$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa File: ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa (raw, json) Hash identifier: YJ1c56gcV1gquVJOXK/V0QgIZUT9d7497Iigx1Tghn0= Subject key identifier: 0C:22:06:29:C9:FC:67:3E:D8:69:37:05:6C:0D:FF:13:9F:1E:84:C3 Certificate issuer: /CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Certificate serial: 010D0C9F4328584E1FA998ADB61090BFEF2F8D00 Authority key identifier: 1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 395516 IP address blocks: 153.65.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:98:ad:b6:10:90:bf:ef:2f:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=f38d842c-26af-44b2-aff7-0f91fd3468da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c4:4b:49:8a:bf:97:de:6e:2e:8c:f7:3d:0f: ed:c4:53:2e:67:15:d7:e1:62:f2:78:db:94:2c:e5: 9c:a8:ca:53:dc:c5:75:48:86:4a:00:63:bb:c2:16: 78:d0:3d:35:c6:f2:38:26:a4:9c:09:f6:bb:94:7e: aa:a7:f8:61:32:2b:8c:dc:69:8b:4a:1e:16:bf:08: e7:7f:db:b0:01:b3:82:31:94:98:78:00:ed:2c:3b: 2e:6b:17:21:3c:81:05:37:98:5e:96:26:af:57:8e: 6c:e9:ff:a6:f8:8e:c9:70:d6:cf:63:65:7c:c3:22: 6f:a1:86:dd:ea:c8:72:c5:26:cc:ab:a4:f2:58:88: 26:49:00:bd:97:6b:41:37:ea:6f:27:80:c2:21:13: ca:ee:1f:c1:0b:a6:dd:9b:93:07:55:18:a2:17:b0: 36:69:62:94:2b:0c:8b:f1:da:fd:67:1d:9c:d8:45: 22:4c:a8:4d:35:15:9c:65:b6:b8:99:8b:48:03:47: 1f:52:e7:0b:cd:62:f5:90:a6:9a:b4:03:0b:3e:56: 1c:3b:9b:76:06:66:a5:73:83:0b:9c:0c:50:f7:cc: be:63:bf:ac:bb:6d:bb:9d:fa:3b:e7:08:6d:24:8d: 7c:6e:29:ec:fd:4a:b8:e3:bc:fb:28:13:ce:f7:5c: 0c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:22:06:29:C9:FC:67:3E:D8:69:37:05:6C:0D:FF:13:9F:1E:84:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl X509v3 Authority Key Identifier: keyid:1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer sbgp-ipAddrBlock: critical IPv4: 153.65.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:15:05:6c:c3:bd:1b:bb:a4:88:3e:c1:c4:5a:64:c9:6e:a0: 54:7b:cc:b3:53:1a:23:21:08:02:93:3c:f0:b2:53:1b:85:ac: 66:42:3a:9f:a8:8a:e7:aa:d9:b6:ec:c6:3c:af:16:76:a7:90: 57:aa:6a:39:46:4d:7d:ab:47:c5:84:6a:62:6f:d0:05:72:c3: 66:57:0e:3e:86:7a:06:2a:a0:07:2d:2a:2e:01:9e:e3:ed:df: c3:16:df:84:f2:29:48:f6:d2:e0:f1:fa:2a:e7:8a:0a:75:9e: b9:e8:0e:23:18:a2:3d:bd:42:f7:5b:cd:b1:76:cd:9c:a1:8f: ab:5e:30:bc:95:6a:5c:d9:75:4e:e3:12:52:95:81:c8:0b:66: 9c:73:cb:7f:27:d8:fe:46:06:be:4d:7b:04:4a:84:bd:2e:54: 51:2c:f0:b5:1a:1a:96:8d:33:47:87:af:34:fa:06:29:fb:c5: d6:2e:cf:40:c6:a1:3d:4d:29:cc:12:a6:ca:c8:4b:11:8a:f8: 01:19:f0:42:69:2e:6a:ef:72:81:2e:53:70:c6:b6:e1:16:53: f2:11:0f:b1:b0:c7:eb:89:63:7d:ba:3a:00:94:02:5e:d6:84: 45:08:ec:b0:81:0d:27:90:1a:cb:31:e1:0d:96:a6:6d:6a:1a: f6:c7:97:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqZitthCQv+8vjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyN2JlM2UtNTY2My00MTk2LWJiOGEtOTY2ZThhNmJm NTcxMB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk ZjM4ZDg0MmMtMjZhZi00NGIyLWFmZjctMGY5MWZkMzQ2OGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMRLSYq/l95uLoz3PQ/txFMuZxXX4WLyeNuU LOWcqMpT3MV1SIZKAGO7whZ40D01xvI4JqScCfa7lH6qp/hhMiuM3GmLSh4Wvwjn f9uwAbOCMZSYeADtLDsuaxchPIEFN5heliavV45s6f+m+I7JcNbPY2V8wyJvoYbd 6shyxSbMq6TyWIgmSQC9l2tBN+pvJ4DCIRPK7h/BC6bdm5MHVRiiF7A2aWKUKwyL 8dr9Zx2c2EUiTKhNNRWcZba4mYtIA0cfUucLzWL1kKaatAMLPlYcO5t2Bmalc4ML nAxQ98y+Y7+su227nfo75whtJI18bins/Uq447z7KBPO91wMUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwiBinJ/Gc+2Gk3BWwN/xOfHoTDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTI3 YmUzZS01NjYzLTQxOTYtYmI4YS05NjZlOGE2YmY1NzEvYWQzNjhmMGEtNDQ4Ny0z ZWM1LWFjZTEtMTUxMmZkNmYzN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEyN2JlM2UtNTY2My00MTk2LWJi OGEtOTY2ZThhNmJmNTcxL2FhMjdiZTNlLTU2NjMtNDE5Ni1iYjhhLTk2NmU4YTZi ZjU3MS5jcmwwHwYDVR0jBBgwFoAUG5CFrukXfW06zWMhpYfluAl2X+UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTI3YmUzZS01NjYzLTQxOTYtYmI4YS05NjZl OGE2YmY1NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmUFHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8VBWzDvRu7pIg+wcRaZMluoFR7zLNTGiMhCAKTPPCyUxuFrGZCOp+o iueq2bbsxjyvFnankFeqajlGTX2rR8WEamJv0AVyw2ZXDj6GegYqoActKi4BnuPt 38MW34TyKUj20uDx+irnigp1nrnoDiMYoj29QvdbzbF2zZyhj6teMLyValzZdU7j ElKVgcgLZpxzy38n2P5GBr5NewRKhL0uVFEs8LUaGpaNM0eHrzT6Bin7xdYuz0DG oT1NKcwSpsrISxGK+AEZ8EJpLmrvcoEuU3DGtuEWU/IRD7Gwx+uJY326OgCUAl7W hEUI7LCBDSeQGssx4Q2Wpm1qGvbHlww= -----END CERTIFICATE-----Generated at Sat Jun 13 16:15:11 2026 by rpki-client