$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa File: 5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa (raw, json) Hash identifier: kyKb5w/FTKH5K8RJLE8dBtf33JXJqm7685Aodac8o7c= Subject key identifier: FB:F9:07:70:25:37:D4:96:D8:6E:DE:49:7C:F9:2E:F0:91:C3:0B:CC Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584D5E1A5FB7A62154D4B6EC5A80 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 21766 IP address blocks: 152.97.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:5f:b7:a6:21:54:d4:b6:ec:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=882ab61e-4079-4423-83e9-b5d7f5a9c193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:52:7e:6b:64:f5:11:07:57:e7:19:81:64:0e: 1e:03:de:11:46:28:e5:c0:35:2b:53:fb:88:59:d1: 40:e7:36:24:25:1f:5c:dc:ff:39:7d:d3:45:54:f3: 91:2a:ce:df:19:91:7f:8f:12:ee:da:6b:79:f0:05: 26:f2:e2:5b:7a:5f:ab:ed:bd:74:40:74:1e:ef:a7: 74:30:82:da:92:26:bf:71:23:5d:2d:e4:9d:2f:bf: f1:71:46:3c:49:0b:ed:84:e3:ce:b2:a6:09:31:7f: e5:08:6e:7a:ae:39:e1:30:00:85:ea:86:ff:fb:18: 7b:36:60:1e:32:26:57:ea:82:5a:e2:c3:e2:c8:a8: 43:3e:f9:7b:cf:aa:19:72:ca:43:85:33:3d:f0:1d: 0f:80:14:de:e3:f1:4f:23:4d:db:cd:62:8f:42:c0: d5:d1:17:20:95:0c:f7:0a:b5:2a:86:e1:21:2d:0b: 0a:aa:57:18:ea:8e:14:b6:5a:2c:32:d6:14:82:1c: 56:c2:4b:0d:bc:9b:b8:03:37:7d:60:46:03:fd:7c: 92:97:f3:03:00:ef:4d:49:19:0e:b2:de:2b:87:99: 57:37:61:03:83:79:60:41:72:cb:e3:6d:f4:c5:d1: f7:0b:d2:c7:99:7b:ed:18:60:9a:56:40:7b:9e:b5: 94:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F9:07:70:25:37:D4:96:D8:6E:DE:49:7C:F9:2E:F0:91:C3:0B:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 152.97.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:4c:b8:a9:56:90:1f:c3:6d:64:43:57:79:1d:08:b9:e3:d9: ba:cb:8c:e9:da:d8:a8:71:58:e9:64:ba:df:f4:d2:d7:f6:bf: 01:6f:cd:58:e5:57:83:17:1d:e7:4c:7d:50:dc:39:28:ce:ec: 02:57:35:41:4e:18:2e:a8:67:69:c1:4f:db:8a:4d:70:05:20: 81:84:aa:af:66:13:47:7f:24:cd:3f:82:95:3e:af:d6:7e:9b: e2:e9:0b:b4:02:e1:fa:9e:76:09:4b:ee:33:ec:54:e8:8c:25: 9d:2f:39:c6:d9:e3:d0:2f:93:11:14:bd:ef:a2:12:fd:cd:94: e2:68:be:97:57:f1:17:0d:cc:a9:20:50:0e:a7:a3:7b:29:b4: 2e:32:a5:42:a3:cf:5f:6d:bd:e5:49:79:c5:c9:93:ab:50:ef: a2:fd:1c:5b:31:e5:26:e8:12:b8:98:1f:28:09:26:f8:b0:8d: 94:f4:1c:e2:ee:ad:00:ef:cb:88:66:0d:9e:64:ce:c7:4e:d1: 62:6b:f4:c6:ce:79:f7:82:1e:de:ff:b8:cd:b2:20:9f:ff:ea: e5:1c:16:ac:d3:c2:c1:44:e7:5b:de:aa:53:5b:40:7b:a7:43: de:f7:f5:a7:01:2e:e5:fd:25:87:8b:3a:9d:e2:37:52:8b:49: 9f:67:a3:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGl+3piFU1LbsWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ODgyYWI2MWUtNDA3OS00NDIzLTgzZTktYjVkN2Y1YTljMTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lJ+a2T1EQdX5xmBZA4eA94RRijlwDUrU/uI WdFA5zYkJR9c3P85fdNFVPORKs7fGZF/jxLu2mt58AUm8uJbel+r7b10QHQe76d0 MILakia/cSNdLeSdL7/xcUY8SQvthOPOsqYJMX/lCG56rjnhMACF6ob/+xh7NmAe MiZX6oJa4sPiyKhDPvl7z6oZcspDhTM98B0PgBTe4/FPI03bzWKPQsDV0RcglQz3 CrUqhuEhLQsKqlcY6o4UtlosMtYUghxWwksNvJu4Azd9YEYD/XySl/MDAO9NSRkO st4rh5lXN2EDg3lgQXLL4230xdH3C9LHmXvtGGCaVkB7nrWUlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPv5B3AlN9SW2G7eSXz5LvCRwwvMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvNWI1MWE3MTAtZDkwMy0z YTlmLTk4YTItMWYyOWRhMDZlYmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmGGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlMuKlWkB/DbWRDV3kdCLnj2brLjOna2KhxWOlkut/00tf2vwFvzVjl V4MXHedMfVDcOSjO7AJXNUFOGC6oZ2nBT9uKTXAFIIGEqq9mE0d/JM0/gpU+r9Z+ m+LpC7QC4fqedglL7jPsVOiMJZ0vOcbZ49AvkxEUve+iEv3NlOJovpdX8RcNzKkg UA6no3sptC4ypUKjz19tveVJecXJk6tQ76L9HFsx5SboEriYHygJJviwjZT0HOLu rQDvy4hmDZ5kzsdO0WJr9MbOefeCHt7/uM2yIJ//6uUcFqzTwsFE51veqlNbQHun Q9739acBLuX9JYeLOp3iN1KLSZ9nozY= -----END CERTIFICATE-----Generated at Fri Apr 17 13:00:55 2026 by rpki-client