$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b89278a3-74c9-3ec5-a92f-44d3676f6324.roa File: b89278a3-74c9-3ec5-a92f-44d3676f6324.roa (raw, json) Hash identifier: 8a3aAzCRXFtPecwTNC6eBhVjzAOjSvHJ33eec7gm7uQ= Subject key identifier: 65:4D:D8:F6:17:EB:9A:C9:17:83:5D:DE:F0:88:BB:0F:62:95:78:77 Certificate issuer: /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Certificate serial: 010D0C9F4328584D6AAA8599846E0E7DA3C79580 Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b89278a3-74c9-3ec5-a92f-44d3676f6324.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 53991 IP address blocks: 216.245.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:85:99:84:6e:0e:7d:a3:c7:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=4a4e751c-90dc-47c9-95e6-6fcb7969d21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:56:89:f0:00:79:8c:0a:99:c2:59:5b:f4:1c: ef:9d:0e:af:43:e1:cc:2f:f7:48:e0:a0:3a:0f:71: 43:47:82:d2:5b:cc:d4:dd:26:fb:a8:40:ca:87:9f: 1f:33:65:45:82:db:a8:84:c5:83:7f:6a:0a:6c:85: e5:e1:72:bc:23:ed:03:da:66:55:30:eb:e8:c4:80: a9:57:38:27:7a:c0:f1:64:31:b2:0e:d3:0a:0d:d5: 41:04:eb:2d:30:4e:19:b7:3c:89:b0:ac:73:34:a5: 7c:27:74:b7:4f:7b:54:ce:ce:c9:ed:24:3c:f3:6d: 2f:df:7c:20:4c:a7:02:2c:10:26:f8:42:de:21:08: 28:58:21:b8:a0:94:bb:dd:02:a3:41:ec:62:3b:a5: 4e:be:08:b0:a9:ba:d0:e3:97:c3:ad:44:29:01:d8: 41:bd:0c:cc:35:08:bf:c2:5d:a0:b2:ce:8f:7e:ad: 6d:7b:36:6b:62:f2:3c:1a:45:db:fe:17:4f:53:00: 06:af:51:27:30:33:3a:92:c3:30:c9:01:eb:56:2f: 8e:aa:35:44:88:fe:af:ea:24:14:6d:90:dc:fd:9e: 77:69:a3:01:47:e1:b2:b3:80:22:e9:e9:00:11:26: cb:ee:71:02:c5:66:ca:9a:fe:73:26:87:c6:23:50: e1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4D:D8:F6:17:EB:9A:C9:17:83:5D:DE:F0:88:BB:0F:62:95:78:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b89278a3-74c9-3ec5-a92f-44d3676f6324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl X509v3 Authority Key Identifier: keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer sbgp-ipAddrBlock: critical IPv4: 216.245.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:15:d7:57:1f:b5:fb:ef:6b:44:7f:39:71:60:48:a2:59:9c: a4:4f:58:f7:1f:17:37:9f:b1:d1:18:d6:db:0e:fb:74:53:b5: 92:86:04:a2:78:65:a5:53:44:29:89:b7:e0:37:88:01:dd:9c: 7a:52:ae:44:60:d0:96:ac:e7:d1:c3:cb:4a:a6:27:16:3b:cf: b1:5a:42:08:41:54:16:4d:7f:e4:48:6e:be:97:03:9e:1d:82: 8a:c8:fd:2a:3d:82:a2:3b:07:d9:2d:9c:c3:ca:57:36:43:e7: d4:34:6b:42:22:32:98:86:59:6f:6a:26:10:09:4a:07:f1:be: 99:e6:c5:2f:38:1b:75:a0:b4:ec:96:d1:d0:f0:07:d9:0d:f9: 02:ae:ea:0e:96:b2:3e:9a:94:85:de:7f:04:d5:af:ca:61:7f: 12:75:09:e6:2a:65:ff:06:85:36:cb:c4:f6:fc:c6:5b:3e:bc: 5b:c5:24:45:78:ba:7d:8a:f8:b8:1f:4c:b9:45:2b:06:64:2f: a0:ca:6d:4b:8e:70:8b:a2:fe:45:70:9e:6d:cd:58:17:62:15: f1:fc:78:43:75:43:74:91:bc:2e:72:d1:ed:f8:e7:7d:07:34: b8:bf:36:8a:f3:9d:d5:68:76:25:e7:22:9d:aa:e7:31:21:98: 7b:e1:75:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqoWZhG4OfaPHlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIyNjE3YzAtMDNmNC00YWQ3LTlkMTEtMzZiMmM2NDk2 YjdkMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk NGE0ZTc1MWMtOTBkYy00N2M5LTk1ZTYtNmZjYjc5NjlkMjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlaJ8AB5jAqZwllb9BzvnQ6vQ+HML/dI4KA6 D3FDR4LSW8zU3Sb7qEDKh58fM2VFgtuohMWDf2oKbIXl4XK8I+0D2mZVMOvoxICp VzgnesDxZDGyDtMKDdVBBOstME4ZtzyJsKxzNKV8J3S3T3tUzs7J7SQ8820v33wg TKcCLBAm+ELeIQgoWCG4oJS73QKjQexiO6VOvgiwqbrQ45fDrUQpAdhBvQzMNQi/ wl2gss6Pfq1tezZrYvI8GkXb/hdPUwAGr1EnMDM6ksMwyQHrVi+OqjVEiP6v6iQU bZDc/Z53aaMBR+Gys4Ai6ekAESbL7nECxWbKmv5zJofGI1DhrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVN2PYX65rJF4Nd3vCIuw9ilXh3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2 MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIyYzY0OTZiN2QvYjg5Mjc4YTMtNzRjOS0z ZWM1LWE5MmYtNDRkMzY3NmY2MzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGIyNjE3YzAtMDNmNC00YWQ3LTlk MTEtMzZiMmM2NDk2YjdkL2RiMjYxN2MwLTAzZjQtNGFkNy05ZDExLTM2YjJjNjQ5 NmI3ZC5jcmwwHwYDVR0jBBgwFoAUb4y8Y/4j18SoBgk6tbahaqOUWLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIy YzY0OTZiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PWbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwV11cftfvva0R/OXFgSKJZnKRPWPcfFzefsdEY1tsO+3RTtZKGBKJ4 ZaVTRCmJt+A3iAHdnHpSrkRg0Jas59HDy0qmJxY7z7FaQghBVBZNf+RIbr6XA54d gorI/So9gqI7B9ktnMPKVzZD59Q0a0IiMpiGWW9qJhAJSgfxvpnmxS84G3WgtOyW 0dDwB9kN+QKu6g6Wsj6alIXefwTVr8phfxJ1CeYqZf8GhTbLxPb8xls+vFvFJEV4 un2K+LgfTLlFKwZkL6DKbUuOcIui/kVwnm3NWBdiFfH8eEN1Q3SRvC5y0e34530H NLi/NorzndVodiXnIp2q5zEhmHvhdZc= -----END CERTIFICATE-----Generated at Fri Apr 17 18:27:02 2026 by rpki-client