$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/8d7db746-35fb-3952-a4fe-73fd27f04735.roa File: 8d7db746-35fb-3952-a4fe-73fd27f04735.roa (raw, json) Hash identifier: EysfOAwmiYh2/v1g4sF8CbobgBEnQ1mliMEyUg0oLeE= Subject key identifier: 4A:22:0E:CA:D9:66:21:F4:10:EC:BB:1D:81:8F:2B:77:D8:F2:AC:67 Certificate issuer: /CN=f30a83fc-5753-4d94-85d1-26924afa8ea3 Certificate serial: 010D0C9F4328584D83CA9E77DCFF9E7CEAFDE680 Authority key identifier: F0:50:4C:16:74:72:8A:AD:BA:BF:BB:67:EA:1F:69:54:42:D9:5F:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/8d7db746-35fb-3952-a4fe-73fd27f04735.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 16652 IP address blocks: 198.252.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:9e:77:dc:ff:9e:7c:ea:fd:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f30a83fc-5753-4d94-85d1-26924afa8ea3 Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=bb5e0dcc-69d0-443d-a771-4ff8f1b35d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:84:61:04:ac:08:7a:1d:3b:ad:10:b9:81:c8: 1d:da:c4:5f:a7:c8:f5:5e:b0:a2:a9:5c:22:5a:82: 0d:cb:d6:75:d8:e6:0c:58:b4:84:09:e4:f4:bd:7a: 5f:57:f5:1b:72:b2:f9:ad:be:2a:30:de:8a:04:0b: c0:e1:c3:bd:25:31:b5:a4:e9:3f:8a:c0:c4:a3:c3: a8:26:6d:e6:d2:52:ed:2a:c1:24:cf:9f:d5:56:79: dc:42:63:e3:6e:c9:48:88:c6:f4:d3:40:51:27:76: 24:0b:09:91:7d:9f:a9:a8:fa:0f:71:f8:8f:43:c9: 8e:aa:07:e7:7e:1a:9d:ca:36:14:b7:b0:82:22:26: b1:29:72:08:4b:13:7d:3e:4f:69:9a:d5:42:a9:eb: 18:3e:07:ae:6c:53:a6:b4:a2:a1:49:25:f7:01:15: b1:5e:ef:a5:46:ae:62:c8:19:85:69:5e:c4:28:df: 75:5c:60:51:72:0e:bf:11:f4:ae:4b:cd:a8:c1:fe: e4:f8:07:bf:de:f6:44:9e:a1:f4:fe:87:6a:96:42: ad:5c:f7:3e:59:5f:34:3b:07:02:e5:bb:95:07:81: 2f:6a:0f:c5:7b:73:73:e6:f3:c9:ac:8c:e8:83:c4: d5:ff:06:64:f3:1a:79:d4:36:ef:3e:c4:38:7e:21: fe:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:22:0E:CA:D9:66:21:F4:10:EC:BB:1D:81:8F:2B:77:D8:F2:AC:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/8d7db746-35fb-3952-a4fe-73fd27f04735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.crl X509v3 Authority Key Identifier: keyid:F0:50:4C:16:74:72:8A:AD:BA:BF:BB:67:EA:1F:69:54:42:D9:5F:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer sbgp-ipAddrBlock: critical IPv4: 198.252.