$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/b10ac602-2a7a-3a75-81d9-d72da03abf9a.roa File: b10ac602-2a7a-3a75-81d9-d72da03abf9a.roa (raw, json) Hash identifier: RYQizzO9sTvVT297UIBiT1KoLup3q9TTQGwEHqGxQa0= Subject key identifier: 71:AD:CF:5C:1C:9D:69:F4:A8:8B:F1:2C:EF:62:84:8A:4F:86:F0:AA Certificate issuer: /CN=15115143-11c8-4b06-80a1-a991fa50f2fa Certificate serial: 010D0C9F4328584DABEFA53576DF36ACFAFF6D00 Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/b10ac602-2a7a-3a75-81d9-d72da03abf9a.roa Signing time: Wed 29 Apr 2026 22:07:39 +0000 ROA not before: Wed 29 Apr 2026 22:07:39 +0000 ROA not after: Tue 28 Jul 2026 22:07:39 +0000 asID: 33711 IP address blocks: 128.254.224.0/24 maxlen: 24 2602:fbec:224::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ab:ef:a5:35:76:df:36:ac:fa:ff:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa Validity Not Before: Apr 29 22:07:39 2026 GMT Not After : Jul 28 22:07:39 2026 GMT Subject: CN=eb17d695-69c1-4b17-b59a-86455aceaf11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:aa:c7:5d:0d:15:91:bd:33:d9:07:d1:d2:64: e2:bc:74:87:9b:87:14:f0:30:ef:2b:25:71:88:f2: 3a:73:35:a3:e4:fd:64:63:23:3a:7e:99:80:53:08: 9d:a5:99:57:c6:12:6a:d7:a1:3b:fe:62:74:c0:f7: cd:2f:b7:ae:58:15:68:80:14:8d:9c:bd:b4:bd:ee: 4e:de:df:1b:35:2a:b1:50:8d:9c:8c:0b:62:d8:93: 14:69:2c:31:85:12:1d:5c:e6:e2:d6:be:8a:c5:cf: 9a:d3:5f:53:46:62:1b:81:47:ac:c8:08:00:7d:2f: 53:99:ea:ba:d9:24:9a:91:6f:f2:7c:91:f7:60:bc: 59:e0:73:bd:c2:ae:e8:09:c5:96:16:a8:ac:8c:5e: 90:8b:6a:f8:8a:ba:a8:ee:2f:7e:26:2f:99:a0:6b: 33:0f:0f:db:76:23:73:49:81:e2:48:52:dc:36:3c: cc:bf:9c:15:a6:37:a1:c8:db:b8:4e:dd:b3:1d:e2: ad:d7:20:c3:b3:36:30:2c:f1:27:f7:68:95:6f:9c: fa:67:16:ef:74:a2:3b:4b:36:53:f3:db:83:03:a7: 83:99:1a:8c:45:33:06:67:da:98:39:fc:4d:fd:69: 3c:36:60:e8:f7:de:d7:59:a5:76:c8:10:43:d8:18: 48:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AD:CF:5C:1C:9D:69:F4:A8:8B:F1:2C:EF:62:84:8A:4F:86:F0:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/b10ac602-2a7a-3a75-81d9-d72da03abf9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl X509v3 Authority Key Identifier: keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer sbgp-ipAddrBlock: critical IPv4: 128.254.224.0/24 IPv6: 2602:fbec:224::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a3:49:1d:dd:24:b7:72:70:56:1e:8c:1d:82:0a:24:0f:3f: 21:55:ac:9a:0c:4e:d7:25:b1:c0:a6:3a:47:82:58:e9:f2:fa: 