$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa File: 5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa (raw, json) Hash identifier: pYMsbfDzsPs2Vp6gnsujgXh/l4fmdDnbEAIhJxBiOsM= Subject key identifier: F4:5C:C5:6A:C8:C5:F8:CD:D7:EE:2B:EF:CD:05:BC:65:54:17:01:79 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584C7D7C5406A5CC5B7A56D5BF60 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 21766 IP address blocks: 152.97.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:54:06:a5:cc:5b:7a:56:d5:bf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=5ef83579-37e9-41ce-8441-3b1dfbea8caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c5:cf:59:4b:61:04:73:f7:10:77:ae:ea:1e: 52:0a:63:87:aa:90:67:a4:f8:2d:5b:7f:da:81:df: 26:bd:dd:b0:98:55:46:cb:f5:7e:e7:54:5c:47:03: d5:d8:ab:19:b3:69:b1:5d:a3:ac:a0:59:eb:37:37: a7:f7:40:e4:e1:06:2b:fa:51:8a:a1:62:56:17:49: 8c:72:1b:9f:2f:c9:69:51:5e:d2:64:9e:ab:f3:c4: c3:b3:d8:d9:32:63:4b:15:94:7c:cf:8e:10:4f:85: 9c:72:eb:1c:21:82:ed:e5:ed:b8:26:f0:ce:bc:16: 50:f8:aa:b9:11:76:f6:03:3a:fa:dc:23:a4:c4:98: 33:f4:66:19:62:9f:79:48:b7:10:e4:88:c2:20:01: 54:57:d5:bb:26:f9:18:83:d5:65:18:39:ea:f1:a7: eb:60:9e:34:c0:df:62:26:90:52:7b:1b:6f:39:8a: 74:06:71:77:b7:eb:43:f8:a6:87:5e:b6:f9:b6:be: 69:4d:36:da:30:eb:27:ff:ad:a9:67:49:d6:74:68: 0a:ec:21:4f:ab:1e:00:c6:44:85:9e:e3:f2:c8:95: bb:e1:cb:06:f5:a7:88:24:49:49:3e:ca:26:7b:fe: 10:e9:40:ed:8b:cf:f3:f8:03:c1:05:96:15:58:59: 07:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5C:C5:6A:C8:C5:F8:CD:D7:EE:2B:EF:CD:05:BC:65:54:17:01:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 152.97.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:b5:7e:6d:b3:5e:cc:39:c9:e3:c0:a6:75:e5:9c:61:5b:e2: 7e:1d:3c:af:c5:e3:a6:96:e5:35:36:e2:b6:64:d5:55:47:bd: aa:2b:3f:53:5e:93:27:41:42:83:63:8e:52:0b:c3:c7:06:21: 2e:6f:71:a6:db:dc:1e:f4:de:7b:a5:78:d1:af:79:27:05:75: c8:07:19:f9:fa:e4:af:98:eb:6d:22:58:6f:90:a7:e6:86:3d: ef:60:fb:b9:4e:e6:77:e5:9f:74:a7:2d:0c:32:52:8c:16:88: 07:24:cb:77:4f:be:6c:0a:8a:4e:04:0a:d4:ee:14:59:1d:ba: 26:87:aa:09:20:54:8c:23:6b:d1:1e:ef:63:b2:7d:03:4a:d0: 6e:6f:0f:f8:7f:bb:35:c6:c7:af:5d:ed:79:aa:5e:68:78:75: 7d:9f:46:bc:41:86:31:92:d4:98:12:e3:0b:58:25:25:67:8f: 3f:72:d1:e6:45:2f:06:48:58:03:2d:2f:50:eb:d6:87:99:50: 45:5e:c5:9b:2c:6e:aa:ea:a3:09:56:f1:ff:b4:3a:89:35:a5: fd:4c:0d:04:69:2a:f4:ee:8e:4b:39:16:1b:b3:2a:a0:88:e6: 06:e4:c1:3d:d6:81:4e:b3:25:15:e8:72:48:bc:9b:7f:ef:44: 24:39:53:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fFQGpcxbelbVv2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk NWVmODM1NzktMzdlOS00MWNlLTg0NDEtM2IxZGZiZWE4Y2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcXPWUthBHP3EHeu6h5SCmOHqpBnpPgtW3/a gd8mvd2wmFVGy/V+51RcRwPV2KsZs2mxXaOsoFnrNzen90Dk4QYr+lGKoWJWF0mM chufL8lpUV7SZJ6r88TDs9jZMmNLFZR8z44QT4WccuscIYLt5e24JvDOvBZQ+Kq5 EXb2Azr63COkxJgz9GYZYp95SLcQ5IjCIAFUV9W7JvkYg9VlGDnq8afrYJ40wN9i JpBSextvOYp0BnF3t+tD+KaHXrb5tr5pTTbaMOsn/62pZ0nWdGgK7CFPqx4AxkSF nuPyyJW74csG9aeIJElJPsome/4Q6UDti8/z+APBBZYVWFkH4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRcxWrIxfjN1+4r780FvGVUFwF5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvNWI1MWE3MTAtZDkwMy0z YTlmLTk4YTItMWYyOWRhMDZlYmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmGGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAy1fm2zXsw5yePApnXlnGFb4n4dPK/F46aW5TU24rZk1VVHvaorP1Ne kydBQoNjjlILw8cGIS5vcabb3B703nuleNGveScFdcgHGfn65K+Y620iWG+Qp+aG Pe9g+7lO5nfln3SnLQwyUowWiAcky3dPvmwKik4ECtTuFFkduiaHqgkgVIwja9Ee 72OyfQNK0G5vD/h/uzXGx69d7XmqXmh4dX2fRrxBhjGS1JgS4wtYJSVnjz9y0eZF LwZIWAMtL1Dr1oeZUEVexZssbqrqowlW8f+0Ook1pf1MDQRpKvTujks5FhuzKqCI 5gbkwT3WgU6zJRXocki8m3/vRCQ5U/I= -----END CERTIFICATE-----Generated at Mon Mar 2 02:54:43 2026 by rpki-client