$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/954248a7-1747-37a2-8e59-18157153fb0f.roa File: 954248a7-1747-37a2-8e59-18157153fb0f.roa (raw, json) Hash identifier: jC530DBMhnD5VIHqKNw3lNG8EHJYE2uFgdR2rb1Eibs= Subject key identifier: 44:A3:B3:7B:F6:E1:84:51:AA:C0:70:C8:E1:86:50:D0:7B:4A:B4:90 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F4328584D60E4FB70ED3DE45DA894CB80 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/954248a7-1747-37a2-8e59-18157153fb0f.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 170.176.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:fb:70:ed:3d:e4:5d:a8:94:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=cc97714a-9304-43a3-811f-0d56c48b2708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a9:7b:96:07:5c:42:ad:8b:9f:60:d9:9a:c9: 97:02:65:26:3c:e7:b6:b4:87:f7:44:ac:2e:d6:20: a3:a5:5f:fc:1d:ae:c4:5c:e1:a3:ed:83:77:08:ef: e8:c4:88:29:7a:26:17:fc:b6:09:e3:29:2d:8b:cd: da:6a:e6:44:7a:b3:3b:fe:00:b0:67:c6:b6:1b:7b: 9e:b8:83:b9:ea:20:18:19:51:6d:79:83:da:ba:5d: 46:50:9f:75:99:b4:1d:ef:05:e4:f2:87:0c:e1:bb: 3f:18:df:46:6d:70:f1:61:ef:d0:60:dc:ea:13:b9: 36:a7:eb:88:1f:47:41:88:f6:20:f5:57:27:cf:6b: bc:7d:f2:81:83:f0:84:6c:1c:cc:d6:f3:d3:13:30: 90:e9:02:62:fa:1b:66:4d:0a:44:dc:5d:7a:c3:97: 48:48:26:57:aa:80:ae:2f:7c:68:58:9a:03:c0:8a: e4:ea:bc:77:dd:c2:fc:f3:01:1a:76:23:ce:de:4a: ec:f7:da:f9:ac:c8:7d:58:67:a5:1d:b9:71:45:de: 7a:52:32:60:dd:47:fe:55:79:84:0b:9f:a5:48:9a: 28:37:f4:ad:c6:9d:36:d2:fd:8d:75:92:38:0a:a9: c7:66:6f:b9:84:19:1b:e3:76:5f:9b:80:d0:3d:cd: be:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A3:B3:7B:F6:E1:84:51:AA:C0:70:C8:E1:86:50:D0:7B:4A:B4:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/954248a7-1747-37a2-8e59-18157153fb0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:4e:81:30:42:6b:b5:87:1a:e8:84:f3:c2:42:69:05:3e:9e: 52:88:44:cf:93:17:ab:1b:a7:67:74:b9:bb:20:f3:95:8e:78: 45:a6:3c:2e:85:4d:51:9a:08:34:47:1a:ab:e9:cb:f4:70:0a: a6:13:20:d1:57:11:5a:a9:58:1a:18:2f:5c:9d:8e:5d:0d:e0: 4c:e6:14:45:bf:09:6c:82:1b:25:dc:0a:6f:75:65:0f:26:f9: d8:0b:62:f5:9d:7a:b7:ed:43:04:d3:32:d3:d7:ef:e3:ab:d5: 69:4d:ce:18:6b:4d:56:e2:ad:97:cb:76:94:50:e1:38:07:a7: 0c:03:ed:dc:cf:86:fe:b1:17:e4:46:9d:03:e4:6e:cb:e9:74: 16:70:18:0d:01:70:65:ce:9c:bd:61:ee:e7:1e:29:7d:74:9a: d7:4a:04:00:b5:b9:ff:70:8d:78:62:fb:1c:e4:57:73:ec:39: 5c:08:8b:66:fe:81:0d:a0:af:33:fc:f1:5b:3c:a5:15:fd:c4: ad:4f:bc:6e:ab:b8:7b:7b:4c:98:91:dc:ff:b4:bf:5f:af:71: a5:89:8a:a8:14:8f:ab:d7:35:bb:5e:5c:27:70:4e:91:bd:32: 83:f5:89:04:f9:98:97:b0:58:a3:05:d3:3b:67:4d:ac:b3:75: f8:b4:17:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5Ptw7T3kXaiUy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk Y2M5NzcxNGEtOTMwNC00M2EzLTgxMWYtMGQ1NmM0OGIyNzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAual7lgdcQq2Ln2DZmsmXAmUmPOe2tIf3RKwu 1iCjpV/8Ha7EXOGj7YN3CO/oxIgpeiYX/LYJ4ykti83aauZEerM7/gCwZ8a2G3ue uIO56iAYGVFteYPaul1GUJ91mbQd7wXk8ocM4bs/GN9GbXDxYe/QYNzqE7k2p+uI H0dBiPYg9Vcnz2u8ffKBg/CEbBzM1vPTEzCQ6QJi+htmTQpE3F16w5dISCZXqoCu L3xoWJoDwIrk6rx33cL88wEadiPO3krs99r5rMh9WGelHblxRd56UjJg3Uf+VXmE C5+lSJooN/Stxp020v2NdZI4CqnHZm+5hBkb43Zfm4DQPc2+AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESjs3v24YRRqsBwyOGGUNB7SrSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvOTU0MjQ4YTctMTc0Ny0z N2EyLThlNTktMTgxNTcxNTNmYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFOgTBCa7WHGuiE88JCaQU+nlKIRM+TF6sbp2d0ubsg85WOeEWmPC6F TVGaCDRHGqvpy/RwCqYTINFXEVqpWBoYL1ydjl0N4EzmFEW/CWyCGyXcCm91ZQ8m +dgLYvWderftQwTTMtPX7+Or1WlNzhhrTVbirZfLdpRQ4TgHpwwD7dzPhv6xF+RG nQPkbsvpdBZwGA0BcGXOnL1h7uceKX10mtdKBAC1uf9wjXhi+xzkV3PsOVwIi2b+ gQ2grzP88Vs8pRX9xK1PvG6ruHt7TJiR3P+0v1+vcaWJiqgUj6vXNbteXCdwTpG9 MoP1iQT5mJewWKMF0ztnTayzdfi0F8E= -----END CERTIFICATE-----Generated at Fri Apr 17 11:30:32 2026 by rpki-client