9c:2d:a5:f0:63:c4:47:d9:94:5d:08:15:8d:52:be:52:99:1a: 82:cc:f1:ce:29:1d:56:f2:5f:88:4c:66:ba:28:c5:e9:ba:e9: 32:a3:ab:bb:14:4c:43:b0:3d:7d:e8:ca:9b:a3:5e:95:8e:a6: 26:6c:13:1a:37:c9:a6:51:44:2c:a6:dd:ba:5c:f3:a0:4e:dc: f4:f6:6c:79:a8:07:32:85:27:15:e5:d8:84:80:ee:c7:9f:4b: a8:52:62:4c:ef:06:18:bc:4d:df:a1:44:4b:4f:f7:77:a1:da: c5:cd:23:d9:2b:96:0d:fd:7b:39:56:00:0f:6e:cd:2a:51:fc: 9a:41:1d:46:a9:cd:77:2d:2c:8f:90:6c:fe:cf:f7:58:72:78: 36:c2:ea:9a:a0:62:e1:b8:3a:37:a9:aa:04:fc:ef:7d:a9:c4: a7:7e:b5:5a:58:65:68:c8:46:cb:dc:46:e6:19:1c:28:43:08: 77:7a:5a:b8:fd:de:10:9c:9e:68:00:ad:0f:09:47:ed:7e:9e: 2e:d2:b6:4a:86:57:75:d9:f2:32:a1:7d:ec:57:6e:d6:59:b2: 33:d3:a3:f7 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE2r76U1dt82rPr/bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTUxMTUxNDMtMTFjOC00YjA2LTgwYTEtYTk5MWZhNTBm MmZhMB4XDTI2MDQyOTIyMDczOVoXDTI2MDcyODIyMDczOVowLzEtMCsGA1UEAxMk ZWIxN2Q2OTUtNjljMS00YjE3LWI1OWEtODY0NTVhY2VhZjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAparHXQ0Vkb0z2QfR0mTivHSHm4cU8DDvKyVx iPI6czWj5P1kYyM6fpmAUwidpZlXxhJq16E7/mJ0wPfNL7euWBVogBSNnL20ve5O 3t8bNSqxUI2cjAti2JMUaSwxhRIdXObi1r6Kxc+a019TRmIbgUesyAgAfS9Tmeq6 2SSakW/yfJH3YLxZ4HO9wq7oCcWWFqisjF6Qi2r4irqo7i9+Ji+ZoGszDw/bdiNz SYHiSFLcNjzMv5wVpjehyNu4Tt2zHeKt1yDDszYwLPEn92iVb5z6ZxbvdKI7SzZT 89uDA6eDmRqMRTMGZ9qYOfxN/Wk8NmDo997XWaV2yBBD2BhIHQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFHGtz1wcnWn0qIvxLO9ihIpPhvCqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNTEx NTE0My0xMWM4LTRiMDYtODBhMS1hOTkxZmE1MGYyZmEvYjEwYWM2MDItMmE3YS0z YTc1LTgxZDktZDcyZGEwM2FiZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTUxMTUxNDMtMTFjOC00YjA2LTgw YTEtYTk5MWZhNTBmMmZhLzE1MTE1MTQzLTExYzgtNGIwNi04MGExLWE5OTFmYTUw ZjJmYS5jcmwwHwYDVR0jBBgwFoAUVxb9oR0aCplObiedKLlylvm9hkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNTExNTE0My0xMWM4LTRiMDYtODBhMS1hOTkx ZmE1MGYyZmEuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAgP7gMA8E AgACMAkDBwAmAvvsAiQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVKNJHd0kt3JwVh6MHYIKJA8/IVWsmgxO 1yWxwKY6R4JY6fL6nC2l8GPER9mUXQgVjVK+UpkagszxzikdVvJfiExmuijF6brp MqOruxRMQ7A9fejKm6NelY6mJmwTGjfJplFELKbdulzzoE7c9PZseagHMoUnFeXY hIDux59LqFJiTO8GGLxN36FES0/3d6Haxc0j2SuWDf17OVYAD27NKlH8mkEdRqnN dy0sj5Bs/s/3WHJ4NsLqmqBi4bg6N6mqBPzvfanEp361WlhlaMhGy9xG5hkcKEMI d3pauP3eEJyeaACtDwlH7X6eLtK2SoZXddnyMqF97Fdu1lmyM9Oj9w== -----END CERTIFICATE-----Generated at Wed May 13 10:54:18 2026 by rpki-client