$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/f221a3f9-effe-3336-98c9-6079ba80b70b.roa File: f221a3f9-effe-3336-98c9-6079ba80b70b.roa (raw, json) Hash identifier: vOB1yM1ENgA5SQFHTtf4qqHJrpBjQhkVvMKT1Fay9BA= Subject key identifier: F1:C4:34:BF:D9:79:D3:E2:35:34:7F:D2:3E:86:CE:70:33:0A:9E:21 Certificate issuer: /CN=15a5c850-b5f7-4cfd-b31f-19d51bf3cc08 Certificate serial: 010D0C9F4328584D7A0511FA6E034C2CEA00DD00 Authority key identifier: 26:4F:4E:7E:79:A7:DC:07:8E:0B:25:4D:0F:3A:C5:03:5F:C6:C2:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/f221a3f9-effe-3336-98c9-6079ba80b70b.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 144.77.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:11:fa:6e:03:4c:2c:ea:00:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15a5c850-b5f7-4cfd-b31f-19d51bf3cc08 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=7af0709c-fdb3-4c57-89c4-8c602300b618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f8:aa:41:38:f4:84:5a:6c:3c:b8:29:d5:36: bc:78:ca:8c:62:b1:b6:bd:b8:cb:f7:63:67:17:8d: 4c:4d:75:98:bf:86:65:e4:0b:e2:bb:dc:fb:bf:b9: cb:28:5e:e0:30:b1:d3:1f:8b:ee:ec:0b:3a:cd:e1: 28:f0:aa:26:bc:af:68:3b:6e:c3:a7:26:7b:bb:df: b8:d1:13:e3:e9:25:6b:d8:60:aa:8f:0c:ef:a8:c6: 8f:d7:e1:78:32:c7:c3:92:18:18:e5:3f:d9:57:6a: f5:c3:3c:58:9a:5f:65:e6:f2:2b:47:90:17:f4:49: 12:63:eb:e4:32:bf:ac:35:29:09:83:d3:a7:6e:ee: 00:4f:78:93:a0:0a:bb:6a:c1:87:f9:84:78:dc:a5: 96:55:34:9a:a5:89:ae:19:88:e7:ba:8e:7b:ed:b5: 65:df:f1:bd:aa:8b:c0:e5:b1:6e:bf:dc:c6:16:23: d4:9c:3b:0e:ee:54:a4:b3:9b:97:97:d7:18:23:f1: a0:9f:01:7c:79:93:09:32:07:bc:b7:5b:19:e8:52: fd:b3:3e:8e:bd:65:db:77:cc:1a:67:a7:5a:de:f7: 0c:72:3c:61:22:4d:4b:a0:3a:c4:db:d0:1e:08:21: fe:89:85:b4:15:b6:eb:20:a2:33:27:99:cc:47:98: a2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C4:34:BF:D9:79:D3:E2:35:34:7F:D2:3E:86:CE:70:33:0A:9E:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/f221a3f9-effe-3336-98c9-6079ba80b70b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.crl X509v3 Authority Key Identifier: keyid:26:4F:4E:7E:79:A7:DC:07:8E:0B:25:4D:0F:3A:C5:03:5F:C6:C2:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.cer sbgp-ipAddrBlock: critical IPv4: 144.77.