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b1:1d:85:52:94:3d:97:d6:19:9b:26:9a:ba:30:17:75:fa: 03:1a:35:f5:24:51:26:34:bf:da:ac:29:ed:9b:47:2f:46:25: 10:34:33:e7:1d:7b:9d:bb:8e:5c:7b:16:65:74:4b:6b:a6:69: 39:5b:85:48:be:00:98:d5:a5:4d:03:a4:25:87:d6:0a:8b:f6: 4f:e0:cf:76:54:89:7c:cb:0b:73:2c:cc:cb:76:19:ac:09:ed: 95:fe:bc:ee:d3:f5:a3:94:aa:83:79:d7:f9:a9:59:e4:b0:20: e7:93:8b:8a:2f:de:d7:37:04:e5:8e:2d:38:f4:ce:ce:14:0b: 9b:15:22:6e:94:4d:f0:35:9d:56:bd:68:93:65:42:7a:51:2a: 49:af:a0:ed:47:d5:23:65:c8:37:b5:f2:ef:44:68:5a:a6:f2: 43:e0:af:ac:1d:3d:19:6c:5e:70:7f:16:32:f4:1d:6e:5f:cb: 0d:a2:da:e5:6b:25:62:1e:a9:db:c8:81:f5:22:c5:eb:c7:36: 51:77:13:14:97:ca:e5:4b:6d:3c:d8:a6:a7:3b:6d:b6:23:4c: 67:70:e3:74:fc:5b:57:3b:9b:64:e5:ac:d8:38:66:80:73:6b: ad:50:70:32:b6:4e:2e:41:f0:5e:76:3c:dc:dc:bf:08:4b:45: b4:37:63:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Dyp533P+efOr95oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMwYTgzZmMtNTc1My00ZDk0LTg1ZDEtMjY5MjRhZmE4 ZWEzMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk YmI1ZTBkY2MtNjlkMC00NDNkLWE3NzEtNGZmOGYxYjM1ZDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYRhBKwIeh07rRC5gcgd2sRfp8j1XrCiqVwi WoINy9Z12OYMWLSECeT0vXpfV/UbcrL5rb4qMN6KBAvA4cO9JTG1pOk/isDEo8Oo Jm3m0lLtKsEkz5/VVnncQmPjbslIiMb000BRJ3YkCwmRfZ+pqPoPcfiPQ8mOqgfn fhqdyjYUt7CCIiaxKXIISxN9Pk9pmtVCqesYPgeubFOmtKKhSSX3ARWxXu+lRq5i yBmFaV7EKN91XGBRcg6/EfSuS82owf7k+Ae/3vZEnqH0/odqlkKtXPc+WV80OwcC 5buVB4Evag/Fe3Nz5vPJrIzog8TV/wZk8xp51DbvPsQ4fiH+mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoiDsrZZiH0EOy7HYGPK3fY8qxnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMzBh ODNmYy01NzUzLTRkOTQtODVkMS0yNjkyNGFmYThlYTMvOGQ3ZGI3NDYtMzVmYi0z OTUyLWE0ZmUtNzNmZDI3ZjA0NzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjMwYTgzZmMtNTc1My00ZDk0LTg1 ZDEtMjY5MjRhZmE4ZWEzL2YzMGE4M2ZjLTU3NTMtNGQ5NC04NWQxLTI2OTI0YWZh OGVhMy5jcmwwHwYDVR0jBBgwFoAU8FBMFnRyiq26v7tn6h9pVELZXz4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMzBhODNmYy01NzUzLTRkOTQtODVkMS0yNjky NGFmYThlYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvyZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWxHYVSlD2X1hmbJpq6MBd1+gMaNfUkUSY0v9qsKe2bRy9GJRA0M+cd e527jlx7FmV0S2umaTlbhUi+AJjVpU0DpCWH1gqL9k/gz3ZUiXzLC3MszMt2GawJ 7ZX+vO7T9aOUqoN51/mpWeSwIOeTi4ov3tc3BOWOLTj0zs4UC5sVIm6UTfA1nVa9 aJNlQnpRKkmvoO1H1SNlyDe18u9EaFqm8kPgr6wdPRlsXnB/FjL0HW5fyw2i2uVr JWIeqdvIgfUixevHNlF3ExSXyuVLbTzYpqc7bbYjTGdw43T8W1c7m2TlrNg4ZoBz a61QcDK2Ti5B8F52PNzcvwhLRbQ3YwA= -----END CERTIFICATE-----Generated at Fri Apr 17 21:24:47 2026 by rpki-client