$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/5a2358fc-27d0-32f0-8c9d-f30515a93401.roa File: 5a2358fc-27d0-32f0-8c9d-f30515a93401.roa (raw, json) Hash identifier: b1l3U4MUWE3ONx3XesL3T+wgkV28a9P7+MSQpfawEDM= Subject key identifier: D0:A9:F5:B4:0F:B4:24:70:BC:63:13:16:15:5C:8C:0F:8C:2B:53:D8 Certificate issuer: /CN=0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c Certificate serial: 010D0C9F4328584DBBA06DF850CFD66D4CB1D878 Authority key identifier: 97:C8:FC:AD:B8:85:C4:F1:E0:95:9A:D5:DD:8E:1B:39:56:CB:C0:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/5a2358fc-27d0-32f0-8c9d-f30515a93401.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 401773 IP address blocks: 204.147.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:6d:f8:50:cf:d6:6d:4c:b1:d8:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=8bd1836a-108c-49d1-b5ac-5eb9d5d8e045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ea:88:c8:a8:a2:b6:36:68:c6:af:4e:d0:12: 1e:20:8e:73:a7:bf:bd:c6:b8:0c:90:00:b2:bd:b7: 39:68:ca:74:1e:78:6d:86:10:cc:61:f5:39:48:95: 16:40:f9:42:11:28:0e:2f:8f:26:da:bd:9d:18:21: 56:61:58:69:6e:d2:83:09:ac:60:1f:96:39:72:44: 95:f7:38:9f:c3:ee:60:ff:98:e0:af:0f:68:38:50: 89:ba:ae:eb:0e:7b:43:af:73:32:1c:37:a9:f1:4f: 56:52:3c:fe:30:df:eb:3b:f6:ac:8b:74:16:f6:f5: 61:d1:81:8b:a8:f3:a6:8e:f9:28:88:a3:81:e1:93: 9d:eb:2a:97:5c:ed:c2:56:b2:ef:2f:90:75:ab:aa: c3:73:f9:68:5c:e0:28:cc:09:d8:e2:ca:7c:68:6e: 0c:74:b4:fd:da:84:67:31:84:c7:2c:b4:01:7c:01: 38:d2:ed:9c:be:88:52:1f:fa:2d:a1:dc:91:a4:93: 9c:29:2c:3c:52:6d:1d:9c:ce:98:f2:0b:6f:bb:35: 96:70:0c:40:1a:30:bd:27:1e:dc:59:b6:b6:c5:43: 10:8f:8e:2d:d8:7d:10:57:2e:e0:6b:4d:d6:d2:ad: ef:ae:3b:ec:fb:d8:8f:f7:0d:ad:24:65:55:c7:fb: f6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A9:F5:B4:0F:B4:24:70:BC:63:13:16:15:5C:8C:0F:8C:2B:53:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/5a2358fc-27d0-32f0-8c9d-f30515a93401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.crl X509v3 Authority Key Identifier: keyid:97:C8:FC:AD:B8:85:C4:F1:E0:95:9A:D5:DD:8E:1B:39:56:CB:C0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.cer sbgp-ipAddrBlock: critical IPv4: 204.147.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:12:03:73:a2:08:51:b2:c8:de:18:8c:db:d9:3d:3f:4b:6a: f8:b3:bd:0a:8f:71:95:bf:1b:b2:e9:4b:a9:ed:ac:17:75:6b: 66:3f:0d:98:2f:f3:8d:c6:cb:28:d3:a6:2f:ef:c0:dd:2f:33: 17:4a:d0:27:cd:52:77:ab:17:bc:00:ae:c7:b9:1e:de:39:4d: 7a:d7:47:47:0b:ff:dc:72:54:ea:16:77:53:4d:b9:7e:12:95: dc:5f:81:30:95:10:b5:86:ad:73:7a:b1:a4:cc:fd:44:a8:47: 63:22:48:1c:67:fe:ab:97:ac:c6:ba:d7:30:f7:49:f3:b0:5e: 26:f5:5d:75:0f:50:93:92:bf:0a:80:9e:79:a6:fb:94:78:87: 4f:78:c2:03:97:bf:f6:49:9a:33:af:da:62:33:ed:4e:9d:e0: 7b:31:00:f5:f4:02:7a:17:5e:07:e8:91:cd:a0:2f:bb:cb:39: 10:25:e1:cf:5d:90:3b:16:9f:e2:a7:c2:0c:5c:96:1f:93:11: 1d:9b:b3:fb:9e:60:1c:77:43:27:94:ee:20:9e:50:57:9a:47: d5:90:4e:53:0a:4c:1d:9c:1e:eb:46:e4:12:9b:0f:35:b7:75: fe:1e:bf:e8:a6:41:d9:ce:13:1d:9b:ee:eb:3c:6b:d4:14:0e: ff:13:55:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oG34UM/WbUyx2HgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY3M2FkOGQtY2I1YS00NmE4LWE1ZjMtOGY5MDE0ZmRl NThjMB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk OGJkMTgzNmEtMTA4Yy00OWQxLWI1YWMtNWViOWQ1ZDhlMDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOqIyKiitjZoxq9O0BIeII5zp7+9xrgMkACy vbc5aMp0HnhthhDMYfU5SJUWQPlCESgOL48m2r2dGCFWYVhpbtKDCaxgH5Y5ckSV 9zifw+5g/5jgrw9oOFCJuq7rDntDr3MyHDep8U9WUjz+MN/rO/asi3QW9vVh0YGL qPOmjvkoiKOB4ZOd6yqXXO3CVrLvL5B1q6rDc/loXOAozAnY4sp8aG4MdLT92oRn MYTHLLQBfAE40u2cvohSH/otodyRpJOcKSw8Um0dnM6Y8gtvuzWWcAxAGjC9Jx7c Wba2xUMQj44t2H0QVy7ga03W0q3vrjvs+9iP9w2tJGVVx/v2lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCp9bQPtCRwvGMTFhVcjA+MK1PYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZjcz YWQ4ZC1jYjVhLTQ2YTgtYTVmMy04ZjkwMTRmZGU1OGMvNWEyMzU4ZmMtMjdkMC0z MmYwLThjOWQtZjMwNTE1YTkzNDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGY3M2FkOGQtY2I1YS00NmE4LWE1 ZjMtOGY5MDE0ZmRlNThjLzBmNzNhZDhkLWNiNWEtNDZhOC1hNWYzLThmOTAxNGZk ZTU4Yy5jcmwwHwYDVR0jBBgwFoAUl8j8rbiFxPHglZrV3Y4bOVbLwGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZjczYWQ4ZC1jYjVhLTQ2YTgtYTVmMy04Zjkw MTRmZGU1OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzJOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMSA3OiCFGyyN4YjNvZPT9LavizvQqPcZW/G7LpS6ntrBd1a2Y/DZgv 843GyyjTpi/vwN0vMxdK0CfNUnerF7wArse5Ht45TXrXR0cL/9xyVOoWd1NNuX4S ldxfgTCVELWGrXN6saTM/USoR2MiSBxn/quXrMa61zD3SfOwXib1XXUPUJOSvwqA nnmm+5R4h094wgOXv/ZJmjOv2mIz7U6d4HsxAPX0AnoXXgfokc2gL7vLORAl4c9d kDsWn+Knwgxclh+TER2bs/ueYBx3QyeU7iCeUFeaR9WQTlMKTB2cHutG5BKbDzW3 df4ev+imQdnOEx2b7us8a9QUDv8TVSY= -----END CERTIFICATE-----Generated at Wed May 13 17:37:27 2026 by rpki-client