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:d3:64:c8:c7:00:a3:e1:d3:f7:00:ad:23:9c:9a:72:76:55: 85:1e:a2:1c:8e:34:58:2a:69:cc:1f:ff:ac:7d:cc:f6:50:57: 35:37:38:2c:a0:36:21:2b:25:09:e2:4b:10:eb:11:13:3c:c4: 77:94:c7:f0:88:7f:7f:71:1c:e5:31:d5:35:af:ff:3b:17:b2: 40:c1:5a:cc:aa:24:8f:46:13:74:41:11:03:5a:d2:67:67:9b: 8d:f1:06:18:bd:9a:53:03:04:80:c7:49:a3:db:8e:74:e9:36: 40:d7:bd:03:aa:3d:7d:71:a2:8d:f4:4a:10:03:45:83:13:26: 54:25:30:a5:8b:62:c5:7b:d1:1c:9a:10:42:4e:e6:60:52:89: 70:80:bc:6e:cb:84:be:c2:69:49:8d:47:d4:12:bb:f6:48:0a: 62:e8:49:f8:a6:b3:d6:b0:9e:8a:63:35:d8:e8:02:8f:42:10: b8:bf:de:1b:77:a7:0e:90:49:3b:02:7e:42:65:2d:8f:cc:51: 65:a8:af:21:15:57:62:3b:1d:b3:ea:1c:cf:d5:60:2c:a5:02: 0b:c3:5f:b8:32:1b:6c:7b:1d:70:69:d2:f6:3d:30:21:71:65: a0:40:fc:74:97:eb:91:39:70:90:d3:9e:b1:fc:7d:d2:5e:97: 9e:91:b4:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BRH6bgNMLOoA3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTVhNWM4NTAtYjVmNy00Y2ZkLWIzMWYtMTlkNTFiZjNj YzA4MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk N2FmMDcwOWMtZmRiMy00YzU3LTg5YzQtOGM2MDIzMDBiNjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPiqQTj0hFpsPLgp1Ta8eMqMYrG2vbjL92Nn F41MTXWYv4Zl5Aviu9z7v7nLKF7gMLHTH4vu7As6zeEo8KomvK9oO27DpyZ7u9+4 0RPj6SVr2GCqjwzvqMaP1+F4MsfDkhgY5T/ZV2r1wzxYml9l5vIrR5AX9EkSY+vk Mr+sNSkJg9Onbu4AT3iToAq7asGH+YR43KWWVTSapYmuGYjnuo577bVl3/G9qovA 5bFuv9zGFiPUnDsO7lSks5uXl9cYI/GgnwF8eZMJMge8t1sZ6FL9sz6OvWXbd8wa Z6da3vcMcjxhIk1LoDrE29AeCCH+iYW0FbbrIKIzJ5nMR5iiJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHENL/ZedPiNTR/0j6GznAzCp4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNWE1 Yzg1MC1iNWY3LTRjZmQtYjMxZi0xOWQ1MWJmM2NjMDgvZjIyMWEzZjktZWZmZS0z MzM2LTk4YzktNjA3OWJhODBiNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTVhNWM4NTAtYjVmNy00Y2ZkLWIz MWYtMTlkNTFiZjNjYzA4LzE1YTVjODUwLWI1ZjctNGNmZC1iMzFmLTE5ZDUxYmYz Y2MwOC5jcmwwHwYDVR0jBBgwFoAUJk9Ofnmn3AeOCyVNDzrFA1/GwsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNWE1Yzg1MC1iNWY3LTRjZmQtYjMxZi0xOWQ1 MWJmM2NjMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkE2cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETTZMjHAKPh0/cArSOcmnJ2VYUeohyONFgqacwf/6x9zPZQVzU3OCyg NiErJQniSxDrERM8xHeUx/CIf39xHOUx1TWv/zsXskDBWsyqJI9GE3RBEQNa0mdn m43xBhi9mlMDBIDHSaPbjnTpNkDXvQOqPX1xoo30ShADRYMTJlQlMKWLYsV70Rya EEJO5mBSiXCAvG7LhL7CaUmNR9QSu/ZICmLoSfims9awnopjNdjoAo9CELi/3ht3 pw6QSTsCfkJlLY/MUWWoryEVV2I7HbPqHM/VYCylAgvDX7gyG2x7HXBp0vY9MCFx ZaBA/HSX65E5cJDTnrH8fdJel56RtAw= -----END CERTIFICATE-----Generated at Fri Apr 17 13:08:57 2026 by rpki-client