:bc:7a:18:46:e3:b6:70:5b:b7: 75:63:64:81:8d:0c:22:f2:8f:7a:9a:04:0f:3c:8a: f7:5c:35:ea:2a:d4:a4:c0:7e:df:8a:07:0b:45:92: c6:dc:83:1c:87:4d:43:43:c8:88:3e:30:96:d3:89: 2d:18:89:cc:1b:3b:61:0a:cf:74:d3:f2:da:52:1b: 68:f9:9f:65:5e:ad:94:2c:17:b7:ac:83:94:2d:a6: 20:7f:92:6a:40:a3:be:55:b4:6e:b2:79:db:ba:eb: a0:06:a6:f6:29:f1:07:23:1d:24:85:01:bf:15:0c: 72:49:19:32:fe:ad:ae:65:ef:e9:d6:ae:25:5c:bc: 76:fe:22:7e:5d:7c:c5:2b:fa:60:d4:7d:0d:da:e5: 8f:30:f1:ba:2a:99:c6:a5:b1:0e:ca:e5:dc:4c:f3: 60:2b:14:e0:b2:f9:27:c9:46:fd:0b:b6:18:28:da: 2f:ec:f1:1f:1f:01:0a:6d:9f:1e:c2:05:39:b0:c2: 66:4e:88:8e:fc:c0:b0:22:3a:d5:d0:5b:47:89:d0: 60:92:66:dd:78:f6:2f:3e:b1:10:42:86:84:a5:a6: 90:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:78:5E:F6:83:A9:EF:06:0D:56:C7:31:39:9E:FF:00:85:99:EB:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/68a189f6-d878-3750-bf65-8c6843f738fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/dd758471-203f-4eb9-b2e3-2061f2a9397b.crl X509v3 Authority Key Identifier: keyid:4E:54:E4:17:CE:24:A0:CF:49:4A:32:72:1B:9C:86:4B:8B:20:7E:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b.cer sbgp-ipAddrBlock: critical IPv4: 158.222.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:0a:6d:e2:51:0d:d5:92:a5:27:70:c1:ec:81:44:5f:4d:22: d8:d7:74:c9:68:63:e5:ee:fd:9a:53:b0:9d:e5:00:32:7b:62: da:e9:c5:db:46:6e:18:54:4b:9b:2f:28:2b:1f:80:2c:ce:6a: 7a:5a:fc:8f:5c:e1:79:31:17:e1:8d:b0:a0:87:8b:05:d2:e6: ae:c5:c1:69:37:84:6f:40:83:c5:23:4e:fe:dd:bb:39:db:04: b6:1d:8b:21:d6:86:c3:60:79:78:75:79:40:d8:b9:1c:51:bb: 25:90:17:5c:f5:50:b3:6a:4e:10:eb:6a:3f:09:1f:9a:7b:02: 55:0e:f9:59:50:f5:86:c7:54:21:a6:a1:f6:b0:45:44:10:57: 47:61:64:d7:65:96:2a:0d:60:57:8c:73:20:76:84:c8:82:ea: 71:36:04:19:21:5c:5c:ef:33:92:5c:d5:76:11:79:87:fc:ef: 7f:af:5b:87:c5:d3:da:84:eb:37:a1:ec:99:e7:f4:61:9f:20: d1:bd:0c:8b:d1:09:cb:6c:9c:97:98:fb:a7:fe:40:42:31:80: f1:b9:f0:f4:97:a7:72:90:ef:75:15:0d:2f:82:67:35:65:23: d6:61:3c:36:fc:e3:c2:ca:94:55:2b:d0:08:f9:74:89:45:b6: b0:2f:e5:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWpZuH4Jj0bJgHpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ3NTg0NzEtMjAzZi00ZWI5LWIyZTMtMjA2MWYyYTkz OTdiMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk MzYyNDc3ZGEtN2M3NC00YmUzLTkzNmItOTMxZjFjYzI1NzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLvtaNMIV3QMPfqKYLUoQana/oDHdHqmD6n2 rYE94Kev1cy8ehhG47ZwW7d1Y2SBjQwi8o96mgQPPIr3XDXqKtSkwH7figcLRZLG 3IMch01DQ8iIPjCW04ktGInMGzthCs900/LaUhto+Z9lXq2ULBe3rIOULaYgf5Jq QKO+VbRusnnbuuugBqb2KfEHIx0khQG/FQxySRky/q2uZe/p1q4lXLx2/iJ+XXzF K/pg1H0N2uWPMPG6KpnGpbEOyuXcTPNgKxTgsvknyUb9C7YYKNov7PEfHwEKbZ8e wgU5sMJmToiO/MCwIjrV0FtHidBgkmbdePYvPrEQQoaEpaaQ2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJ4XvaDqe8GDVbHMTme/wCFmettMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kZDc1 ODQ3MS0yMDNmLTRlYjktYjJlMy0yMDYxZjJhOTM5N2IvNjhhMTg5ZjYtZDg3OC0z NzUwLWJmNjUtOGM2ODQzZjczOGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGQ3NTg0NzEtMjAzZi00ZWI5LWIy ZTMtMjA2MWYyYTkzOTdiL2RkNzU4NDcxLTIwM2YtNGViOS1iMmUzLTIwNjFmMmE5 Mzk3Yi5jcmwwHwYDVR0jBBgwFoAUTlTkF84koM9JSjJyG5yGS4sgfpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kZDc1ODQ3MS0yMDNmLTRlYjktYjJlMy0yMDYx ZjJhOTM5N2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnt4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYKbeJRDdWSpSdwweyBRF9NItjXdMloY+Xu/ZpTsJ3lADJ7YtrpxdtG bhhUS5svKCsfgCzOanpa/I9c4XkxF+GNsKCHiwXS5q7FwWk3hG9Ag8UjTv7duznb BLYdiyHWhsNgeXh1eUDYuRxRuyWQF1z1ULNqThDraj8JH5p7AlUO+VlQ9YbHVCGm ofawRUQQV0dhZNdllioNYFeMcyB2hMiC6nE2BBkhXFzvM5Jc1XYReYf873+vW4fF 09qE6zeh7Jnn9GGfING9DIvRCctsnJeY+6f+QEIxgPG58PSXp3KQ73UVDS+CZzVl I9ZhPDb848LKlFUr0Aj5dIlFtrAv5Zs= -----END CERTIFICATE-----Generated at Thu Apr 16 06:09:56 2026 by rpki-client