$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b9425cfa-46da-330e-bd2c-a5c2050d09a9.roa File: b9425cfa-46da-330e-bd2c-a5c2050d09a9.roa (raw, json) Hash identifier: vzlyymvnU/bf9nBy81UK4Ivq3yhu1l9DVW2AlL6Pwfw= Subject key identifier: C1:20:3A:6C:96:61:B3:7A:32:BF:1A:B9:9C:CA:FC:8B:4D:73:C1:F4 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584D55BA331B92465CEEA3A37580 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b9425cfa-46da-330e-bd2c-a5c2050d09a9.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 30450 IP address blocks: 152.44.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:33:1b:92:46:5c:ee:a3:a3:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=b1ab8f08-38d4-4570-b68b-b242a1708d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:37:46:66:a6:f5:51:1b:7a:10:6f:66:5c:9e: c2:cb:d2:a7:51:29:4d:9d:11:78:52:c5:be:fe:b5: 94:40:ae:8b:14:82:20:b0:43:68:4f:df:db:05:9a: 92:46:64:66:f2:01:89:a0:b9:12:b9:b6:e7:73:e7: cd:83:63:82:7e:7d:12:e2:45:b7:f8:db:d5:fa:c3: af:93:9c:35:b8:a2:5a:94:32:38:d7:bf:10:46:52: e0:c4:b5:76:bb:25:a4:9d:11:4b:87:14:ee:91:eb: 35:3a:50:90:47:de:61:55:5f:fc:97:18:7b:36:94: 8a:02:29:fd:ac:8f:ae:f8:39:86:27:41:93:4c:5a: 56:a2:24:10:e6:aa:89:e8:c7:ac:d0:7f:11:f2:26: 78:ed:4b:e6:ee:b7:25:05:e7:e2:da:80:03:bd:00: 44:82:16:88:5e:2f:3e:82:21:97:97:36:00:1f:c8: ff:3b:97:8e:59:47:d5:56:c7:40:4b:5f:f6:70:07: f7:13:13:35:2b:0e:3f:a1:b4:fb:cf:b3:19:c3:52: 6f:37:9c:88:b8:83:10:ae:be:3b:9c:4c:f3:5c:08: 5f:e6:eb:30:87:7f:ca:f0:4f:f2:4c:55:c2:10:f2: cf:26:23:36:69:06:9b:20:e3:e5:00:71:c8:26:90: 38:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:20:3A:6C:96:61:B3:7A:32:BF:1A:B9:9C:CA:FC:8B:4D:73:C1:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b9425cfa-46da-330e-bd2c-a5c2050d09a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 152.44.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:d4:d2:e3:c2:2e:c6:33:d2:15:53:a7:d7:9c:76:cb:38:17: 3a:4c:eb:a1:07:1b:17:92:6f:21:56:a6:b2:9f:f5:3f:35:0c: 36:67:40:a2:40:7b:6e:4b:f4:e3:e6:c5:61:6f:8f:7b:45:5d: 93:70:d5:94:e7:41:f2:24:34:1e:a2:95:d1:7c:97:75:07:e5: f5:e2:9d:e0:97:6c:95:08:80:2f:5f:dd:93:ba:e0:6f:4d:cc: 6b:88:2e:79:cc:5e:56:07:07:4f:23:31:2f:8e:85:95:02:c6: 50:3f:22:cb:a9:8f:d0:d0:03:1a:4e:b3:9d:e0:f7:03:7d:c3: da:c3:b5:eb:2d:26:82:1e:88:d8:59:d5:c8:c1:d9:64:0a:ea: 78:bf:25:df:ed:fd:45:18:ad:07:0a:6f:db:75:ae:a7:34:c4: b3:01:d4:9c:01:1f:ad:54:b7:c2:23:f0:ff:0c:8c:dc:da:f3: 42:6a:b6:24:ba:fb:66:0c:9d:5d:34:f9:2e:3f:6a:76:19:ea: 8a:4f:bf:34:c8:76:e5:77:9a:a1:c0:fb:9a:74:f5:ed:20:36: ad:de:a7:c1:1d:0f:1b:37:c2:8b:dc:aa:0a:d2:24:4b:1a:bd: b7:3e:f2:cb:b9:bf:5b:c4:96:f9:6d:a0:12:fb:39:ac:4e:d1: f1:54:0e:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VujMbkkZc7qOjdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YjFhYjhmMDgtMzhkNC00NTcwLWI2OGItYjI0MmExNzA4ZDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDdGZqb1URt6EG9mXJ7Cy9KnUSlNnRF4UsW+ /rWUQK6LFIIgsENoT9/bBZqSRmRm8gGJoLkSubbnc+fNg2OCfn0S4kW3+NvV+sOv k5w1uKJalDI4178QRlLgxLV2uyWknRFLhxTukes1OlCQR95hVV/8lxh7NpSKAin9 rI+u+DmGJ0GTTFpWoiQQ5qqJ6Mes0H8R8iZ47Uvm7rclBefi2oADvQBEghaIXi8+ giGXlzYAH8j/O5eOWUfVVsdAS1/2cAf3ExM1Kw4/obT7z7MZw1JvN5yIuIMQrr47 nEzzXAhf5uswh3/K8E/yTFXCEPLPJiM2aQabIOPlAHHIJpA4EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEgOmyWYbN6Mr8auZzK/ItNc8H0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYjk0MjVjZmEtNDZkYS0z MzBlLWJkMmMtYTVjMjA1MGQwOWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCzsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHU0uPCLsYz0hVTp9ecdss4FzpM66EHGxeSbyFWprKf9T81DDZnQKJA e25L9OPmxWFvj3tFXZNw1ZTnQfIkNB6ildF8l3UH5fXineCXbJUIgC9f3ZO64G9N zGuILnnMXlYHB08jMS+OhZUCxlA/Isupj9DQAxpOs53g9wN9w9rDtestJoIeiNhZ 1cjB2WQK6ni/Jd/t/UUYrQcKb9t1rqc0xLMB1JwBH61Ut8Ij8P8MjNza80JqtiS6 +2YMnV00+S4/anYZ6opPvzTIduV3mqHA+5p09e0gNq3ep8EdDxs3wovcqgrSJEsa vbc+8su5v1vElvltoBL7OaxO0fFUDr8= -----END CERTIFICATE-----Generated at Fri Apr 17 12:33:55 2026 by rpki-client